General data protection
The protection of personal data is very important to us, which is why we have precise rules that set out the conditions for the processing and protection of your personal data. In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), we hereby inform you of all the essential requirements.
Who is the Operator of your personal data?
The company MD ski s. r. o., with its registered office at J. M. Oberuča 1123/2 031 01 Liptovský Mikuláš, Company ID: 54 729 548, VAT ID: SK2121771113, is the Operator of the personal data that you provide to us by completing an order, registering, subscribing to commercial notifications or browsing our website.
What personal data do we collect about you?
We process your personal data according to the type of record as follows:
A/ In order records, we process your personal data necessary for processing the order, and therefore for the purpose of fulfilling the contract, to the extent of full name, e-mail, telephone, address. We use personal data from order records for other purposes, as it is in our legitimate interest to maintain the entire order record for legal protection against future disputes. In accordance with applicable legislation, we must process your data from the record for a period of 6 years due to the statutory warranty period for the quality of the goods, the limitation period and the functioning of the judicial system, for a period of 10 years to fulfill our legal obligation to archive documentation for the purpose of possible financial control.
B/ In the user registry, we process your personal data to the extent that you provide it to us when registering, editing your profile, creating an order or when linking your account to social networks. It is in our legitimate interest to maintain a user database, which also allows individual customers to manage their profile as part of the registration on the website. In addition to registration purposes, we also use the database in question to identify persons when handling complaints, when handling orders at the points of sale, when communicating with the customer support center and for marketing purposes. For the purpose of user registry, we keep your personal data for a period of 5 years from your last placed order.
We also use your personal data to ensure the transport of the ordered goods, which represents the fulfillment of our part of the contract. We provide this personal data to transport companies and when providing it we create a record of the provision, which serves as a backup in case of a transfer error through the information system. Due to possible complaints from both the customer and the carrier, we process this data to ensure transport for a period of 5 years from the creation of the order.
Saving personal data from your order will allow us to facilitate your next purchase and pre-fill previously used data into your electronic shopping cart. We process personal data to facilitate your purchase on the basis of a legal basis of legitimate interest and keep it in a database together with other data, i.e. for a period of 5 years after your last order.
What is the legal basis for processing?
The legal basis for processing personal data is primarily legitimate interest, performance of a contract, legal obligation or consent given by the data subject.
Who do we provide data to?
Only our employees, who are bound by confidentiality and trained in data processing security, have access to your personal data. We handle most operations ourselves and do not need third parties for them. To ensure some specific activities that we cannot provide on our own, we use the services and applications of processors who specialize in the given processing and are in compliance with the GDPR.
They are the providers of the following services:
1/ Packeta s. r. o., Kopčianska 3338/82A, 851 01 Bratislava, Company ID: 48 136 999
Where do we store your data?
The data we collect from you is stored in the European Economic Area (hereinafter referred to as the “EEA”). The data is stored on the backed-up servers of Webglobe a.s., Stará Prievozská 1349/2, 821 09 Bratislava – Ružinov district, IČO: 52 486 567. Data security is fully compliant with the GDPR.
Who has access to your data?
Access to data and information is only allowed to a limited number of internal users, as it is necessary for their work when processing orders, complaints, providing customer support services, etc. Individual employees always have access only to the amount of personal data that they absolutely need for their work.
What are your rights?
- Right to access information
When processing your personal data, using automated means based on your consent or based on an agreement, you have the right to receive a copy of your data in a structured, commonly used and machine-readable format, which we will provide to you or to another party. You have the right to request information about what personal data we hold about you at any time by emailing info@martindadubovska.com.
- Right to portability and rectification
In case of inaccuracy of personal data, you can notify us of this fact by sending a message to the e-mail address info@martinadubovska.com and we will correct the incorrect personal data without undue delay. After registering on our website, you have the opportunity to correct your personal data yourself by editing your account.
- Right to restrict the processing of personal data
You have the right to request that we restrict any processing of your personal data, including their deletion, if:
– the personal data we collect is inaccurate, pending verification of its accuracy.
– the processing of your personal data is unlawful and you, instead of requesting deletion, request a restriction on its use by sending a message to the e-mail address info@martinadubovska.com.
– We no longer need your personal data to provide our services, but you will need them to exercise your rights.
– if you object to the processing in accordance with the paragraph above, until we verify whether our reasons for the processing outweigh your interests.
- Right to erasure
In the event that we process your personal data:
– despite the fact that their processing is no longer necessary for the purposes for which we obtained them
– unless you raise an objection in accordance with the paragraph above and we are unable to demonstrate to you legitimate grounds for their processing which override your interests, your rights and freedoms or the exercise or defence of legal claims, and/or
– unlawfully
You have the right to request that we delete the personal data processed in this way without undue delay after you have notified us of such facts by sending a message to the e-mail address info@martinadubovska.com. However, we cannot delete the data even at your request if their processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of one of our legal obligations or for the fulfillment of a task carried out in the public interest, or for the determination, exercise or defense of our legal claims.
- Right to object to processing based on legitimate interest
You have the right to object to processing of your personal data based on our legitimate interest as the controller and we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests and rights, or for legal claims.
- Right to object to direct marketing – sending emails
You have the right to object to direct marketing – sending emails and you can opt out by following the instructions in individual emails or by adjusting your account settings.
- How can you exercise your rights?
We take data protection very seriously, which is why we have designated a data controller to ensure that we always process your personal data in a transparent and lawful manner. You can submit your requests regarding your rights listed above to the data controller by sending an email to info@martinadubovska.com.
- Right to lodge a complaint with a supervisory authority
If you believe that we, as the controller, are processing your personal data incorrectly, you can contact us. You also have the right to lodge a complaint with a supervisory authority.
Privacy Statement Updates
The current version of the Privacy Statement is always available on our website.
Cookie Policy
Users should be aware of the fact that some information about users may be automatically collected during standard operations of our server (e.g. the IP address of the user’s computer) and also when using cookies (small text files that are stored on the user’s computer and the server can recognize users who have visited it at least once and then record their behavior and, accordingly, for example, adjust the design and content or better target the advertising campaign). Cookies are not programs that could cause damage to the user’s computer. Most browsers offer the option not to accept cookies – however, the e-commerce will not function correctly without cookies enabled.
A cookie is a short text file that a website sends to your browser. It allows the website to record information about your visit, such as your preferred language and other settings. This can make future visits to the site easier and more productive. Cookies are important. Without them, browsing the web would be much more difficult. Cookies serve a variety of purposes. For example, we use them to store your Safe Search settings, to select relevant ads, to track the number of visitors to the site, to make it easier to sign up for new services, and to protect your data.
Types of cookies:
Settings – These cookies allow our websites to remember information that affects the way the website looks or behaves. For example, your preferred language or the region you are in. Based on the information about your region, the website can offer you the local weather forecast or traffic reports you need. These cookies also help you change the text size, font and other elements of the website that can be personalized.
Security – Security cookies are used to authenticate users, prevent fraudulent use of login credentials, and protect user data from access by unauthorized parties.
Processes – Process cookies allow websites to provide services that visitors expect, such as navigating websites or accessing secure areas of the website. Without these cookies, the website will not function properly. For example, a cookie called lbcs is used to allow Google Docs to open multiple documents in a single browser. If you block this cookie, Google Docs will not function properly.
Advertising – Cookies are also used to make advertisements more attractive to users and website owners, and to offer advertisers better advertising opportunities. Cookies are commonly used to select advertisements that are relevant to users, improve campaign performance reports, and prevent users from seeing advertisements they have already seen.
Session state – Websites often collect data about visitor behavior. For example, this may include information about which pages users visit most often or whether they experience errors on certain pages. These so-called “session state cookies” help improve the services and user experience on the website. If you block or delete these cookies, the functionality of the website will not be affected in any way.
Managing cookies in your browser
Some people do not want cookies to be stored. That is why the latest browsers allow you to manage cookies.
Some browsers allow you to set cookie policies for individual websites, giving you more control over your privacy. You can prevent all websites from storing cookies except those you trust.
In your browser’s Tools menu, you’ll find a Clear browsing data option. This allows you to delete cookies and other data from websites and plug-ins, including data stored on your device by Adobe Flash Player (Flash cookies).