Privacy Policy

PERSONAL DATA PROTECTION

BASIC PROVISIONS

1. The controller of personal data pursuant to Article 4(7) of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as „GDPR“) is NajTV s.r.o., identification number: 53967038, with registered office at Horný val 8/17 Žilina 010 01 Slovakia (hereinafter referred to as the „controller“).
2. The contact details of the controller are:
   Address: Horný val 8/17 Žilina 010 01 Slovakia
   Email: info@najtv.sk
   Personal data means any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
3. The controller of personal data has not appointed a data protection officer.

SOURCES AND CATEGORIES OF PROCESSED PERSONAL DATA

1. The controller processes personal data that you have provided to him or personal data that the controller has obtained based on the performance of your order, completed contact form.
2. The controller processes your identification and contact details and the data necessary for the performance of the contract.

LEGAL BASIS AND PURPOSE OF PROCESSING PERSONAL DATA

1. The legal basis for the processing of personal data is:
   – the performance of a contract between you and the controller pursuant to Article 6(1)(b) of the GDPR,
   – the legitimate interest of the controller in providing direct marketing (in particular, sending commercial offers and newsletters) pursuant to Article 6(1)(f) of the GDPR,
   – processing is necessary for the performance of a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract.
2. The purpose of processing personal data is:
   – the fulfillment of your order and the performance of rights and obligations arising from the contractual relationship between you and the controller; when placing an order, personal data required for the successful processing of the order (name and address, contact) is requested, the provision of personal data is a necessary requirement for the conclusion and performance of the contract, without providing personal data, the contract cannot be concluded or fulfilled by the controller,
   – sending commercial offers and conducting other marketing activities.
3. The controller does not engage in automated individual decision-making pursuant to Article 22 of the GDPR. You have provided explicit consent to such processing.

DATA RETENTION PERIOD

1. The controller retains personal data
   – for the period necessary to perform the rights and obligations arising from the contractual relationship between you and the controller and to assert claims under these contractual relationships (for a period of 15 years from the termination of the contractual relationship).
   – for as long as the consent to the processing of personal data for marketing purposes is revoked, up to a maximum of 10 years if personal data is processed based on consent.
2. After the expiration of the retention period for personal data, the controller will erase the personal data.

RECIPIENTS OF PERSONAL DATA (SUBPROCESSORS OF THE CONTROLLER)

1. Recipients of personal data are persons
   – involved in the delivery of goods/services/payment execution based on the contract,
   – providing e-shop operation services and other services related to internet operation,
   – providing marketing services.
2. The controller does not intend to transfer personal data to a third country (a country outside the EU) or an international organization.
3. Services provided, providing marketing and support services
   – Google Analytics – records cookies and website usage
   – Google AdWords – records cookies and website usage
   – Google Shopping – request for review, records email if approved during the ordering process.
   

YOUR RIGHTS

1. Under the conditions set forth in the GDPR, you have the right to
   – access your personal data pursuant to Article 15 of the GDPR,
   – rectify your personal data pursuant to Article 16 of the GDPR or restrict processing pursuant to Article 18 of the GDPR,
   – erase your personal data pursuant to Article 17 of the GDPR,
   – object to the processing of personal data pursuant to Article 21 of the GDPR,
   – data portability pursuant to Article 20 of the GDPR,
   – withdraw consent to the processing in writing or electronically to the address or email of the controller specified in Article III of these terms. You can revoke your consent at any time in your customer account.
2. You have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.

CONDITIONS FOR SECURING PERSONAL DATA

1. The controller declares that he has taken all appropriate technical and organizational measures to secure personal data.
2. The controller has taken technical measures to secure data repositories and personal data repositories in paper form, secure/encrypted access to the website, encryption of customer passwords in the database, regular system updates, regular system backups.
3. The controller declares that only authorized persons have access to personal data.

FINAL PROVISIONS

1. By submitting an order through the online order form, you confirm that you have been informed of the terms of personal data protection and that you accept them in full.
2. By checking the consent box via the online form, you agree to these terms. By checking the consent box, you confirm that you have been informed of the terms of personal data protection and that you accept them in full.
3. The controller is entitled to amend these terms. The new version of the personal data protection terms will be published on the controller’s website and a new version of these terms will be sent to your email address provided to the controller.

These terms come into effect on July 12, 2023.