More
    Language
    English
    Registration
    Home / Privacy Policy

    Privacy Policy

    Data Processing Policy

    We are the company Gripstone, s.r.o., with registered office at Hanulova 45, Nitra, Company ID: 35 962 895.
    We operate an e-shop on the website gripstone.eu

    In the process of selling goods and operating our website, we process some personal data.

    The processing of personal data is primarily governed by Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016, on the protection of personal data and the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation - GDPR).

    I. Processing of Personal Data

    Processing of personal data when using the contact form
    If you contact us regarding our products and services, we will work with the contact details you provide, primarily through the contact form. These personal data include: first and last name, email address, and residential address.

    Why do we process personal data?
    Based on the personal data you send, we will contact you regarding our product and service offerings.

    What is the legal basis for the processing?
    This processing is carried out in accordance with Article 6(1)(b) GDPR – the performance of a contract, or taking steps prior to entering into a contract at your request.

    If you do not provide us with these personal data, we will not be able to communicate with you for the purpose of entering into a contract for the supply of our goods or services.

    How long do we process personal data?
    If no further collaboration is established, we will process your personal data for no longer than 1 month after our last communication.

    Processing of personal data when purchasing
    If you make a purchase with us, we will work with the personal data we need to ensure the conclusion of the contract for the provision of our goods or services. These are primarily billing details: name, surname, address, delivery address (if different from the shipping address), and phone number.

    Why do we process personal data?
    We need to process personal data to fulfill our obligations arising from the contract – the delivery of goods. We will also use your contact details to communicate with you regarding the status of your order, possible complaints, or other queries.

    We will further process personal data to fulfill our obligations under applicable legal regulations (primarily for accounting and tax purposes, or to handle complaints and other matters).

    What is the legal basis for the processing?
    This processing is carried out based on Article 6(1)(b) GDPR – the performance of a contract and Article 6(1)(c) GDPR – the fulfillment of our legal obligation.

    If you do not provide us with these personal data, we will not be able to conclude a contract for the supply of goods or services with you.

    How long do we process personal data?
    During the delivery of goods or provision of services and for a period of 10 years from the last provision of such services or delivery of goods.

    Newsletter (Commercial Communication)
    If you have purchased goods or services from us and have not explicitly rejected receiving marketing communications, we will use your email address to send you our marketing communications.

    What is the legal basis for the processing?
    This processing is carried out based on Article 6(1)(f) GDPR – our legitimate interests, which are marketing communications targeted at our customers.

    How long do we process personal data?
    For 5 years after your last purchase. If you no longer wish to receive our marketing communications, you can unsubscribe at any time via email or by contacting us at gripstone@gripstone.sk.

    II. Who Will Have Access to the Data?

    Your personal data will remain with us. However, some companies or other parties working with us may have access to your personal data because they help us with the operation of our e-shop. These include:

    • The operator of the e-commerce platform Shoptet (Shoptet, s.r.o., Dvořeckého 628/8, Břevnov, 169 00, Prague 6, Czech Republic, Company ID: 289 35 675, registered at the Municipal Court in Prague, section B, insert 25395)

    • Companies involved in the dispatch of goods (Packeta)

    • Companies involved in payment processing (Shoptet Pay, fino run GmbH)

    • Provider of email marketing services (Shoptet)

    • Marketing agency (………………)

    Personal data is processed only within the territory of the European Union.

    III. Additional Information

    We have a responsible person for the protection of personal data – Richard Nyéki.

    Our company does not engage in decision-making based on automated processing or profiling.

    If you have any questions regarding personal data, please contact us via email at gripstone@gripstone.sk or call us at +421903719720.

    IV. Use of Cookies
    Cookies are text files that contain small amounts of information, which are downloaded to your device when you visit our website. These cookies are then sent back to the website or another website that recognizes them on each subsequent visit.

    Cookies serve various purposes, such as enabling efficient navigation between pages, remembering your preferences, and improving the overall user experience. They can also ensure that the ads displayed online are better tailored to you and your interests.

    The following types of cookies are used on our website:

    • Essential Cookies: These are necessary for the operation of the website. They allow functions such as logging into secure parts of the site and other basic website features. This category of cookies cannot be disabled.

    • Analytical/Statistical Cookies: These allow us to recognize and track the number of visitors and understand how visitors use the website. They help us improve the way the site functions, for example, by allowing users to easily find what they are looking for. These cookies are only set with your prior consent.

    • Advertising Cookies: These are used to track preferences and allow us to display ads and other content that best match your interests and online behavior. These cookies are only set with your prior consent.

    Please note that third parties (such as external service providers) may also use cookies and/or have access to the data collected by cookies on our website.

    Cookies Used:

    Technical Name Publisher Purpose and Description of Cookies Duration
    ga*** Google This cookie records a unique visitor ID and tracks how the visitor interacts with the website. The data is used for statistical purposes. 2 years
    _ga Google This cookie records a unique visitor ID and tracks how the visitor interacts with the website. The data is used for statistical purposes. 2 years
    cookieyes-consent cookieyes.com CookieYes sets this cookie to remember the user's consent preferences so that they can be respected during future visits. It does not collect or store any personal data of the website visitors. 1 year
    _clck Microsoft Stores the user's Clarity ID and preferences that are unique to that particular website. This ensures that user behavior on subsequent visits to the same site is associated with the same user ID. 1 year

    For more information on cookies and their current list, you can check the individual web browser settings, usually under the Developer Tools section.

    You can express your consent via the checkbox included in the so-called cookie banner. You can also later reject cookies in your internet browser settings or configure your browser to accept only specific cookies.

    For more information on managing cookies in individual browsers, please visit the following links:

    V. Your Rights in Relation to Personal Data Processing

    The GDPR regulation gives you, among other things, the right to contact us and request information about the personal data we process about you, request access to this data, update or correct it, or request its processing limitation. You may also request a copy of the processed personal data, request the deletion of your personal data in certain situations, and in specific cases, you have the right to data portability. You can object to processing based on legitimate interest.

    If you believe that we are not handling your data correctly, you have the right to lodge a complaint with the supervisory authority, which in our jurisdiction is the Office for Personal Data Protection, Hraničná 12, 820 07 Bratislava 27, Slovakia, or you may contact the court.

    These policies are effective from May 1, 2024.