Privacy policy

Contact Information of the Controller

Deklik s.r.o. Business ID (IČO): 55784861 Tax ID (DIČ): 2122088111 Južná trieda 2881/4B 040 01 Košice – mestská časť Juh

Operational address: Salon Kambria Štefánikova 20, Košice – Staré Mesto, 04 001

The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “Regulation”), the Personal Data Processing Act, and Act No. 18/2018 Z. z. on the protection of personal data and on the amendment of certain acts in the valid wording.

1. Data Subject – Buyer/Visitor of the website, Controller – Operator of the online store: Deklik s.r.o., IČO 55784861, DIČ 2122088111, Južná trieda 2881/4B, 040 01 Košice – mestská časť Juh, e-mail: info@deklik.sk, info@kambria.sk
2. Recipients of Personal Data –
   • Packeta Slovakia s.r.o., Kopčianska 3338/82A, 851 01 Bratislava – mestská časť Petržalka, Business ID (IČO): 48136999
   • Backend Acc s.r. o., Jiráskova 11675/56A, 080 05 Prešov, Business ID (IČO): 55770738
   • WebCreators, s.r.o., Československej armády 24, 974 01 Banská Bystrica, Business ID (IČO): 45329702
   • Direct Parcel Distribution SK s.r.o., Pri letisku 5, 821 04 Bratislava – mestská časť Ružinov, Business ID (IČO): 35834498
3. Controller does not have the obligation to appoint a responsible person in the sense of § 44 of the Personal Data Protection Act concerning the extent and subject of its activities. However, if you have any questions regarding your personal data, contact us via e-mail: info@deklik.sk, phone: 0908206347, or visit us in person at the above-mentioned address of the controller. The website operator responsible for processing personal data according to the regulation of the European Parliament and the Council (EU) 2016/679 of April 27, 2016, on the protection of individuals concerning the processing of personal data and the free movement of such data (hereinafter referred to as GDPR). The data subject has the right, based on a written request to the controller, to obtain information about their personal data that is the subject of processing, liquidation, or correction of their personal data by the controller.
4. Data Subject is obliged to provide truthful and current personal data. The rights of the data subject are regulated by Chapter 3 of the GDPR. The data subject has the right to:
   • Lodge a complaint with the supervisory authority.
   • Object to processing.
   • Request access to personal data concerning the data subject, correction, deletion, or restriction of personal data processing.
   • Data portability.

Information on the Rights of the Data Subject

The data subject has the right, based on a written request to the controller, to demand:

1. Confirmation whether personal data about them are or are not being processed. b. Information in an understandable form about the processing of personal data in the information system, including the identification data of the controller and the processor (if appointed); the purpose of processing personal data; a list or scope of processed personal data; information about the voluntariness or obligation to provide the required personal data; the period of validity of consent or notice imposing an obligation to provide personal data; third parties to whom personal data will be provided; the circle of recipients, if personal data are to be made available to them; the form of personal data disclosure, if personal data are to be disclosed; third countries if a transfer of personal data to these countries is to take place. c. In an understandable form, precise information on the source from which the controller obtained their personal data for processing. d. In an understandable form, a list of their personal data subject to processing. e. Correction or liquidation of their inaccurate, incomplete, or outdated personal data subject to processing. f. Liquidation of their personal data subject to processing, the purpose of processing of which has ended; if official documents containing personal data are subject to processing, they may request their return. g. Liquidation of their personal data subject to processing if a breach of the law has occurred. h. Blocking of their personal data due to the withdrawal of consent before the expiration of its validity, if the controller processes personal data based on their consent.

Any request or information about the leakage of personal data or other serious facts related to the processing of personal data by the controller can be addressed to the controller at the above-mentioned address or at tel. number: 0908206347, or at the e-mail address: info@dekliksk.

Right to Access Personal Data

As a data subject, you have the right to have the controller confirm whether personal data concerning you are being processed. If the controller processes your personal data, you have the right to access them and further information about the purpose of processing your personal data, the category of processed personal data, to whom your personal data have been or are to be provided, especially about the recipient in a third country or an international organization if possible; if personal data are transferred to a third country or an international organization, you have the right to be informed about the appropriate safeguards required by law, the retention period of personal data; if this is not possible, information on the criteria for determining it, the right to request the correction of your personal data, their deletion or restriction of processing, or the right to object to the processing of personal data, the right to file a motion to initiate proceedings for the protection of personal data, sources of personal data, if personal data were not obtained from you, the existence of automated individual decision-making, including profiling. In these cases, the controller will provide the data subject with information mainly about the procedure used, as well as about the meaning and expected consequences of such processing of personal data for the data subject. The controller must provide you with your personal data that it processes. For repeated provision of personal data, the controller may charge a reasonable fee corresponding to administrative costs. The controller is obliged to provide you with your personal data in the manner requested by you. The right to obtain personal data must not have adverse effects on the rights of other natural persons.

Right to Correction of Personal Data

As a data subject, you have the right to have the controller correct your incorrect personal data without undue delay. Depending on the purpose of processing personal data, you have the right to supplement your incomplete personal data.

Right to Object to the Processing of Personal Data

You have the right to object to the processing of your personal data for reasons related to your specific situation if the controller carries out profiling or processes your personal data on these legal grounds:

• Processing of personal data is necessary to perform a task carried out in the public interest or in the exercise of official authority entrusted to the controller,
• Processing of personal data is necessary for the legitimate interests of the controller or a third party. The controller must not further process your personal data unless it demonstrates the necessary legitimate interests for processing personal data that outweigh your rights or interests or the reasons for asserting a legal claim. You have the right to object to the processing of your personal data concerning you for the purpose of direct marketing, including profiling, to the extent to which it relates to direct marketing. If you object to the processing of personal data for the purpose of direct marketing, the controller must not further process personal data for the purpose of direct marketing. You have the right to object to the processing of personal data concerning you for reasons related to your specific situation if your personal data are processed for scientific purposes, historical research, or statistical purposes, except when the processing of personal data is necessary for the performance of a task for reasons of public interest.

Right to Erasure of Personal Data

As a data subject, you have the right to have the controller erase your personal data without undue delay. If you ask the controller to delete your personal data, the controller must delete them in these cases:

• Personal data are no longer needed for the purpose for which they were obtained or otherwise processed,
• You revoke the consent on the basis of which the controller processes your personal data, and there is no other legal basis for processing personal data,
• You object to the processing of personal data, and there are no overriding legitimate reasons for processing personal data, or you object to the processing of personal data for the purpose of direct marketing, including profiling to the extent to which it relates to direct marketing,
• Personal data are processed unlawfully,
• The reason for deletion is the fulfillment of the obligation imposed by law,
• Personal data were obtained in connection with the offer of services of the information society according to § 15 par. 1 of the Act. If the controller publishes your personal data and is obliged to delete them based on the above conditions, it also has the obligation, with regard to the available technology and costs, to inform other controllers who process your personal data so that these controllers delete links to your personal data and their copies or replicas. The controller is not obliged to delete your personal data if they are necessary:
• To exercise the right to freedom of expression or the right to information,
• To fulfill an obligation under the law or an international treaty or to fulfill a task carried out in the public interest or in the exercise of official authority entrusted to the controller,
• For reasons of public interest in the field of public health,
• For archival purposes, for scientific purposes, for historical research, or for statistical purposes if it is likely that deletion will make it impossible or seriously hinder the achievement of the objectives of such processing, or
• To assert a legal claim.

Right to Restrict Processing of Personal Data

You have the right to request the controller to restrict the processing of your personal data if:

1. you contest the accuracy of your personal data; the controller will restrict the processing of your personal data for the period necessary to verify their accuracy, b. the processing of your personal data is unlawful, and instead of erasure, you request the restriction of their use, c. the controller no longer needs the personal data for the purposes of processing, but you need them for the establishment, exercise, or defense of legal claims, or d. you object to the processing of personal data; e. the controller will restrict the processing of your personal data until it is verified whether the legitimate grounds on the part of the controller override your legitimate reasons. If the processing of personal data is restricted, in addition to storage, the controller may process personal data only with the consent of the data subject or for the purpose of asserting legal claims, protecting individuals, or for reasons of public interest. The controller is obliged to inform you before the restriction of processing personal data is lifted.

Notification Obligation Regarding Correction, Deletion, or Restriction of Processing of Personal Data

The controller is obliged to notify the recipient (anyone to whom your personal data has been provided) of the correction, deletion, or restriction of the processing of personal data if this is not impossible or does not require disproportionate effort. If requested, the controller informs you about these recipients.

Right to Data Portability

You have the right to obtain your personal data provided to the controller in a structured, commonly used, and machine-readable format. At the same time, you have the right to transfer this personal data to another controller if it is technically feasible and if the processing of your personal data is carried out by automated means (i.e., electronically), and personal data are processed either:

1. based on your consent, b. or are necessary for the performance of a contract to which you are a party or for the performance of pre-contractual measures requested by you. This right must not adversely affect the rights and freedoms of others. Exercising the right to data portability does not affect the right to erasure of personal data. The right to data portability does not apply to the processing of personal data necessary to fulfill a task carried out in the public interest or in the exercise of official authority entrusted to the controller.

Right to Submit a Proposal for Initiating Proceedings for the Protection of Personal Data

If you believe that your rights under the Personal Data Protection Act have been directly infringed, you have the right, under § 100 of this Act, to submit a proposal to the Office for Personal Data Protection of the Slovak Republic to initiate proceedings for the protection of personal data. The purpose of the proceedings is to determine whether there has been a violation of the rights of individuals in the processing of their personal data or a violation of the law, and if deficiencies are found, if reasonable and purposeful, to impose measures for correction or a fine for a violation of the law. The Office publishes a proposal form on its website. The proposal to initiate proceedings must include evidence supporting the claims stated in the proposal and a copy of the document or other evidence proving the exercise of the right at the controller (right to access personal data, right to request correction of personal data, right to erasure or restriction of the processing of personal data, right to object to the processing of personal data, right to data portability), if such a right has been exercised by the data subject, or a statement of reasons deserving special attention regarding the non-exercise of the relevant right.

The above rights (except the right to submit a proposal to initiate proceedings for the protection of personal data) can be asserted by email or in writing to the controller overseeing the processing of personal data. The controller can also be notified of a personal data breach or other serious facts concerning the processing of personal data by the controller.

If a data subject suspects that their personal data is being processed unlawfully, they may submit a proposal to initiate proceedings for the protection of personal data to the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, or contact the office through its website http://www.dataprotection.gov.sk. If the data subject does not have full legal capacity, their rights may be exercised by a legal representative. If the data subject is deceased, a close person may exercise the rights they had under this Act.

The controller shall process the data subject’s request under the Personal Data Protection Act free of charge, except for reimbursement up to the amount that may not exceed the cost of making copies, obtaining technical media, and sending information to the data subject, if a special law does not provide otherwise. The controller is obliged to process the data subject’s request in writing no later than 30 days from the date of receipt of the request. The controller shall inform the data subject and the Office for Personal Data Protection of the Slovak Republic in writing without undue delay of the restriction of the data subject’s rights under the Personal Data Protection Act.

The controller hereby informs you, as the data subject, about the protection of your personal data and instructs you about your rights in relation to the protection of personal data to the extent of this written information and the records in the individual information systems of the controller.

Processing of Personal Data for the Purposes of Order Fulfillment and Complaint Handling

1. Purposes of Processing Personal Data: Issuing tax documents, contacting the customer regarding the order, contract fulfillment, handling liability for defects of sold products resulting from contract performance.
2. Legal Basis for Processing Personal Data: a) Processing of personal data (name, surname, title, street and number, ZIP code, city) is necessary according to a special regulation or international treaty to which the Slovak Republic is bound. Primarily according to Act No. 222/2004 Coll. on Value Added Tax. b) Processing of personal data (email, phone contact) is necessary for contract performance.
3. Retention Period of Personal Data – Ten Years.
4. Providing Personal Data is a contractual obligation.

Processing of Personal Data for the Purpose of Sending Marketing Information

For the processing of personal data for the purpose of sending marketing information, the general information on processing personal data mentioned above applies, as well as:

1. Purposes of Processing Personal Data: Sending marketing information
2. Legal Basis for Processing Personal Data: Article 6(1)(a) GDPR – the data subject has given consent to the processing of their personal data for one or more specific purposes.
3. Retention Period of Personal Data – Ten Years.
4. Providing Personal Data for legitimate interest is mandatory to achieve this legitimate interest. When processing based on consent, providing personal data is voluntary.

Automated Individual Decision-Making, Including Profiling

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

Processing of Personal Data for the Purpose of Processing Cookies

For the processing of personal data for the purpose of processing cookies, the general information on processing personal data mentioned above applies, as well as:

1. Purposes of Processing Personal Data: Providing services, personalized advertising, traffic analysis, AdWords advertising network
2. Legal Basis for Processing Personal Data: Article 6(1)(a) GDPR – the data subject has given consent to the processing of their personal data for one or more specific purposes.
3. Retention Period of Personal Data – Cookies used on our website can be divided into two basic types in terms of their lifespan. Short-term so-called “session cookies” are temporary and remain stored in your browser only until you close it, and long-term so-called “persistent cookies” that remain stored on your device longer or until you manually delete them, with the retention period of cookie files on your device depending on the settings of the cookie itself and the settings of your browser.
4. Providing Personal Data is necessary to achieve the purpose.

Conditions and Method of Processing Personal Data of Data Subjects

The controller processes personal data of data subjects in its information systems by automated and non-automated means of processing. The controller does not disclose processed personal data except in cases where a special legal regulation or a decision of a court or other state authority requires it. The controller will not process your personal data without your explicit consent or other legal basis for another purpose, nor to a greater extent than stated in this information and records in the individual information systems of the controller.

Automated Individual Decision-Making, Including Profiling with Cookies

The controller uses an analytical tool to monitor its websites, which prepares a data string and tracks how visitors use the Internet pages. When someone views a page, the system generates cookies to record information related to the visit (pages visited, time spent on our pages, browsing data, exit from the page, etc.), but this data must not be linked to the person of the visitor. This tool is a tool to improve the ergonomic design of the website, to create a user-friendly website, and to increase the online experience of visitors. Most internet browsers accept cookies, but visitors have the option to delete them or automatically reject them. Because each browser is different, visitors can set their cookie preferences individually using the browser’s tool panel. If you decide not to accept cookies, you will not be able to use some features on our website.

The processed cookie files can be categorized based on validity into:

• Temporary cookies (session cookies), which remain stored in your browser only until you close your browser.
• Persistent cookies, which remain stored in your browser for a longer period until their lifespan expires or until you manually remove them (the retention period of cookie files in your browser depends on the settings of the cookie itself and your browser settings).

They can also be categorized based on functions into:

• Essential cookies, which are necessary for the functionality of our websites.
• Preference cookies, which allow our websites to remember information that changes how the website behaves or looks (e.g., preferred language or region), these cookies are not necessarily essential for the operation of our websites but enhance their functionality and practicality of use.
• Analytical cookies, which help us analyze your experience on our website (User Experience = UX) and allow us to understand how you use our websites.

We do not use third-party cookies for tracking across multiple websites to provide personalized content and advertising on third-party websites and other sales channels.

The operator uses the Google AdWords advertising program, through which it can create online ads and reach people when they are interested in products and services provided by the operator. Remarketing or Similar Audiences features in the AdWords service allow us to reach people who have visited your website in the past. It enables the display of ads in search, on YouTube, and in emails. Dynamic remarketing allows users to display ads for products or services they have viewed in the past. Visitors can disable remarketing codes by appropriately configuring their browser settings.

The operator can also be contacted through Facebook. The purpose of managing data is to share the content of the operator’s website and present the operator. Guests can learn about news, current special offers from the operator, and view photos from selected orders on the operator’s Facebook page. By clicking “like” on the operator’s Facebook page, subjects agree to allow the operator to post their news and offers on their Facebook wall. The operator also publishes photos/videos from various events on their Facebook page.

The operator publishes personal data of individuals only if their written consent has been obtained. For more information on data management from the Facebook page, refer to the handbook and privacy rules at www.facebook.com. For the purpose of presentation, the operator also has a profile on the Instagram social network, where they present photos with descriptions from selected orders. By clicking “follow,” you agree to display photos published by the operator.