Data controller
The personal data controller is: Aurora Solutions, s.r.o.
Potočná 586/8, 900 55 Lozorno, Slovak Republic
Company Registration Number: 52683125
E-mail peter.niznansky@najspanielsko.eu
Telephone: +421 905 450 790
2. Basic information
This document describes how we process the personal data of visitors to our website, what rights you have in relation to this processing, and what technical and organisational measures we take to protect it. The processing of personal data is governed by Regulation (EU) 2016/679 („GDPR“) and Act No. 18/2018 Coll. on the protection of personal data of the Slovak Republic. https://www.minv.sk/?ochrana-osobnych-udajov-gdpr
3. Personal Data Processing Principles
The processing of personal data is carried out in accordance with the following principles:
- legality, fairness and transparency;
- Purpose limitation: we collect data for specific, explicit, and legitimate purposes and do not further process it in a manner that is incompatible with those purposes;
- Data minimisation: we only process personal data that is necessary to achieve the purpose.;
- Accuracy: data must be correct and updated as necessary;
- Storage limitation: we store data in a form that permits identification of data subjects only for as long as necessary for processing purposes. dataprotection.gov.sk
- Integrity and confidentiality: we will implement appropriate technical and organisational measures to protect data against unauthorised or unlawful processing, and against loss, destruction or damage. Slovakia+1
4. Legal Basis for Processing
Under GDPR and Slovak law, we may process personal data if one of the following grounds applies (examples):
- consent of the data subject (e.g. for newsletter, remarketing purposes)
- Contract fulfilment (e.g. processing an order in an e-shop)
- fulfilment of a legal obligation (e.g. keeping accounts)
- legitimate interest of the controller or of a third party (provided that the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child, are not overriding)
- other legal grounds (e.g., protection of vital interests)
5. Categories of personal data
On our website / e-shop, we can process the following categories of data, for example:
- identification details (name, surname)
- Contact details (email, telephone, address)
- order details (purchase history, payment details – if stored)
- technical data (IP address, website visit data, cookies)
- Marketing data (consent to receive newsletter, preferences)
- other data that you provide to us voluntarily (e.g. ratings, reviews)
6. Purposes of processing
We process personal data primarily for the purpose of:
- ensuring the regular operation of the website / e-shop
- order processing, invoice issuance and delivery of goods/services
- Customer communication (order confirmation, complaints, support)
- Marketing: sending newsletters, offers (only if you have given consent)
- website traffic analysis, optimisation, service improvements (e.g. analytical tools)
- ensuring legal obligations (accounting, archiving)
7. Data Sharing / Third Parties
Personal data may be shared with third parties to the extent necessary to achieve the purpose, for example:
- courier companies (when delivering goods)
- Payment service provider (when paying)
- IT services / hosting / website management
- Marketing tools (e.g. sending newsletters)
- if the law requires, public administration bodies
When transferring personal data outside the EU/EEA, we use appropriate safeguards in accordance with Chapter V of the GDPR. EU-REP.Global+1
8. Storage and retention period
We retain personal data for as long as is necessary to fulfil the purpose of processing. After this period, we will securely delete or anonymise it. For example:
- Orders and accounting documents: according to statutory retention periods (e.g. accounting archiving)
- Marketing consent data: until consent is active or until the customer withdraws consent
- technical data of the website / logs: to the extent necessary for security and operation
9. Rights of the data subject
As a data subject, you have the right:
- to access their personal data (to find out if it is being processed and, if so, to obtain a copy)
- for repair (if the details are incorrect)
- for erasure („right to be forgotten“) – where there is no longer a reason for further processing
- to restrict processing
- on data portability (if technically feasible and processing is based on consent or contract)
- object to processing – in particular when processing is based on legitimate interests
- withdraw consent at any time (if processing is based on consent)
- lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (ÚOOÚ) as the supervisory authority. gdprhub.eu
10. Cookies and tracking tools
On our website, we use cookies and similar technologies (e.g., analytics tools, remarketing).
- Some cookies are essential for the website to function (technically essential) – these can be applied without consent. EU-REP.Global+1
- For other purposes – e.g. marketing or statistical – we obtain your consent, which can be withdrawn at any time.
- Details about the cookies used can be found in the „Cookie Policy“ (link).
11. Data Security
We ensure appropriate technical and organisational measures are in place to protect personal data from unauthorised access, loss, damage, destruction or disclosure. These measures include: encryption, access rights, regular backups, vulnerability testing, staff training.
12. Notification of a personal data breach
If a personal data breach occurs that is likely to result in a risk to the rights and freedoms of individuals, we will notify the Office for Personal Data Protection without undue delay (usually within 72 hours) and, if necessary, also inform the data subjects. lawgratis.com+1
13. Changes to the Privacy Policy
We reserve the right to change these Terms at any time. We will inform you of any material changes in an appropriate manner (e.g., by email or a notice on the website).
14. Contact details for the administrator and the office
Manager: [contact as above]
Supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovak Republic.