PERSONAL DATA PROTECTION

/ Principles and instructions on personal data protection provided by the operator to the data subject when obtaining personal data from the data subject and instructions on cookies of the getlux.sk online store /

1. Operator

1.1. The identity and contact details of the Operator are:

Business name: magicsport s.r.o.
Place of business: Bezručova 1191/3, Trenčín 911 01, Slovak Republic

Registered in the Commercial Register of the District Court Trenčín, section: Ltd., file no. 34530/R
Registration number: 48242373

VAT ID: SK2120122345
Bank account: IBAN:SK82 1100 0000 0029 4103 8640, BIC: TATRSKBX within Tatra banka, a.s.

The seller is a VAT payer /Value Added Tax/

1.2. The email and telephone contact for the Operator is:

Email: info@getlux.sk

Phone number: 0903 990 033

1.3. Address of the Operator for sending documents:

magicsport s.r.o., Bezručova 1191/3, Trenčín 911 01, Slovak Republic

1.4. The operator hereby, in accordance with Article 13, 1. and 2. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). (hereinafter referred to as the “Regulation”) provides the Data Subject from whom the Controller obtains personal data concerning him or her with the following information, instructions and explanations:

2. Links

2.1. These principles and instructions on the protection of personal data form part of the General Terms and Conditions published in the Seller's Online Store.

2.2. Pursuant to §3, paragraph 1, letter n), of Act No. 102/2014 Coll., the Seller informs the Consumer that there are no special relevant codes of conduct to which the Seller has committed to comply, whereby a code of conduct is understood to be an agreement or a set of rules that define the behavior of the Seller, who has committed to comply with this code of conduct in relation to one or more specific business practices or business sectors (if these are not stipulated by law or other legal regulation or measure of a public administration body), which the Seller has committed to comply with, and the manner in which the Consumer can familiarize themselves with them or obtain their text.

3. Privacy and use of cookies. Instructions and explanation of cookies

3.1. The operator provides this brief explanation of the function of cookies:

3.1.1. Cookies are text files that contain a small amount of information that is downloaded to your computer, mobile phone or other electronic device that you use to browse the web domain when you visit a website.

Cookies allow the operator's web domain not only to recognize the user's device, but also to allow the user to access functions on the site.

We divide cookies into two basic types, namely:

Persistent cookies – these cookies remain on the user's device for the period specified in the cookie. They are activated each time the user visits the web domain that created the cookie.

Session cookies – these cookies allow the website operator to link the user’s activities when the user opens a browser window and ends when the browser window is closed. Session cookies are created temporarily. All session cookies are deleted when the browser is closed.

3.2.Explanation of cookies

3.2.1.A cookie is a small text file that a website places on your computer or mobile device when you browse it. This file allows the website to store information about your actions and preferences (such as your login name, language, font size and other display settings) for a certain period of time, so that you do not have to enter them again the next time you visit the website or browse its individual pages.

3.3.Instructions on the use of cookies

3.3.1. The operator's internet domain uses cookies to store:

3.3.1.1. the fact that you have already responded to the survey displayed in a separate window (pop-up) through which you can express your opinion on the content of the site (it will not be displayed again);

3.3.1.2. whether you have agreed (or not agreed) to our use of cookies on this website.

3.3.1.3. Marketing a remarketing

Likewise, some subpages that are part of the Operator's pages use cookies to anonymously collect statistical data about who is the referrer of the source of our internet domain and how you reached our internet domain.

Allowing cookies is not strictly necessary for the website to function properly, but it will provide you with a better user experience. You can delete or block cookies.

The information stored in cookies will not be used to identify you personally and the structure of the data is fully under our control. Cookies are not used for purposes other than those set out in this text. Some of our sites or sub-sites may use additional or different cookies than those set out in the previous text. In such cases, details of their use will be provided in a separate cookie notice on the site in question.

3.4.How to control cookies

3.4.1.Súbory cookies môžete kontrolovať a/alebo zmazať podľa uváženia – podrobnosti si pozrite na stránke aboutcookies.org. Môžete vymazať všetky súbory cookies uložené vo svojom počítači a väčšinu prehliadačov môžete nastaviť tak, aby ste im znemožnili ich ukladanie.

4. Personal data processed

4.1. The operator processes the following personal data on its website: name, surname, place of residence, email address, telephone number, data obtained from cookies, IP addresses.

5. Contact details of the person responsible for the collection and processing of personal data, the controller's representative

5.1. The operator has not designated a person responsible for the collection and processing of personal data.

5.2. The controller has not appointed its representative in matters of collection and processing of personal data.

5.3. The Operator is also the Seller within the meaning of the term set out in the General Terms and Conditions of this website.

6. Purposes of processing personal data of the Data Subject

6.1. The purposes of processing the personal data of the Data Subject are in particular:

6.1.2. recording, creation and processing of contracts and client data for the purpose of concluding contracts with third parties

6.1.3. processing of accounting documents and documents related to the Operator's business activities

6.1.4. compliance with legal regulations in connection with the archiving of documents and evidence, e.g. according to Act No. 431/2002 Coll., the Accounting Act as amended and other relevant regulations

6.1.4.marketing and similar advertising activities of the Operator

6.1.5. activities related to the Operator's activities on social networks, for example: Facebook, Instagram, Twitter and others.

6.1.6. the Operator's activities in connection with internet activities such as advertising targeting through Facebook Ads, Google Ads and others.

6.1.7. the Operator's activities in connection with the fulfillment of the request, order, contract and similar institutions of the Data Subject.

7. Legal basis for processing the personal data of the Data Subject

7.1. The legal basis for processing personal data of Data Subjects is, depending on the specific personal data being processed and the purpose of their processing, the consent of the Data Subjects to the processing of personal data.

8. Recipients or categories of recipients of personal data

8.1. The recipients of the personal data of the Data Subject will be or may at least be:

8.1.1. statutory bodies or their members of the Operator

8.1.2. persons performing work activities in an employment or similar capacity for the Operator.

8.1.3. the Operator's sales representatives and other persons cooperating with the Operator in fulfilling the Operator's tasks. For the purposes of this document, all natural persons performing dependent work for the Operator on the basis of an employment contract or agreements on work performed outside of an employment relationship will be considered employees of the Operator.

8.1.4. The recipients of the personal data of the Data Subject will also be the operator's collaborators, its business partners, suppliers and contractual partners, in particular: an accounting company, a company providing services related to the creation and maintenance of software, a company providing legal services to the operator, a company providing consultancy to the operator, companies providing transport and delivery of products to buyers and third parties, marketing companies, companies operating social networks.

8.1.5. The recipients of personal data will also be courts, criminal justice authorities, tax authorities and other state authorities, if so provided by law. Personal data will be provided by the Operator to the given authorities and state institutions on the basis of and in accordance with the legal regulations of the Slovak Republic.

9. Information on the provision of personal data to third countries and their retention period:

9.1. Not applicable. The operator does not transfer personal data of persons to third countries.

9.2. Personal data will be stored in accordance with legal regulations for the necessary time for which they are needed for the purposes of fulfilling the contract and their subsequent archiving.

10. Information on the existence of relevant rights of the Data Subject:

10.1. The data subject has, among others, the following rights, whereby:

10.1.1. Clause 10.1 does not affect other rights of Data Subjects.

10.1.2. The Data Subject's right to access data pursuant to Article 15 of the Regulation, which contains:

the right to obtain from the Controller confirmation as to whether or not the personal data of the Data Subject are being processed, and if so, to what extent. At the same time, if they are being processed, the Data Subject has the right to obtain from the Controller information on the purpose of their processing, in particular information on: the purpose of their processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations, the expected period of storage of the personal data or, if that is not possible, information on the criteria for determining it, the existence of the right to request from the Controller the rectification of personal data concerning the Data Subject or their erasure or restriction of processing and the existence of the right to object to such processing, the right to lodge a complaint with a supervisory authority, if the personal data were not obtained from the Data Subject, any available information as to their source, the existence of automated decision-making, including profiling referred to in Article 22(1) of the GDPR. 1. and 4. of the Regulation and, in these cases, at least meaningful information on the procedure used, as well as the significance and foreseeable consequences of such processing of personal data for the Data Subject, on the appropriate safeguards pursuant to Article 46 of the Regulation regarding the transfer of personal data, if personal data are transferred to a third country or an international organisation.

10.1.3. the right to be provided with a copy of the personal data being processed, provided that the right to be provided with a copy of the processed personal data must not have adverse consequences for the rights and freedoms of others.

10.1.4. the right of the Data Subject to rectification pursuant to Article 16 of the Regulation, which includes the right: to have the Controller rectify inaccurate personal data concerning the Data Subject without undue delay; the right to have incomplete personal data of the Data Subject completed, including by providing a supplementary statement by the Data Subject; the right of the Data Subject to erasure of personal data (the so-called "right to be forgotten") pursuant to Article 17 of the Regulation, which includes:

10.1.5. the right to obtain from the Operator the erasure of personal data concerning the Data Subject without undue delay if one of the following reasons applies:

the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, the data subject withdraws the consent on the basis of which the processing is carried out, provided that there is no other legal basis for the processing of the personal data, the data subject objects to the processing of the personal data pursuant to Article 21(1) of the Regulation and there are no overriding legitimate grounds for the processing of the personal data or the data subject objects to the processing of the personal data pursuant to Article 21(2) of the Regulation, the personal data have been processed unlawfully, the personal data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State to which the Controller is subject, the personal data were collected in connection with the offering of information society services pursuant to Article 8(1) of the Regulation;

10.1.6. the right to obtain from the Controller, who has disclosed the personal data of the Data Subject, taking into account available technology and the cost of implementation, reasonable measures, including technical measures, to inform other controllers processing personal data that the Data Subject has requested the erasure of all links to, or copies or replications of, those personal data, provided that the right to erasure of personal data which is subject to the rights under Article 17(1) and (2) of the Regulation shall not apply where the processing of personal data is necessary:

10.1.7. to exercise the right to freedom of expression and information.

10.1.8. to comply with a legal obligation that requires processing under European Union law or the law of a Member State to which the Controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the Controller.

10.1.9.for reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) of the Regulation, as well as Article 9(3) of the Regulation.

10.1.10. for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes pursuant to Article 89. 1. Regulation, insofar as it is likely that the right referred to in Article 17. 1. The Regulations will render impossible or seriously difficult the achievement of the purposes of such processing of personal data; or for the establishment, exercise or defence of legal claims;

10.1.11. the right of the Data Subject to restrict the processing of personal data pursuant to Article 18 of the Regulation, the content of which is:

10.1.12. the right to have the Controller restrict the processing of personal data where one of the following applies: the data subject contests the accuracy of the personal data, for a period allowing the Controller to verify the accuracy of the personal data, the processing of the personal data is unlawful and the data subject objects to the erasure of the personal data and requests the restriction of their use instead, the data subject no longer needs the personal data for the purposes of the processing, but the data subject needs them for the establishment, exercise or defence of legal claims, the data subject has objected to the processing pursuant to Article 21 of the GDPR. 1. Regulation, pending verification whether the legitimate reasons on the part of the Controller outweigh those of the Data Subject;

10.1.13. the right to have such restricted personal data processed, with the exception of storage, only with the consent of the Data Subject or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State;

10.1.14. the right to be informed in advance about the lifting of restrictions on the processing of personal data;

10.1.15. the right of the Data Subject to comply with the notification obligation towards recipients pursuant to Article 19 of the Regulation, which includes: the right for the Controller to notify each recipient to whom the personal data have been provided of any correction or erasure of personal data or restriction of processing carried out pursuant to Article 16, Article 17(1)(a) 1. and Article 18 of the Regulation, unless this proves impossible or involves disproportionate effort, the right for the Controller to inform the Data Subject about these recipients if the Data Subject so requests;

10.1.16. the right of the Data Subject to data portability pursuant to Article 20 of the Regulation, which includes: the right to receive the personal data concerning the Data Subject, which he or she has provided to the Controller, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from the Controller, if:

a/ the processing is based on the consent of the Data Subject pursuant to Article 6(1)(a) of the Regulation or Article 9(2)(a) of the Regulation, or on a contract pursuant to Article 6(1)(b) of the Regulation, and at the same time

b/ the processing is carried out by automated means, and at the same time:

10.1.17. the right to receive personal data in a structured, commonly used and machine-readable format and the right to transmit these data to another controller without hindrance from the Controller, which will not adversely affect the rights and freedoms of others;

10.1.18. the right to transfer personal data directly from one controller to another, if technically feasible;

10.1.19. the right of the Data Subject to object pursuant to Article 21 of the Regulation, which contains:

10.1.20. the right to object at any time, on grounds relating to the particular situation of the Data Subject, to processing of personal data concerning him or her, which is carried out on the basis of Article 6(1) of the GDPR. 1. letter e) or f) of the Regulation, including objection to profiling based on these provisions of the Regulation;

10.1.21. in the event of exercising the right to object at any time, on grounds relating to the particular situation of the Data Subject, to the processing of personal data concerning him or her, which is carried out on the basis of Article 6(1) of the GDPR. 1. letter e) or f) of the Regulation, including the objection to profiling based on these provisions of the Regulation, the right for the Operator to no longer process the personal data of the Data Subject unless the Operator demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Data Subject, or for the establishment, exercise or defence of legal claims

10.1.22. the right to object at any time to the processing of personal data concerning the Data Subject for direct marketing purposes, including profiling to the extent that it is related to direct marketing; however, if the Data Subject objects to the processing of personal data for direct marketing purposes, the personal data shall no longer be processed for such purposes;

10.1.23. in connection with the use of information society services, the right to exercise the right to object to the processing of personal data by automated means using technical specifications;

10.1.24. the right to object, on grounds relating to the particular situation of the Data Subject, to processing of personal data concerning the Data Subject, where the personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1). 1. Regulations, except where processing is necessary for the performance of a task carried out for reasons of public interest;

10.1.25. the right of the Data Subject related to automated individual decision-making pursuant to Article 22 of the Regulation, the content of which is:

10.1.26. the right not to be subject to a decision based solely on automated processing of personal data, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, except in cases pursuant to Article 22(1). 2. Regulations [i.e. except where the decision: (a) is necessary for entering into, or the performance of, a contract between the Data Subject and the Controller,

10.1.27. permitted by European Union law or the law of a Member State to which the Controller is subject and which also lays down suitable measures to safeguard the rights and freedoms and legitimate interests of the Data Subject or (c) based on the Data Subject's explicit consent.

11. Information on the Data Subject's right to withdraw consent to the processing of personal data:

11.1. The data subject has the right to withdraw his or her consent to the processing of personal data at any time, without this affecting the lawfulness of the processing of personal data based on the consent given before its withdrawal.

The data subject has the right to withdraw his or her consent to the processing of personal data at any time, in whole or in part. Partial withdrawal of consent to the processing of personal data may concern a certain type of processing operation(s), while the lawfulness of the processing of personal data to the extent of the remaining processing operations remains unaffected. Partial withdrawal of consent to the processing of personal data may concern a certain specific purpose(s) of the processing of personal data, while the lawfulness of the processing of personal data for other purposes remains unaffected.

The Data Subject may exercise the right to withdraw consent to the processing of personal data in written form to the address of the Operator registered as its place of business in the Trade Register at the time of withdrawal of consent to the processing of personal data or in electronic form via electronic means (by sending an e-mail to the Operator's e-mail address specified in the identification of the Operator in this document).

12. Information on the Data Subject's right to lodge a complaint with the supervisory authority:

12.1. The data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement, if he or she considers that the processing of personal data concerning him or her infringes the Regulation, without prejudice to any other administrative or judicial remedy.

The data subject has the right to be informed by the supervisory authority to which the complaint has been lodged of the progress and outcome of the complaint, including the possibility of seeking a judicial remedy pursuant to Article 78 of the Regulation.

12.2. The supervisory authority in the Slovak Republic is the Personal Data Protection Office of the Slovak Republic.

13. Information on the existence/non-existence of the Data Subject's obligation to provide personal data and Information related to automated decision-making, including profiling:

13.1. The Operator informs the Data Subject that the provision of the Data Subject's personal data is necessary for the conclusion of the purchase contract and its fulfillment. The Operator informs the Data Subject that the Data Subject is not obliged to provide personal data or to grant consent to their processing. Failure to provide personal data and/or failure to grant consent to the processing of personal data will result in the Operator being unable to conclude and fulfill the purchase contract.

13.2. Since in the case of the Operator there is no processing of the Data Subject's personal data in the form of automated decision-making, including profiling referred to in Article 22(1). 1. and 4. of the Regulation, the Operator is not obliged to provide information pursuant to Article 13(2)(f) of the Regulation, i.e. information on automated decision-making, including profiling, and on the procedure used, as well as on the significance and foreseeable consequences of such processing of personal data for the Data Subject. Not applicable.

14. Final provisions

14.1. These Principles and instructions on the protection of personal data and instructions on cookies form an integral part of the General Terms and Conditions. Documents - General Terms and Conditions of this online store are published on the domain of the Seller's online store.

14.2. These personal data protection principles come into force and effect upon their publication in the Seller's Online Store on 06.05.2024