1. Who Processes Your Data
The controller of personal data is the seller:
- Company name: Adrián Molota
- Registered office: Okružná 1860/7, 972 51 Handlová
- Business premises address (also for returns): Okružná 1860/7, 972 51 Handlová
- Company ID (IČO): 55064574
- Register entry: Živnostenský register Okresného úradu Prievidza, č. 340-48618
- E-mail: info@caumamistalezijem.sk
- Phone: +421 917 291 594
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection. Please send any questions about data protection to info@caumamistalezijem.sk. We have not appointed a data protection officer, as we are not required to do so.
2. What Data, for What Purpose and on What Legal Basis
- Order and delivery: first name, last name, address, e-mail, phone number and the selected pickup point. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- Payment: payment details and payment status. Cards are processed by the Stripe payment gateway; we do not see the card number. Legal basis: performance of a contract.
- Invoices and accounting: data on the tax document. Legal basis: legal obligation (Art. 6(1)(c) GDPR, Act No. 431/2002 Coll. on Accounting).
- Complaints and withdrawal from the contract: data from the order and from your request. Legal basis: performance of a contract and legal obligation.
- Drop pieces agreed via Instagram: Instagram name and the agreed product, to verify that a reserved piece is purchased by the person with whom it was agreed. Legal basis: performance of a contract.
- Experiences form: your story, signature (nickname) and photo that you send us. We publish them only with your consent. Legal basis: consent (Art. 6(1)(a) GDPR).
- Voting on the next drop: e-mail, if you provide it voluntarily and confirm your consent. The vote itself is anonymous; we do not store your IP address, only an irreversible fingerprint of it to prevent repeated voting. Legal basis: consent.
- Website security and spam protection: IP address and technical data about your browser. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Contact by e-mail or on Instagram: data from your message. Legal basis: legitimate interest in responding to you; in the case of an order, performance of a contract.
We do not use the data for automated decision-making or profiling. We do not send you marketing e-mails without your consent.
3. Who We Share Data With
We share data only with the processors and recipients we need to operate the store:
- Packeta (Zásielkovňa s.r.o.) and its partners: parcel delivery.
- Stripe (Stripe Payments Europe, Ltd., Ireland): card payment processing.
- Facturio: issuing and storing invoices.
- Websupport s.r.o.: website and e-mail hosting.
- Cloudflare, Inc.: website security and acceleration, protection of forms against spam.
- Meta Platforms Ireland Ltd.: displaying our Instagram posts on the website (images are loaded from their servers).
- Accountant and public authorities, where required by law.
Some of them (Stripe, Cloudflare, Meta) may also process data in the USA. Such transfers are protected by an adequacy decision of the European Commission (EU-U.S. Data Privacy Framework) or by standard contractual clauses.
4. How Long We Keep Data
- Invoices and accounting documents: 10 years (Accounting Act).
- Orders, complaints and related communication: during the warranty period and for 3 years thereafter (limitation period).
- Drop data (Instagram name): until the drop orders have been processed; afterwards it remains only in the order.
- Experiences form: until consent is withdrawn.
- E-mail from voting: until the drop takes place; then we delete it.
- Technical security data: no longer than 12 months.
5. Your Rights
You have the right:
- to access your personal data and obtain a copy of it,
- to rectification of inaccurate or incomplete data,
- to erasure of data if it is no longer needed or you have withdrawn your consent and there is no other legal basis,
- to restriction of processing,
- to data portability,
- to object to processing based on legitimate interest,
- to withdraw your consent at any time; withdrawal does not affect processing carried out before it,
- to lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk.
You can exercise your rights by e-mail to info@caumamistalezijem.sk. We will respond within one month at the latest.
6. Data Security
The website uses an encrypted connection (HTTPS), only authorized persons have access to the data, and payment data is processed exclusively by the payment gateway. We use only services that provide sufficient guarantees of data protection.
7. Cookies
We use the following cookies:
- Necessary: cart, checkout, payment, protection of forms against spam and remembering your cookie choice. The website does not work without them, so they do not require consent.
- Statistics: anonymous traffic measurement to improve the website, only on the basis of consent.
- Marketing: measurement of advertising on social networks and tailored content, only on the basis of consent.
You give your consent in the banner on your first visit to the website. You can change or withdraw it at any time via the “Cookie settings” link in the website footer. We remember your choice for 12 months.
8. Final Provisions
This Privacy Policy is valid and effective from 16. 10. 2026. If we change it, we will publish the new version on this page.
