Privacy policy
Privacy Policy (GDPR)
-
**Basic Provisions**
This Privacy Policy describes how Georgica sro . Hlavná ul. 641/36, 986 01 Fiľakovo, Company ID: 36622800, Tax ID: SK2021773699, registered in the Commercial Register of the Banská Bystrica District Court, Sro section, entry no. 8857/S. (hereinafter referred to as the "company," "operator," or "we") processes the personal data of data subjects when visiting the website, using services, or shopping in the Kállai online store available at shop.kallai.sk .
In processing personal data, the company acts in accordance with Act No. 18/2018 on Personal Data Protection and on amendments to certain acts (hereinafter referred to as the "Act"). The legal basis for personal data processing is the Personal Data Protection Act, specific legislation, and consent to the processing of personal data, depending on the purpose of personal data processing.
2. Scope of Processed Data
For the purpose of processing orders and providing services, the company processes the following data in particular:
Identification and contact data: first name, last name, email address, telephone number, shipping and billing address.
Order data: list of purchased products, purchase history, and payment information.
Technical data: IP address, browser type, device information, and website behaviour data (using cookies).
3. Purpose and Legal Basis of Data Processing
The lawful reasons for processing personal data are the following:
-
The performance of a contract or order between the buyer and the seller pursuant to Section 13(1)(b) of the Act,
-
The legitimate interest of the seller in direct marketing (in particular, sending commercial communications, offers, and newsletters) pursuant to Section 13(1)(f) of the Act,
-
For the purpose of sending newsletters pursuant to Section 13(1)(a) of the Act in cases where no order for goods or services has been placed.
The purpose of processing personal data is
-
The processing of the buyer's order and the exercise of rights and obligations arising from the contractual relationship between the buyer and the seller; when placing an order, the provision of personal data necessary for successful order processing (first name and last name, full address, telephone number, and email contact) is required, the provision of personal data is a necessary requirement for concluding and performing the contract, without providing personal data, the contract cannot be concluded or performed by the operator,
-
Sending commercial communications and offers and carrying out other marketing activities of the seller.
4. Cookies
Cookies are text files containing a small amount of information that are downloaded to your device when you visit our website. Cookies are then sent back to the website on each subsequent visit or to another website that recognizes them.
Cookies perform various tasks, such as enabling efficient navigation between websites, remembering your preferences, and generally improving the user experience. They can also ensure that online advertisements are more personalized to you and your interests.
We use the following cookies on our website:
-
Necessary cookies: These are necessary for the functioning of the website, for example, to enable logging into secure areas of the website and access to other basic functions of the website. This type of cookie cannot be disabled.
-
Analytical/statistical cookies: for example, they allow us to recognize and track the number of visitors and to track how our visitors use the website. They help to improve the functioning of the website, for example, by ensuring that users easily find what they are looking for. We run these files only with your prior consent.
-
Advertising cookies: These are used to track settings and allow us to display advertisements and other content that best suits your interests and online behaviour. We run these files only with your prior consent.
Please note that third parties (including, for example, external service providers) may also use cookies and/or have access to data collected by cookies on websites.
Instructions for managing and deleting cookies can be found in the "Help" menu of your browser. However, in this case, some parts of our website may not appear correctly, browsing may become more difficult, and you will not see products that meet your needs.
If you continue to use our site without changing the settings, we consider that you have consented to the use of cookies on our site.
5. Transfer of Data to Third Parties
We transfer personal data to third parties in the following cases:
-
Delivery of goods: necessary personal data are transferred to courier and shipping companies. The data transferred in this way include, in particular, your first name and last name, delivery address, telephone number by which the carrier can contact you, and, if the goods were not paid for in advance, the amount to be paid upon receipt of the goods. The carrier is authorized to process the personal data provided by us only for the purpose of delivery of the goods and subsequently delete it immediately.
-
IT service providers and hosting providers: business and marketing partners, including Shopify, for the purpose of providing services and advertisements.
-
Commercial communications: In the case of sending commercial communications (e.g., by email or SMS) or telemarketing, we may use a third party to send the communications or conduct the telephone calls. This party is bound by a confidentiality obligation and may not use your personal data for any other purpose.
-
State authorities: in the event of asserting our rights, we may transfer your personal data to a third party (e.g., a lawyer). In cases where we are obliged to provide personal data by law or a state authority (e.g., the Slovak Police Force).
6. Security and Storage Period
We have implemented appropriate technical and organizational measures to prevent unauthorized access to and misuse of your personal data. The security measures taken are regularly updated.
The company stores the following personal data:
-
For the time necessary to exercise the rights and obligations arising from the contractual relationship between the customer and the operator and to assert claims arising from these contractual relationships (for a maximum of 10 years after the termination of the contractual relationship),
-
Until the withdrawal of consent to the processing of personal data for marketing purposes, but for a maximum of 10 years, if the processing of personal data is based on consent.
After the expiration of the personal data retention period, the operator deletes the personal data from the database.
7. Rights of the Data Subject
Under the conditions specified by the Act, the data subject is entitled to:
-
The right to access their personal data pursuant to Section 21 of the Act,
-
The right to rectification of personal data pursuant to Section 22 of the Act, or the right to restriction of processing pursuant to Section 24 of the Act,
-
The right to erasure of personal data pursuant to Section 23 of the Act,
-
The right to object to processing pursuant to Section 27 of the Act,
-
The right to data portability pursuant to Section 26 of the Act,
-
The right to withdraw consent to the processing of personal data and to send the withdrawal in writing to the address of Georgica sro ., Hlavná ul. 641/36, Fiľakovo 986 01 or electronically to the email address webshop@kallai.sk.
-
The customer is also entitled to file a complaint with the Office for Personal Data Protection if they believe that their right to personal data protection has been violated.
8. Confidentiality
The operator undertakes that the collaborators who process personal data are obliged to maintain the confidentiality of personal data and security measures, the disclosure of which would jeopardize the security of your personal data.
9. Contact
If you have any questions regarding the processing of your personal data, please contact us:
Georgica , sro . Hlavná u. 641/36, 986 01 Fiľakovo, Slovak Republic
webshop@kallai.sk telephone: +421 918 429 836
10. Final Provisions
-
By submitting an order on the online order form, the buyer confirms that they are familiar with the conditions of personal data protection and fully accepts them.
-
To indicate the acceptance of the conditions of personal data protection, the buyer checks the appropriate box when submitting the online order. By checking the box, the buyer confirms that they have become familiar with the conditions of personal data protection and fully accepts them.
-
The operator of the e-shop is entitled to change these conditions at any time and will publish the new version of the privacy conditions on its website.
These conditions take effect on April 1, 2026.