Privacy policy

I. Introductory provisions

  1. For the purposes of this Policy, it is understood:
    1. ATRIA SK s.r.o., with its registered office at P. Mudroňa 5, 010 01 Žilina, Slovak Republic, ID: 45473480VAT ID: 2023009659 (hereinafter referred to as the “Operator”)
    2. Personal data name and surname, title, e-mail address, telephone number, billing address, delivery address, date of birth, IP address, cookies.
  2. The Operator of the e-shop www.cigadesign-europe.com, as the administrator of Personal Data, hereby informs about the manner and scope of processing Personal Data, including the scope of the Subscriber's rights (as defined below) related to the processing of his Personal Data..
  3. When processing personal data, the controller proceeds in accordance with the following legal regulations, in particular:
    1. Act no. 18/2018 Coll. on the protection of personal data, as amended,
    2. Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter "the Regulation")
  4. The Subscriber is a natural person who purchases goods and services from the Operator.
  5. The Operator is a natural person who operates this online store for the purpose of selling goods and services to the Subscriber. In connection with the above, Personal Data is processed:
    1. to the extent that they were provided in connection with the order of products and / or services of the Operator, resp. within the negotiations on concluding a contract with the Operator, as well as in connection with the concluded contract
    2. for the purpose (s) listed below in Art. II. on the legal bases set out there

II. Purposes and duration of processing Personal Data

  1. The Operator processes Personal Data for the following purposes:
    1. performance of the contract or other obligation and provision of services:
      1. personal data will be processed during the negotiations on the conclusion of the contract between the Operator and the Subscriber, for the purpose of concluding the contract, as well as during the duration of the contractual relationship;
      2. sending satisfaction questionnaires: sending satisfaction questionnaires in order to improve the quality of services provided to customers in connection with the created order, reservation or direct sale. The processing time of personal data in this case is 3 years;
      3. marketing actions: for the purpose of fulfilling the marketing action, evaluation, termination, delivery of any winnings, etc. Processing time: for the duration of the marketing event.
    2. compliance with legal obligations (especially accounting, tax and archiving, providing cooperation to administrative authorities, police, courts, etc.):
      1. the tax document will be kept for 10 years from the termination of the contract: In order to fulfill the legal obligation to archive accounting documents on the basis of Act no. 563/1991 Coll. on Accounting, as amended, the Personal Data will be further processed and stored for a period of 10 years from the year following the year in which the contract was concluded between the Operator and the Subscriber.;
      2. fulfillment of obligations in connection with the exercise of rights arising from incorrect performance, providing cooperation to administrative authorities, police, court: The operator is entitled to process basic personal, identification and contact data of the participant, goods and communication data between the customer for 4 years from the date of expiration time for goods.
    3. legitimate interests of the Operator, protection of rights and legally protected interests of the Operator:
      1. effective protection of the operator's rights in the event of a dispute. The processing period here is set at 4 years from the expiration of the warranty period for the goods and is extended by the period for which the dispute is conducted;
      2. The legitimate interest of the Operator is also the sending of commercial notifications (area offers and individual offers) in accordance with § 7 par. 3 of Act no. 480/2004 Coll. on certain information society services and in accordance with point 47 of the Regulation, if the Operator has obtained the details of the electronic contact in connection with the sale of goods and services to the Subscriber.
    4. marketing and business offers of the Operator's services:
      1. Broadcasting of business offers of products and services: sending general advertising notices without targeting a specific group of recipients. The processing time of personal data in this case is 3 years;
      2. individual offer: sending advertising advertisements after evaluating certain personal aspects related to a natural person. The operator does not perform profiling in accordance with Art. 22 Regulations, as it is not an automated processing but a manual creation of individual tenders. The processing time of personal data in this case is 3 years;
      3. cookies: short text files generated by a web server and stored on a computer via a browser. There are two types. In the first place, these are cookies necessary to ensure the functioning and analysis of the website (transmission of electronic communication via the electronic communication network, with the use of these cookies it is not possible to express disagreement) (hereinafter referred to as "Technical cookies"). Furthermore, these are cookies that evaluate certain personal aspects related to a specific individual (hereinafter referred to as "advertising and marketing cookies"). The Subscriber must consent to the use of the second type of cookies. The processing time in this case is 3 years. Further information and conditions are given in Art. In these principles.
  2. Legal basis for the processing of personal data:
    1. Performance of the contract – in the case of ordering goods and setting up a user account or in the case of participation in a consumer competition.
    2. Consent – in particular in connection with the sending of commercial communications on news and current offers, or in other forms of marketing, in the case of sending communications about jobs or in the inclusion of candidates in the database of candidates. Any consent given is voluntary and can be revoked at any time, but this does not affect the lawfulness of the processing prior to its revocation..
    3. Fulfillment of legal obligations – when keeping data in the accounts or when making data available to state and other authorities which supervise the activities of the operator or which resolve disputes or the implementation of decisions.
    4. Legitimate interest – in improving and personalizing our services, certain marketing activities, or in connection with security and protection of rights. In such cases, the controller shall always assess whether the processing does not constitute a disproportionate interference with the rights of the participant.

III. Protection of personal data and information on processing

  1. If the Subscriber does not provide his Personal Data, it is not possible to conclude a contract with the Operator and / or provide him with the services arising from it. In this context, personal data is necessary for the provision of a specific service or product of the Operator.
  2. After the deadlines referred to in Article II. The Operator deletes or anonymises Personal Data.
  3. The Subscriber is obliged to provide the Operator only with true and accurate Personal Data. The Subscriber is responsible for the correctness, accuracy and veracity of the provided Personal Data. The operator is not responsible for the accuracy of the provided data.
  4. The controller shall use its best endeavors to prevent the unauthorized processing of personal data.
  5. The Operator is entitled to transfer the personal data of the Subscriber to third parties for the following purposes: completion of the ordering process, delivery of goods, sending of business notices, evaluation of customer satisfaction, customer support services, handling of complaints, registration of a new customer.
  6. Personal data is and will be processed in electronic form in a non-automated manner.
  7. The controller does not intend to transfer any personal data to a third country or international organization.
  8. When processing personal data, the operator does not use automated individual decision-making, including profiling according to § 28 par. 1 and 4 of the Act.

IV. Participant's rights related to processing (information for the Participant)

  1. Participant's rights in connection with the protection of personal data:
    1. the right to request access to its Personal Data from the Operator;
    2. the right to correct the provided Personal Data;
    3. the right to delete the provided Personal Data (the right to “forget”);
    4. the right to restrict the processing of Personal Data;
    5. the right to lodge a complaint with the Office for Personal Data Protection;
    6. the right to transfer personal data to another controller;
    7. the right to object to the processing of personal data;
    8. the right to withdraw consent to the processing of personal data.
  2. The participant may exercise its rights under para. 1 of this article to apply in the form of an application at info@atria.sk.
  3. In the event that the Subscriber considers that the Operator is processing his Personal Data that is in conflict with the protection of his private and personal life or in violation of applicable law, especially if the Personal Data is inaccurate with respect to the purpose of their processing,:
    1. ask the Operator for an explanation, by e-mail to info@atria.sk .
    2. object to the processing and request by e-mail sent to the address info@atria.sk that the Operator ensure the removal of the situation thus created (eg by blocking, performing repairs, supplementing or liquidating Personal Data). The Operator shall immediately decide on the objection and inform the Subscriber. If the Operator does not comply with the objection, the Subscriber has the right to contact the Office for Personal Data Protection directly. This provision is without prejudice to the right of the Subscriber to address the Office for Personal Data Protection directly with his / her complaint..
  4. If the Subscriber exercises any right under this Article, the Operator is obliged to respond within 30 days from the delivery of the request by the Subscriber to the Operator.
  5. Acceptance of a request for exercise of the right provided for in Article IV 1) letter a) and f) is possible only by means of a message with a guaranteed electronic signature of the Subscriber or a letter with an officially verified signature to the address of the Operator's registered office. The application must include an e-mail address to which a verification e-mail will be sent to confirm the applicant's identity.
  6. If the Participant exercises any of the rights under Article IV. paragraph 1, the Operator has the right to request proof of identity of the Subscriber. The request for access to personal data must be sent from the applicant's e-mail address. If the request is submitted in another form or from a different e-mail address, the Operator has the right to request additional verification in the form of a reply to the verification e-mail. If the applicant does not prove his / her identity within 14 days of sending the verification e-mail, his / her application for the exercise of the rights under Article IV will not be valid. par. 1 accepted and therefore not even equipped.
  7. The Operator is entitled to charge a reasonable fee for the administrative costs associated with a repeated and unjustified request for the provision of a physical copy of the processed Personal Data.

V. Categories of recipients, third parties and cookies

  1. The operator does not provide, make available or disclose personal data, but may share them with third party service providers. The data is shared only to the extent necessary for the sale and provision of the service in accordance with the terms and conditions. Data is shared with:
    1. Making purchases, where data can be provided to the extent necessary:
      Heureka Shopping s.r.o, Karolinská 650 / 1,186 00 Prague 8 - Karlín, Czech Republic, C 218977, kept at the Municipal Court in Prague, IČ: 02387727, DIČ: CZ02387727
    2. Transport, whereby the data may be provided to the extent necessary:
      1. IN TIME, s.r.o., Senecká cesta 1, 900 28 Ivanka pri Dunaji, entered in the Commercial Register of the District Court Bratislava I, section Sro, insert no. 4376 / B, ID: 31 342 621, VAT: 2020337451
      2. Slovak Parcel Service, s.r.o., Senecká cesta 1, 900 28 Ivanka pri Dunaji, entered in the Commercial Register of the District Court Bratislava I., section Sro, insert no. 3215 / B, ID: 31 329 217, VAT: 2020351993
      3. DHL Parcel Slovensko spol. s r.o., Na pántoch 18, 831 06 Bratislava, entered in the Commercial Register of the District Court Bratislava I, Section Sro, file no. 100759 / B, ID: 47 927 682, VAT: 2024147400
      4. Geis Parcel SK s.r.o., Trňanská 8, 960 01 Zvolen, entered in the Commercial Register of the District Court of Banská Bystrica, Section Sro, File no. 21503 / S,
      5. Geis SK s.r.o., Trňanská 6, 960 01 Zvolen, entered in the Commercial Register of the District Court of Banská Bystrica, Section Sro, Insert no. 2083 / S, ID: 31 324 428, VAT: 2020452687
    3. Operation, improvement and maintenance of websites; to the extent necessary, personal data shall also be made available to suppliers who provide the operator with services related to the creation and administration of websites, and the data may be provided:
      1. The provider of the Eshop-rychlo service, operated by Golemos s.r.o., with its registered office at Zátkovo nábřeží 448/73, 370 01, České Budějovice, Czech Republic
    4. Provision of advertisements and analysis of data from them, while the data can be provided to the necessary extent:
      1. Google Analytics - Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
      2. Google AdWords - Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
      3. Facebook Pixel - Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland
  2. Cookies
    1. The operator uses technical cookies for the proper functioning of the website, and consent to their use is not required from the participant.
    2. The operator uses advertising and marketing cookies for the purpose of displaying content according to the participant's previous preferences and for the purpose of displaying advertising according to the participant's interests, while the operator stores advertising and marketing cookies only with the participant's consent.
    3. The Subscriber is entitled to reject or delete cookies, while the Operator warns that such an action may cause partial or complete malfunction of the website
    4. Information about browsers and how to set preferences for cookies is available on the following websites:
      1. Chrome
      2. Firefox
      3. Internet Explorer

VI. Final provisions

  1. All legal relations arising from the processing of Personal Data are governed by the law of the Slovak Republic, regardless of where the access to them was made. The Slovak courts are competent to resolve any disputes arising in connection with the protection of privacy between the Subscriber and the Operator.
  2. The affected person (Participant) has the right to contact the Office for Personal Data Protection (https://dataprotection.gov.sk/uoou/sk).
  3. This Policy shall enter into force on 25.05.2018.

Please log in again

We are sorry for interrupting your flow. Your CSRF token is probably not valid anymore. To keep you secure, we need you to log in again. Thank you for your understanding.

Thank you for your understanding.

Login