I. Basic provisions
1. The data controller – administrator of personal data according to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation) is Bat-El, s.r.o. Identification Number: 54874165 with registered office at Nálepkova 148/44, 05935 Batizovce registered in the Commercial Register of the District Court Prešov, section: Sro, insert no. 44694/P (hereinafter referred to as the “controller”)
2. The contact details of the controller are:
address: Nálepkova 148/44, 05935 Batizovce, email: info@bat-el.sk
3. Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
II. Sources and categories of processed personal data
1. The controller processes personal data provided by the user or personal data obtained by the controller based on the completion and submission of the form or other form of comunication:
● First and last name
● Email address
● Postal address
● Phone number
● Company address
● Billing details
The controller processes identification and contact data as well as data necessary for contract fulfillment.
III. Legal basis and purpose of processing personal data
1. The legal basis for processing personal data is:
● fulfillment of the contract between you and the controller pursuant to Article 6(1)(b) GDPR,
● compliance with legal obligations of the controller pursuant to Article 6(1)(c) GDPR,
● legitimate interest of the controller in providing direct marketing (especially for sending commercial offers and newsletters) pursuant to Article 6(1)(f) GDPR,
● Your consent processed for the purpose of providing direct marketing (especially for sending commercial offers and newsletters) pursuant to Article 6(1)(a) GDPR in case of ordering goods or services.
2. The purpose of processing personal data is:
● Fulfillment of your order and performance of rights and obligations arising from the contractual relationship between you and the controller; personal data required for ordering are necessary for successful processing of the order (name, address, contact, billing details), providing personal data is a necessary requirement for concluding the contract performance, without providing personal data it is not possible to conclude the contract or fulfill it by the controller.
● Compliance with legal obligations towards the state,
● Sending commercial offers and performing other marketing activities.
3. The controller does not engage in automatic individual decision-making pursuant to Article 22 GDPR.
IV. Retention period of data
1. The controller retains personal data
● for the time necessary to perform the rights and obligations arising from the contractual relationship between you and the controller and to enforce claims arising from these contractual relationships (for a period of 15 years from the termination of the contractual relationship).
2. After the retention period of personal data expires, the controller will delete the personal data.
V. Recipient of personal data (subprocessors of the controller)
1. Recipients of personal data include individuals who:
● Participate in the delivery of services, payment processing based on contract,
● Provide website operation services and other services related to campaign management.
● Provide marketing services.
VI. Data processors
1. Processing of personal data is carried out by the controller, however, the following processors may also process personal data on their behalf:
● Google Ads, Google Analytics service provider,
● potentially other providers of processing software or applications, which are not currently used by the controller.
VI. Your rights
1. Under the conditions set out in the GDPR, you have
● the right to access your personal data pursuant to Article 15 of the GDPR,
● the right to rectify personal data pursuant to Article 16 of the GDPR, or to restrict processing pursuant to Article 18 of the GDPR,
● the right to erase personal data pursuant to Article 17 of the GDPR,
● the right to object to processing pursuant to Article 21 of the GDPR,
● the right to data portability pursuant to Article 20 of the GDPR, and
● the right to withdraw consent to the processing of personal data in writing or electronically to the address or email of the controller specified in Article III of these terms.
2. Furthermore, you have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your right to the protection of personal data has been infringed, or to seek recourse to a court.
VII. Terms of Personal Data Security
1. The controller declares that it has implemented all appropriate technical measures to ensure
the security of personal data.
2. The controller has implemented technical measures to secure data storage and repositories.
3. The controller declares that only authorized persons appointed by him have access to personal data.
VIII. Use of Cookies
1. Cookies are text files containing small amounts of information that are downloaded to your device when you visit our websites. The cookies are then sent back to the website or to another website that recognizes them during each subsequent visit.
2. Cookies perform various tasks, such as enabling efficient navigation between web pages, remembering your preferences, and overall improving the user experience. They can also ensure that online advertisements are better tailored to you and your interests.
3. More information and cookie settings management can be found at this link: Cookies
VIII. Final provisions
1. By submitting your order via the online order form, you confirm that you have read the privacy policy and accept it in full.
2. You agree to these terms by checking the consent box on the online form. By checking the consent, you confirm that you have read the privacy policy and accept it in full.
3. The controller is entitled to change these terms. A new version of the privacy policy will be published on the controller’s website, and a new version of these terms will also be sent to your email address provided to the controller.
Date of last modification of this document: 21.04.2024