Data Protection (GDPR)

The operator of the e-shop Atur s.r.o., on the website www.gdgrip-sk.com, www.gdgrip-sk.com/en, Company ID: 56964978, with its registered office at Fučíkova 671, 92552 Šoporňa, processes personal data provided by the Buyer for the purpose of fulfilling and additionally confirming the Terms and Conditions, processing electronic orders, executing deliveries, settling payments, and necessary communication between the contractual parties for the period required under applicable legal regulations.

Basic Provisions

1. The controller of personal data pursuant to Section 5(l) of Act No. 18/2018 on the Protection of Personal Data, as amended (hereinafter referred to as the "Act"), is Atur s.r.o., Company ID: 56964978, with its registered office at Fučíkova 671, 92552 Šoporňa (hereinafter referred to as the "Controller");

2. The contact details of the Controller are: e-mail: info@gdposilnovace.sk, phone: +421 903 228 171;

3. Personal data means all information identifying a natural or legal person.

Sources of Processed Personal Data

1. The Controller processes personal data which the Buyer has provided with consent and which the Controller has obtained in connection with the performance of the Purchase Agreement and the processing of an electronic order in the online store www.gdgrip-sk.com/en;

2. The Controller processes only the Buyer's identification and contact data necessary for the performance of the Purchase Agreement;

3. The Controller processes personal data for the purposes of delivery, settlement of payments, and necessary communication between the contractual parties for the period required under applicable legal regulations. Personal data shall not be published and shall not be transferred to other countries.

Purpose of Processing Personal Data

The Controller processes the Buyer's personal data for the following purposes:

1. For the purpose of registration on the website www.gdgrip-sk.com pursuant to Section 13(1)(a) of Act No. 18/2018 on the Protection of Personal Data;

2. For the purpose of processing the Buyer's electronic order (name, address, e-mail, telephone number);

3. For the purpose of fulfilling the rights and obligations arising from the contractual relationship between the Buyer and the Controller;

4. The provision of personal data is a necessary requirement for the performance of the Purchase Agreement. Without the provision of personal data, the agreement cannot be concluded.

Data Retention Period

1. The Controller shall retain personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between the Buyer and the Controller, and for a period of 3 years following the termination of the contractual relationship;

2. Upon the expiration of the data retention period, the Controller is obliged to delete the data.

Recipients and Processors of Personal Data

A third party receiving the Buyer's personal data are the Controller's subcontractors. The services provided by these subcontractors are directly related to the successful performance of the Purchase Agreement and the electronic order between the Controller and the Buyer.

The Controller's subcontractors are:

• Webnode AG (E-shop system);
  
• Packeta Slovakia s. r. o. (Delivery service);
  
• Google Analytics (Website analytics);
  

Buyer's Rights

Under the conditions set forth in the Act, the Buyer has the right to:

1. To access their personal data;

2. To rectify their personal data;

3. To erase their personal data;

4. To object to the processing;

5. To data portability;

6. To withdraw consent to the processing of personal data in writing or electronically at the e-mail address: info@gdposilnovace.sk;

7. To file a complaint with the Office for Personal Data Protection if they believe that their right to personal data protection has been violated.

Personal Data Security

1. The Controller declares that it has adopted all appropriate technical and organizational measures necessary to secure the Buyer's personal data;

2. The Controller has implemented technical measures to secure the data storage of personal data, in particular password-protected access to computers, the use of antivirus software, and regular maintenance of computers.

Final Provisions

1. By submitting an electronic order on the website www.gdgrip-sk.com, the Buyer confirms that they have been informed of the personal data protection terms and that they fully accept them;

2. The Buyer agrees to these terms by checking the box in the order;

3. The Controller is entitled to amend these rules at any time. The new version of the rules must be published on its website.

These rules come into effect on 13 May 2025.