The purpose of this document is to provide information on the processing of personal data in accordance with Articles 13 and 14 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection.
1. Data Controller
Šimon Vetešník
Ružová 1, 974 01 Banská Bystrica
Company ID (IČO): 51184036
Tax ID (DIČ): 1123733633
Email: eshop@mariacavallo.com
The controller processes personal data of customers of the online store www.mariacavallo.com.
2. Categories of Processed Personal Data
- Identification data: name, surname, delivery address
- Contact data: email address, phone number
- Login data: username and password (if the customer creates an account)
- Order data: purchased goods, payment method, delivery method
- Cookies and online identifiers: data related to the use of the website
3. Purposes and Legal Bases for Processing
A) Performance of a contract (Art. 6(1)(b) GDPR)
- processing of orders
- delivery of goods
- management of user accounts
- handling complaints and legal claims
B) Compliance with legal obligations (Art. 6(1)(c) GDPR)
- retention of accounting and tax documents (10 years)
C) Legitimate interest of the controller (Art. 6(1)(f) GDPR)
- improving services and the website
- protection against fraud and misuse
D) Consent of the data subject (Art. 6(1)(a) GDPR)
- sending marketing emails (newsletter)
- participation in competitions and promotional activities
Consent may be withdrawn at any time.
4. Recipients of Personal Data
Personal data is shared only to the extent necessary with:
- shipping companies (order delivery)
- accounting service providers (accounting processing)
- IT and hosting providers (operation of the e‑shop)
Personal data is not shared with third parties for marketing purposes.
5. Retention Periods
- data processed based on consent – until consent is withdrawn
- data necessary for contract performance – for the duration of the contractual relationship
- accounting documents – 10 years
- data necessary for legal claims – for the duration of statutory limitation periods
6. Rights of the Data Subject
You have the right to:
- access your personal data
- rectify inaccurate data
- erase your data (“right to be forgotten”)
- restrict processing
- data portability
- object to processing
- withdraw consent
- lodge a complaint with the Slovak Data Protection Authority
7. Exercising Your Rights
You may exercise your rights by contacting us at:
eshop@mariacavallo.com
The controller will process your request without undue delay, no later than within 30 days.
8. Right to Lodge a Complaint
If you believe your personal data is being processed unlawfully, you have the right to lodge a complaint with:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava
www.dataprotection.gov.sk (dataprotection.gov.sk in Bing)
We would appreciate it if you contact us first at info@mariacavallo.com, so we can resolve the situation to your satisfaction.