Privacy policy and information about cookies
Catalog
I. Controller
1.1. The identity and contact details of the Controller are:
Business name: Enterra s.r.o. Registered office: T.J. Moussona 6429/2B, 071 01 Michalovce, Slovak Republic
Registered in the Commercial Register District Court Košice, section: Sro, insert no. 44533/V
ID NO: 51901706
TIN: 2120824332
VAT ID: SK2120824332
Bank account: SK38 7500 0000 0040 2623 6271
The seller is a payer of value added tax
1.2. Email contact and telephone contact to the Operator is:
Email: info@enterra.sk
Phone number: 0902 114 456
1.3. The Operator’s address for sending written documents:
Enterra, s.r.o., Priemyselná 2, 071 01 Michalovce, Slovak Republic
1.4. The operator hereby in accordance with Article 13 para. 1 and 2. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC, the General Data Protection Regulation (hereinafter referred to as the “Regulation”), further in accordance with Act No. 18/2018 Coll. Act on the Protection of Personal Data and on Amendments and Supplements to Certain Acts as amended and in accordance with Act No. 452/2021 Coll. Law on electronic communications as amended provides the Data Subject – (Buyer), from whom the Operator (Seller) obtains personal data relating to them, with the following information, instructions and explanations:
II. Links
2.1. These principles and instructions for the protection of personal data form part of the General Terms and Conditions published on the Seller’s Website.
2.2. Pursuant to §3, para. 1, letter n), Act No. 102/2014 Coll. The seller informs the consumer that there are no special relevant codes of conduct to which the seller has committed to comply with them, while the code of conduct means an agreement or set of rules that define the behavior of the seller who has committed to comply with this code of conduct in relation to one or more specific commercial practices, or business sectors, if these are not established by law, or other legislation or measures of a public administration body), which the seller has committed to comply with, and how the consumer can become familiar with them, or obtain their wording.
III. Protection of personal data and use of cookies. Information and explanation of cookies, scripts, and pixels
3.1. The website operator provides this brief explanation of the function of cookies, scripts and pixels:
3.1.1. Cookies are text files that contain a small amount of information that is downloaded to your device when you visit a website. Thanks to this file, the website stores information about your steps and preferences (such as login name, language, font size and other display settings) for a certain period of time, so you do not have to re-enter them the next time you visit the website or browse its individual pages
Script is a piece of program code that is used for the proper and interactive function of websites. This code is executed on the operator’s server or on your device.
Pixels is a small, invisible text or image on a website that is used to monitor website traffic. In order for this to happen, various data is stored through pixels.
3.1.2. Cookies are divided
Technical or functional cookies – ensure the proper functioning of the Operator’s website and its use. These cookies are used without consent.
Statistical cookies – The operator obtains statistics regarding the use of its websites. These cookies are used only with consent.
Marketing / Advertising cookies – Used to create advertising profiles and similar marketing activities. These cookies are used only with consent.
3.2. How to check cookies:
3.2.1. You can control and/or delete cookies at your discretion – see aboutcookies.org for details. You can delete all cookies stored on your computer or other device and you can set most browsers to prevent them from being saved.
3.3. The Operator’s website uses the following cookies:
All cookies used by the Operator can be found at https://www.cookieserve.com/ by entering the Operator’s web address https://www.enterra.sk
Technical or functional cookies – the website operator accesses the information. Cookies last for 2 years.
Statistical cookies – the website operator accesses the information. Cookies last for 2 years.
Marketing and advertising cookies – the website operator accesses the information. Cookies last for 2 years.
3.3.1. Cookies made available to third parties:
Google analytics, Google ADS: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You can find more information about privacy protection at https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008
META Pixels: Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland. You can find more information about privacy protection at https://www.facebook.com/about/privacy/ [site: 26, 27]
IV. Processed personal data
4.1. The operator processes the following personal data on its website: name, surname, address, email address, home telephone number, mobile phone number, billing address, delivery address, data obtained from cookies, IP address.
V. Contact details of the responsible person for the supervision of personal data protection
5.1. The operator has appointed a responsible person for the protection of personal data in accordance with Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. Contact:
Email: info@enterra.sk
Phone number: 0902 114 456
5.2. The Operator is also the Seller within the meaning of the term defined in the General Terms and Conditions of this website.
VI. Purposes of processing the personal data of the Data Subject and the period of processing personal data
6.1. The purposes of processing the personal data of the Data Subject are in particular:
6.1.1. registration, creation and processing of contracts and client data for the purpose of concluding contracts with third parties.
6.1.2. processing of accounting documents and documents related to the Operator’s business activities.
6.1.3. compliance with legal regulations in connection with the archiving of documents and records, e.g. according to Act No. 431/2002 Coll. Act on Accounting, as amended, and other relevant regulations.
6.1.4. activities of the Operator in connection with the fulfillment of the request, order, contract and similar institutes of the Data Subject.
6.1.5. Newsletter, marketing and similar advertising activities of the Operator. In the case of consent given by the Data Subject to the Operator for marketing and similar advertising activities.
6.2. The Operator shall keep the personal data of the Data Subject only for the necessary period of time necessary for the purposes of fulfilling the contract and its subsequent archiving in accordance with the statutory deadlines imposed on the Operator by legal regulations. In the event that the Data Subject has consented to the sending of advertising emails and similar offers, the personal data of the Data Subject shall be processed for these purposes until the Data Subject revokes it. The longest, however, for a period of 10 years.
VII. Legal basis for processing the personal data of the Data Subject
7.1. In the event that the Operator carries out the processing of personal data based on the consent of the Data Subject, this processing will be initiated only after the Data Subject has given the given consent.
7.2. In the event that the Operator processes the personal data of the Data Subject for the purposes of negotiating pre-contractual relationships and concluding and fulfilling a purchase contract, and the related delivery of goods, products or services. The data subject is obliged to provide personal data for the proper fulfillment of the purchase contract, otherwise it is not possible to ensure fulfillment. Personal data for the given purpose is processed without the consent of the data subject.
VIII. Recipients or categories of recipients of personal data
8.1. The recipients of the personal data of the Data Subject will or at least may be:
8.1.1. statutory bodies or their members of the Operator.
8.1.2. persons performing work in an employment or similar relationship for the Operator.
8.1.3. sales representatives of the operator and other persons cooperating with the Operator in fulfilling the Operator’s tasks. For the purposes of this document, all natural persons performing dependent work for the Operator on the basis of an employment contract or agreements on work performed outside of an employment relationship will be considered employees of the Operator.
8.1.4. The recipients of the personal data of the Data Subject will also be the operator’s collaborators, his business partners, suppliers and contractual partners, in particular: accounting company, company providing services related to software creation and maintenance, company providing legal services to the operator, company providing consultancy to the operator, companies providing transportation and delivery of products to buyers and third parties, marketing companies, companies operating social networks, companies providing payment gateways and other payment methods.
8.1.5. The recipients of personal data will also be courts, law enforcement authorities, the tax office and other state authorities, if the law so provides. At the same time, personal data will be provided by the Operator to the given offices and state institutions on the basis of and in accordance with the legal regulations of the Slovak Republic.
8.1.6. List of third parties – intermediaries and recipients who process the personal data of the Data Subject:
Účtovníctvo DK s.r.o., Tibavská 27, 073 01 Sobrance, IČO: 50686330 – third party providing accounting
DPD Direct Parcel Distributions SK s.r.o., Technická 7, 821 04 Bratislava, IČO: 35834498 – third party providing transport services
DHL Express (Slovakia), spol. s r.o., Bratislava, Letisko M.R.Štefánika, 82001 Bratislava,
IČO: 31342876 – third party providing transport services
UPS Slovakia s.r.o., LOGIBOX, logistické centrum, Mokráň záhon 4, 821 04 Bratislava – mestská časť Ružinov, IČO: 54387876 – third party providing transport services
8.2. The operator of the e-shop determines satisfaction with the purchase through e-mail questionnaires within the Verified Customers program, in which the Operator’s e-shop is involved. The operator sends the Data Subject – Buyer every time when the Data Subject – Buyer makes a purchase from the Operator of the e-shop, if, in accordance with Act No. 452/2021, as amended, the Data Subject – Buyer does not refuse to send electronic mail for the purposes of direct marketing. The operator performs the processing of personal data for the purpose of sending questionnaires within the framework of the Verified Customers program on the basis of the Operator’s legitimate interest, which consists in determining the Data Subject’s – Buyer’s satisfaction with the purchase through the Seller’s e-shop. For sending questionnaires, evaluating the Data Subject’s – Buyer’s feedback and analyzing the market position, the Operator uses a processing intermediary, which is the operator of the Heureka.sk portal, to which the Operator may provide information about the purchased goods and the e-mail address of the Data Subject – Buyer for these purposes. The personal data of the Data Subject – Buyer is not transferred to any third party for its own purposes when sending e-mail questionnaires. The Data Subject – Buyer may object to the sending of e-mail questionnaires within the Verified Customers program at any time by refusing further questionnaires using the link in the e-mail with the questionnaire. In the event of an objection by the Data Subject – Buyer, the Operator will not send the questionnaire to the Data Subject – Buyer further.
IX. Information on the provision of personal data to third countries and the period of their storage:
9.1. Not applicable. The operator does not transfer personal data of persons to third countries.
X. Instruction on the existence of relevant rights of the Data Subject:
10.1. The data subject has, among other things, the following rights, whereby:
10.1.1. Point 10.1 does not affect other rights of Data Subjects.
10.1.2. The right of the Data Subject to access data according to Art. 15 of the Regulation, the content of which is:
the right to obtain confirmation from the Operator whether it processes the personal data of the Data Subject, and if so, to what extent. At the same time, if they are processed, it has the right to find out their content and request information from the Operator about the reason for their processing, in particular information about: The reason for their processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be provided, in particular in the case of recipients in third countries or international organizations, the expected storage period of personal data or, if this is not possible, information on the criteria for determining it, the existence of the right to request from the Operator the correction of personal data concerning the Data Subject or their deletion or restriction of processing and the existence the right to object to such processing, the right to file a complaint with a supervisory authority, if the personal data was not collected from the Data Subject, any available information regarding their source, the existence of automated decision-making, including profiling, referred to in Article 22 para. 1 and 4. of the Regulation and, in these cases, at least meaningful information about the procedure used, as well as the significance and envisaged consequences of such processing of personal data for the Data Subject, on appropriate safeguards pursuant to Article 46 of the Regulation, concerning the transfer of personal data, if the personal data are transferred to a third country or an international organization.
10.1.3. the right to be provided with a copy of the personal data being processed, however, subject to the condition that the right to be provided with a copy of the processed personal data must not adversely affect the rights and freedoms of others.
10.1.4. the right of the Data Subject to rectification according to Article 16 of the Regulation, the content of which is the right: for the Operator to correct inaccurate personal data concerning the Data Subject without undue delay. the right to complete incomplete personal data of the Data Subject, including by providing a supplementary statement of the Data Subject, the right of the Data Subject to delete personal data (the so-called right “to be forgotten”) according to Article 17 of the Regulation, the content of which is:
10.1.5. the right to obtain from the Operator the erasure of personal data concerning the Data Subject without undue delay, if one of the following reasons is met:
personal data are no longer necessary for the purposes for which they were collected or otherwise processed, the Data Subject withdraws the consent on the basis of which the processing is carried out, provided that there is no other legal basis for the processing of personal data, the Data Subject objects to the processing of personal data according to Article 21 para. 1. of the Regulation and there are no overriding legitimate reasons for the processing of personal data or the Data Subject objects to the processing of personal data according to Article 21 para. 2. of the Regulation, the personal data were processed unlawfully, the personal data must be erased in order to comply with a legal obligation under European Union law or the law of the Member State to Data Subject is subject to the Operator, the personal data must be deleted in order to comply with a legal obligation under European Union law or the law of a Member State to which the Operator is subject, personal data were collected in connection with the offer of information society services according to Article 8 para. 1. Regulations;
10.1.6. the right for the Operator who published the personal data of the Data Subject, taking into account the available technology and the costs of implementing the measures, to take reasonable measures, including technical measures, to inform other operators who process personal data that the Data Subject requests them to delete all links to this personal data, its copy or replicas, while the right to delete personal data with the content of rights according to Article 17 para. 1 and 2. The regulation will not arise if the processing of personal data is necessary:
10.1.7. on the exercise of the right to freedom of expression and information.
10.1.8. to fulfill a legal obligation that requires processing under European Union law or the law of a Member State to which the Operator is subject, or to fulfill a task carried out in the public interest or in the exercise of official authority vested in the Operator.
10.1.9. for reasons of public interest in the field of public health in accordance with Article 9 para. 2. letters h) and i) of the Regulation, as well as Article 9 para. 3. Regulations.
10.1.10. for the purposes of archiving in the public interest, for the purposes of scientific or historical research or for statistical purposes according to Article 89 para. 1. of the Regulation, if it is likely that the right referred to in Article 17 para. 1. The regulation will prevent or seriously hinder the achievement of the objectives of such processing of personal data;
or to prove, exercise or defend legal claims;
10.1.11. the right of the Data Subject to restrict the processing of personal data according to Article 18 of the Regulation, the content of which is:
10.1.12. the right for the Operator to restrict the processing of personal data in one of the following cases: the Data Subject contests the accuracy of the personal data, during a period enabling the Operator to verify the accuracy of the personal data, the processing of personal data is unlawful and The data subject objects to the erasure of personal data and requests instead the restriction of their use, the Operator no longer needs the personal data for the purposes of processing, but the Data Subject needs them for the establishment, exercise or defense of legal claims, the Data Subject has objected to processing according to Article 21 para. 1. of the Regulation, until it is verified whether the legitimate reasons on the part of the Operator override the legitimate reasons of the Data Subject;
10.1.13. the right that, if the processing of personal data has been restricted, such restrictedly processed personal data, with the exception of storage, will only be processed with the consent of the Data Subject or for the establishment, exercise or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons important public interest of the European Union or a Member State;
10.1.14. the right to be informed in advance about the lifting of the restriction on the processing of personal data;
10.1.15. the right of the Data Subject to comply with the notification obligation towards recipients according to Article 19 of the Regulation, the content of which is: the right for the Operator to notify each recipient to whom the personal data have been provided of any correction or erasure of personal data or restriction of processing carried out according to Article 16, Article 17 para. 1. and Article 18 of the Regulation, unless this proves impossible or requires disproportionate effort, the right for the Operator to inform the Data Subject of these recipients if the Data Subject so requests;
10.1.16. the right of the Data Subject to data portability according to Article 20 of the Regulation, the content of which is: the right to obtain personal data relating to the Data Subject and which they provided to the Operator, in a structured, commonly used and machine-readable format, and the right to transfer this data to another operator without the Operator preventing it, if:
a) the processing is based on the consent of the Data Subject according to Article 6 para. 1. letter a) of the Regulation or Article 9 para. 2. letter a) of the Regulation, or on a contract according to Article 6 para. 1. letter b) of the Regulation, and at the same time
b) the processing is carried out by automated means, and at the same time:
10.1.17. the right to obtain personal data in a structured, commonly used and machine-readable format and the right to transfer this data to another operator without the Operator preventing it, will not adversely affect the rights and freedoms of others;
10.1.18. the right to transfer personal data directly from one operator to another operator, if this is technically possible;
10.1.19. the right of the Data Subject to object according to Article 21 of the Regulation, the content of which is:
10.1.20. the right to object at any time, on grounds relating to the particular situation of the Data Subject, to the processing of personal data concerning him or her, which is carried out on the basis of Article 6 para. 1. letter e) or f) of the Regulation, including objection to profiling based on these provisions of the Regulation;
10.1.21. in case of exercising the right to object at any time, on grounds relating to the particular situation of the Data Subject, to the processing of personal data concerning him or her, which is carried out on the basis of Article 6 para. 1. letter e) or f) of the Regulation, including objection to profiling based on these provisions of the Regulation, the right for the Operator to no longer process the personal data of the Data Subject, unless it demonstrates compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the Data Subject, or grounds for the establishment, exercise or defense of legal claims
10.1.22. the right to object at any time to the processing of personal data concerning the Data Subject for the purposes of direct marketing, including profiling to the extent that it relates to direct marketing; it applies that if the Data Subject objects to the processing of personal data for the purposes of direct marketing, the personal data may no longer be processed for such purposes;
10.1.23. in connection with the use of information society services, the right to exercise the right to object to the processing of personal data by automated means using technical specifications;
10.1.24. the right to object, on grounds relating to the particular situation of the Data Subject, to the processing of personal data concerning the Data Subject, if the personal data are processed for the purposes of scientific or historical research or for statistical purposes according to Article 89 para. 1. of the Regulation, but with the exception of cases where the processing is necessary for the performance of a task carried out in the public interest;
10.1.25. the right of the Data Subject related to automated individual decision-making according to Article 22 of the Regulation, the content of which is:
10.1.26. the right not to be subject to a decision which is based solely on automated processing of personal data, including profiling, and which produces legal effects concerning him or her or similarly significantly affects him or her, with the exception of cases pursuant to Article 22 para. 2. Regulations [i.e. except in cases where the decision: (a) is necessary for the conclusion or performance of a contract between the Data Subject and the Operator,
10.1.27. allowed by the law of the European Union or the law of the Member State to which the Operator is subject and which also lays down suitable measures to safeguard the rights and freedoms and legitimate interests of the Data Subject or (c) based on the express consent of the Data Subject.
XI. Instruction on the right of the Data Subject to revoke consent to the processing of personal data:
11.1. The data subject is entitled to revoke his consent to the processing of personal data at any time, without this affecting the lawfulness of the processing of personal data based on the consent given before its revocation. The data subject is entitled to revoke his consent to the processing of personal data at any time – in whole or in part. Partial revocation of consent to the processing of personal data may relate to a certain type of processing operation / processing operations, while the lawfulness of the processing of personal data in the scope of the remaining processing operations will remain unaffected. Partial revocation of consent to the processing of personal data may relate to a specific purpose of processing personal data / certain specific purposes of processing personal data, while the lawfulness of processing personal data for other purposes will remain unaffected. The right to revoke consent to the processing of personal data may be exercised by the Data Subject in written form to the Operator’s address registered as its registered office in the Commercial Register at the time of revoking consent to the processing of personal data or in electronic form by electronic means (by sending an e-mail to the Operator’s e-mail address specified in the identification of the Operator in this document).
XII. Instruction on the right of the Data Subject to file a complaint with a supervisory authority:
12.1. The data subject has the right to file a complaint with a supervisory authority, in particular in the Member State of his habitual residence, place of work or place of the alleged infringement, if he considers that the processing of personal data relating to him is contrary to the Regulation, all without prejudice to any other administrative or judicial remedy. The data subject has the right for the supervisory authority to which the complaint was submitted to inform him as the complainant about the progress and outcome of the complaint, including the possibility of filing a judicial remedy according to Article 78 of the Regulation.
12.2. The supervisory authority in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovak Republic. Tel. contact: +421 /2 3231 3214, Email: statny.dozor@pdp.gov.sk,
XIII. Information related to automated decision-making, including profiling:
13.1. Since in the case of the Operator it is not a processing of personal data of the Data Subject in the form of automated decision-making, including profiling, referred to in Article 22 para. 1 and 4. of the Regulation, the Operator is not obliged to provide information according to Article 13 para. 2 letter f) of the Regulation, i. j. information about automated decision-making, including profiling, and about the procedure used, as well as about the significance and envisaged consequences of such processing of personal data for the Data Subject. Not applicable.
XIV. Final Provisions
14.1. These Principles and instructions for the protection of personal data and instructions for cookies form an integral part of the General Terms and Conditions and the Complaints Procedure. The documents – the General Terms and Conditions and the Complaints Procedure of this Website are published on the domain of the Seller’s Website.
14.2. These Personal Data Protection Principles enter into force and effect upon their publication on the Seller’s Website on 01.07.2024
