Privacy Policy
PROTECTION OF PERSONAL DATA AND COOKIES NOTICE
/ Principles and instructions on personal data protection
provided by the operator to the affected person when obtaining personal data from the affected person and instructions on cookies of the Internet store https://www.magicalcan.sk /
I. Operator
1.1. The identity and contact details of the Operator are:
Business name: Rabbit Studio s.r.o.. Registered office: Hradečnica 11552/30, Martin 036 01, Slovak Republic
Registered in the register of the District Court Žilina, Section Sro, Insert number 76074/L Company ID (IČO): 53455983
VAT number (DIČ): 2121373342 Bank account: IBAN / SWIFT: SK57 8330 0000 0027 0190 4191 / FIOZSKBA
The Seller is not a VAT payer (Value Added Tax).
1.2. The email and telephone contact for the Operator are:
Email: info@rozpravkynadobrunoc.sk
Tel. no.: +421917707001
1.3. The address for sending documents to the Operator is:
Rabbit Studio Ltd., Hradečnica 11552/30, Martin 036 01, Slovak Republic
1.4. In accordance with Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the „Regulation“), the Operator (Seller) provides the Data Subject (Buyer) from whom the Operator obtains personal data relating to them, with this information notice and explanation.
II. Links
2.1. These principles and instructions regarding the protection of personal data are part of the General Terms and Conditions published on the Seller’s website.
2.2. In accordance with Section 3(1)(n) of Act No. 102/2014 Coll., the Seller informs the consumer that there are no specific relevant codes of conduct to which the Seller has committed to adhere. The term „codes of conduct“ refers to an agreement or set of rules that define the behavior of the Seller, who has committed to comply with this code of conduct regarding one or more specific commercial practices or sectors, if not provided by law, other legal regulations, or measures of a public authority. The information on these codes of conduct, as well as the means by which consumers can familiarize themselves with them or obtain their wording, is not applicable in this case.
III. Protection of personal data and the use of cookies. Explanation and clarification of cookies, scripts, and pixels.
3.1. The Operator of the website provides this brief explanation of the function of cookies, scripts, and pixels:
3.1.1. Cookies are text files that contain a small amount of information downloaded to your device when you visit a website. This file allows the website to store information about your actions and preferences (such as login details, language, font size, and other display settings) for a certain period of time. This way, you don’t have to re-enter them when you revisit the website or browse its individual pages.
A script is a part of the program code used for the proper and interactive functioning of web pages. This code runs on the server of the operator or on your device.
Pixels are small, invisible text or image elements on a website used for monitoring website traffic. Various data can be stored through pixels.
3.1.2. Cookies are categorized as follows:
Technical or functional cookies – Ensure the proper functioning of the Operator’s website and its usage. These cookies are used without consent.
Statistical cookies – The Operator gathers statistics regarding the usage of their websites. These cookies are used only with consent.
Marketing/Advertising cookies – Used for creating advertising profiles and similar marketing activities. These cookies are used only with consent.
3.2. How to control cookies:
3.2.1. You can control and/or delete cookies as desired – for more details, refer to the website aboutcookies.org. You can delete all cookies stored on your computer or other devices, and most browsers can be set to prevent their storage.
3.3. The Operator’s website uses the following cookies:
You can find all the cookies used by the Operator on the website https://www.cookieserve.com/ by entering the web address of the Operator https://www.magicalcan.sk /
IV. Personal data processed
4.1. The Operator processes the following personal data on their website: name, surname, address, email address, home telephone number, mobile phone number, billing address, delivery address, data obtained from cookies, and IP addresses.
V. Contact details of the person responsible for the supervision of personal data protection
5.1. The Operator has appointed a responsible person for the protection of personal data in accordance with Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. Contact: info@rozpravkynadobrunoc.sk
5.2. The Operator is also the Seller within the meaning of the term defined in the General Terms and Conditions of this website.
VI. Purposes of personal data processing of the concerned person and period of personal data processing
6.1. The purposes of processing the personal data of the Data Subject include:
6.1.1. Record-keeping, creation, and processing of contracts and customer data for the purpose of concluding agreements with third parties.
6.1.2. Processing of accounting documents and documents related to the business activities of the Operator.
6.1.3. Compliance with legal regulations regarding the archiving of documents and records, such as Act No. 431/2002 Coll., the Accounting Act, as amended, and other relevant regulations.
6.1.4. Activities of the Operator related to fulfilling requests, orders, contracts, and similar arrangements of the Data Subject.
6.1.5. Newsletter, marketing, and similar advertising activities of the Operator. In the case of the Data Subject’s consent to the Operator for marketing and similar advertising activities.
6.2. The Operator retains the personal data of the Data Subject only for the necessary period required for the performance of the contract and subsequent archiving in accordance with the legal deadlines imposed on the Operator. In the event that the Data Subject has consented to receiving promotional emails and similar offers, the personal data of the Data Subject is processed for these purposes until the Data Subject withdraws their consent. However, the maximum retention period is 10 years.
VII. Legal basis for processing personal data of the concerned person
7.1. In the event that the Operator processes personal data based on the consent of the Data Subject, such processing will only commence after obtaining the consent from the Data Subject.
7.2. If the Operator processes personal data of the Data Subject for the purposes of pre-contractual negotiations, the conclusion and performance of a purchase agreement, and the related delivery of goods, products, or services, the Data Subject is obliged to provide the personal data for the proper fulfillment of the purchase agreement. Otherwise, the fulfillment cannot be ensured. Personal data for this purpose is processed without the consent of the Data Subject.
VIII. Recipients or categories of recipients of personal data
8.1. The recipients of the personal data of the Data Subject will be or may include:
8.1.1. Statutory bodies or their members of the Operator.
8.1.2. Persons employed or otherwise engaged by the Operator.
8.1.3. Business representatives of the Operator and other individuals collaborating with the Operator in fulfilling its tasks. For the purposes of this document, all individuals performing dependent work for the Operator based on an employment contract or agreements for work performed outside an employment relationship shall be considered as employees of the Operator.
8.1.4. The recipients of the personal data of the Data Subject will also include the collaborators of the Operator, its business partners, suppliers, and contractual partners, particularly: accounting company, company providing software development and maintenance services, company providing legal services to the Operator, company providing advisory services to the Operator, companies providing transportation and delivery of products to buyers and third parties, marketing companies, companies operating social networks, companies providing payment gateways and other payment methods.
8.1.5. The recipients of personal data will also include courts, law enforcement authorities, tax authorities, and other state authorities, if required by law. Personal data will be provided by the Operator to these authorities and state institutions based on and in accordance with the legal regulations of the Slovak Republic.
8.1.6. List of third-party processors and recipients processing the personal data of the Data Subject:
STRIPE PAYMENTS EUROPE, LIMITED, C/O A & L Goodbody, Ifsc, North Wall Quay, Dublin, D01 H104, Ireland – third-party processor providing payment gateway
Global Payments s.r.o., Vajnorská 100/B, 831 04 Bratislava – Nové Mesto, ID: 50 010 301 – third-party processor providing payment gateway
NTS Finance, s.r.o., Sama Chalupku 9, 036 01 Martin – third-party processor providing accounting services
IX. Information on the provision of personal data to third countries and their retention period:
9.1. Not applicable. The operator does not transfer personal data of persons to third countries.
X. Instruction on the existence of the relevant rights of the Data Subject:
10.1. The Data Subject has the following rights, among others:
10.1.1. No other rights of the Data Subjects are affected by Section 10.1.
10.1.2. The right of the Data Subject to access data according to Article 15 of the Regulation, which includes:
The right to obtain confirmation from the Operator as to whether personal data concerning the Data Subject are being processed, and if so, the extent of such processing. Furthermore, if personal data are processed, the Data Subject has the right to know their content and request information from the Operator about the reasons for their processing, particularly information about: the purposes of their processing, categories of personal data concerned, recipients or categories of recipients to whom the personal data have been or will be disclosed, especially in the case of recipients in third countries or international organizations, the envisaged period for which the personal data will be stored, or if not possible, the criteria used to determine that period, the existence of the right to request the correction or erasure of personal data concerning the Data Subject or the restriction of their processing, and the right to object to such processing, the right to lodge a complaint with a supervisory authority, if the personal data were not obtained from the Data Subject, any available information regarding their source, the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the Regulation, and in such cases, at least meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the Data Subject, the appropriate safeguards pursuant to Article 46 of the Regulation relating to the transfer of personal data if the personal data are transferred to a third country or an international organization.
10.1.3. The right of the Data Subject to receive a copy of the personal data being processed, subject to the condition that this right does not adversely affect the rights and freedoms of others.
10.1.4. The right of the Data Subject to rectification according to Article 16 of the Regulation, which includes the right to have the Operator rectify inaccurate personal data concerning the Data Subject without undue delay, the right to have incomplete personal data concerning the Data Subject completed, including by means of providing a supplementary statement by the Data Subject, the right of the Data Subject to erasure of personal data (the so-called „right to be forgotten“) according to Article 17 of the Regulation, which includes:
10.1.5. The right to obtain from the Operator the erasure of personal data concerning the Data Subject without undue delay if one of the following grounds applies:
the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, the Data Subject withdraws consent on which the processing is based, and there is no other legal ground for the processing of personal data, the Data Subject objects to the processing of personal data pursuant to Article 21(1) of the Regulation, and there are no overriding legitimate grounds for the processing of personal data, the Data Subject objects to the processing of personal data pursuant to Article 21(2) of the Regulation, personal data have been unlawfully processed, personal data must be erased to comply with a legal obligation under the law of the European Union or the law of a Member State to which the Operator is subject, personal data have been collected in relation to the offer of information society services as referred to in Article 8(1) of the Regulation;
10.1.6. The right of the Data Subject to request the Operator, who has made the personal data of the Data Subject public, to take reasonable measures, including technical measures, taking into account the available technology and the cost of implementation, to inform other operators who are processing the personal data that the Data Subject has requested the erasure of any links to, copies of, or replicas of such personal data. It should be noted that the right to erasure of personal data pursuant to Article 17(1) and (2) of the Regulation shall not arise if the processing of personal data is necessary for:
10.1.7. The right to exercise the right to freedom of expression and information.
10.1.8. for compliance with a legal obligation which requires processing under the law of the European Union or the law of a Member State to which the Operator is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Operator.
10.1.9. for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) of the Regulation, as well as Article 9(3) of the Regulation.
10.1.10. for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89(1) of the Regulation, provided that it is likely that the right referred to in Article 17(1) of the Regulation would render impossible or seriously impair the achievement of the objectives of such processing of personal data; or for the establishment, exercise, or defense of legal claims;
10.1.11. the right of the Data Subject to restriction of processing of personal data according to Article 18 of the Regulation, which includes:
10.1.12. the right to have the Operator restrict the processing of personal data in the following cases: the Data Subject contests the accuracy of the personal data, for a period enabling the Operator to verify the accuracy of the personal data, the processing of personal data is unlawful, and the Data Subject opposes the erasure of the personal data and requests the restriction of their use instead, the Operator no longer needs the personal data for the purposes of processing, but the Data Subject requires them for the establishment, exercise, or defense of legal claims, the Data Subject has objected to processing pursuant to Article 21(1) of the Regulation, pending the verification whether the legitimate grounds of the Operator override those of the Data Subject;
10.1.13. the right that, in case of restriction of processing, such restricted personal data shall, with the exception of storage, only be processed with the consent of the Data Subject or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State;
10.1.14. the right to be informed in advance about the lifting of the restriction on the processing of personal data;
10.1.15. the right of the Data Subject to fulfill the obligation to notify recipients pursuant to Article 19 of the Regulation, which includes: the right of the Operator to communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1), and Article 18 of the Regulation to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort, the right of the Operator to inform the Data Subject about these recipients if the Data Subject requests it;
10.1.16. the right of the Data Subject to data portability according to Article 20 of the Regulation, which includes: the right to receive personal data concerning the Data Subject, which they have provided to the Operator, in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller without hindrance from the Operator if:
a/ the processing is based on the consent of the Data Subject pursuant to Article 6(1)(a) of the Regulation or Article 9(2)(a) of the Regulation, or on a contract pursuant to Article 6(1)(b) of the Regulation, and
b/ the processing is carried out by automated means, and
10.1.17. the right to obtain personal data in a structured, commonly used, and machine-readable format and the right to transmit those data to another controller without hindrance from the Operator will not adversely affect the rights and freedoms of others;
10.1.18. the right to have personal data transmitted directly from one controller to another, where technically feasible;
10.1.19. the right of the Data Subject to object pursuant to Article 21 of the Regulation, which includes:
10.1.20. the right to object, on grounds relating to the particular situation of the Data Subject, at any time to the processing of personal data concerning them, which is based on Article 6(1)(e) or (f) of the Regulation, including profiling based on those provisions of the Regulation;
10.1.21. in the event of exercising the right to object, on grounds relating to the particular situation of the Data Subject, to the processing of personal data concerning them, which is based on Article 6(1)(e) or (f) of the Regulation, including profiling based on those provisions of the Regulation, the right for the Operator to cease further processing of the Data Subject’s personal data unless the Operator demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the Data Subject, or for the establishment, exercise, or defense of legal claims;
10.1.22. the right to object at any time to the processing of personal data concerning the Data Subject for direct marketing purposes, including profiling to the extent that it is related to such direct marketing; it should be noted that if the Data Subject objects to the processing of personal data for direct marketing purposes, the personal data shall no longer be processed for such purposes;
10.1.23. in the context of using information society services, the right to exercise the right to object to the processing of personal data by automated means using technical specifications;
10.1.24. the right to object, on grounds relating to the particular situation of the Data Subject, to the processing of personal data concerning them, which is carried out for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the Regulation, except where the processing is necessary for the performance of a task carried out in the public interest;
10.1.25. the rights of the Data Subject related to automated individual decision-making according to Article 22 of the Regulation, which includes:
10.1.26. the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the Data Subject or similarly significantly affects them, except for the cases under Article 22(2) of the Regulation [i.e., except for cases where the decision: (a) is necessary for the entering into, or performance of, a contract between the Data Subject and the Operator,
10.1.27. is authorized by Union or Member State law to which the Operator is subject, and which also lays down suitable measures to safeguard the rights and freedoms and legitimate interests of the Data Subject, or (c) is based on the explicit consent of the Data Subject.
XI. Instruction on the Data Subject’s right to withdraw consent to the processing of personal data:
11.1. The Data Subject is entitled to withdraw their consent to the processing of personal data at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
The Data Subject is entitled to withdraw their consent to the processing of personal data – in its entirety or partially. Partial withdrawal of consent to the processing of personal data may relate to a specific type of processing operation(s), while the lawfulness of processing personal data for the remaining processing operation(s) remains unaffected. Partial withdrawal of consent to the processing of personal data may also relate to a specific purpose(s) of processing personal data, while the lawfulness of processing personal data for other purposes remains unaffected.
The right to withdraw consent to the processing of personal data can be exercised by the Data Subject in written form to the address of the Operator registered as its registered office in the commercial register at the time of the withdrawal of consent, or in electronic form through electronic means (by sending an email to the email address of the Operator indicated in the identification of the Operator in this document).
XII. Instruction on the right of the affected person to file a complaint with the supervisory authority:
12.1. The Data Subject has the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged infringement, if they believe that the processing of personal data concerning them is in breach of the Regulation, without prejudice to any other administrative or judicial remedy.
The Data Subject has the right to be informed by the supervisory authority to which the complaint has been lodged about the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the Regulation.
12.2. The supervisory authority in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovak Republic. Contact telephone: +421 /2 3231 3214, Email: statny.dozor@pdp.gov.sk.
XIII. Information related to automated decision-making, including profiling:
13.1. As the Controller does not engage in the processing of personal data of the Data Subject in the form of automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the Regulation, the Controller is not obliged to provide information pursuant to Article 13(2)(f) of the Regulation, namely information about automated decision-making, including profiling, the procedure used, as well as the significance and envisaged consequences of such processing of personal data for the Data Subject. This provision does not apply.
XIV. Final provisions
14.1. These Privacy Policy and Cookie Policy form an integral part of the General Terms and Conditions and Complaints Procedure. The documents – General Terms and Conditions and Complaints Procedure of this Website are published on the domain of the Seller’s Website.
14.2. These Privacy Policy become effective and valid upon their publication on the Seller’s Website on 01.08.2022.