GDPR

General information on the processing of personal data

1. Affected person – buyer/website visitor,

Operator - online store operator: SuperLove.shop, Czech Healthcare s.r.o., Za Farou 49, 66441 Troubsko, Czech Republic ID: 29361419

2. Recipients of personal data

Česká pošta, s.p..
Politických vězňů 909/4
225 99 Praha 1
Czech Republic
IČ: 47114983

Slovak Parcel Service s.r.o.
Senecká cesta  1
90028 Ivanka pri Dunaji 5
Slovakia
IČO: 31329217

Slovenská pošta, a. s.
Partizánska cesta 9
975 99 Banská Bystrica 1
Slovakia
IČO: 36631124

Zásielkovňa s. r. o.
Muchovo námestie 3624/8
851 01 Bratislava - mestská časť Petržalka
Slovakia
IČO: 48136999

FROGMAN s.r.o.
Komenského 25
Malenovice
763 02 Zlín
Czech Republic
IČ: 49434624

GOPAY s.r.o.
Planá 67
370 01 Planá
Czech Republic
IČO: 26046768

3. Due to the scope and subject of its activity, the operator has no obligation pursuant to § 44 Act No. 18/2018 Coll. on the protection of personal data to determine the responsible person. However, if you have any questions in connection with your personal data, write to us at the email: info@superlove.shop, call the number: +420608655001, or visit us in person at the above address of the operator.

The operator of the site is responsible for the processing of personal data according to Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, (hereinafter referred to as GDPR) The person concerned has the right to on the basis of a written request from the operator to request information about their personal data, which are the subject of processing or liquidation or correction of their personal data by the operator.

4. The person concerned is obliged to provide true and up-to-date personal data. The rights of the data subject are governed by chapter 3 of the GDPR. The affected person has the right to: file a complaint with a supervisory authority, object to processing, request from the operator access to personal data concerning the affected person, to correct or delete or limit the processing of personal data, as well as the right to data portability.

Instruction on the rights of the person concerned

The affected person has the right to demand from the operator, based on a written request:

and, confirmation of whether or not personal data about her are being processed,

b, in a generally comprehensible form, information on the processing of personal data in the information system to the extent of the operator's and intermediary's identification data (if established); the purpose of personal data processing; list or scope of processed personal data; instruction on the voluntariness or obligation to provide the requested personal data, the validity period of the consent or notification that the legal regulation imposes the obligation to provide personal data; third parties, if personal data is to be provided to them; range of recipients, if personal data is to be made available to them; form of publication of personal data, if personal data are to be published; third countries, if personal data is to be transferred to these countries,

c, in a generally comprehensible form, precise information about the source from which the operator obtained her personal data for processing,

d, in a generally comprehensible form, a list of her personal data that is the subject of processing,

e, correction or disposal of her incorrect, incomplete or out-of-date personal data, which are the subject of processing,

f, liquidation of her personal data, the purpose of which has ended; if the subject of processing is official documents containing personal data, you can request their return,

g, liquidation of her personal data, which are the subject of processing, if there has been a violation of the law,

h, blocking of her personal data due to withdrawal of consent before the expiry of its validity period, if the operator processes personal data based on her consent. The aforementioned request or information about the leakage of personal data or other serious facts related to the processing of personal data by the operator can be addressed to the operator at the above address or at tel. number: +420608655001, or at the email address: info@superlove.shop

Right of access to personal data

As a data subject, you have the right to have the operator confirm whether it is processing personal data concerning you. If the operator processes your personal data, you have the right to obtain access to them and other information about the purpose of processing your personal data, the category of processed personal data, to whom your personal data was or should be provided, in particular about the recipient in a third country or international organization, if applicable; if personal data is transferred to a third country or an international organization, you have the right to be informed about adequate guarantees required by law, the period of storage of personal data; if this is not possible, information about the criteria for its determination, the right to request the correction of your personal data, their deletion or restriction of their processing, or the right to object to the processing of personal data, the right to submit a proposal to initiate proceedings on the protection of personal data, the source of personal data, if personal data were not obtained from you, the existence of automated individual decision-making, including profiling. Profiling is any form of automated processing of personal data, which consists of the use of such personal data to evaluate certain personal aspects concerning a person, primarily related to performance at work, financial circumstances, health, personal preferences, interests, reliability, behavior, location or movement) In these cases, the operator will provide the data subject with information, in particular, about the procedure used, as well as the meaning and expected consequences of such processing of personal data for the data subject. The operator is obliged to provide you with your personal data that it processes. For repeated provision of personal data, the operator may charge a reasonable fee corresponding to administrative costs. The operator is obliged to provide you with personal data in the manner requested by you. The right to obtain personal data must not have adverse consequences on the rights of other natural persons.

The right to correct personal data

As a data subject, you have the right to have the operator correct incorrect personal data concerning you without undue delay. Depending on the purpose of personal data processing, you have the right to supplement your incomplete personal data.

The right to object to the processing of personal data

You have the right to object to the processing of your personal data for a reason related to your specific situation, if the operator performs profiling or processes your personal data on the following legal bases:

 - the processing of personal data is necessary to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator,

 - the processing of personal data is necessary for the purpose of the legitimate interests of the operator or a third party. The operator may not continue to process your personal data if it does not demonstrate the necessary legitimate interests in processing personal data that outweigh your rights or interests or grounds for asserting a legal claim. You have the right to object to the processing of personal data concerning you for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing. If you object to the processing of personal data for the purpose of direct marketing, the operator may no longer process personal data for the purpose of direct marketing. You have the right to object to the processing of personal data concerning you, for reasons related to your specific situation, if your personal data is processed for a scientific purpose, for the purpose of historical research or for a statistical purpose, except in cases where the processing of personal data is necessary for the fulfillment tasks for reasons of public interest.

The right to erasure of personal data

As a data subject, you have the right to have the operator delete personal data concerning you without undue delay. If you ask the operator to delete your personal data, the operator is obliged to delete them in the following cases:

and, personal data are no longer necessary for the purpose for which they were obtained or otherwise processed,

b, you revoke the consent on the basis of which the operator processes your personal data and there is no other legal basis for processing personal data,

c, you will object to the processing of personal data and there are no valid reasons for the processing of personal data or you will object to the processing of personal data for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing,

d, personal data is processed illegally,

e, the reason for the erasure is the fulfillment of the obligation established by the legal order,

f, personal data was obtained in connection with the offer of information society services according to § 15 par. 1 of the Act If the operator has published your personal data and is obliged to delete them on the basis of the above conditions, it is also obliged, in view of the available technology and costs, to inform other operators who process your personal data so that these operators delete links to your personal data and their copies or write-offs. The operator has no obligation to delete your personal data if necessary

and, to exercise the right to freedom of expression or the right to information,

b, to fulfill an obligation according to the law or an international agreement or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator,

c, for reasons of public interest in the field of public health,

d, for the purpose of archiving, for a scientific purpose, for the purpose of historical research or for a statistical purpose, if it is likely that the erasure will make it impossible or seriously hinder the achievement of the goals of such processing, or

e, to assert a legal claim.

The right to restrict the processing of personal data

You have the right to have the operator limit the processing of your personal data if

and, you object to the correctness of your personal data; the operator will limit the processing of your personal data for the period of verification of their correctness,

b, the processing of your personal data is illegal and instead of deletion, you request a restriction of their use,

c, the operator no longer needs personal data for the purpose of processing personal data, but you need them to assert a legal claim, or

d, you object to the processing of personal data;

e, the operator will limit the processing of your personal data until it is verified whether the legitimate reasons on the part of the operator prevail over your legitimate reasons. If the processing of personal data has been limited, in addition to storage, the operator may process personal data only with the consent of the person concerned or for the purpose of asserting a legal claim, for the protection of persons or for reasons of public interest. The operator is obliged to inform you before the restriction on the processing of personal data is cancelled.

Notification obligation in connection with correction, deletion or restriction of processing of personal data

The operator is obliged to notify the recipient (anyone to whom your personal data has been provided) of the correction of your personal data, the deletion of personal data or the restriction of the processing of personal data, unless this proves to be impossible or requires unreasonable effort. If you request it, the operator will inform you about these recipients.

The right to portability of personal data

You have the right to receive personal data concerning you that you have provided to the operator in a structured, commonly used and machine-readable format. At the same time, you have the right to transfer this personal data to another operator, if it is technically possible and if the processing of your personal data is carried out by automated means (i.e. electronically), while the personal data is processed either

and, based on your consent,

b, or are necessary for the performance of the contract to which you are a party, or for the implementation of measures prior to the conclusion of the contract based on your request. This right must not have adverse consequences on the rights of other persons. Exercising the right to portability does not affect the right to erasure of personal data. The right to portability does not apply to the processing of personal data necessary to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator.

The right to file a motion to initiate proceedings on personal data protection

In the event that you are directly affected by your rights established by the Act on Personal Data Protection, you have the right, according to § 100 of this Act, to submit a proposal to the Office for the Protection of Personal Data of the Slovak Republic to initiate proceedings on the protection of personal data. The purpose of the procedure is to determine whether the rights of natural persons have been violated during the processing of their personal data or whether the law has been violated, and in the case of detection of deficiencies, if it is reasonable and expedient, to impose remedial measures, or a fine for violating the law. The Office publishes the sample proposal on its website. The motion to initiate proceedings must contain evidence to support the claims stated in the motion and a copy of the document or other evidence demonstrating the exercise of the right by the controller (right to access personal data, right to request correction of personal data, right to delete or limit processing of personal data, right to object to processing personal data, the right to portability of personal data), if the person concerned has exercised such a right, or stating the reasons worthy of special attention for the non-application of the right in question.

The above-mentioned rights (except for the right to submit a proposal for the initiation of personal data protection proceedings) can be exercised by e-mail or in writing by post with the operator who supervises the processing of personal data. The operator can also be notified of a leak of personal data or other serious facts related to the processing of personal data by the operator.

If the person concerned suspects that his/her personal data is being processed without authorization, he/she can submit a proposal for the initiation of personal data protection proceedings to the Personal Data Protection Office of the Slovak Republic, with registered office at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, or contact the office via its website headquarters http://www.dataprotection.gov.sk.

If the person concerned does not have full legal capacity, his rights can be exercised by a legal representative. If the person concerned is not alive, his/her rights, which he/she had under this Act, can be exercised by a close person.

According to the Act on the Protection of Personal Data, the operator will process the request of the person concerned free of charge, except for payment in an amount that cannot exceed the amount of material costs incurred for the purpose of making copies, importing technical media and sending information to the person concerned, unless a special law provides otherwise. The operator is obliged to process the request of the affected person in writing no later than 30 days from the date of delivery of the request. The operator shall notify the affected person and the Office for Personal Data Protection of the Slovak Republic in writing without undue delay of the limitation of the rights of the data subject pursuant to the Personal Data Protection Act.

The operator hereby informs you, as the affected person, about the protection of your personal data and instructs you about your rights in relation to the protection of personal data within the scope of this written information obligation.

Processing of personal data for the purpose of placing an order and complaint procedure

1. Purposes of personal data processing: issuance of a tax document, contacting the customer regarding the order, fulfillment of the contract, handling the application of liability for defects of the sold products - resulting from the execution of the contract.

2. Legal basis for processing personal data: a) Processing of personal data (name, surname, title, street and number, zip code, city) is necessary according to a special regulation or an international treaty to which the Slovak Republic is bound. Above all, according to Act no. 222/2004 Coll. on value added tax. b) The processing of personal data (email, telephone contact) is necessary for the performance of the contract.
3. Period of storage of personal data – ten years
4. Provision of personal data is a contractual obligation.

Processing of personal data for the purpose of sending marketing information

For the processing of personal data for the purpose of sending marketing information, the general information on the processing of personal data listed above applies, as well as:

1. Purposes of personal data processing: sending marketing information

2. Legal basis for processing personal data: Article 6, paragraph 1 letter a) GDPR - the person concerned has expressed consent to the processing of his personal data for one or more specific purposes

3. Period of storage of personal data – ten years

THE PROVISION OF PERSONAL DATA IN CASE OF A LEGITIMATE INTEREST IS OBLIGATORY TO ACHIEVE THIS LEGITIMATE INTEREST. WHEN PROCESSING ON THE BASIS OF CONSENT, THE PROVISION OF PERSONAL DATA IS VOLUNTARY.

Automated individual decision-making, including profiling

The data subject has the right not to be subject to a decision that is based solely on automated processing, including profiling, and which has legal effects that concern him or similarly significantly affect him.