Privacy policy

1. About the Privacy Policy

This online store and app privacy policy ("Terms") is informational, which means that it is not a set of obligations for you (it is not a contract or terms and conditions). The purpose of these Terms is to clearly define the rules for the operation of the Online Shop and App, as well as the rules for the use and processing of personal data.

2. Administrator of your personal data

Administrators of personal data collected:

a) through an online store and application (including the use of cookies or similar technology) or other communication channels with the customer;

b) based on the customer's activity on the Internet

is the company GARJEZ s.r.o., Tolstého 5, 81106 Bratislava, Slovakia, ID number: 54382238, Tax ID number: 2121684510, VAT number: SK2121684510, p.n.: +421909132418 e-mail: info@garjez.com. Registered in the Commercial Register of the District Court Bratislava I, Slovakia, Section Sro, Insert No. 159183/B. ("hereinafter referred to as the Administrator"). Your personal data may also be processed for marketing, analytical or statistical purposes by other controllers of your personal data with respect to our joint advertising and development policy (for more information, please see point 5 below).

3. How we care about the security of your personal data

The controller shall pay particular attention to the protection of the interests of data subjects and the security of the processing of personal data. Customer personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter also referred to as "GDPR") and other regulations applicable during the processing of certain data.

Personal data is information about an identified or identifiable natural person ("Personal Data"). An identifiable natural person is a person who can be identified, directly or indirectly, in particular by an identifier such as your name, identification number, address, internet ID, or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of the natural person.

The administrator protects not only the users of the online store, but also customers who have provided their personal data to the administrator using other communication channels, thus:

a) the https://www.facebook.com website and any other Facebook-branded website (including subdomains, international versions, widgets and mobile versions), the operating principles of which are based on the rules set out in particular at: https://www.facebook.com/legal/terms, provided by Facebook Inc. or Facebook Ireland Limited (hereinafter referred to as the "Facebook Service"), including the use of Facebook advertising aimed at direct marketing of the Administrator's own products or services. The rules for the protection and use of personal data of this service are available on Facebook, for example at: https://www.facebook.com/policy.php. The administrator does not influence the content of the Facebook website conditions, including personal data;

b) applications that allow the administrator to run advertising campaigns on Facebook websites, including competitions.

4. Purposes of processing your personal data

Your personal data may be processed for different purposes and may have different legal bases depending on which functions of the online shop you use, in particular for the purposes of concluding and executing contracts with you, for marketing or statistical purposes, to improve the quality of the service, to fulfil legal obligations on the part of the controller or to identify ad fraud abuse. Details below.

4.1. Online store account

The controller of your personal data is the entity referred to in point 2 of these terms and conditions.

Your personal data that you provided when registering your account, as well as other data collected in connection with your activity in the online shop and the use of our services (in particular: name and surname; e-mail address; telephone number; address [street, house number, apartment number, postcode, city, state], home/business/billing address [if different from the delivery address], no. bank account and, in the case of non-consumer customers, the company name and tax identification number [TIN]) are or may be processed for the following purposes:

a) maintaining your account (e.g. creating orders without having to constantly fill in forms, accessing your purchase history, managing consents on the portal, etc.) and enabling you to use other services available on our website - legal basis: article 6(1)(b) GDPR, i.e. the necessity of fulfilling the contract you enter into when creating an account and accepting the terms and conditions of the online shop;;

b) marketing, analytical and statistical activities of the controller or their partners (third parties listed in point 11 of the Cookie Policy) or other so-called third parties with whom we cooperate, e.g. we present you with advertisements and offers (discounts), also tailored to your interests on the basis of profiling (in a simplified way, we analyse your activity (e.g. your purchase history and your behaviour on our website) in order to better adapt not only to specific groups of our customers, but also to your preferences)). However, our actions will not significantly affect your decisions, e.g. purchase decision - legal basis: article 6(1)(f) GDPR, i.e. a legitimate interest of the controller or a third party;

c) the establishment, defence and enforcement of claims that may arise as part of the relationship between you and the controller and for other purposes that are necessary for the pursuit of the legitimate interests of the controller or a third party - legal basis: Article 6(1)(f) GDPR, i.e. a legitimate interest pursued by the controller or a third party. The provision of personal data is voluntary but necessary for registration in the online shop and application.

Personal data may be stored for the duration of the use of the online store (and may be deleted after three years from the customer's last activity in the online store) in the case of marketing activities - until an objection is lodged by the customer. The controller may delete personal data if it is not used for marketing purposes or legally justified for a period of 3 years (as statistical data), unless the law obliges the controller to process personal data for longer. Part of the personal data may be kept longer in case of possible complaints of the visitor against the controller, in order to allow the controller to assert its claims or are necessary to assert or defend against claims of third parties, within the limitation period established by law, in particular by the Civil Code. Information on the recipients of personal data is detailed in point 5 of these terms and conditions.

Information on the possible provision of your personal data to third countries (outside the European Economic Area) has been described in detail in point 6 of these conditions.

The rights that belong to you in connection with the processing of your personal data are described in detail in point 7 of these conditions.

4.2. Order creation

The controller of your personal data is the entity referred to in point 2 of these terms and conditions.

Your personal data that you provided when creating an order, as well as other data collected in connection with your activity in the online store and the use of our services (in particular: first and last name; e-mail address; telephone number; address [street, house number, apartment number, postal code, city, state], home/business address/billing address [if different from the delivery address], no. bank account and, in the case of non-consumer customers, the company name and tax identification number [TIN]) are or may be processed for the following purposes:

a) the execution of your order and the performance of the concluded contract - in particular the confirmation of its dispatch and reservation (if such an option is available and you have chosen it) or the dispatch of the selected product to your address or to the collection point, as well as the need to contact you in this matter - legal basis: article 6 (1) b) GDPR, i.e. the necessity of the performance of the contract that you conclude after placing the order or the reservation contract (if such an option is available and you have chosen it);

b) marketing, analytical and statistical activities of the controller or its partners (third parties mentioned in the Cookie Terms) or other so-called third parties with whom we cooperate, e.g. we present you with advertisements and offers (discounts) tailored to your interests on the basis of profiling (in a simplified way, we analyse your activity (e.g. the history of your purchases and your behaviour on our website) in order to better tailor ourselves not only to the specific general groups of our customers, but also to your preferences)). However, our activities will not significantly affect your decisions, e.g. purchase decision - legal basis: article 6(1)(f) GDPR i.e. legally justified interest of the controller or a third party;

c) the establishment, defence and enforcement of claims that may arise as part of the relationship between you and the controller and other purposes that are necessary for the pursuit of the legitimate interests of the controller or third parties - legal basis: Article 6(1)(f) GDPR i.e. the legally justified interest of the controller or of the third party;

d) the issue and storage of invoices and accounting documents and the assessment of claims and returned goods within the time limit and in the form prescribed by the regulations - legal basis: Article 6(1)(c) GDPR, i.e. the necessity of the fulfilment of a legal obligation by the controller.

The provision of personal data is voluntary, but necessary for the creation of an order. We will process your personal data for the purposes of order execution for the duration of the contract and also when the law (e.g. accounting or tax regulations) authorises the controller to process it - for marketing purposes until the customer objects. Some of the personal data may be kept longer in case of possible complaints by the visitor against the controller, in order to allow the controller to assert its claims or are necessary to assert or defend against claims by third parties, within the limitation period provided by law, in particular by the Civil Code.

Information on the recipients of personal data is detailed in point 5 of these terms and conditions.

Information on the disclosure of your personal data to third countries (outside the European Economic Area) has been detailed in point 6 of these terms and conditions.

The rights you have in relation to the processing of your personal data have been detailed in clause 7 of these terms and conditions.

4.3. Complaint protocol

The controller of your personal data is the entity referred to in point 2 of these terms and conditions.

Your personal data provided in connection with the submission of a complaint and collected in any other communication is or may be processed for the following purposes:

a) receiving and assessing your complaint, bookkeeping and complaint handling - legal basis: article 6(1)(c) GDPR, i.e. the need to comply with a legal obligation of the controller;

The provision of personal data is voluntary but necessary for the submission of a complaint. We will process your data for the duration of your claim, in case the law (e.g. the Accountancy Act) authorises us to process this data for a longer period of time or in case of potential claims against us, and for the period of time prescribed by law, in particular by the Civil Code, or for other purposes arising from the pursuit of our legitimate interests. In any case, the longer retention period is decisive.

Information about the recipients of personal data has been described in detail in point 5 of these terms and conditions.

Information about the disclosure of your personal data to third countries (outside the European Economic Area) has been detailed in clause 6 of these terms and conditions.

The rights you have in relation to the processing of your personal data have been detailed in clause 7 of these terms and conditions.

4.4. Contact form

The data controller is the company referred to in point 2 of these terms and conditions.

Your personal data provided via the contact form and collected in any further communication is or may be processed for the following purposes:

a) communicating with you and responding to your message - legal basis: article 6(1)(f) of the GDPR, i.e. the legitimate interest pursued by the controller;

b) depending on the content of the communication, taking action at your request before entering into the relevant contract - legal basis: Article 6(1)(b) GDPR, i.e. the need to act before entering into a contract;

c) depending on the content of your communication, marketing, analytical and statistical activities of the controller or entities (third parties listed in the Cookie Terms) or other so-called third parties with whom we cooperate - legal basis: Article 6(1)(f) GDPR, i.e. the legitimate interest of the controller or third parties; d) the establishment, defence and enforcement of claims that may arise as part of the relationship between you and the controller and other purposes that are necessary for the pursuit of the legitimate interests of the controller or third parties - legal basis: Article 6(1)(f) GDPR, i.e. a legitimate interest pursued by the controller or third parties.

The provision of personal data is voluntary but necessary for effective communication.

We will process your data for the duration of your claim, in the event that the law (e.g. the Accountancy Act) authorises us to process this data for a longer period of time or in the event of potential claims against us, and for the period of time provided for by law, in particular the Civil Code, or for other purposes arising from the pursuit of our legitimate interests. In any case, the longer retention period is decisive.

Information about the recipients of personal data has been described in detail in point 5 of these terms and conditions.

Information about the disclosure of your personal data to third countries (outside the European Economic Area) has been detailed in clause 6 of these terms and conditions.

The rights you have in relation to the processing of your personal data have been detailed in clause 7 of these terms and conditions.

4.5. Newsletter

The data controller is the company mentioned in point 2 of these terms and conditions.

Your personal data provided in connection with your subscription to the newsletter is or may be processed for the following purposes:

a) performance of the contract for the provision of the Newsletter - legal basis: article 6 (1) (b) GDPR, i.e. the need to fulfil the concluded contract (Terms of service of the newsletter) - to send you email messages or via sms, mms, push or Messenger with an analogous application assigned directly to your phone number (e.g. Messenger, WhatsApp), attractive advertisements and offers (discounts). Of course, you can unsubscribe from the newsletter at any time.

b) marketing, analytical and statistical activities of the controller or their partners (third parties listed in the Cookie Policy) or other so-called third parties with whom we cooperate, e.g. we present you with advertisements and offers (discounts) tailored to your interests on the basis of profiling (in a simplified way, we analyse your activity (e.g. your purchase history and behaviour on our website) in order to better adapt not only to the specific general groups of our customers, but also to your preferences)). However, our actions will not significantly affect your decisions, e.g. purchase decision - legal basis: article 6(1)(f) GDPR i.e. legally justified interest of the controller or a third party;

c) the establishment, defence and enforcement of claims that may arise as part of the relationship between you and the controller and other purposes that are necessary for the pursuit of the legitimate interests of the controller or third parties - legal basis: Article 6(1)(f) GDPR i.e. a legitimate interest pursued by the controller or third parties.

The provision of personal data is voluntary, but necessary to subscribe to the Newsletter. We will process your personal data for the time necessary for the performance of the contract (withdrawal from the newsletter), to raise objections and for the period prescribed by law (e.g. on taxes and accounting), unless a longer period results from their storage in the event of possible claims, for the limitation period prescribed by law, in particular the Civil Code, or for other purposes arising from the pursuit of our legitimate interests. In any case, the longer retention period is decisive. Information on the recipients of personal data has been described in detail in point 5 of these terms and conditions.

Information about the disclosure of your personal data to third countries (outside the European Economic Area) has been detailed in clause 6 of these terms and conditions.

The rights you have in relation to the processing of your personal data have been detailed in clause 7 of these terms and conditions.

4.6. Profiles on social networks

The data controller is the company mentioned in point 2 of these terms and conditions. Your personal data provided in connection with visits to our social media profiles (including comments, likes, online identifiers) are or may be processed for the following purposes:

a) marketing, analytical and statistical activities in the form of enabling active participation in the profile, the effective functioning of our profile, providing information about our initiatives and other activities and in connection with the promotion of various types of events, services and products (including partners (third parties) listed in the Cookie Policy) or other so-called third parties with whom we cooperate) - legal basis: article 6(1)(f) of the GDPR, i.e. the legitimate interest pursued by the controller;

The provision of personal data is voluntary, but necessary for the full use of the functions of our social media profiles.

We will process your personal data for the time necessary for the performance of the contract (withdrawal from the newsletter), to raise objections and for the period prescribed by law (e.g. tax and accounting), unless their storage implies a longer period for possible claims after the limitation period prescribed by law, in particular the Civil Code, or for other purposes arising from the pursuit of our legitimate interests. In any case, the longer retention period is decisive.

Information on the recipients of personal data has been described in detail in point 5 of these terms and conditions.

Information about the disclosure of your personal data to third countries (outside the European Economic Area) has been detailed in clause 6 of these terms and conditions. The rights you have in relation to the processing of your personal data have been detailed in clause 7 of these terms and conditions.

4.7. Informing about the availability of goods

The controller of your personal data is the company mentioned in point 2 of these terms and conditions. Your personal data provided in connection with your willingness to use the service in the form of informing about the availability of a product is or may be processed for the following purposes:

a) sending a product availability notice - legal basis: article 6(1)(b) GDPR, i.e. the need to perform the service contract by means of a product availability notice;

b) marketing, analytical and statistical activities of the controller or partners (third parties with whom we cooperate as listed in the Cookie Policy - legal basis: Article 6(1)(f) GDPR, i.e. legitimate interest pursued by the controller;

c) the establishment, defence and enforcement of claims that may arise as part of the relationship between you and the controller and other purposes that are necessary for the pursuit of the legitimate interests of the controller or third parties - legal basis: Article 6(1)(f) GDPR, i.e. a legitimate interest pursued by the controller or third parties.

The provision of personal data is voluntary, but necessary for the delivery of information about product availability. We will process your personal data for the duration of your use of the services (and, for greater protection, they may be deleted after three years from your last activity in the online store) and, in the case of marketing activities, until you object, unless the law authorises us to process this data for a longer period or unless we keep it for a longer period due to potential objections, for the limitation period provided by law, in particular the Civil Code, or for other purposes arising from the implementation of our legislation. In any case, the longer retention period is decisive.

Information about the recipients of personal data has been described in detail in point 5 of these terms and conditions.

Information about the disclosure of your personal data to third countries (outside the European Economic Area) has been detailed in point 6 of these terms and conditions. The rights you have in relation to the processing of your personal data have been detailed in clause 7 of these terms and conditions.

4.8. Customer satisfaction survey

The administrator of your personal data is the company listed in point 2 of these conditions.

Your personal information that you provide to us in connection with testing your satisfaction with the services we provide is or may be processed for the following purposes:

(a) customer satisfaction survey (eg using different types of surveys), improvement of the online store or application and quality of services offered by the administrator - legal basis: article 6(1)(f) GDPR, i.e.a legitimate interest realized by the administrator or a third party;

b) the establishment, defence and enforcement of claims that may arise as part of the relationship between you and the controller and other purposes that are necessary for the pursuit of the legitimate interests of the controller or third parties - legal basis: article 6(1)(f) GDPR, i.e. the legitimate interest pursued by the controller or third parties. The provision of personal data is voluntary but necessary for participation in the satisfaction survey. Providing them will allow us to know your opinion on the subject of the services provided by us and thus enable us to improve the online shop.

We will process your personal data for the duration of your use of the services (and, for greater protection, they may be deleted after three years from your last activity in the online shop) and, in the case of marketing activities, until you object, unless the law authorises us to process this data for a longer period or unless we keep it for a longer period due to potential objections, for the limitation period provided by law, in particular the Civil Code, or for other purposes arising from the implementation of our legislation. In any case, the longer retention period is decisive.

The information on the recipients of the personal data was described in detail in point 5 of these conditions.

The information on the provision of your personal data to third countries (outside the European Economic Area) has been described in detail in point 6 of these conditions.

The rights that belong to you in connection with the processing of your personal data have been described in detail in point 7 of these conditions.

5. Recipients of your personal data

The list of recipients of the personal data processed by the controller always derives primarily from the scope of the services used by the customer.

The list of recipients of personal data also results from the consents given by the customer or legal regulations and is specified for the actions taken by the customer in the online store or in the application.

The controller's cooperating entities may participate in the processing of personal data to a limited extent, in particular those who technically assist in the efficient administration of the online store or application, including communication with our customers (e.g. such as supporting us in sending emails and, in the case of advertising activities, in marketing campaigns), providers of hosting or communication services, carriers or agents who execute shipment orders, entities handling electronic payments or payment cards in the online store, companies that provide service software, support the controller in marketing campaigns, as well as providers of legal and consulting services.

In the context of marketing (advertising) activities, the controller uses the services of third parties that use cookies in the online store/application. A list of these entities is detailed in the Cookie Policy.

6. Disclosure of your personal data to third countries (Countries outside the European Economic Area)

In the context of applications used by the controller and supported and made available by, for example, Google, personal data may be provided to countries outside the European Economic Area in which the cooperating entity has the means to process personal data in cooperation with the controller.

The respective security of the personal data provided is ensured by the controller by means of a standard data protection clause based on a decision of the European Commission and contracts for the provision of data for processing that complies with the requirements of the GDPR. In the case of data transfers from Europe to the US, some entities located there may additionally ensure a sufficient level of data protection in so-called "Privacy Shield" clauses.

The customer has the right to obtain a copy of the safeguards applied by the controller and relating to the disclosure of personal data to third countries by contacting us (contact details in clause 2 of these terms and conditions).

7. Customer rights

Every customer has the right to:

a) file a complaint with the Office for Personal Data Protection (registered office: Hraničná 12, 820 07 Bratislava 27, Slovakia);

b) for the transfer of personal data, provided that they have been provided to the controller by entities and that are processed in an automated manner and are processed with the consent or contractual relationship of, for example, another controller;

c) access to personal data (including information on which data are processed or copies thereof);

d) request a correction and restriction of processing (eg if personal data are incorrect) or erasure of personal data (eg if they have been processed unauthorized);

e) withdraw any consent given to the administrator;the withdrawal of consent does not affect the processing carried out by the controller in accordance with the law prior to its withdrawal;

f) object to the processing of their personal data which are processed for the purpose of realizing the legitimate interests of the controller or a third party, in particular for marketing purposes, including profiling (if there are no other important reasons for legitimate processing overriding the customer's interests).

8. Sending business information

The administrator has the technical capabilities to communicate with the client remotely (for example by mail or SMS).

Business information concerning the administrators or entities that cooperate with it and commercial activities may only be sent with the consent of the customer, including acceptance of the terms of the newsletter service.

9. Ensuring the security of your data

Taking into account the state of technical knowledge, the costs of implementation and the nature, scope, context and purposes of the processing and the risk of violation of the rights or freedoms of persons with varying likelihood of occurrence and severity of the threat, the controller shall apply appropriate technical and organisational measures to ensure the protection of the personal data processed, appropriate to the threats and categories of data to which the protection applies, in particular to protect the data from being disclosed to unauthorised persons, from being misused by an unauthorised person, from being processed in breach of applicable law and from being altered, lost, damaged or destroyed. The disclosure of information about technical and organisational measures that provide protection to external processing may undermine their effectiveness, thereby jeopardising the proper protection of personal data.

For example, the controller uses the following technical measures electronically to prevent unauthorised persons from obtaining and modifying personal data:

(a) securing the data file against unauthorised access;

b) SSL or TLS certificate on the pages of the online shop where personal data is provided;

c) encryption of the data used to authorise the person using the functions of the online shop;

d) Access to the account only after entering an individual login name and password.

10. Website links

The online shop may contain links to other websites. The Administrator encourages you to read the terms and conditions and privacy policies used by other websites. These terms and conditions apply only to the Administrator's activities listed above.

11. Change of conditions and their validity

The Administrator may change and update these Terms in the future. Each time the Terms change, the administrator will always place information about the changes in the online store www.garjez.com. Each time a change is made, the new version of the Terms will be displayed with a new date.

This version of the Terms is valid from 2022-02-16.