Privacy Policy

It is important to us that our client's personal data is always safe.

For this reason, we have set up all processes for processing our clients' personal data so that they fully comply with current legislation, and this section provides basic information about the conditions for the processing of your personal data. Should you have any further questions, please do not hesitate to contact us at any time.

[1] In particular, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "GDPR"), as well as with Act No. 18/2018 Coll. on the Protection of Personal Data and on the Amendment of Certain Acts (hereinafter referred to as the "Act").

I. Where can you contact us?

In order to exercise any and all of your rights relating to the protection of personal data (listed below in Article VII), we would like to provide you with the contact details of our company:

Company: LenEva s. r. o.
Address: Papín 163, 067 33 Papín
Company ID: 56075669
Tax ID: 2122176155
Commercial Register: Obchodný register Okresného súdu Prešov, oddiel: Sro, vložka č. 47391/P
E-mail: elorinks.tattoo@gmail.com
Website: https://www.elorinks.sk

II. Who at our company is responsible for fulfilling all obligations in the area of personal data protection?

Given that this obligation does not arise for us from applicable law, we have not designated any person responsible for personal data protection, and we fulfil any and all obligations and commitments in this area ourselves with the highest level of professional care, on which you can rely.

III. What personal data of yours do we process? For what reasons? For what purposes?

We process personal data only to the extent necessary (in particular name, surname, address, telephone contact, e-mail contact), and we do not process special categories of personal data (so-called sensitive personal data).

We process our clients' personal data for various purposes relating to the sale of goods and the provision of services in the field of designing, selling and installing gastronomic technology, but only to the minimum extent necessary, so that the principle of purpose limitation for the processing of personal data established in the GDPR is observed, according to which a controller may collect personal data only for specified, explicit and legitimate purposes.

We process our clients' personal data lawfully, and only within the limits of the legal bases set out in Article 6(1) of the GDPR (in simple terms, we may process your personal data only if one of these reasons applies).

In this regard we would like to emphasize that among the relevant legal bases on which your personal data may be processed is also the giving of your consent to the processing of personal data, but only in cases where no other legal basis exists (i.e. if the reason for processing your personal data is the performance of a contract, and your personal data therefore needs to be processed in order for us to properly deliver goods or provide a service to you (e.g. to send you an order confirmation to your e-mail, to match your payment to the order, to send the goods to the address you provided), your separate consent to the processing of personal data is not additionally required in such a case).

A controller may process personal data only if:

  • the data subject has given consent to the processing of his or her personal data for one or more specific purposes
  • processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract
  • processing is necessary for compliance with a legal obligation to which the controller is subject
  • processing is necessary in order to protect the vital interests of the data subject or of another natural person
  • processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child

By this means we would like to inform you that, as controller, we process only and exclusively the following personal data about you, for the following purposes and on the basis of the following legal bases:

  1. Personal data:
    • name, surname, address (street, city, postal code, country), telephone contact, e-mail contact, company registered office, Company ID (IČO), Tax ID (DIČ), your bank details, a text file that the website stores on the client's computer  or mobile device while browsing it, IP address
  2. For the purposes of:
    • concluding a contract, the ability to process the order and properly deliver the ordered performance (goods, services) to the client, issuing an invoice, as well as the ability to make payment of the price for the performance and match it to the order
    • offering goods and services by e-mail, information about planned promotions, presenting advertising and marketing activities, sending news, advice, tips and tricks
    • remembering user settings, better tailoring advertisements to clients' interests and website functionality, improving customer support
  3. On the basis of the following legal bases:
    Article 6(1)(b) GDPR:
    • processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract,
    • processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (within the meaning of Recital 47 of the GDPR, the processing of personal data for direct marketing purposes may be regarded as a legitimate interest of the controller,
    • the data subject has given consent to the processing of his or her personal data for one or more specific purposes

IV. To whom is your personal data provided?

We protect our clients' personal data and do not disclose or provide it to third parties or entities, with the exception of persons who ensure the accounting of our company, IT infrastructure, courier/shipping services, billing web tools, and administrative assistant work, and who for this reason are considered not only "processors" but also recipients within the meaning of the GDPR. We select our partners, among other things, with regard to guarantees of their reliability and professional care in processing our clients' personal data, and such entities are bound by us to confidentiality and to the obligation to adopt appropriate technical and organizational measures so that the processing of personal data meets the requirements of the GDPR and the Act. If such an obligation arises from law or from a decision of a public authority, your personal data may also be provided to public authorities or other entities.

V. Do we transfer your personal data outside the European Union?

We do not transfer our clients' personal data to third countries or international organizations, nor do we plan to do so, and therefore our clients can be assured of the protection of their personal data, which we process in the course of our activities.

VI. For how long do we store your personal data?

We occasionally send clients e-mails informing them of news at the company. In every e-mail we send, the recipient has the option to unsubscribe from receiving e-mails by clicking the unsubscribe link in the footer of the e-mail. In view of the above, the retention period for your personal data is fifteen (15) years, for each individual purpose of processing personal data.

After the personal data retention period has expired, we ensure their deletion or, as the case may be, anonymization, fully in accordance with the GDPR and the Act.

VII. What rights do you have against us in the area of personal data protection?

As a data subject, you have several rights under the GDPR, which we would like to draw your attention to, namely:

  1. Right of access to personal data
    • You have the right to request confirmation from us as to whether we process personal data concerning you, and if so, you have the right to obtain access to that personal data, as well as the right to basic information about the processing of your personal data. For this purpose you may contact us at any time, using the contact details listed in Article I. "Where can you contact us?".
  2. Right to rectification and/or completion of personal data
    • You have the right to request that we, without undue delay, rectify inaccurate personal data concerning you, as well as the right to have incomplete personal data completed. For this purpose you may contact us at any time, using the contact details listed in Article I. "Where can you contact us?".
  3. Right to erasure of personal data
    • You have the right to request the immediate erasure of your personal data only if:
      1. the personal data are no longer necessary for the purposes for which they were collected or otherwise processed
      2. you withdraw the consent on which the processing is based, and there is no other legal basis for the processing
      3. you object to the processing and there are no overriding legitimate grounds for the processing
      4. the personal data have been processed unlawfully
      5. the personal data must be erased in order to comply with a legal obligation under European Union law or the law of the Member State to which we are subject
      6. the personal data were collected in connection with the offer of information society services referred to in Article 8(1) of the GDPR.
    • For this purpose you may contact us at any time, using the contact details listed in Article I. "Where can you contact us?", and we will then assess whether any exceptions exist in your case where it is not necessary to erase your data even though one of the above conditions is met (e.g. if it is necessary for the establishment, exercise or defence of legal claims).
  4. Right to restriction of processing of personal dataYou have the right for us to restrict the processing of your data (i.e. for us to only store your data, but not otherwise process it), if:
    1. you have contested the accuracy of the personal data
    2. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead
    3. we no longer need your personal data for the purposes of processing, but you need them for the establishment, exercise or defence of legal claims
    4. you have objected to the processing
    • For this purpose you may contact us at any time, using the contact details listed in Article I. "Where can you contact us?", and we will then assess whether any exceptions exist in your case where your personal data may be processed in a manner other than mere storage.
  5. Right to object to the processing of personal data
    • You have the right to object to the processing of your personal data if the legal basis for the processing of your personal data is:
      1. necessary for the performance of a task carried out in the public interest or in the exercise of official authority, or
      2. the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data, in particular where the data subject is a child.
    • If your data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data to the extent that it relates to such direct marketing.
    • For this purpose you may contact us at any time, using the contact details listed in Article I. "Where can you contact us?".
    • We may process your personal data only if we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or grounds for the establishment, exercise or defence of legal claims.
  6. Right to data portability
    • If the processing of your personal data is carried out by automated means, on the basis of your consent or for the purposes of the performance of a contract, you have the right to receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit that data to another party (controller).
  7. Right to withdraw your consent to the processing of personal data at any time
    • Last but not least, you have the right to withdraw, at any time, the consent you have given to the processing of personal data concerning you. Withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent before its withdrawal. For this purpose you may contact us at any time, using the contact details listed in Article I. "Where can you contact us?".
  8. Right to lodge a complaint with a supervisory authority
    • By this means we also inform you that, if you believe that the rights of natural persons have been violated in the processing of your personal data, or that the Act or the GDPR has been violated, you may file a petition to initiate proceedings on the protection of personal data with the Office for Personal Data Protection of the Slovak Republic. A sample petition is published on the website of the Office for Personal Data Protection of the Slovak Republic, www.dataprotection.gov.sk.

VIII. Are you obliged to provide us with your personal data?

The provision of your personal data is in principle voluntary, however some of your personal data is required for the proper performance of a contract (i.e. for the proper and timely provision of goods and services), and therefore if it is not provided, we will not be able to properly fulfil the obligations relating to the delivery of the goods or service on our part.

IX. Do we also obtain your personal data from sources other than you?

No, all the personal data that we process comes exclusively from users who express interest in the services or goods we offer.

X. What basic technical and organizational measures have we adopted to protect your data?

In order to provide the highest possible level of protection for your personal data, we have implemented the following safeguards into our personal data processing procedures and have adopted the following technical and organizational measures:

  • We have instructed all persons who, on our authority, have access to your personal data, and these persons process your personal data on the basis of our instructions, which are in accordance with the GDPR and the Act
  • We regularly retrain persons who process your personal data on our authority
  • We carry out regular monitoring of legislation in the field of personal data
  • We select our partners, among other things, with regard to guarantees of their reliability and professional care in processing our clients' personal data, and such entities are bound by us to confidentiality and to the obligation to adopt appropriate technical and organizational measures so that the processing of personal data meets the requirements of the GDPR and the Act
  • All pages and applications on which your personal data is stored are protected by password and encryption.

XI. Do we carry out automated decision-making, including profiling?

We do not make any decisions that are based solely on automated processing, including profiling, and that would have legal effects concerning you or similarly significantly affect you.

Withdrawal of consent to the processing of personal data (electronic form)

Please note: Withdrawal of your consent to the processing of personal data does not affect the lawfulness of the processing of personal data by the Controller based on the consent prior to its withdrawal.

Attachments