Protection of personal data

PROTECTION OF PERSONAL DATA

Privacy protection and cookies

Statement of the data controller

The company SUNSAN GROUP, s.r.o., Majoránová 71, 82107 Bratislava, ID No.: 52469221, declares as the operator of the online store www.sunsan.sk, that it has adopted appropriate technical and organizational measures to ensure the protection of data subjects' rights, which ensure the lawful processing of personal data.

Furthermore, the data controller has implemented a transparent system of recording security incidents and any questions from the data subject as well as other persons.

Individual information can also be obtained by the data subject by phone at: +421 911 432 641, by email: info@sunsan.sk, or on this page.

We approach your personal data in a professional and sensitive manner. 

• In no case do we provide it to third parties (except to the extent necessary for the delivery of the goods).
• Personal data is stored in a secure database with the need for authorized access.
• We only collect data from you that we really need to process your order.
• Your data is encrypted on the way to our server so that no one can decrypt it on the way.
• All employees of SUNSAN GROUP, s.r.o. who come into contact with your personal data have been properly instructed on the correct and sensitive handling of them.
• If you do not wish to receive e-mails with our promotions, just turn them off in your account settings, or just inform us of this fact by e-mail.
• You can request the deletion of any post or all posts from your account at any time by email.
• You can also ask us to delete your account and order history at any time by email, phone or in writing.

In order to be able to provide quality services, we will need some information. 

• A detailed list of required data can be found below.
• We obtain from you only the data that we really need to process your order, in accordance with Art. 6 par. 1 b) GDPR regulation - we respect your privacy.
• In order to ensure that your paid goods are not taken over by an unauthorized person, we require each customer to provide proof of identity and write down the ID number on the delivery note upon delivery - providing this information is beneficial to you. We do not require this information for cash on delivery shipments.

Secure internet banking 

• When paying via the Internet using payment systems, you enter all your data on the bank's secure website.
• We do not come into contact with your sensitive payment data - we only know the successful or unsuccessful result of the transaction.

Detailed information about the processing and protection of personal data in accordance with the EP and EU Council Regulation No. 2016/679 on the protection of individuals with regard to the processing of personal data and the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation), and the Slovak Republic Law No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementing of certain laws (hereinafter referred to as the "Personal Data Protection Act").

 

1. Online store operator

E-shop: www.sunsan.sk

Company name: SUNSAN GROUP, s.r.o

ID: 52469221

VAT ID: 2121041648

TAX ID: SK2121041648

We are VAT payers.

with registered office: Majoránová 71, 82107 Bratislava, Slovak Republic

entered in the Commercial Register of the Municipal Court Bratislava III, section: Sro, file no. 138403/B

 

1. List of our processors who can process your personal data

In most cases, we process your data for our own purposes as the data controller. This means that we determine the purposes for which your personal data is collected, define the means of processing, and are responsible for its proper execution.

We may also transfer your personal data to other entities that are in the role of processor, in particular:

Name of the service	Service type	Processor
Slovenská pošta	shipping partner	Slovenská pošta, a.s., Address: Partizánská cesta 9, 975 99 Banská Bystrica, ID: 36631124
Packeta	shipping partner	Packeta Slovakia, s.r.o., Address: Kopčianska 3338/ 82A 851 01 Bratislava, ID: 48136999
Eco mail	email management	Ecomail.cz, s.r.o., Na Zderazu 15, 120 00 Nové Město, Czech Republic, ID: 02762943

In exceptional situations, another courier company may be selected for the delivery of the goods by operational decision. Due to the operational nature of the decision, it is not possible to determine the name and registered office of the company in question in advance. We only transfer such personal data to the processors as are necessary to carry out the processing activity.

1. The purpose of personal data processing

• Issuance of a tax document - invoice, in the sense of Act 222/2004 Coll. on value added tax, § 71 par. 2 letters b).
• Delivery of goods and customer identification before handing over prepaid goods.
• Confirmation of the order, payment for goods, delivery of ordered goods - by telephone and e-mail.
• Customer records for the purposes of managing their user accounts on the sunsan.sk website
• Records of customer orders to resolve potential complaints.
• Sending informative electronic messages if the customer shows interest in this service.
• No annoying phone calls and emails! If you do not wish to receive emails with our promotions, just click on the link at the end of our newsletter to cancel them.
• Communication via the contact form on our website

1. List of processed personal data

• Billing data
  – Name and surname – Address of permanent residence
• Delivery data
  - Name and surname of the recipient - Delivery address - Phone number and email address of the recipient - required by courier companies
• Contact information
  - Telephone number - for order confirmation, payment acceptance, customer communication. - E-mail address - for sending order confirmation, emergency means of communication if the customer is not available on the indicated phone number.
• Data obtained when handing over the paid goods
  – ID card number – protection of you and us – so that your paid goods are not taken over by an unauthorized person, the OP number is recorded in the delivery note (this does not apply to cash on delivery shipments).
• Data about your orders - for the purposes of processing them and solving possible complaints.

1. Necessity of personal data processing

• The data controller only collects the personal data that is necessary to fulfill the obligations expected by the customer when ordering goods, in accordance with Article 1(b) of the GDPR Regulation. Without this data, it will not be possible to process the received order.
• In the case of using the contact form, the controller processes the data in accordance with Article 1(f) of the GDPR Regulation, based on legitimate interest – for the purpose of responding to the inquiry you have provided.
• For this reason, the customer is obliged to fill in all the required data when placing the order.
• For the protection of the customer, it is necessary that, when handing over already paid goods, he allows the data controller or the processor to verify their identity and enter the ID number in the delivery note. This measure is intended to prevent unauthorized takeover of the goods by a third party if the customer has already paid for the goods. When paying by cash on delivery, identity verification and entry of the ID number is not required.

1. Third parties to whom the data will be provided

We do not provide personal data to any companies managing personal data databases, nor to any other third parties, except to the extent specified in point 2.

1. Data disclosure

Our company does not publish the obtained data under any circumstances.

1. Cross-border transfer of personal data

• Shoptet Pay, an online payment system
• Ecomail, email management

1. Rights and obligations of the data subject

• The customer is obliged to provide only complete and true data.
• The customer undertakes to prove their identity when handing over the paid goods and to write the ID number in the delivery note (this does not apply to cash on delivery shipments).
• The customer undertakes to update their data in the event of a change, at the latest before placing the first order following the change.
• The customer undertakes that if they provide personal data of a third party as data for delivery (name, surname, telephone number), they do so only with their consent and the data subject is familiar with the procedures, rights and obligations listed on this page.
• As our client and data subject, you have the right to decide on the handling of your personal data within the specified scope. You can exercise the rights listed below:
  - Through our telephone line: +421 911 432 641; - Via e-mail: info@sunsan.sk; - In writing to the data controller's address: SUNSAN GROUP, s.r.o., Majoránová 71, 82107 Bratislava, Slovakia

We will try to answer you as soon as possible, but we will always answer you no later than 30 days after the delivery of your request. The applicable legal regulations and the GDPR Regulation, respectively the Act, ensure you in particular:

Right of access – You have the right to request confirmation from us as to whether your personal data is being processed, and if so, to obtain a copy of this data along with additional information as outlined in Article 15 of the Regulation, or Section 21 of the Act. As we collect a large amount of data, we may ask you to specify the scope of specific data that we process about you.

Right to rectification – In order to continuously process only up-to-date personal data about you, we need you to notify us of any changes as soon as they occur. If we process incorrect data about you, you have the right to request their correction.

Right to erasure – If the conditions of Article 14 of the Regulation or Section 23 of the Act are met, you may request the deletion of your personal data. You may request deletion, for example, if you have withdrawn your consent to the processing of personal data and there is no other legal basis for processing, or if your personal data is being processed unlawfully, or if the purpose for which we processed your personal data has been fulfilled and we no longer process it for any other compatible purpose. However, we will not delete your data if it is necessary for establishing, exercising, or defending legal claims.

Right to restriction of processing - If the conditions of Article 18 of the Regulation or Section 24 of the Act are met, you may request us to restrict the processing of your personal data. You may request restriction, for example, while you challenge the accuracy of the processed data or if the processing is unlawful and you do not wish us to delete the data, but you need the processing to be restricted while you assert your rights. We will continue processing your data if there are reasons for establishing, exercising, or defending legal claims.

Right to data portability – If the processing is based on your consent or is carried out for the performance of a contract concluded with you and is done by automated means, you have the right to receive your personal data that we have collected from you in a commonly used machine-readable format. If you wish and it is technically feasible, we will transfer your personal data directly to another controller. This right does not apply to processing carried out for the performance of a task carried out in the public interest or in the exercise of public authority.

The right to object to processing – If we process your personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, or if the processing is based on our legitimate interests or the legitimate interests of a third party, you have the right to object to such processing. Upon your objection, we will limit the processing of personal data, and if we cannot demonstrate overriding legitimate grounds for processing that prevail over your interests, rights, and freedoms, or reasons for establishing, exercising, or defending legal claims, we will stop processing your personal data and delete it. You have the right to object at any time to the processing of personal data for direct marketing purposes, including profiling related to such direct marketing. After filing an objection, we will no longer process your personal data for that purpose.

The right to file a complaint – If you believe that the processing of your personal data is contrary to the Regulation or the Act, you have the right to lodge a complaint with one of the relevant supervisory authorities, especially in the member state of your habitual residence, place of work, or the place of the alleged violation. For the Slovak Republic, the supervisory authority is the Office for Personal Data Protection, located at Hraničná 4826/12, 820 07 Bratislava, Slovak Republic, website: www.dataprotection.gov.sk, phone: +421 /2/ 3231 3220.

Right to withdraw consent – If the processing of your personal data is based on consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the legality of the processing carried out prior to the withdrawal. If you later decide that you wish to receive commercial and marketing offers from us about our products and services again, you can renew your consent (or withdraw any objection) at any time using any of the contact methods mentioned above.

1. Time of processing and storage of your personal data

We process and store your personal data primarily for the duration of the contractual relationship in accordance with Article 6(1)(b) of the GDPR. In cases where personal data processing is based on consent, your personal data will be stored for 5 years or until the consent is withdrawn.

Your personal data, which is necessary to fulfill our obligations arising from mandatory legal regulations (such as the retention of individual accounting records under Act No. 431/2002 Coll. on Accounting, as amended, for the purpose of demonstrating the fulfillment of tax obligations under tax regulations such as Act No. 595/2003 Coll. and Act No. 563/2009 Coll. on Tax Administration, etc.), must be retained for the period specified by the relevant legal provisions. In any case, we adhere to the principle of data minimization as defined in Article 1.2. and Article 1(e) of the GDPR, and therefore your personal data that is not subject to archival retention under specific legal regulations will be deleted or anonymized.

1. Policy on the use of cookies

In accordance with Section 55, paragraph 5 of the Act No. 351/2011 Coll. on Electronic Communications of the National Council of the Slovak Republic, as amended, we would like to inform you about the use of cookies and draw your attention to the possibility of changing the settings of your web browser if the current cookie usage settings do not suit you.

What are cookies?

Cookies are small text files that can be sent to your Internet browser when you visit a website and stored on your device (computer or other device with Internet access, such as a smartphone or tablet). These files are stored in the files folder of your internet browser. Cookies usually contain the name of the website from which they originate and the date of creation. When you next visit the page, the internet browser loads the cookie files again and sends this information back to the website that originally created these cookies. The cookies we use do not harm your computer.

Use of cookies

By using the websites operated by SUNSAN GROUP, s.r.o., you consent to the use of cookies in accordance with the settings of your web browser. If you visit our website, have cookies enabled in your browser, do not change your browser settings, and continue browsing our website, we consider this as your acceptance of our cookie usage terms.

Why do we use cookies?

We use cookies to optimally create and continually improve our services, tailor them to your interests and needs, enhance their structure and content, and create interesting offers for you. SUNSAN GROUP, s.r.o. does not use the data collected through cookies as contact details to reach you by mail, email, or phone.

How can the cookie settings be changed?

Most web browsers are initially set to automatically accept cookies. You can change this setting by blocking cookies or by receiving a notification whenever cookies are about to be sent to your device. Instructions for changing cookie settings can be found in the "Help" section of each browser. If you use different devices to access the websites (e.g., computer, smartphone, tablet), we recommend adjusting the browser settings for each device to match your cookie preferences.

The specific procedure for the most used web browsers can be found here:

     Chrome

     Safari

     Internet Explorer

     Firefox

     Android

Why keep cookie settings?
Using cookies and enabling them in your web browser is your decision. However, changing their settings may limit some functionalities of our website and reduce user comfort.

Our online store uses various methods to prevent and detect unauthorized access to user information. However, perfect protection does not exist. In such cases, the online store is not responsible for the misuse of information.

Learn more in our GTC.

1. Final provisions

Our online store is not intended for persons under the age of 16. Younger people can only use our online store with the consent of their legal representative.

Google and Facebook Remarketing

We announce at the same time the fact that we have implemented and use advertising in the Google and Facebook advertising networks.
These are functions of Google Adwords, implemented on the basis of advertising in the advertising network (for example, remarketing).
Each visitor can opt out of Google Adwords for advertising on the ad network and can personalize ads on the Google ad network using the Ads Settings Manager. In the same way, every visitor can log out of the Facebook advertising network at this link.

We also announce that we use remarketing in Google Analytics for online advertising.
Third-party vendors, including Google, display our ads on various websites across the Internet. We and third-party vendors, including Google, jointly use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick) to disseminate information, optimize and display ads based on previous visits to your site.

Google AdSense:

The www.sunsan.sk portal displays Google AdSense ads provided by third-party companies. These companies may use information (but never name, address, e-mail address and telephone number) about your visits to these or other websites to provide advertisements for goods and services that may be of interest to you.

Google (as a supplier) uses cookies for displaying ads. The DART cookie allows Google to display ads to users based on their visits to websites across the internet.

The DoubleClick DART cookie is used by Google in ads shown on websites participating in the AdSense for content program. When a user visits a website that is part of the AdSense network and views or clicks on an ad, a cookie may be sent to the user's browser.

Data collected from these cookies enables AdSense participants to better serve and manage ads on their sites and throughout the Internet.

The data controller that displays Google Adsense advertising on its pages has nothing to do with this data collection. Google is fully responsible for the collection of information.

If you do not want this data collected about you, you can disable the acceptance of cookies in your browser or disable JavaScript.

Google Analytics

The online store sunsan.sk uses the Google Analytics tool, a web analytics service provided by Google, Inc. (Google). Google Analytics uses cookies, which are text files placed on your computer to help analyze how users use the website. The information generated by the cookie about how you use the website (including your IP address) is sent to and stored by Google on servers in the United States. Google will use this information to evaluate website usage, create reports on website activity for its operators, and provide other services related to website activity and internet usage. Google may transfer this information to third parties if required by law or if such third parties process information on behalf of Google. Google will not associate your IP address with any other data held by it. You can refuse the use of cookies by selecting the appropriate settings in your browser. However, please note that if you do so, you may not be able to fully use all features of the website. By using these pages, you consent to the processing of your data by Google in the manner and for the purposes stated above.

If you do not want this data to be collected about you, you can disable the acceptance of cookies in your browser or disable JavaScript.