Privacy Policy
 PRIVACY POLICY

1. Basic Provisions

The operator of the online store Kvetinka is:

Martina Richnavská

Company ID: 47544104

Registered office: Stará cesta 7, 053 42 Krompachy

Email: kvetinarstvo.kvetinka@gmail.com

Phone: +421 905 147 793

(hereinafter referred to as the "Operator")

The Operator processes personal data in accordance with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)
• Act No. 18/2018 Coll. on Personal Data Protection

2. Scope of Personal Data Processed

The Operator processes the following personal data:

• name and surname
• delivery address
• billing address
• email address
• phone number
• order details
• IP address and cookies (when visiting the website)

3. Purpose of Data Processing

Personal data is processed for the following purposes:

• order processing and contract performance
• issuing invoices and accounting
• communication with customers
• handling complaints and claims
• marketing (newsletter, if consent is given)
• service improvement and website analytics

4. Legal Basis for Processing

Personal data is processed based on:

• performance of a contract under Article 6(1)(b) GDPR
• compliance with legal obligations under Article 6(1)(c) GDPR
• legitimate interest under Article 6(1)(f) GDPR
• consent under Article 6(1)(a) GDPR

5. Data Retention Period

Personal data is stored:

• for the duration of the contractual relationship
• for 10 years for accounting records
• for the duration of legitimate interest
• until consent is withdrawn (for marketing)

6. Recipients of Personal Data

Personal data may be provided to:

• courier and delivery companies (e.g., Packeta, GLS, Slovak Post)
• payment service providers
• accountants or accounting firms
• IT and hosting service providers
• marketing tools providers

These entities process data based on a contract with the Operator.

7. Transfer to Third Countries

Personal data may be transferred to third countries (e.g., USA), especially when using services such as:

• Google (Google Analytics)
• Meta (Facebook, Instagram)

Transfers are carried out based on appropriate safeguards in accordance with GDPR (e.g., Standard Contractual Clauses).

8. Automated Decision-Making

The Operator does not perform automated individual decision-making or profiling under Article 22 GDPR.

9. Rights of the Data Subject

The data subject has the right to:

• access personal data
• rectification of incorrect data
• erasure of personal data
• restriction of processing
• data portability
• object to processing
• withdraw consent

Rights can be exercised via email:

kvetinarstvo.kvetinka@gmail.com

10. Filing a Complaint

The data subject has the right to file a complaint with the supervisory authority:

Office for Personal Data Protection of the Slovak Republic

Hraničná 12, 820 07 Bratislava

www.dataprotection.gov.sk

11. Data Security

The Operator has implemented appropriate technical and organizational measures to ensure data security, including:

• restricted access to data
• protection against unauthorized access
• use of secure connection (HTTPS)

12. Cookies

The website uses cookies for:

• proper website functionality
• traffic analysis
• marketing purposes

Cookies can be managed via the cookie banner during the first visit.

13. Final Provisions

By submitting an order, the customer confirms that they have read this Privacy Policy.

The Operator reserves the right to amend this policy. The new version becomes effective upon publication on the website.