Update: 12 April 2023
I. INTRODUCTION
We are committed to protecting the privacy of visitors to our website and users of our services.
These rules apply where we act as the controller of the personal data of visitors to our website, users of our services, or our customers – in other words, where we determine the purposes and means of the processing of such personal data.
When you first visit our website, we ask you to consent to the use of cookies in accordance with the terms set out below.
In this document, “we”, “us” and “our” refer to the personal data controller – Maxspan s.r.o.
For more information about us, please see Section XII.
II. HOW WE USE PERSONAL DATA
In this Section II, we provide information on:
- the general categories of personal data that we process
- the sources from which we obtain personal data, where we do not obtain it directly from you
- the purposes for which we process personal data and
- the legal bases for such processing
We may process data about your use of our website and services (“usage data”). Usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is Google Analytics. This usage data may be processed for the purposes of analysing the use of the website and services. The legal basis for this processing is your consent and our legitimate interests, namely monitoring and improving our website and services.
We may process personal data contained in any inquiry form (“inquiry data”), in particular data relating to goods and/or services. The legal basis for this processing is consent.
We may process personal data that you provide to us for the purpose of subscribing to our email offers and/or newsletter (“notification data”). The source of the notification data is Mailchimp. Notification data may be processed for sending relevant notifications and/or newsletters. The legal basis for this processing is your consent.
We may process personal data contained in, or relating to, any communication that you send to us where you provide contact details (“correspondence data”). This data may include communication content and metadata associated with the communication. Our website generates metadata associated with communication via website contact forms. Correspondence data may be processed for the purposes of communicating with you and keeping records. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and communication with users, and/or the performance of a contract between you and us, and/or taking steps at your request prior to entering into such a contract.
We may process data about your customer account (“account data”). Account data may include your name and email address. Account data may be processed for operating our website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases, and communicating with you. The legal basis for this processing is your consent, our legitimate interests – namely the proper administration of our website and company – or the performance of a contract between you and us and/or taking steps at your request prior to entering into such a contract.
We may process your personal data that forms part of your personal profile on our website (“profile data”). Profile data may include your name, address, telephone number, email address, profile pictures, gender, date of birth, status, interests and hobbies, education details, and employment details. Profile data may be processed for enabling and monitoring your use of our website and services. The legal basis for this processing is your consent.
We may process personal data relating to transactions, including purchases of goods and/or services that you order through our website (“transaction data”). Transaction data may include your contact details and transaction details. Transaction data may be processed for delivering purchased goods and/or services and for keeping proper records of such transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps at your request prior to entering into such a contract, our legitimate interests – specifically our interest in the proper administration of our website and business – and your consent.
We may process any of your personal data identified in these rules where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in administrative or out-of-court proceedings. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights, and the legal rights of others.
In addition to the specific purposes for which we may process your personal data set out in this Section II, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect vital interests.
III. DISCLOSURE OF YOUR PERSONAL DATA TO OTHERS
We may provide and disclose your personal data to the following third parties and/or categories of recipients:
- Direct Parcel Distribution SK s.r.o., registered office: Technická 7, 821 04 Bratislava,
Company ID (IČO): 35834498, entered in the Commercial Register of the District Court Bratislava I,
Section: Sro, File No.: 26367/B - Packeta Slovakia s.r.o., registered office: Kopčianska 3338/82A, 851 01 Bratislava,
Company ID (IČO): 48136999, entered in the Commercial Register of the District Court Bratislava I,
Section: Sro, File No.: 105158/B
IV. INTERNATIONAL TRANSFERS OF YOUR PERSONAL DATA
You acknowledge that personal data that you submit for publication through our website or services may be accessible via the Internet worldwide. We cannot prevent the use (or misuse) of such personal data by others.
V. RETENTION AND DELETION OF PERSONAL DATA
This Section sets out our data retention policies and procedures, which are designed to help ensure that we comply with our legal obligations relating to the retention and deletion of personal data.
Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes. We will retain personal data as follows:
- usage data, publication data, inquiry data, notification data and correspondence data will be retained for a maximum of 10 years.
Notwithstanding the other provisions of this Section, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
VI. CHANGES
We may update these rules from time to time by publishing a new version on our website.
VII. YOUR RIGHTS
In this Section, we have summarised the rights that you have under the General Data Protection Regulation (GDPR). Some of the rights are complex and not all details have been included in our summaries. You should therefore read the relevant legislation and guidance from supervisory authorities for a full explanation of these rights.
Your principal rights under data protection law are:
- the right to access
- the right to rectification
- the right to erasure
- the right to restrict processing
- the right to object to processing
- the right to data portability
- the right to lodge a complaint with a supervisory authority
- the right to withdraw consent
Right of access
You have the right to obtain confirmation from the controller as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and the following information:
- the purposes of the processing
- the categories of personal data concerned
- the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries outside the EU or international organisations
- the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
- the existence of the right to request from the Company rectification or erasure of personal data or restriction of processing of personal data concerning you, or to object to such processing
- the source of the personal data, where the personal data are not collected from you
- the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing
Right to rectification
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you and to have incomplete personal data completed (including by means of providing a supplementary statement).
Right to erasure
You have the right to obtain the erasure of your personal data without undue delay where one of the following grounds applies:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
- you withdraw consent on which the processing is based and there is no other legal ground for the processing
- you object to the processing on grounds relating to your particular situation and there are no overriding legitimate grounds for the processing
- you object to processing for direct marketing purposes
- the personal data have been unlawfully processed
- the personal data have to be erased for compliance with a legal obligation under Union law or Slovak law
- the personal data were collected in relation to the offer of information society services directly to a child
There are, however, exceptions to the right to erasure. General exceptions apply where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.
Right to restriction of processing
In certain circumstances, you have the right to restrict the processing of your personal data. These circumstances are:
- you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data
- where the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead
- the controller no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims
- you have objected to processing on grounds relating to your particular situation, pending the verification whether the legitimate grounds of the Company override your legitimate grounds
Where processing has been restricted on this basis, we may continue to store your personal data. However, we will otherwise process it only: with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.
Right to object
You have the right to object to our processing of your personal data on grounds relating to your particular situation where the legal basis for processing is the performance of a task carried out in the public interest or our legitimate interests. If you make such an objection, and we cannot demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or grounds for the establishment, exercise or defence of legal claims, we will stop processing the personal data.
You have the right to object to the processing of your personal data for direct marketing purposes (including profiling). If you make such an objection, we will stop processing your personal data for this purpose.
You have the right to object to the processing of your personal data for scientific or historical research purposes or statistical purposes on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Right to data portability
Where processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format, where technically feasible. This right does not apply where it would adversely affect the rights and freedoms of others.
Right to lodge a complaint
If you believe that our processing of your personal data infringes data protection laws, you have the legal right to lodge a complaint with the supervisory authority responsible for data protection. You may do so in the EU Member State of your habitual residence, place of work or the place of the alleged infringement. In the Slovak Republic, this is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovakia, www.dataprotection.gov.sk.
Right to withdraw consent
You have the right to withdraw your consent to the processing of personal data at any time, easily. You may exercise any of your rights in relation to your personal data by a written notice delivered to the controller’s email address or the controller’s registered office address.
VIII. ABOUT COOKIES
A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
Cookies may be either “persistent” cookies or “session” cookies. A persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, by contrast, will expire at the end of the user session, when the web browser is closed.
Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
IX. USE OF COOKIES
We use cookies for the following purposes:
- authentication – we use cookies to identify you when you visit our website and as you navigate our website
- analysis – we use cookies to help us analyse the use and performance of our website and services
- cookie consent – we use cookies to store your preferences in relation to the use of cookies when browsing our website
X. COOKIES USED BY OUR SERVICE PROVIDERS
Our service providers use cookies and these cookies may be stored on your computer when you visit our website.
We use Google Analytics to analyse the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. Google’s privacy policy is available on this page.
We use Facebook Pixel to analyse the use of our website. This service uses cookies to ensure that our advertisements are shown to the right people and to build advertising audiences. You can view this service provider’s privacy policy at this address.
XI. MANAGING COOKIES
Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser and from version to version. However, you can obtain up-to-date information about blocking and deleting cookies via these links:
(a) Chrome
(b) Firefox
(c) Opera
(d) Internet Explorer
(e) Safari
(f) Edge
Blocking all cookies will have a negative impact upon the usability of many websites.
If you block cookies, you will not be able to use all the features on our website.
XII. DETAILS ABOUT US
This website is owned and operated by Maxspan s.r.o.
In Slovakia, we are registered under Company ID (IČO) 516 497 64, with our registered office at Prievozská 1307/9, 821 09 Bratislava, Slovakia.
Our principal place of business is Prievozská 1307/9, 821 09 Bratislava.
You can contact us:
By email using the email address published on our website.
By post at the postal address given above.
By completing the contact form on our website.