The company doubLLe s.r.o., with its registered office at Boroviny – Krvavník 891/6, 962 01 Zvolenská Slatina, ID No. 47677830 (hereinafter referred to as the “Controller”) within the meaning of Regulation 2016/679 GDPR on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”) and Act No. 18/2018 Coll. on the protection of personal data and on amendments to certain acts (hereinafter referred to as the “Act”), has security measures in place that are regularly updated. They define the scope and manner of security measures necessary to eliminate and minimize threats and risks affecting the information system in order to ensure:
- availability, integrity, and reliability of management systems using state-of-the-art information technologies,
- protect personal data from loss, damage, theft, modification, destruction, and maintain its confidentiality,
- identify potential problems and sources of disruption and prevent them
Contact details of the person responsible for personal data processing: sales@baitboatpod.com
Privacy Policy
Your personal data will be stored securely, in accordance with our data retention policy, and only for as long as necessary to fulfill the purpose of processing. Access to personal data is restricted to persons authorized by the controller to process personal data, who process it on the basis of the controller’s instructions. Your personal data will be backed up in accordance with the controller’s retention rules. Personal data stored in backup storage facilities is used to prevent security incidents that could arise, in particular, from a breach of security or damage to the integrity of the data being processed.
Definition of terms
- “Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;
- “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, searching, viewing, using, disclosing by transmission, dissemination or otherwise making available, aligning or combining, restricting, erasing or destroying, whether by automated or non-automated means;
- “restriction of processing” means marking stored personal data with the aim of limiting their processing in the future;
- “profiling” means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements;
- “information system” means any structured set of personal data accessible according to specific criteria, whether centralized, decentralized, or distributed on a functional or geographical basis;
- “controller” means a natural or legal person, public authority, agency, or other body that alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and the means of that processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be determined by Union or Member State law;
- “processor” means a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller;
- “third party” means a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data;
- “consent of the data subject” means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
- “personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed;
- “relevant and justified objection” means an objection to a proposed decision, whether there has been a breach of this Regulation, or whether a planned measure in relation to a controller or processor is in accordance with this Regulation, which must clearly demonstrate the seriousness of the risks posed by the draft decision to the fundamental rights and freedoms of the data subjects and, where applicable, the free movement of personal data within the Union.
Purposes of personal data processing
Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
We process personal data about our customers is processed on the basis of a contract within the meaning of Article 6(1)(b) of the Regulation (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract). Scope of personal data processed: title, first name, last name, address, signature, telephone number, and email address. The data is then stored in accordance with Act No. 395/2002 Coll. on archives and registries.
eShop
We process personal data about our customers through online purchases based on a contract in accordance with Article 6(1)(b) of the Regulation. Scope of personal data processed: user account, first name, last name, address, delivery address, telephone number, and email address. This data is then stored for the duration of the registration in the eShop.
Recording of requests
Personal data that we process through the contact forms on our website and emails is processed only to fulfill your request. By completing and submitting the request, you consent to the processing of personal data within the meaning of Article 6(1)(a) of the Regulation (the data subject has given consent to the processing of their personal data for one or more specific purposes). Scope of personal data processed: name, surname, address, telephone number, email address. Personal data will only be stored until the purpose for which it was processed has been fulfilled. If retention periods under commercial and tax law must be observed, the retention period is governed by Act No. 395/2002 Coll. on Archives and Registries. Personal data will not be transferred to a third country. Personal data will not be used for automated individual decision-making, including profiling.
Processing of accounting documents
Processing is necessary to fulfill the operator’s legal obligation under Article 6(1)(c) of the Regulation. Scope of personal data processed: title, first name, last name, address, telephone number, account number, email address, and signature. They are then stored in accordance with Act No. 395/2002 Coll. on archives and registries.
Debt collection
In the case of debt collection, personal data is processed in accordance with Article 6(1)(c) of the Regulation. Scope of personal data processed: name, surname, birth number, address, telephone number, e-mail address. They are then stored in accordance with Act No. 395/2002 Coll. on Archives and Registries.
Enforcement
The processing of personal data is necessary for the fulfillment of the controller’s legal obligation within the meaning of Article 6(1)(c) of the Regulation. Scope of personal data processed: common personal data, other personal data ascertained or provided during the proceedings. They are then stored in accordance with Act No. 395/2002 Coll. on Archives and Registries.
Records of suppliers’ and customers’ representatives
The processing of suppliers’ and customers’ personal data is carried out in accordance with the legitimate interests of the controller, in accordance with Article 6(1)(f) of the Regulation. Scope of personal data processed: title, first name, surname, job title, position, function, employee number, department, place of work, telephone number, fax number, work email address, and employer identification details. This data is then stored for a period of 10 years after the termination of the contract or business relationship.
Marketing
We process personal data about our customers for marketing purposes on the basis of the consent of the data subject within the meaning of Article 6(1)(a) of the Regulation. Scope of personal data processed: name, surname, address, telephone number, e-mail address, and signature. They are then stored for a period of 5 years.
Direct marketing
We process personal data about our customers for marketing purposes on the basis of the legitimate interest of the controller within the meaning of Article 6(1)(f) of the Regulation. Scope of personal data processed: name, surname, telephone number, and email address. They are then stored for the duration of the contractual or business relationship between the client and the controller.
Rights of the data subject
- Right to withdraw consent – in cases where we process your personal data on the basis of your consent, you have the right to withdraw this consent at any time. You can withdraw your consent electronically, at the address of the authorized person, in writing, by notification of withdrawal of consent, or in person at our company headquarters. Withdrawal of consent does not affect the lawfulness of the processing of personal data that we have processed about you on the basis of your consent.
- Right of access – you have the right to obtain a copy of the personal data we hold about you, as well as information about how we use your personal data. In most cases, your personal data will be provided to you in written form, unless you request another method of provision. If you have requested this information by electronic means, it will be provided to you electronically, if technically possible.
- Right to rectification – we take reasonable steps to ensure that the information we hold about you is accurate, complete, and up to date. If you believe that the information we hold is inaccurate, incomplete, or out of date, please do not hesitate to ask us to amend, update, or supplement this information.
- Right to erasure (to be forgotten) – you have the right to ask us to erase your personal data, for example if the personal data we have collected about you is no longer necessary for the original purpose of processing. However, your right must be assessed in light of all relevant circumstances. For example, we may have certain legal and regulatory obligations, which means that we will not be able to comply with your request.
- Right to restrict processing – in certain circumstances, you have the right to ask us to stop using your personal data. This includes, for example, cases where you believe that the personal data we hold about you may be inaccurate or where you believe that we no longer need to use your personal data.
- Right to data portability – in certain circumstances, you have the right to request that we transfer the personal data you have provided to us to another third party of your choice. However, the right to portability only applies to personal data that we have obtained from you on the basis of consent or on the basis of a contract to which you are a party.
- Right to object – you have the right to object to the processing of data based on our legitimate interests. If we do not have a compelling legitimate reason for processing and you object, we will no longer process your personal data.
If you believe that any personal data we hold about you is incorrect or incomplete, please contact us.
If you wish to object to the way we process your personal data, please contact our data protection officer by email at: info@lodky.sk or in writing at:
doubLLe s.r.o.
Boroviny – Krvavník 891/6
962 01 Zvolenská Slatina
Slovak republic
Our designated person will review your objection and work with you to resolve the issue.
If you believe that your personal data is being processed unfairly or unlawfully, you can file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27; tel. number: +421 /2/ 3231 3214; e-mail: statny.dozor@pdp.gov.sk https://dataprotection.gov.sk.
Revised on August 1, 2022