Protection of Personal Data

Why and for what purposes do we use personal data?

Based on the personal data you have provided, we will subsequently contact you regarding our product offerings. We need to process personal data to fulfill our contractual obligations, namely, product delivery. By using your contact details, we will also communicate with you regarding the status of your order, or in relation to any complaints or questions you may have. We will further process personal data to fulfill our obligations under applicable laws (primarily for accounting and tax purposes, or for handling complaints).

  1. Basic Provisions

    • 1.1. The controller of personal data, pursuant to § 5 letter o) of Act No. 18/2018 Coll. on Personal Data Protection, as amended (hereinafter referred to as the "Act"), is Filimex s.r.o., with registered office at Slivková 1748/10, 900 27 Bernolákovo, Company ID: 36845868, VAT ID: SK2022490756, registered in the Commercial Register of the District Court Bratislava III, Section: Sro, Insert No. 48334/B (hereinafter referred to as the "Controller").
    • 1.2. Controller's contact details:
    • 1.3. "Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
    • 1.4. The Controller has not appointed a data protection officer.

  2. Sources and Categories of Processed Personal Data

    • 2.1. The Controller processes personal data that you have provided or data that the Controller obtained based on fulfilling your order.
    • 2.2. The Controller processes your identification and contact details and data necessary for fulfilling the contract.

  3. Legal Basis and Purpose of Processing Personal Data

    • 3.1. The legal basis for processing personal data is:
      • a) Performance of a contract between you and the Controller pursuant to § 13 (1)(b) of the Act.
      • b) The Controller's legitimate interest in direct marketing (especially for sending commercial announcements and newsletters) pursuant to § 13 (1)(f) of the Act.
      • c) Your consent for processing for direct marketing purposes (especially for sending commercial announcements and newsletters) pursuant to § 13 (1)(a) of the Act, if no product or service order was made.
    • 3.2. The purpose of processing personal data is:
      • a) Fulfilling your order and exercising rights and obligations arising from the contractual relationship between you and the Controller. Personal data required for successful order processing (name, contact, and possibly address) are mandatory for concluding and performing the contract; without providing personal data, it is not possible to conclude the contract or for the Controller to perform it.
      • b) Sending commercial announcements and conducting other marketing activities.
    • 3.3. As part of service provision, the Controller uses profiling, i.e., automated processing in accordance with § 28 of the Act. Profiling is used by the Controller to provide services more efficiently and promptly.

  4. Personal Data Retention Period

    • 4.1. The Controller retains personal data:
      • a) For the period necessary to exercise rights and obligations arising from the contractual relationship between you and the Controller (for 15 years from the end of the contractual relationship).
      • b) Until consent for personal data processing is withdrawn for marketing purposes, but no longer than 10 years if data is processed based on consent.
    • 4.2. After the retention period, the Controller deletes the personal data.

  5. Recipients of Personal Data (Controller's Subcontractors)

    • 5.1. Recipients of personal data are individuals:
      • a) Involved in the delivery of goods, services, or payment processing based on the contract.
      • b) Providing e-shop operation services and other services related to e-shop operation.
      • c) Providing marketing services.
    • 5.2. The Controller intends to transfer personal data to countries outside the European Union or international organizations.

  6. Your Rights

    • 6.1. Under the Act, you have the right to:
      • a) Access your personal data pursuant to § 21 of the Act.
      • b) Rectify personal data pursuant to § 22 of the Act, or restrict processing pursuant to § 24 of the Act.
      • c) Erase personal data pursuant to § 23 of the Act.
      • d) Object to processing pursuant to § 27 of the Act.
      • e) Data portability pursuant to § 26 of the Act.
Update cookies preferences