PERSONAL DATA PROCESSING POLICY

We take personal data protection seriously. It is important to us that your personal data is secure. All personal data collected during your visit to our website www.pictusweb.sk is processed in accordance with personal data protection law as well as in compliance with applicable European legislation. From 25.05.2018, inclusive, your personal data is processed in accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation = GDPR) and in accordance with Act No. 18/2018 Coll. on personal data protection and on amendments to certain acts as amended and effective from 25.05.2018.

What does this mean for you and your personal data?

Your personal data is any information that relates to you and on the basis of which you are an identifiable subject for us as a natural person. This occurs in cases where we can directly or indirectly identify you, particularly based on a commonly applicable identifier or other identifier, such as name, surname, identification number, location data or online identifier, or based on one or more characteristics or features that constitute your physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity or social identity. This is, for example, identification of your person based on a number, code or one or more elements specific to you. Personal data therefore includes mainly contact details of a natural person, their IP address, and may include information about the use of services or about activities and preferences of a natural person.

What data do we store?

During your visit to our website, we record the IP address assigned to you by your internet provider, from which pages you visited our site, how long you stayed on our site, which specific subpages you view, etc. This information is considered personal data as it is your online identifier, and therefore we handle this data with increased care.

Cookies and tracking

This website uses the following types of cookies and technologies:

1. Essential cookies

These cookies are necessary for the basic functioning of the website and cannot be disabled: - Storing your consent to cookies (CookieConsent) - 365 days - Contact form functionality

2. Analytics cookies (optional)

With your consent, we use our own analytics tool Umami for: - Measuring website traffic - Analyzing visitor behavior (anonymously) - Improving user experience

3. What we don't use

We do not use: - Marketing cookies - Third-party advertising cookies - Social media cookies - Third-party tracking cookies

Consent management

You can change your consent to analytics cookies at any time: - By clearing browser data - By contacting us at info@pictusweb.sk - The banner will appear again when visiting the site after clearing cookies

Visitor tracking

Basic visitor counter works without cookies and records only the total number of visits without identifying individual users.

Other personal data

You voluntarily enter your personal data only into the contact form on our website: We store these personal data: email address, name and phone number, if you choose to provide it. Your personal data is used for the purposes specified in these policies, and only to the necessary extent.

What is personal data processing?

The legal term processing of personal data should be understood as a processing operation or set of processing operations performed on personal data or on sets of personal data, in particular their collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, regardless of whether it is performed by automated or non-automated means. Simply put, it involves collecting personal data, storing it on information carriers, making it accessible, editing or changing it, searching, using, transferring, distributing, publishing, storing, exchanging, sorting or combining, blocking and destroying. There is indeed a lot, but only based on the data you provide can we provide services and products that specifically improve your life.

What do we use this information about you for (purposes)? And on what legal basis?

The controller for the purposes of personal data processing is Pictusweb, s.r.o., Nábrežná 42, 940 02 Nové Zámky, Slovakia, a company registered in the Commercial Register of the Nitra District Court, section: Sro, insert number: 57457/N. Personal data collection occurs on the website www.pictusweb.sk name, surname, email - communication with the customer about order processing, order delivery, delivery of additional information from the supplier = the legal basis for processing this personal data is contract performance; mobile number - for the purpose of informing about order status VIP care for paying customers = the legal basis is the legitimate interest of the controller to provide the customer with the highest value for their money; Product recommendations on websites: We publish your recommendation (reference) for our products only based on your explicit consent to such use, which you grant us in response to a separate email in which we ask for permission. We publish your photo only with your consent and whenever you withdraw your consent, we will remove your photo and recommendation from the site and destroy your data. At the same time, we declare that we will not publish sensitive data about your sexual orientation, health status, race or ethnicity without your explicit consent.

Data retention period

Personal data is stored by the controller for the stated purposes for a period of 10 years, unless special legal regulations (tax, labor law, archiving, accounting regulations) stipulate otherwise or until you withdraw your consent (provided that we are not bound by special regulation to further archive your data). In the time period from granting consent to its withdrawal, the processing of your personal data is lawful, even if you withdrew your consent after granting it.

Security

If our systems were to be attacked by a hacker attack, or otherwise our system was attacked and even just a threat of data leak arose, you will be informed within 72 hours by our support about the measures taken and at the same time within the same period we will also communicate with the supervisory authority in the field of personal data protection in Slovakia - with the Office for Personal Data Protection.

Your rights

As a data subject, i.e. a person whose personal data is processed - you have the right to be informed about the controller's data - i.e. the person who processes your data. The controller for the purposes of personal data processing is Pictusweb, s.r.o., Nábrežná 42, 940 02 Nové Zámky, Slovakia, a company registered in the Commercial Register of the Nitra District Court, section: Sro, insert number: 57457/N.

Contact persons:

Peter Varga; e-mail: peter.varga@pictusweb.sk You have the right to access the data we process about you. If you want to know what specific data we store about your person, we will gladly provide it to you in writing upon request. As a data subject, you have the right to rectification of the provided data, or their completion in case of any inaccuracies/incompleteness. After achieving the purpose of providing personal data - i.e. after providing performance from the consumer contract and terminating the use of products through access passwords, you have the 'right to be forgotten' = the right to erasure of the provided data. The right to erasure of provided personal data also applies if you withdraw your consent to the processing of your personal data. In cases where we process your personal data based on your consent, you have the right to withdraw this consent at any time. Withdrawing consent is as simple as granting it: either click the unsubscribe button in the email campaign or write to us at the contact email: info@pictusweb.sk. In cases where personal data processing is based on our legitimate interest, you have the right to object to our legitimate interest. If we handle your objection as justified, we will delete your data processed on the stated basis from our systems. We will also delete them if it is proven that the data was processed unlawfully. The right to erasure of your personal data is not absolute. If we need your data to fulfill our legal obligations imposed by tax laws, accounting regulations and other special legal regulations; for this purpose of fulfilling our legal obligations, we will have to continue processing them. As a data subject, you have the right to request restriction of processing of your personal data, in case you contest the accuracy of personal data, during the period of verification of data accuracy; or if personal data processing is unlawful and instead of data erasure you will request restriction of their processing; and also if the controller does not need your personal data for the purpose stated, but you need them to establish, possibly defend your legal claims (complaints, court disputes - otherwise data would be erased and we could not provide them to you). When restricting personal data processing, your data will remain in our systems, but we will no longer use them for our purposes. The controller will notify you of any change, correction, or erasure of your personal data upon your request. You also have the right to request data portability to another controller, whose details you notify us in writing. Technically feasible is the transfer of email address, other data due to the difference in purposes of their processing (see above) we cannot provide to you in machine-readable and portable form to another controller for technical reasons. All your requests when exercising your above-mentioned rights, objection to the controller's legitimate interest or consent to personal data processing, we will handle within 48 hours of receipt; in case of a complicated request, no later than 1 month from receipt of the request. The controller declares that there is no transfer of personal data to third countries, and your data is stored on servers located in the EU. If transfer to third countries should occur, it is caused by technical operations of our intermediaries who are major players in the market, and therefore in the intermediary contracts we have concluded with them, the security of your data as well as data transfer outside the EU are addressed to the maximum possible extent. The supervisory authority over personal data processing is the Office for Personal Data Protection of the Slovak Republic. If we do not respond to your request within 1 month of its receipt, you have the right to contact the Office for Personal Data Protection according to § 100 of Act No. 18/2018 Coll. in the valid and effective wording (proceedings on personal data protection).

Processors (data recipients) - or who else has access to your data?

Hosting is provided to us by these companies: hostinger.com oracle.com hetzner.com vercel.com

Third party links

Sometimes on our pages we refer to third party services and products. The websites of these third parties have their own privacy policies and are independent of ours. Therefore, we bear no legal responsibility for the content and activities of these third parties. Nevertheless, it is our effort to maintain a high level of security. Therefore, if you have any suspicion of unfair behavior by these third parties, contact us at info@pictusweb.sk. Thank you.

We do not provide your data to third parties

We do not sell, trade or otherwise provide your personal data to third parties. We believe this is not fair and your personal data is the most sensitive thing you can provide to us. Handing over your personal data to state organizations is only based on law or valid official or court decisions in accordance with the legal regulations of the Slovak Republic. Changes in personal data protection conditions If we decide to change the personal data protection conditions, we will publish them on this page and inform you by email. These conditions are valid from 26.5.2022.