Privacy Policy

Privacy Policy

I. Basic Provisions

1. The controller of personal data pursuant to § 5 letter o) of Act No. 18/2018 Coll. on the Protection of Personal Data, as amended ("the Act"), is:

Green Plant s. r. o. Company ID: 48 242 128 Rudolfa Jašíka 159/10 958 01 Partizánske, Slovakia (hereinafter referred to as the "Controller").

2. Contact details of the Controller: Address: Rudolfa Jašíka 159/10, 958 01 Partizánske
   Email: info@svethub.sk
   Phone: +421 917 253 227

3. Personal data means all information about an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as name, ID number, location data, online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

4. The Controller has / has not appointed a Data Protection Officer. Contact details of the DPO (if applicable) will be provided upon request.

II. Sources and Categories of Personal Data Processed

1. The Controller processes personal data provided by you or obtained based on the performance of your order.

2. The Controller processes your identification and contact details and data necessary for contract performance.

III. Legal Basis and Purpose for Processing Personal Data

1. The legal basis for processing personal data is:

• Performance of a contract between you and the Controller pursuant to § 13(1)(b) of the Act,

• The Controller's legitimate interest in direct marketing under § 13(1)(f) of the Act,

• Your consent to processing for direct marketing purposes under § 13(1)(a) of the Act.

2. The purpose of processing personal data is:

• To fulfill your order and exercise rights and obligations arising from the contractual relationship between you and the Controller. Personal data is necessary for successful order processing (name, address, contact information), and without providing it, a contract cannot be concluded or fulfilled.

• Sending commercial offers and conducting other marketing activities.

3. The Controller does / does not carry out automated individual decision-making within the meaning of § 28 of the Act. If so, you have granted your explicit consent.

IV. Data Retention Period

1. The Controller retains personal data:

• For the duration necessary to exercise rights and obligations arising from the contractual relationship between you and the Controller, and for asserting claims from these relationships (15 years from contract termination).

• Until consent to personal data processing for marketing purposes is withdrawn, but no longer than necessary.

2. After the retention period, the Controller will erase the personal data.

V. Recipients of Personal Data (Subprocessors)

1. Recipients of personal data include:

• Persons involved in the delivery of goods/services or payment processing,

• Providers of e-shop operation services (e.g., Shoptet) and related support,

• Providers of marketing services.

2. The Controller does / does not intend to transfer personal data to a third country (outside the EU) or to an international organization. In such cases, recipients may include mailing or cloud service providers.

VI. Your Rights

Under the Act, you have the right to:

• Access your personal data (§ 21),

• Rectify your personal data (§ 22), or restrict processing (§ 24),

• Erase personal data (§ 23),

• Object to processing (§ 27),

• Data portability (§ 26),

• Withdraw consent to processing at any time, in writing or electronically to the Controller's address or email.

You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe your data protection rights have been violated.

VII. Personal Data Security Measures

1. The Controller declares that all appropriate technical and organizational measures have been taken to secure personal data.

2. The Controller has implemented technical measures to secure data storage and personal data kept in paper form.

3. The Controller declares that access to personal data is granted only to authorized persons.

VIII. Final Provisions

1. By submitting an order via the online form, you confirm that you are familiar with this Privacy Policy and that you accept it in its entirety.

2. You express your consent to this Privacy Policy by ticking the consent box via the website form. By doing so, you confirm you have read and agree to the policy.

3. The Controller reserves the right to change this Privacy Policy. The updated version will be published on the website and sent to the email address you provided.

This Privacy Policy is effective as of March 14, 2022.