Privacy Policy
Basic information:
Seller:
Text
Company ID:
Tax ID:
registered in the Commercial Register of the District Court Banská Bystrica, Section Sro, Insert No. 22704/S
(Hereinafter referred to as the “Seller” or “Gothoom productions”)
Contact details:
Mobile: +421
E-mail:
General Information
For the purposes of personal data protection (hereinafter referred to as “Data Protection”), a data subject is any natural person whose personal data is processed by the Controller for the purposes listed below.
Data Protection is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter the “Regulation”) and Act No. 18/2018 Coll. on Personal Data Protection and on Amendments to Certain Acts (hereinafter the “Act”).
General Provisions for All Purposes
The Controller does not transfer personal data to any international organization or to a third country (outside the EU), unless explicitly stated otherwise.
The Controller does not use personal data for profiling or automated individual decision-making.
If a Processor is appointed for certain purposes, the Controller ensures that the Processor provides the required level of legal protection for the entrusted personal data and has a contract in place guaranteeing an adequate level of protection.
Personal data is not provided to third parties except for public authorities (if required), courier services, or Slovak Post for the delivery of goods.
Unless otherwise specified, the Controller processes only standard categories of personal data.
Purposes of Processing
The Controller processes personal data of data subjects for the following purposes:
Accounting – Legal basis: legal obligation under Act No. 431/2002 Coll. on Accounting. Data are stored for the retention periods defined by law. Recipients: processors, public authorities.
Business communication – Legal basis: legitimate interest under Art. 6(1)(f) GDPR. Data are stored for the duration of business activities.
Order processing – Legal basis: legitimate interest (Art. 6(1)(f)) or contract performance (Art. 6(1)(b)) for natural persons. Provision of personal data is necessary to fulfill the order. Data stored for the duration of the webshop.
Contracts with business partners – Legal basis: legitimate interest (Art. 6(1)(f)) or contract performance (Art. 6(1)(b)) with natural persons. Data stored for the duration of business.
Warranty service – Legal basis: legitimate interest or contract performance. Data stored for the duration of business.
Facebook page management – Legal basis: consent under Art. 6(1)(a). Data processed by Facebook Ireland Limited under their privacy policy. See Facebook Privacy Policy.
Instagram account management – Legal basis: consent. Data processed by Facebook Ireland Limited (Instagram). See Instagram Privacy Policy.
YouTube channel management – Legal basis: consent. Data processed by Google Ireland Limited. See Google Privacy Policy.
E-shop purchase agreements with consumers – Legal basis: contract performance. Data stored for the duration of the webshop.
Claims and complaints – Legal basis: legal obligation under Act No. 250/2007 Coll. Data stored for the duration of business.
Delivery of goods – Legal basis: legitimate interest or contract performance. Recipients: Slovak Post, courier companies.
Contract withdrawals – Legal basis: legal obligation under the Commercial and Civil Codes. Data stored for the duration of the webshop.
Exercising data subject rights – Legal basis: legal obligation. Data stored for 10 years from the request.
Competitions – Legal basis: consent. Data stored only during the competition.
Cookies – Legal basis: consent via webshop. Stored for up to 2 years. See Cookie Policy.
Newsletter (email marketing) – Legal basis: consent. Consent may be withdrawn at any time via “Unsubscribe.”
Google Analytics – Legal basis: legitimate interest. Data stored for 26 months. Recipients: Google Inc. Data may be transferred to servers in the USA.
Contact form – Legal basis: legitimate interest. Data stored for the duration of the webshop. Service provider: WordPress Foundation.
Rights of the Data Subject
Data subjects have the following rights under the GDPR and Slovak law:
Right to withdraw consent at any time.
Right of access to personal data.
Right to rectification.
Right to erasure (“right to be forgotten”).
Right to restriction of processing.
Right to data portability.
Right to object to processing based on legitimate interest.
Right to lodge a complaint with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava 27, e-mail: statny.dozor@pdp.gov.sk).
All requests related to personal data will be handled by the Controller within 30 days. Requests and questions should be addressed to the Controller by e-mail or in writing.