Privacy Policy

Personal Data Protection Terms

I. Basic Provisions

The controller of personal data according to Art. 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: "GDPR") is IRONMAN4X4 CEE, s.r.o. Company ID: 35 780 606 with registered office at Vyšehradská 7/A, 851 06 Bratislava, registered in the Commercial Register maintained by District Court BA I, Section Sro, Insert 21003/B (hereinafter: "controller").

1. The controller's contact details are:

Address: Vyšehradská 4, 851 06 Bratislava

E-mail: ironman4x4@ironman4x4.sk

Phone: 0911 107 780

1. Personal data means all information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified directly or indirectly, in particular by reference to a specific identifier, such as name, identification number, location data, network identifier or one or more specific factors of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2. The controller has not appointed a data protection officer.

II. Sources and Categories of Processed Personal Data

1. The controller processes personal data that you have provided and/or personal data that the controller obtained based on the fulfillment of your order:
• name and surname
• email address
• postal address
• phone
• ...
2. The controller processes your identification and contact data and data necessary for the fulfillment of the contract.

III. Legal Basis and Purpose of Personal Data Processing

1. The legal basis for processing personal data is:
• fulfillment of the contract between you and the controller according to Art. 6 para. 1 letter b) GDPR,
• fulfillment of the controller's legal obligation according to Art. 6 para. 1 letter c) GDPR,
• legitimate interest of the controller in providing direct marketing (especially for sending commercial messages and newsletters) according to Art. 6 para. 1 letter f) GDPR,
• your consent to processing for the purposes of providing direct marketing (especially for sending commercial information and newsletters) according to Art. 6 para. 1 letter a) GDPR in connection with § 7 para. 2 of Act No. 480/2004 Coll., on certain information society services in case there was no order for goods or services.
2. The purpose of processing personal data is:
• processing your order and exercising rights and obligations arising from the contractual relationship between you and the controller; when ordering, personal data are required that are necessary for successful processing of the order (name and address, contact), provision of personal data is a necessary requirement for concluding and fulfilling the contract, without providing personal data it is not possible to conclude the contract or fulfill it by the controller,
• fulfillment of legal obligations towards the state,
• sending commercial messages and conducting other marketing activities.
3. Automatic individual decision-making within the meaning of Art. 22 GDPR takes place on the part of the controller. You have provided your express consent to such processing.

IV. Data Retention Period

1. The controller retains personal data:
• for the period necessary to exercise rights and obligations arising from the contractual relationship between you and the controller and to assert claims from these contractual relationships (for a period of 15 years from the termination of the contractual relationship).
• for the period until consent to the processing of personal data for marketing purposes is revoked, for a maximum of 5 years, if personal data are processed based on consent.
2. After the expiration of the personal data retention period, the controller will delete the personal data.

V. Recipients of Personal Data (Controller's Subcontractors)

1. Recipients of personal data are persons:
• participating in the delivery of goods/services/payment processing based on the contract, (GLS, Zásielkovňa, SDS, Schenker, GlobalPayments, Paypal),
• providing e-shop operation services (Shoptet, S3Money) and other services related to e-shop operation,
• providing marketing services (Google Analytics, Facebook).
2. The controller does not intend to transfer personal data to a third country (to a country outside the EU) or international organization.

VI. Personal Data Processors

1. Processing of personal data is carried out by the controller, however, personal data may also be processed for them by these processors:
• Mailchimp service provider,
• company (Google Analytics, Facebook).
• possibly other providers of processing software services and applications, which the controller does not currently use.
• Heuréka: "We determine your satisfaction with the purchase through email questionnaires as part of the Verified Customers program, in which our e-shop is involved. We send them to you every time you shop with us, unless you refuse to send emails for direct marketing purposes in accordance with § 62 of Act No. 351/2011 Coll. on electronic communications, as amended. We process personal data for the purpose of sending questionnaires as part of the Verified Customers program based on our legitimate interest, which consists in determining your satisfaction with shopping with us. For sending questionnaires, evaluating your feedback and analyzing our market position, we use a processing intermediary, which is the operator of the Heureka.sk portal, to whom we may transfer information about purchased goods and your email address for these purposes. Your personal data are not transferred to any third party for their own purposes when sending email questionnaires. You can object to sending email questionnaires as part of the Verified Customers program at any time by refusing further questionnaires using the link in the email with the questionnaire. In case of your objection, we will not send you the questionnaire further."

VII. Cookies

By visiting our website, you automatically consent to the use and storage of Cookies in your browser, device. Consent to the use of Cookies is also considered the use of the appropriate web browser or other computer settings.

1. A cookie is a small text file that is sent to your computer (tablet, smartphone) from websites on your first visit. Thanks to this simple information, the page remembers information about your visit, such as preferred language and other settings. The cookie file allows the website to recognize whether you have ever visited it and what pages you were interested in. Your visit can thus be more comfortable, without the need to reset the browser. You can also get more information about cookies on these pages: AboutCookies.org, Wikipedia
2. We use cookies to improve services for website visitors. The purpose of cookies is to make it easier and more pleasant for you to use our website. By visiting our website, you automatically express your consent to the use of this technology. Thanks to it, we can record visits and activities on the site, which helps us better understand and orient ourselves in what information you are most interested in. Google Analytics and Hotjar services help us create statistics to understand the needs of visitors. We also use cookies to target advertising in the Google AdWords and Facebook advertising system, thanks to which we try to bring you our services and products that might interest you.
3. Temporary cookies - are necessary to identify the user during login to the application. Without these cookies, some services may not work at all, or their functionality may be limited. Temporary cookies are automatically deleted when the browser is closed. Permanent (third-party cookies) - serve to increase user comfort when using online services, or serve for statistical or advertising purposes. They remain preserved in the browser longer, even after the computer is turned off. These cookies may contain an anonymous identifier of your browser, thanks to which we can measure the traffic of our site and advertising. For measurement and statistics creation, we use the Google Analytics and Hotjar tool, which helps us understand how our visitors move on the site and use our applications. Thanks to the collected information, we try to optimize the site so that we adapt to your needs and provide you with simple and quick access to the information you are looking for. In addition to creating statistics, we use Google Analytics to display more relevant ads in Google properties and on the web, as well as to measure interactions with displayed ads. These cookies do not collect information that can individually identify visitors. We only collect general information about your computer settings, your internet connection, such as your operating system and platform, page browsing patterns and interactions with our pages. However, you can decide to change your browser settings.
4. You can delete Cookies from your browser at any time or completely prohibit their storage through the appropriate browser settings. Please note, however, that the functionality of the site may be limited in case of cookie deactivation. The use of Cookies does not result in processing, storing, collecting, or providing your personal data. Most internet browsers accept cookies automatically. However, you can set rules in browsers for managing cookies of individual pages. You can prohibit storing cookies from all websites except those you trust. Another option is the incognito function. You can use incognito mode when browsing when you do not want your visits or downloads on websites to be recorded in browsing and download history. Cookies created in incognito mode are deleted after closing all incognito mode windows.
5. All data are anonymous and do not identify you as an individual, they only identify access to the site or behavior of a group of users visiting this site.

List of services that use Cookies on our site:

Name	Purpose	Detail
Adwords	Ensures the complete course of the advertising campaign and subsequent retargeting to these users	Google Privacy Policy
Facebook	Ensures the complete course of the advertising campaign from campaign deployment and subsequent retargeting to these users	Facebook Data Policy
Google Analytics	Collects a summary of data on user behavior on the web for the purpose of improving and enhancing the usability of websites. Cookies serve to identify a given user using a random string of numbers that is created for a given user on the first visit.	Google Analytics Cookie Usage
Google Tag Manager	The tool serves as an aggregator of scripts and commands that it launches according to established rules. Google Tag Manager itself uses so-called Cookies only for identifying the website into which it was inserted.	Google Tag Manager for Web Tracking
Hotjar	Web application for tracking visitor movement on pages. Another function is rendering heatmaps, where we can track customer clicks on specific pages and mouse movements. Hotjar functions include: heat maps, recordings, monitoring, forms, surveys and polls, and personnel.	Hotjar Processing Personal Data

 

VIII. Your Rights

1. Under the conditions set out in GDPR, you have:
• the right to access your personal data according to Art. 15 GDPR,
• the right to correct personal data according to Art. 16 GDPR, or restriction of processing according to Art. 18 GDPR,
• the right to erasure of personal data according to Art. 17 GDPR,
• the right to object to processing according to Art. 21 GDPR,
• the right to data portability according to Art. 20 GDPR, and
• the right to revoke consent to processing in writing or electronically to the address or email of the controller stated in Art. I of these terms.
2. You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated, or to turn to the court.

IX. Personal Data Security Conditions

1. The controller declares that they have taken all appropriate technical and organizational measures to secure personal data.
2. The controller has taken technical measures to secure data storage and storage of personal data in paper form, especially with passwords, encryption, antivirus SW, backups.
3. The controller declares that only persons authorized by them have access to personal data.

X. Final Provisions

1. By sending an order from the online order form, you confirm that you are familiar with the personal data protection terms and that you accept them in full.
2. You agree to these terms by checking the consent through the online form. By checking the consent, you confirm that you are familiar with the personal data protection terms and that you accept them in full.
3. The controller is entitled to change these terms. They will publish a new version of the personal data protection terms on their website and at the same time send you a new version of these terms to your email address that you provided to the controller.

These terms come into effect on 20.11.2020.