Adatvédelem

PRINCIPLES OF PERSONAL DATA PROTECTION

Statement on the processing of personal data pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“Regulation”).

1. Who is the controller of your data?

The controller of your personal data is EX-CORP s.r.o., Veľká strana 93/7, 941 46 Trávnica, VAT ID: SK2022603363, Company ID: 44 095 074, Tax ID: 2022603363, registered in the Commercial Register of the District Court Nitra, Section Sro, Insert number: 21986/N (“Controller”), which operates the e-shop www.junkrideshop.com (“Eshop”).

You can contact the Controller at phone number +421908161428 or by email at info@junkrideshop.com

The Controller has not appointed a Data Protection Officer.

2. Purposes and legal basis of processing

The legal basis for processing your personal data is that such processing is necessary for:

a) the performance of a contract between you and the Controller pursuant to Article 6(1)(b) of the Regulation;

b) compliance with legal obligations applicable to the Controller pursuant to Article 6(1)(c) of the Regulation, in particular obligations under generally binding legal regulations, especially the Value Added Tax Act, Income Tax Act, Accounting Act, etc.;

c) the purposes of the legitimate interests of the Controller pursuant to Article 6(1)(f) of the Regulation.

3. What data do we process about you?

a) Customer personal data

The company processes your personal data to fulfill rights and obligations arising from the purchase contract and to comply with obligations imposed by Slovak law.

The company processes your personal data to the following extent: first and last name, residence and contact address, bank account, email, phone number, ISIC card number, IP address.

For registered customers, we also process personal data such as date of birth, gender, and login information associated with the account (username).

4. Legitimate interest of the controller

The Controller also processes your personal data for sending newsletters, supporting marketing, measuring the effectiveness of advertising, tracking website visits, and sales statistics.

a) Newsletter

We process customers' electronic contact details (email) in relation to the sale of our products and use them for sending commercial communications (newsletter). Customers always have a clear and simple option to opt-out free of charge.

We process only necessary personal data (e.g., email) and never process special categories of data. The Controller does not use any technical means that would excessively interfere with users’ privacy.

b) Google Analytics

The Controller uses Google Analytics to track website traffic and optimize the website (e.g., number of visitors, pages viewed, location of visitors). Profiling is not carried out, as this would require your consent.

c) Cookies

To provide maximum convenience for users, our Eshop uses cookies. Cookies may also be used by advertising providers and other partners of the Controller. Cookies are text files sent by the server and stored on the device used to access the website.

d) Personalized advertising (Customer Match)

Your email address and/or phone number may be securely hashed and provided to selected advertising partners (e.g., Google LLC) to display personalized ads or exclude you from targeted advertising. This processing is based on our legitimate interest under Article 6(1)(f) GDPR.

You may object to this processing at any time via email: info@junkrideshop.com

Data for this purpose is retained for the duration of the customer relationship and until you object to further processing.

The Eshop server uses two types of cookies: session cookies, which are deleted after your visit, and persistent cookies, which remain on your device until the specified expiration or until deleted. Persistent cookies help measure ad effectiveness, social plugins, and limit ad display. Cookies are not harmful and do not contain viruses, so we recommend not blocking them. Users can adjust their browser settings to block or delete cookies.

5. Who do we share your data with?

We share your personal data with delivery companies, other entities involved in fulfilling contracts, and technical service providers for the Eshop operation, including software and data storage.

Recipients of personal data processed to comply with legal obligations may include tax authorities or other relevant offices where required by law.

The Controller may share your email and account name with third parties providing email services. These third parties are located in the USA and certified under the Privacy Shield framework. They comply with the Regulation.

Customer satisfaction surveys are conducted via the “Verified Customers” program. Participation is based on our legitimate interest in evaluating customer satisfaction. Data is processed by the intermediary Heureka.sk, which receives purchase details and email addresses solely for survey purposes. You may opt-out at any time.

6. Data retention period

Business documentation is retained for the duration of the contractual relationship, extended by warranty periods and legal retention periods (Accounting Act, VAT Act, Income Tax Act, etc.).

Orders and purchase contracts, as well as other data provided in connection with purchases or complaints, are retained indefinitely. Invoices are kept for 10 years, accounting records for 5 years, after which they are physically destroyed.

Personal data provided during registration in our Eshop is retained indefinitely. Requests to delete registration and data can be sent from the registered email to info@junkrideshop.com

7. Your rights

You are not obliged to provide personal data, but it is necessary to conclude and perform the contract.

The Controller informs all data subjects of their rights to:

(i) request access to personal data,

(ii) rectify or delete data, or restrict processing,

(iii) object to processing,

(iv) object to data portability.

Data subjects may lodge a complaint with the supervisory authority. You have the right to request remedies for violations, including suspension, correction, or deletion of data. You may contact the Office for Personal Data Protection in Slovakia for these matters.

Complaints can be filed with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, web: www.dataprotection.gov.sk/uoou/, email: statny.dozor@pdp.gov.sk

8. Automated decision-making, including profiling

The Controller does not perform automated decision-making or profiling and does not collect personal data for this purpose. Therefore, no further details are provided in this section.