Protection of personal data and cookie notice

PROTECTION OF PERSONAL DATA AND COOKIE NOTICE

Privacy Policy and Notice on Personal Data Protection provided by the operator to the data subject when obtaining personal data from the data subject and the cookie notice of the online store https://www.florbal4u.com 

I. Operator

1.1. The identity and contact details of the Operator are:

Business name: Florbal s.r.o.
Registered office: Tomášikova 13, Bratislava - Ružinov district 821 01, Slovak Republic
Registered in the Commercial Register of the Municipal Court Bratislava III, Division Sro, Insert number 121506/B
ID: 44887001
VAT number: SK2022868793
Bank account: SK03 0900 0000 0051 1580 2065
The seller is the payer of value added tax

1.2. The email contact and phone contact for the Operator are:

Email: obchod@florbal4u.com
Tel. no.: +421948495924

1.3. The address of the Operator for sending documents is:

Florbal s.r.o., Tomášikova 13, 821 01 Bratislava, Slovenská republika 

1.4. The Operator hereby, in accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation"), further in accordance with Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Supplements to Certain Acts as amended, and in accordance with Act No. 452/2021 Coll. on Electronic Communications as amended, provides the Data Subject (the Buyer), from whom the Operator (the Seller) obtains personal data relating to them, with the following information, notices, and explanations:

II. Links

2.1. These privacy policies and notices on personal data protection form part of the General Terms and Conditions published on the Seller's website..

2.2. Pursuant to §3, Section 1, letter n) of Act No. 102/2014 Coll., the Seller informs the consumer that there are no special relevant codes of conduct that the Seller has committed to complying with. A code of conduct is understood as an agreement or set of rules that define the behavior of the Seller who has committed to comply with this code of conduct in relation to one or more specific business practices or business sectors, provided that these are not established by law, other legal regulation, or measure of a public administration authority, which the Seller has committed to comply with, and the manner in which the consumer can become acquainted with them or obtain their text.

III. Protection of personal data and the use of cookies. Information and explanation about cookies, scripts, and pixels.

3.1. The operator of the website provides the following brief explanation of the function of cookies, scripts, and pixels: 

3.1.1. Cookies are text files that contain a small amount of information which is downloaded to your device when you visit a website. This file allows the website to retain information about your actions and preferences (such as login name, language, font size, and other display settings) for a certain period, so you do not need to re-enter them each time you visit the site or browse its individual pages.

A script is a piece of programming code that is used to ensure the proper and interactive functioning of websites. This code is executed either on the operator's server or on your device.

Pixels are small, invisible text or images on a website that are used to monitor website traffic. To enable this, various data are stored through pixels.

3.1.2. Cookies are divided into:

Technical or functional cookies – ensure the proper functioning of the Operator's website and its usage. These cookies are used without consent.

Statistical cookies – The Operator obtains statistics regarding the use of their website. These cookies are used only with consent.

Marketing / Advertising cookies – Used for creating advertising profiles and similar marketing activities. These cookies are used only with consent.

3.2. How to control cookies:

3.2.1. You can control and/or delete cookies at your discretion – for details, see aboutcookies.org. You can delete all cookies stored on your computer or other device, and most browsers can be set to prevent them from being stored.

3.3. The Operator's website uses the following cookies:

All cookies used by the Operator can be found at https://www.cookieserve.com/ by entering the Operator's website address https://www.florbal4u.com.

Technical or functional cookies – the information is accessed by the Operator of the website. Duration of cookies: 2 years.

Statistical cookies - the information is accessed by the Operator of the website. Duration of cookies: 2 years.

Marketing and advertising cookies - the information is accessed by the Operator of the website. Duration of cookies: 2 years.

3.3.1. Cookies accessible to third parties:

Google analytics, Google ADS: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information about privacy protection can be found https://support.google.com/analytics/topic/2919631?hl=sk&ref_topic=1008008

META PIXELS: Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland. More information about privacy protection can be found https://www.facebook.com/about/privacy/

IV. Processed personal data

4.1. The Operator processes the following personal data on its website: name, surname, residence, email address, home phone number, mobile phone number, billing address, delivery address, data obtained from cookies, IP addresses.

V. Contact details of the data protection officer responsible for overseeing personal data protection:

5.1. The Operator has appointed a data protection officer in accordance with Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. Contact:

Email: obchod@florbal4u.com
Phone: +421948495924

5.2. The Operator is also the Seller as defined in the General Terms and Conditions of this website.

VI. Purposes of processing the personal data of the Data Subject and the duration of personal data processing

6.1. The purposes of processing the personal data of the Data Subject are primarily:

6.1.1. recording, creating, and processing contracts and client data for the purpose of concluding contracts with third parties.

6.1.2. processing accounting documents and documents related to the business activities of the Operator.

6.1.3. compliance with legal regulations regarding the archiving of documents and records, for example, according to Act No. 431/2002 Coll., the Accounting Act, as amended, and other relevant regulations.

6.1.4. activities of the Operator in connection with fulfilling the requests, orders, contracts, and similar institutes of the Data Subject.

6.1.5. Newsletter, marketing, and similar advertising activities of the Operator. In the event that the Data Subject gives consent to the Operator for marketing and similar advertising activities.

6.2. The Operator retains the personal data of the Data Subject only for the necessary period required for the purposes of fulfilling the contract and its subsequent archiving in accordance with the legal deadlines imposed on the Operator by legal regulations. In the event that the Data Subject has consented to receiving advertising emails and similar offers, the personal data of the Data Subject is processed for these purposes until the Data Subject withdraws their consent. However, the maximum retention period is 10 years.

VII. Legal basis for processing the personal data of the Data Subject

7.1 In the event that the Operator processes personal data based on the consent of the Data Subject, this processing will commence only after the given consent has been provided by the Data Subject.

7.2. In the event that the Operator processes the personal data of the Data Subject for the purposes of negotiating pre-contractual relationships and concluding and fulfilling the purchase contract, including the related delivery of goods, products, or services, the Data Subject is required to provide personal data for the proper fulfillment of the purchase contract. Otherwise, fulfillment cannot be ensured. Personal data for this purpose is processed without the consent of the Data Subject.

VIII. Recipients or categories of recipients of personal data

8.1. The recipients of the personal data of the Data Subject will be or at least may be:

8.1.1. statutory bodies or their members of the Operator.

8.1.2. persons performing work activities in an employment or similar relationship for the Operator. 

8.1.3. business representatives of the Operator and other persons cooperating with the Operator in fulfilling the Operator's tasks. For the purposes of this document, all natural persons performing dependent work for the Operator based on an employment contract or agreements on work performed outside the employment relationship will be considered employees of the Operator.

8.1.4. The recipients of the personal data of the Data Subject will also include the Operator's collaborators, business partners, suppliers, and contractual partners, specifically: the accounting company, the company providing services related to the creation and maintenance of software, the company providing legal services to the Operator, the company providing consulting services to the Operator, companies ensuring the transport and delivery of products to buyers and third parties, marketing companies, companies operating social networks, companies providing payment gateways and other payment methods.

8.1.5. The recipients of personal data will also include courts, law enforcement authorities, the tax office, and other state authorities, in the event that it is stipulated by law. Personal data will be provided by the Operator to these authorities and state institutions based on and in accordance with the legal regulations of the Slovak Republic.

8.1.6. List of third parties - processors and recipients who process the personal data of the Data Subject:

General Logistics Systems Slovakia s.r.o., Budča 1039, 962 33 Budča, Slovak Republic – a third party providing transportation services

Comgate a.s., Aupark, Gočárova třída 1754 / 48b, 500 02 Hradec Králové, IČ: 279 24 505, DIČ CZ27924505- a third party providing the payment gateway

ELM GROUP s. r. o., SNP 326/2 935 32 Kalná nad Hronom– a third party providing accounting services

IX. Information on the provision of personal data to third countries and the duration of their retention: 

9.1. Not applicable. The Operator does not transfer personal data to third countries.

X. Notice on the existence of relevant rights of the Data Subject:

10.1. The Data Subject has, among others, the following rights, where:

10.1.1. Item 10.1 does not affect other rights of the Data Subjects.

10.1.2. The Data Subject's right of access to data under Article 15 of the Regulation, which includes:

the right to obtain from the Operator confirmation as to whether personal data concerning the Data Subject are being processed, and, if so, the right to access those personal data and the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, the existence of the right to request from the Operator rectification or erasure of personal data or restriction of processing of personal data concerning the Data Subject or to object to such processing, the right to lodge a complaint with a supervisory authority, if the personal data are not collected from the Data Subject, any available information as to their source, the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the Data Subject, the appropriate safeguards pursuant to Article 46 of the Regulation relating to the transfer of personal data if personal data are transferred to a third country or an international organization.

10.1.3. the right to obtain a copy of the personal data undergoing processing, provided that the right to obtain a copy of the processed personal data does not adversely affect the rights and freedoms of others.

10.1.4. the right of the Data Subject to rectification under Article 16 of the Regulation, which includes the right to have the Operator correct without undue delay inaccurate personal data concerning the Data Subject. The right to have incomplete personal data of the Data Subject completed, including by means of providing a supplementary statement by the Data Subject, the right of the Data Subject to erasure of personal data ("the right to be forgotten") under Article 17 of the Regulation, which includes:

10.1.5. the right to have the Operator erase personal data concerning the Data Subject without undue delay where one of the following grounds applies:

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, the Data Subject withdraws consent on which the processing is based, provided that there is no other legal ground for the processing, the Data Subject objects to the processing of personal data pursuant to Article 21(1) of the Regulation and there are no overriding legitimate grounds for the processing, or the Data Subject objects to the processing of personal data pursuant to Article 21(2) of the Regulation, the personal data have been unlawfully processed, the personal data must be erased to comply with a legal obligation under European Union or Member State law to which the Operator is subject, the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the Regulation.

10.1.6. the right to have the Operator, who has made the personal data public, taking into account available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers processing the personal data that the Data Subject has requested the erasure by such controllers of any links to, or copies or replications of, those personal data. This right to erasure of personal data, containing the rights under Article 17(1) and (2) of the Regulation, does not apply to the extent that processing is necessary:

10.1.7. to exercise the right of freedom of expression and information.

10.1.8. to comply with a legal obligation which requires processing under European Union or Member State law to which the Operator is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the Operator.

10.1.9. for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) of the Regulation as well as Article 9(3) of the Regulation.

10.1.10. for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89(1) of the Regulation, insofar as the right referred to in Article 17(1) of the Regulation is likely to render impossible or seriously impair the achievement of the objectives of such processing; or for the establishment, exercise, or defense of legal claims.

10.1.11. the right of the Data Subject to restrict the processing of personal data under Article 18 of the Regulation, which includes:

10.1.12. the right to have the Operator restrict the processing of personal data where one of the following applies: the Data Subject contests the accuracy of the personal data, for a period enabling the Operator to verify the accuracy of the personal data; the processing is unlawful and the Data Subject opposes the erasure of the personal data and requests the restriction of their use instead; the Operator no longer needs the personal data for the purposes of the processing, but they are required by the Data Subject for the establishment, exercise, or defense of legal claims; the Data Subject has objected to processing pursuant to Article 21(1) of the Regulation pending the verification whether the legitimate grounds of the Operator override those of the Data Subject.

10.1.13. the right to ensure that when the processing of personal data has been restricted, such restricted personal data will only be processed, with the exception of storage, with the Data Subject's consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State;

10.1.14. the right to be informed in advance about the lifting of the restriction on the processing of personal data;

10.1.15. the right of the Data Subject to have the notification obligation fulfilled towards recipients under Article 19 of the Regulation, which includes: the right to have the Operator notify each recipient to whom the personal data have been disclosed of any rectification or erasure of personal data or restriction of processing carried out pursuant to Article 16, Article 17(1), and Article 18 of the Regulation, unless this proves impossible or involves disproportionate effort; the right to have the Operator inform the Data Subject about those recipients if the Data Subject requests it;

10.1.16. the right of the Data Subject to data portability under Article 20 of the Regulation, which includes: the right to receive the personal data concerning the Data Subject, which they have provided to the Operator, in a structured, commonly used, and machine-readable format and the right to transmit those data to another controller without hindrance from the Operator, where:

a) the processing is based on the Data Subject's consent pursuant to Article 6(1)(a) of the Regulation or Article 9(2)(a) of the Regulation, or on a contract pursuant to Article 6(1)(b) of the Regulation, and at the same time

b) the processing is carried out by automated means, and at the same time:

10.1.17. the right to receive personal data in a structured, commonly used, and machine-readable format and the right to transmit those data to another controller without hindrance from the Operator will not have adverse effects on the rights and freedoms of others;

10.1.18. the right to have the personal data transmitted directly from one controller to another, where technically feasible;

10.1.19. the right of the Data Subject to object under Article 21 of the Regulation, which includes:

10.1.20. the right to object at any time, on grounds relating to the Data Subject's particular situation, to the processing of personal data concerning them, which is based on Article 6(1)(e) or (f) of the Regulation, including profiling based on those provisions of the Regulation;

10.1.21. the right, in case of exercising the right to object at any time, on grounds relating to the Data Subject's particular situation, to the processing of personal data concerning them, which is based on Article 6(1)(e) or (f) of the Regulation, including profiling based on those provisions, to have the Operator cease processing the personal data unless the Operator demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the Data Subject, or for the establishment, exercise, or defense of legal claims.

10.1.22. the right to object at any time to the processing of personal data concerning the Data Subject for direct marketing purposes, including profiling to the extent that it is related to such direct marketing; in such a case, if the Data Subject objects to the processing for direct marketing purposes, the personal data must no longer be processed for such purposes;

10.1.23. in connection with the use of information society services, the right to exercise the right to object to the processing of personal data by automated means using technical specifications;

10.1.24. the right to object, on grounds relating to the Data Subject's particular situation, to the processing of personal data concerning them if the personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the Regulation, except where the processing is necessary for the performance of a task carried out for reasons of public interest;

10.1.25. the right of the Data Subject related to automated individual decision-making under Article 22 of the Regulation, which includes:

10.1.26. the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, except in the cases under Article 22(2) of the Regulation [i.e., except when the decision: (a) is necessary for entering into, or the performance of, a contract between the Data Subject and the Operator,

10.1.27. (b) is authorized by Union or Member State law to which the Operator is subject and which also lays down suitable measures to safeguard the Data Subject's rights and freedoms and legitimate interests, or (c) is based on the Data Subject's explicit consent.

XI. Notice of the Data Subject's right to withdraw consent to the processing of personal data:

11.1. The Data Subject has the right to withdraw their consent to the processing of personal data at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

The Data Subject has the right to withdraw their consent to the processing of personal data at any time, either in whole or in part. Partial withdrawal of consent to the processing of personal data may relate to a specific type of processing operation(s), while the lawfulness of processing personal data for the remaining processing operations will remain unaffected. Partial withdrawal of consent to the processing of personal data may also relate to a specific purpose(s) of processing personal data, while the lawfulness of processing personal data for other purposes will remain unaffected.

The Data Subject can exercise the right to withdraw consent to the processing of personal data in writing to the Operator's address registered as its headquarters in the commercial register at the time of withdrawing consent to the processing of personal data or electronically via electronic means (by sending an email to the Operator's email address provided in the identification of the Operator in this document).

XII. Notice of the Data Subject's right to lodge a complaint with a supervisory authority:

12.1. The Data Subject has the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or place of the alleged infringement, if they believe that the processing of personal data concerning them is in violation of the Regulation, all without prejudice to any other administrative or judicial remedies. The Data Subject has the right to be informed by the supervisory authority to which the complaint has been submitted about the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the Regulation.

12.2. The supervisory authority in the Úrad na ochranu osobných údajov Slovenskej republiky,, Hraničná 12, 820 07 Bratislava 27, Slovak Republic. Telephone contact: +421 /2 3231 3214, Email: statny.dozor@pdp.gov.sk.

XIII. Information related to automated decision-making, including profiling:

13.1. Since the Operator does not process personal data of the Data Subject through automated decision-making, including profiling as referred to in Article 22(1) and (4) of the Regulation, the Operator is not required to provide information pursuant to Article 13(2)(f) of the Regulation, i.e., information about automated decision-making, including profiling, and the logic involved, as well as the significance and the envisaged consequences of such processing for the Data Subject. Not applicable.

XIV. Final provisions

14.1. These Privacy Policy and Personal Data Protection Notices and Cookie Notices form an integral part of the General Terms and Conditions and the Complaints Procedure. The documents – General Terms and Conditions and Complaints Procedure of this website – are published on the domain of the Seller's website.

14.2. These Privacy Policy and Personal Data Protection Notices become valid and effective upon their publication on the Seller's website on July 1, 2024.

This online store is certified by http://www.pravoeshopov.sk