More
    Registration
    Home / Privacy Policy Conditions

    Privacy Policy Conditions

    I. Basic Provisions

    The operator of personal data according to § 5 o) of Act No. 18/2018 Coll. on personal data protection, as amended (hereinafter referred to as "the Act"), is GYNEX - CHEMALEX s.r.o., ID No. 53456432 (hereinafter referred to as "the operator") with its registered office at Na lánoch 3298/10, 821 04 Bratislava - Ružinov district. The operator's contact details are: address Na Lánoch 10, 821 04 Bratislava, email gynex@gynex.sk, phone 031 558 6580. Personal data means all information about an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, network identifier, or by one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. The operator has appointed a responsible person for personal data protection. The contact details of the responsible person are: Roman Fodor, tel.: 031 558 6580, email gynex@gynex.sk.

    II. Sources and Categories of Processed Personal Data

    The operator processes personal data you have provided or personal data obtained by the operator based on fulfilling your order. The operator processes your identification and contact data and data necessary for contract fulfillment.

    III. Legal Basis and Purpose of Personal Data Processing

    The legal basis for personal data processing is:

    • the performance of the contract between you and the operator according to § 13 para. 1 letter b) of the Act,
    • the legitimate interest of the operator in providing direct marketing (especially for sending commercial announcements and newsletters) according to § 13 para. 1 letter f) of the Act,
    • your consent to processing for direct marketing purposes (especially for sending commercial announcements and newsletters) according to § 13 para. 1 letter a) of the Act, in case no order of goods or services has been made. The purpose of personal data processing is:
    • processing your order and execution of rights and obligations resulting from the contractual relationship between you and the operator; personal data required for successful order processing (name and address, contact) are necessary for contract conclusion and performance, without providing personal data it is not possible to conclude the contract or for the operator to fulfill it,
    • sending commercial announcements and performing other marketing activities. The operator does not engage in automatic individual decision-making according to § 28 of the Act.

    IV. Duration of Personal Data Storage

    The operator stores personal data:

    • for the period necessary to exercise rights and obligations from the contractual relationship between you and the operator and to assert claims from these contractual relationships (for a period of 15 years after the end of the contractual relationship).
    • for the period until the consent to process personal data for marketing purposes is revoked, no longer than 5 years, if personal data are processed based on consent. After the retention period, the operator will delete the personal data.

    V. Recipients of Personal Data (Subcontractors of the Operator)

    Recipients of personal data are persons:

    • involved in the delivery of goods/services/execution of payments based on the contract,
    • ensuring e-shop operation services and other services related to e-shop operation,
    • providing marketing services
    • providing accounting and transportation services The operator does not intend to transfer personal data to a third country (country outside the EU) or international organization.

    VI. Your Rights

    Under the conditions set in the Act, you have:

    • the right to access your personal data according to § 21 of the Act,
    • the right to rectify personal data according to § 22 of the Act, or limit processing according to § 24 of the Act,
    • the right to erase personal data according to § 23 of the Act,
    • the right to object to processing according to § 27 of the Act,
    • the right to data portability according to § 26 of the Act,
    • the right to withdraw consent to processing in writing or electronically to the address or email of the operator specified in III of these conditions. You also have the right to file a complaint with the Personal Data Protection Office if you believe that your right to personal data protection has been violated.

    VII. Conditions of Personal Data Security

    The operator declares that all appropriate technical and organizational measures to secure personal data have been taken. The operator has implemented technical measures to secure data storage and paper-based personal data storage, especially data encryption and antivirus protection. The operator declares that only authorized persons have access to personal data.

    VIII. Final Provisions

    By sending an order from the online order form, you confirm that you are aware of the personal data protection conditions and that you accept them in full. You agree to these conditions by checking the consent box via the online form. By checking the consent, you confirm that you are aware of the personal data protection conditions and that you accept them in full. The operator is entitled to change these conditions. A new version of the personal data protection conditions will be published on its website.

    These conditions come into effect on May 24, 2018.