General Data Protection Regulation

Operator herewith in accordance with Article 13 paragraphs 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR) is providing the person concerned, from whom the operator obtains personal data, that is related to this person, following information:

Identity and contact data of the operator:

Business name: Kateřina Moravcová - ETO UNIFORMS

Place of business: 91441 Nemšová, Kukučínova 2098/1A, Slovenská republika

Registered in: Okresný úrad Trenčín, Small-business register 350-45127

IČO (Identification number of company): 53331800

DIČ (TIN): 1075690088

SK VAT registration number for services, only: SK1075690088

IBAN: SK61 0900 0000 0051 7392 6525, SWIFT: GIBASKBX

Seller is not a VAT payer (Value Added Tax) for delivery of goods!

Processed personal data:

The operator is processing following personal data: first name, surname, address, email address, telephone number, data collected for cookies files, IP addresses.

Identity and contact data of the operator´s deputy:

The deputy of the operator is not designated.

Contact data of the responsible person:

The responsible person is not designated.

Purposes of processing the personal data of a person concerned

Purposes of processing the personal data of a person concerned are following:

• processing of accounting documents,
• registration of contracts and customers in order of enjoyment and fulfillment of contracts,
• archiving of documents according to legal regulations,
• marketing activities of the operator.

Legal base of processing the personal data of the person concerned:

The legal base of processing the personal data of the person concerned will be, in dependence on concrete personal data and reasons its processing, the approval granted by person concerned, fulfillment legal commitment of the operator, fulfillment of the contract by the party of contract that is the person concerned.

Recipients or categories of personal data recipients:

The recipients of the personal data of the person concerned will or may at least be (i) statutory bodies or members of the statutory bodies of the operator and (ii) staff of the operator (i) the operator's business representatives and other persons cooperating with the operator in the performance of the operator's tasks. For the purposes of this document, the staff of the operator shall be all-natural persons engaged for the operator dependent work based on a contract of employment or work carried out outside employment.

The recipients of the personal data of the person concerned will also be the contributors of the operator, its business partners, suppliers and contractors, in particular: an accounting company, a company providing services related to the creation and maintenance of software, a company providing legal services to the operator, a company providing the consultant services to the operator.

The recipients of the personal data will also be the courts, law enforcement agencies, tax authorities and other state authorities, in the legally established cases.

Information on the intended transfer of personal data to a third country:

Not applicable - The operator does not intend to transfer personal data to a third country.

Retention period of personal data:

Personal data shall be kept in accordance with the legislation for the necessary time for which they will be required for the purposes of fulfilling the contract and their subsequent archiving.

Lessons on the existence of relevant rights of the person concerned:

The person concerned shall, inter alia, have the following rights:

a) Right of the person concerned to have the access under Article 15 of the GDPR, the content of which is:

• the right to obtain from the operator a confirmation whether personal data relating to the person concerned are processed;
• in cases that the personal data of the person concerned is processed, the right to obtain access to the personal data processed and the right to obtain the following information:
• information on the purposes of the processing;
• information on the categories of personal data concerned;
• information on the recipients or categories of recipients to whom the personal data have been or will be provided, in cases of recipients in third countries or international organizations;
• where possible, information on the foreseeable retention period of personal data or, if this is not possible, information on the criteria for its determination;
• information on the existence of the right to require the operator to amend the personal data relating to the person concerned or to delete it or to require its limited processing and in terms of the existence of the right to submit an objection to such processing;
• information on the right to lodge a complaint to the supervisory authority;
• where personal data have not been obtained from the person concerned, any available information in respect of its source;
• information on the existence of automated decision-making, including profiling as referred to in Article 22 paragraphs 1 and 4 of the GDPR and, in these cases, at least meaningful information on the procedure used, as well as the significance and foreseeable consequences of such processing of personal data for the person concerned;
• the right to be informed of appropriate guarantees in accordance with Article 46 of the GDPR concerning the transfer of personal data where personal data are transferred to a third country or an international organization;
• the right to provide a copy of the personal data processed, but subject to compliance with the condition that the right to provide a copy of the personal data processed may not adversely affect the rights and freedoms of others;

b) the right of the person concerned for rectification under Article 16 of the GDPR, the content of which is:

• the right to rectify the incorrect personal data by the operator relating to the person concerned without undue delay;
• the right to supplement incomplete personal data of the person concerned, through the provision of a supplementary declaration made by the person concerned;

c) the right of the person concerned to delete its personal data under Article 17 of the GDPR, the content of which is:

(i) the right to obtain, without undue delay, the deletion of personal data relating to the person concerned if one of the following reasons is fulfilled:

personal data are no longer necessary for the purposes for which they have been collected or otherwise processed;

• the person concerned shall revoke the consent on which bases processing is carried out, subject to the condition that there is no other legal basis for the processing of personal data;
• the person concerned disputes the processing of personal data in accordance with Article 21 paragraph 1 of the GDPR and do not consider any legitimate reasons for processing;
• personal data or the person concerned objects to the processing of personal data in accordance with Article 21 paragraph 2 of the GDPR;
• personal data have been processed illegally;
• personal data must be deleted in order to fulfil the legal obligation under European Union law or the law of the Member State under which jurisdiction the operator is acting;
• personal data were obtained in connection with the supply of information society services in accordance with Article 8 paragraph 1 of the GDPR;
• the right to the operator who has published the personal data of the person concerned, with regard to the available technology and the cost of implementing the measures, has taken appropriate measures, including technical measures, to inform the other operators carrying out the processing of personal data, that the person concerned requests them to delete all references to such personal data, their copies or replicas;

the right to delete personal data containing rights under Article 17, paragraphs 1 and 2 of the GDPR Regulations [i.e. with the content of rights under (i) and (ii) of this sub-paragraph (c) of point J. of this document] shall not arise as the processing of personal data is necessary:

• for the exercise of the right to freedom of speech and information;
• to fulfil a legal obligation requiring processing under European Union law or the law of the Member State under which jurisdiction the operator is acting, or for the fulfilment of a task carried out in the public interest or in the exercise of public authority entrusted operator;
• reasons of public interest in the field of public health in accordance with Article 9 paragraph 2 (h) and (i) of the GDPR as well as Article 9 paragraph 3 of the GDPR;
• for the purposes of archiving in the public interest, for the purposes of scientific or historical research or for statistical purposes under Article 89 paragraph 1 of the GDPR where the right referred to Article 17 paragraph 1 of the GDPR shall make it impossible or seriously impedes the attainment of the objectives of such processing of personal data; or
• to demonstrate, enforce or defend legal claims;

d) the right of the person concerned to restrict the processing of personal data under Article 18 of the GDPR, the content of which is:

(i) the right to restrict the processing of personal data to the operator in respect of one of the following cases:

• the person concerned contests the correctness of personal data during the period allowing the operator to verify the correctness of the personal data;
• the processing of personal data is unlawful, and the person concerned opposes the deletion of personal data and requests a restriction of their use instead;
• the operator no longer needs personal data for processing purposes, but it needs the person concerned to demonstrate, enforce or defend legal claims;
• the person concerned objected to the processing in accordance with Article 21 paragraph 1 of the GDPR, pending verification of whether the legitimate reasons on the part of the operator prevail over the legitimate reasons of the person concerned;
• the right to restrict the processing of personal data in accordance with point (i) of this sub-paragraph (d) Point J. of this document, such limited personal data processed, except for storage, shall be processed only with the consent of the person concerned or for the exercitation, application or defence of legal claims, or for the protection of the rights of other natural or legal person or for reasons of important public interest of the European Union or of a Member State;
• the right to be informed in advance of the abolition of the limitation of processing of personal data;

e) the right of the person concerned to comply with the notification obligation to recipients under Article 19 of the GDPR, the content of which is:

• the right to notify the operator of any recipient to whom personal data have been provided, any rectification or deletion of personal data or a restriction of processing carried out in accordance with Article 16, Article 17 paragraph 1 and Article 18 of the GDPR, unless it proves impossible or does not require undue effort;
• the right of the operator to inform the person concerned if such a person so requests;

f) the right of the person concerned to data transferability under Article 20 of the GDPR, the content of which is:

(i) the right to obtain personal data relating to the person concerned and which has been provided to the operator, in a structured, commonly used and machine-readable format, and the right to transfer such data to another operator, without the operator being prevented, if :

• processing is based on the consent of the person concerned under Article 6 paragraph 1 (a) or Article 9 paragraph 2 (a) of the GDPR, or the contract referred to in Article 6 paragraph 1 (b) of the GDPR, and at the same time
• the processing is carried out by automated means, and at the same time
• the right to obtain personal data in a structured, commonly used and machine-readable format and the right to transfer such data to another operator, without the operator being prevented, shall have no adverse consequences for the rights and freedoms of others;

(ii) the right to transfer personal data directly from one operator to another one, as far as technically possible;

g) the right of the person concerned to object under Article 21 of the GDPR, the content of which is:

• the right to reclaim at any time in terms of relating to the concrete situation of the person concerned against the processing of personal data relating to him which is carried out in accordance with Article 6 paragraph 1 subparagraphs (e) or (f) of the GDPR, including opposition to profiling based on those provisions of the GDPR;
• in cases of exercise of the right at any time to reclaim on grounds relating to the concrete situation of the person concerned against the processing of personal data relating to him which is carried out in accordance with Article 6 paragraph 1 subparagraphs (e) or (f) of the GDPR, including objecting to profiling based on those provisions of the regulation, the right that the operator does not further process the personal data of the person concerned unless it proves the necessary legitimate grounds for processing which prevail over the interests, rights and freedoms of the person concerned, or the reasons for demonstrating, applying or defending legal claims;
• the right at any time to reclaim to the processing of personal data relating to the person concerned, for the purposes of direct marketing, including profiling, to the extent that it relates to direct marketing; in doing so, if the person concerned objects to the processing of personal data for direct marketing purposes, personal data may no longer be processed for such purposes;
• (in connection with the use of information society services), the right to exercise a right to reclaim to the processing of personal data by means of automated means using technical specifications;
• the right to reclaim on grounds relating to the particular situation of the person concerned against the processing of personal data relating to the person concerned, where personal data are processed for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89 paragraph 1 of the GDPR, but except where processing is necessary for the performance of a task for reasons of public interest;

h) the rights of the person concerned relating to automated individual decision-making in accordance with Article 22 of the GDPR, the content of which is:

• the right not to be covered by a decision which is based solely on automated processing of personal data, including profiling, and which has legal effects relating to it or similarly significantly affecting it, except in cases in accordance with Article 22 paragraph 2 of the GDPR (i.e. except where the decision: (a) is necessary for the conclusion or performance of a contract between the person concerned and the operator, (b) authorized by the law of the European Union or by the law of the Member State to which the operator is subject and which also lay down appropriate measures guaranteeing the protection of the rights and freedoms and legitimate interests of the person concerned or (c) based on the explicit consent of the person concerned).

Advice on the right of the person concerned to revoke consent to the processing of personal data:

The person concerned shall at any time be entitled to revoke his consent to the processing of personal data, without prejudice to the lawfulness of the processing of personal data based on the consent granted before its appeal.

The person concerned shall at any time be entitled to revoke his consent to the processing of personal data - in full or in part. Partial revocation of consent to the processing of personal data may relate to a certain type of processing operation/processing operations, while the lawfulness of the processing of personal data within the scope of the remaining processing operations remains unaffected. Partial revocation of consent to the processing of personal data may relate to a particular purpose of processing personal data/certain specific purposes of the processing of personal data, while the lawfulness of the processing of personal data for other purposes remains unaffected.

The right to revoke consent to the processing of personal data may be carried out by the person concerned in a documentary form to the address of the operator registered as its registered office in the commercial register at the time of revocation of the consent to the processing of personal data or electronic form by electronic means (by sending an email to the operator's e-mail address indicated in the operator's identification in this document or by completing an electronic form published on the operator's website).

Lessons on the right of the person concerned to lodge a complaint to the supervisory authority:

The person concerned shall have the right to lodge a complaint to the supervisory authority, in particular in the Member State of his habitual residence, place of work or at the place of the alleged infringement, if it considers that the processing of personal data relating to it is contrary to the GDPR, without prejudice to any other administrative or judicial means of redress.

The person concerned shall have the right to inform the supervisory authority to which the complaint is made as a complainant of the progress and outcome of the complaint, including the possibility of bringing a judicial remedy in accordance with Article 78 of the GDPR.

The supervisory authority in the Slovak Republic is the Office for the protection of personal data of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky).

Information on the existence/absence of the obligation of the person concerned to provide personal information:

The operator shall inform the person concerned that the provision of personal data of the person concerned is necessary for the conclusion of the purchase contract and for its fulfilment. The operator shall inform the person concerned that the person concerned is not obliged to provide personal data or is not obliged to grant consent to their processing. As a result of the failure to provide personal data and/or the absence of consent to the processing of personal data, the operator will not be able to conclude and comply with the purchase contract.

Information related to automatic decision-making including profiling:

Not applicable. - Since, in the case of the operator, the person concerned is not processed in the form of automated decision-making, including profiling as it is laid down in Article 22 paragraphs 1 and 4 of the GDPR, the operator shall not be obliged to provide information in accordance with Article 13 paragraph 2 subparagraph (f) of the GDPR, i.e. information on automated decision-making, including profiling and the procedure used, as well as the significance and foreseeable consequences of such processing of personal data for the person concerned.

Privacy and cookies use - what is a cookie?

In the context of the EU Directive about electronic communications privacy, we provide a brief clarification of the cookies´ function. Cookies are text files which contain a small amount of information that is pulled into your computer, phone, or other device when you visit a website. Cookies are useful because they allow the website not only to recognize the user's device, but at the same time allow the user to access the features on the site.

In principle, we divide the cookies into two types.

Persistent cookies - these cookies remain on the user's device during the period specified in the cookie. They are activated whenever the user visits the website that created the cookie.

Relational cookies - these files allow the website operator to link user activities when the user opens the browser window and finishes when the browser window is closed. Session cookies are created temporarily. When you close your browser, all relational cookies are erased.

What are cookies?

A cookie´s file is a small text file that a website stores on your computer or mobile device when you browse. With this file, the website stores information about your steps and preferences (such as your login name, language, font size, and other display settings) for a certain amount of time, so that you can visit the site or browse the individual you do not need to restate the pages

How do we use cookies?

Our online store uses cookies to preserve:

• your display preferences, such as color contrast settings or font size;
• the fact that you have already responded to a survey showing up in a separate window (pop-up) through which you can express your opinion on the content of the page (will not be redisplayed);
• whether or not you have agreed to use cookies on this web site.
• remarketing.

Likewise, some sub-sites that are part of our websites use cookies for anonymous collection of statistics about how you have gotten there and which video clips you have viewed.

Allowing cookies is not necessarily necessary for the proper functioning of the website but gives you better user experience when working with it. You can delete or block cookies. In this case, however, certain website functionality may not work as they should.

Information stored in cookies´ files will not be used to your personally identification and the data structure is fully under our control. Cookies are not used for purposes other than those mentioned in this text.

Do we also use other cookies?

Some of our sites or subsites may use additional or different cookies than those mentioned in the previous text. In this case, details of their use will be provided on the page in the specific cookie notice.

How to check cookies

You can check and/or delete cookies at your discretion - see the aboutcookies.org page for details. You can clear all cookies stored on your computer, and you can set most browsers to prevent them from being saved. However, you may need to manually edit some settings every time you visit a website, and some services and features will not work.

Final provisions

These privacy policy and privacy policies form an integral part of the general terms and conditions and the complaints procedure. Documents - General Business Conditions and the Return Policy of this online store are published on the seller's internet domains.

This privacy policy shall enter into force and effect on their publication in the online store of the seller on 9th of October 2024.