Processing of Personal Data and Information for the Data Subject
Terms of Personal Data Protection
I. Basic Provisions
The controller of personal data pursuant to § 5 letter o) of Act No. 18/2018 Coll. on the Protection of Personal Data, as amended (hereinafter referred to as the "Act") is
RLX components s.r.o.
with registered office at
Jančova 7, 811 02 Bratislava
SLOVAK REPUBLIC.
(hereinafter referred to as the "controller").
Contact details of the controller are
RLX components s.r.o.
Jančova 7, 811 02 Bratislava
SLOVAK REPUBLIC
tel.: +421 2 62529121
fax: +421 2 62529123
e-mail: info@rlx.sk
URL: http://www.rlx.sk/
Personal data means all information about an identified or identifiable natural person; an identifiable natural person is a person who can be directly or indirectly identified, in particular by reference to a specific identifier, such as name, identification number, location data, network identifier or reference to one or more specific elements of physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
The controller has not appointed a data protection officer.
II. Sources and Categories of Processed Personal Data
The controller processes personal data that you have provided to him/her or personal data obtained by the controller based on the fulfillment of your order.
The controller processes your identification and contact details and data necessary for the performance of the contract.
III. Legal Basis and Purpose of Processing Personal Data
The legal basis for the processing of personal data is
the performance of the contract between you and the controller pursuant to § 13 para. 1 letter b) of the Act,
the legitimate interest of the controller in providing direct marketing (especially for sending commercial messages and newsletters) pursuant to § 13 para. 1 letter f) of the Act,
your consent to the processing for marketing purposes (especially for sending commercial messages and newsletters) pursuant to § 13 para. 1 letter a) of the Act in case no order for goods or services has been placed.
The purpose of processing personal data is
fulfillment of your order and performance of rights and obligations arising from the contractual relationship between you and the controller; personal data required for successful order processing (name and address, contact) are required for conclusion and performance of the contract, without providing personal data, it is not possible to conclude the contract or fulfill it by the controller,
sending commercial messages and conducting other marketing activities.
The controller makes individual automated decisions pursuant to § 28 of the Act. You have expressly consented to such processing.
IV. Retention Period of Personal Data
The controller retains personal data
for the period necessary for the performance of rights and obligations arising from the contractual relationship between you and the controller and the assertion of claims arising from these contractual relationships (for a period of 15 years after the termination of the contractual relationship).
until the consent to the processing of personal data for marketing purposes is revoked, for a maximum of 3 years, if personal data are processed based on consent.
After the expiration of the retention period of personal data, the controller will erase personal data.
V. Recipients of Personal Data (Subcontractors of the Controller)
Recipients of personal data are persons
Participating in the delivery of goods / services / payment processing based on the contract,
providing e-shop operation services and other services related to e-shop operation,
providing marketing services,
for the purpose of accounting for tax documents in accordance with the contract and with generally binding legal regulations to the extent:
- name and surname, title,
- postal address,
- billing address,
- email address,
- phone contact,
- bank account details,
- details of the subject matter of the controller.
The controller does not intend to transfer personal data to a third country (to a country outside the EU) or to an international organization.
VI. Your Rights
Under the conditions set out in the Act, you have
the right to access your personal data pursuant to § 21 of the Act,
the right to rectify personal data pursuant to § 22 of the Act, or to restrict processing pursuant to § 24 of the Act,
the right to erase personal data pursuant to § 23 of the Act,
the right to object to processing pursuant to § 27 of the Act,
the right to data portability pursuant to § 26 of the Act,
the right to withdraw consent to processing in writing or electronically to the address or email of the controller specified in Article III of these terms.
Furthermore, you have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.
VII. Conditions for Securing Personal Data
The controller declares that he/she has taken all appropriate technical and organizational measures to secure personal data.
The controller has taken technical measures to secure data repositories (login name, password, antivirus program, and firewall) and personal data repositories in paper form (locked room).
The controller declares that only persons authorized by him/her have access to personal data.
VIII. Final Provisions
By sending the order from the online order form, you confirm that you are familiar with the terms of personal data protection and accept them in full.
You agree to these terms by ticking the consent box through the online form. By ticking the consent box, you confirm that you are familiar with the terms of personal data protection and accept them in full.
The controller is entitled to amend these terms. The new version of the terms of personal data protection will be published on its website and a new version of these terms will be sent to your email address provided to the controller.
These terms shall become effective on 25th May 2018.