PROTECTION OF PERSONAL DATA AND COOKIES INFORMATION
/ Privacy Policy and Instructions
provided by the operator to the data subject when obtaining personal data from the data subject and information about cookies of the online store www.deluxcnc.eu /
I. Operator
mso-fareast-language:SK;">
1.1. The identity and contact details of the Operator are:
Business name: DL ENGINEERING sro
Registered office: Študentská 2047/40, Snina 069 01, Slovak Republic
Registered in the Commercial Register of the District Court of Prešov, Section Sro, File number 43052/P
ID: 54180678
VAT ID: SK2121593496
The seller is a value added tax payer
Email: info@deluxcnc.eu
Phone number: +421904697637
DL ENGINEERING sro, Študentská 2047/40, Snina 069 01, Slovak Republic
1.4. The Controller hereby, in accordance with Article 13, paragraphs 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC General Data Protection Regulation (hereinafter referred to as the "Regulation"), further in accordance with Act No. 18/2018 Coll. Act on the Protection of Personal Data and on the Amendment of Certain Acts as amended and in accordance with Act No. 452/2021 Coll. The Electronic Communications Act, as amended, provides the Data Subject - (Buyer), from whom the Operator (Seller) obtains personal data concerning him/her, with the following information, instructions and explanations:
II. References
2.1. These principles and instructions on the protection of personal data form part of the General Terms and Conditions published on the Seller's Website.
2.2. Pursuant to §3, paragraph 1, letter n), of Act No. 102/2014 Coll., the Seller informs the Consumer that there are no special relevant codes of conduct to which the Seller has committed to comply, whereby a code of conduct is understood to mean an agreement or a set of rules that define the behavior of the Seller, who has committed to comply with this code of conduct in relation to one or more specific business practices, or commercial sectors, if these are not stipulated by law or other legal regulation or measure of a public administration body), which the seller has undertaken to comply with, and the manner in which the consumer can become familiar with them or obtain their text.
III. Duration
3.1. The Operator stores the personal data of the Data Subject only for the period strictly necessary for the purpose of fulfilling the contract and their subsequent archiving in accordance with the statutory deadlines imposed on the Operator by legal regulations. In the event that the Data Subject has agreed to the sending of advertising emails and similar offers, the personal data of the Data Subject are processed for these purposes until the Data Subject withdraws his/her consent. However, for a maximum period of 10 years.
mso-fareast-language:SK;">IV. Personal data processed
4.1. The operator processes the following personal data on its website: name, surname, place of residence, email address, home telephone number, mobile phone number, billing address, delivery address, data obtained from cookies, IP addresses.
V. Contact details of the person responsible for supervising personal data protection
5.2. The Operator is also the Seller within the meaning of the term set out in the General Terms and Conditions of this website.
VI. Purposes of processing personal data of the data subject and period of processing personal data
style="font-size:12.0pt; line-height: 115%; font-family: 'Times New Roman',serif; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: SK;">
6.1. The purposes of processing the personal data of the Data Subject are in particular:
6.1.1. recording, creation and processing of contracts and client data for the purpose of concluding contracts with third parties.
6.1.2. processing of accounting documents and documents related to the Operator's business activities.
Roman',serif;mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: SK;">
6.1.3. compliance with legal regulations in connection with the archiving of documents and evidence, e.g. according to Act No. 431/2002 Coll., the Accounting Act, as amended, and other relevant regulations.
6.1.4. the Operator's activities in connection with the fulfillment of the request, order, contract and similar institutions of the Data Subject.
6.1.5. Newsletter, marketing and similar advertising activities of the Operator. In the event that the Data Subject grants consent to the Operator with marketing and similar advertising activities.
VII. Legal basis for processing personal data of the Data Subject
7.1. In the event that the Operator processes personal data based on the consent of the Data Subject, such processing will only begin after the Data Subject has given such consent.
mso-fareast-font-family:'Times New Roman'; mso-fareast-language: SK;">7.2. In the event that the Operator processes the personal data of the Data Subject for the purposes of negotiating pre-contractual relations and concluding and fulfilling a purchase contract, and the related delivery of goods, products or services. The Data Subject is obliged to provide personal data for the proper performance of the purchase contract, otherwise the performance cannot be ensured. Personal data for the given purpose is processed without the consent of the Data Subject.
VIII. Recipients or categories of recipients of personal data
8.1. The recipients of the personal data of the Data Subject will be or may at least be:
8.1.1. statutory bodies or their members of the Operator.
8.1.2. persons performing work activities in an employment or similar capacity for the Operator.
8.1.3. sales representatives of the Operator and other persons cooperating with the Operator in fulfilling the Operator's tasks NewRoman',serif; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: SK;">. For the purposes of this document, all natural persons performing dependent work for the Operator on the basis of an employment contract or agreements on work performed outside of an employment relationship will be considered employees of the Operator.
8.1.4. The recipients of the personal data of the Data Subject will also be the Operator's collaborators, its business partners, suppliers and contractual partners, in particular: an accounting company, a company providing services related to the creation and maintenance of software, a company providing legal services to the Operator, a company providing consultancy to the Operator, companies providing transport and delivery of products to buyers and third parties, marketing companies, companies operating social networks, companies providing payment gateways and other payment methods.
SK;">8.1.5. The recipients of personal data will also be courts, criminal prosecution authorities, the tax office and other state authorities, if so provided by law. Personal data will be provided by the Operator to the relevant authorities and state institutions on the basis of and in accordance with the legal regulations of the Slovak Republic.
8.1.6. List of third parties - processors and recipients who process the personal data of the Data Subject:
Slovak Post, as, Partizánska cesta 9, 975 99 Banská Bystrica, Company ID: 36631124 – third party entity providing transport services
Packeta Slovakia sro, with registered office at Sliačska 1E 831 02 Bratislava - Nové Mesto district, ID: 48136999 - third party entity providing transport services
GoPay sro, Planá 67, 370 01 Planá, Czech Republic, Company ID: 26046768 - third party entity providing the payment gateway
EN;">
Allegro sp. z oo with its registered office in Poznań, ul. Wierzbięcice 1B, 61-569 Poznań, Poland - a third party entity providing mediation in the sale of goods
Heureka Shopping sro, Karolinská 650/1, 186 00 Prague 8 – Karlín, Czech Republic, ID: 02387727 – third party entity ensuring satisfaction monitoring with the functioning of the website and ensuring the functioning of the Verified by Customers service
style="font-size:12.0pt; line-height: 115%; font-family: 'Times New Roman',serif; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: SK;">
8.2. The e-commerce operator determines satisfaction with the purchase through e-mail questionnaires as part of the Verified by Customers program, in which the Operator's e-commerce is involved. The Operator sends the Data Subject - Buyer every time the Data Subject - Buyer makes a purchase at the e-commerce operator. purchases, unless, pursuant to Act No. 452/2021 , as amended, the Data Subject - Buyer refuses to send e-mail for direct marketing purposes. The Controller processes personal data for the purpose of sending questionnaires within the Verified by Customers program based on the Controller's legitimate interest, which consists in determining the satisfaction of the Data Subject - Buyer with the purchase through the Seller's e-commerce store. For sending questionnaires, evaluating the Data Subject - Buyer's feedback and analyzing market position, the Controller uses a processing intermediary, which is the Controller portalHeureka.sk for these purposes, the Operator may transmit information about the purchased goods and the e-mail address of the Data Subject - Buyer. The personal data of the Data Subject - Buyer are not transferred to any third party for their own purposes when sending e-mail questionnaires. The Data Subject - Buyer may object to the sending of e-mail questionnaires within the Verified by Customers program at any time by refusing further questionnaires using the link in the e-mail with the questionnaire. In the event of an objection by the Data Subject - Buyer, the Operator will not send the questionnaire to the Data Subject - Buyer any further.
IX. Information on the provision of personal data to third countries and their retention period:
9.1.Applies. The operator transfers personal data of persons to third countries:
Google HQ. 1600 Amphitheatre Parkway. Mountain View, CA 94043, USA. For more information about privacy, please see: https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008
X. Information on the existence of relevant rights of the Data Subject:
10.1. The data subject has, among others, the following rights, whereby:
10.1.2. The Data Subject's right to access data pursuant to Article 15 of the Regulation , which contains:
the right to obtain from the Operator confirmation as to whether the personal data of the Data Subject are being processed, and if so, to what extent. At the same time, if they are being processed, the Data Subject has the right to ascertain their content and request from the Operator information on the reason for their processing, in particular information on : the reason for their processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be provided, in particular in the case of recipients in third countries countries or international organizations, the expected period of storage of personal data or, if that is not possible, information on the criteria for determining it, the existence of the right to request from the Operator the rectification of personal data concerning the Data Subject or their erasure or restriction of processing and the existence of the right to object to such processing, the right to lodge a complaint with a supervisory authority if the personal data were not obtained from the Data Subject, any available information as to their source, the existence of automated decision-making, including profiling referred to in Article 22(1) and (4) of the Regulation and, in such cases, at least meaningful information on the procedure used, as well as the significance and envisaged consequences of such processing of personal data for the Data Subject, the appropriate safeguards pursuant to Article 46 of the Regulation, relating to personal data, if personal data are transferred to a third country or an international organization.
10.1.3. the right to be provided with a copy of the personal data being processed, provided that the right to be provided with a copy of the processed personal data must not have adverse consequences for the rights and freedoms of others.
EN;">
10.1.5. the right to obtain from the Operator the erasure of personal data concerning the Data Subject without undue delay if one of the following reasons applies:
the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, the data subject withdraws the consent on the basis of which the processing is carried out, provided that there is no other legal basis for the processing of the personal data, The data subject objects to the processing of personal data pursuant to Article 21(1) of the Regulation and there are no overriding legitimate grounds for the processing of personal data or The data subject objects to the processing of personal data pursuant to Article 21(2) of the Regulation, the personal data have been processed unlawfully, the personal data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State to which the Controller is subject, the personal data were collected in connection with the offering of information society services pursuant to Article 8(1) of the Regulation;
10.1.6. the right to obtain from the Controller, who has disclosed the personal data of the Data Subject, taking into account available technology and the cost of implementation, appropriate measures, including technical measures, to inform other controllers processing the personal data that the Data Subject has requested the erasure of all links to, or copies or replications of, those personal data, provided that the right to erasure of personal data includes the rights under Article 17(1) and (2) of the Regulation does not arise if the processing of personal data is necessary:
style="font-size:12.0pt; line-height: 115%; font-family: 'Times New Roman',serif; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: SK;">
10.1.7. to exercise the right to freedom of expression and information.
10.1.8. to comply with a legal obligation that requires processing under European Union law or the law of a Member State to which the Controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the Controller.
10.1.9. for reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) of the Regulation, as well as Article 9(3) of the Regulation.
10.1.10. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the Regulation, where the right referred to in Article 17(1) of the Regulation is likely to render impossible or seriously impair the achievement of the objectives of such processing of personal data; or for the establishment, exercise or defence of legal claims;
10.1.11. the right of the Data Subject to restrict the processing of personal data pursuant to Article 18 of the Regulation, the content of which is:
10.1.13. the right to have such restricted personal data processed, with the exception of storage, only with the consent of the Data Subject or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State;
10.1.14. the right to be informed in advance about the lifting of restrictions on the processing of personal data;
10.1.15. the right of the Data Subject to comply with the notification obligation towards recipients pursuant to Article 19 of the Regulation, which includes: the right for the Controller to notify each recipient to whom the personal data have been provided of any rectification or erasure of personal data or restriction of processing carried out pursuant to Article 16, Article 17(1) and Article 18 of the Regulation, unless this proves impossible or does not involve disproportionate effort, the right for the Controller to inform the Data Subject about these recipients if the Data Subject so requests;
a/ the processing is based on the consent of the Data Subject pursuant to Article 6(1)(a) of the Regulation or Article 9(2)(a) of the Regulation, or on a contract pursuant to Article 6(1)(b) of the Regulation, and at the same time
b/ the processing is carried out by automated means, and at the same time:
10.1.18. the right to transfer personal data directly from one controller to another, if technically feasible;
10.1.19. the right of the Data Subject to object pursuant to Article 21 of the Regulation, which contains:
mso-fareast-font-family:'Times New Roman'; mso-fareast-language: SK;">
10.1.20. the right to object at any time, on grounds relating to the particular situation of the Data Subject, to processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(e) or (f) of the Regulation, including objection to profiling based on these provisions of the Regulation;
10.1.21. in the event of exercising the right to object at any time, on grounds relating to the particular situation of the Data Subject, to processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(e) or (f) of the Regulation, including objection to profiling based on these provisions of the Regulation, the right for the Controller to no longer process the Data Subject's personal data unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Data Subject, or for the establishment, exercise or defence of legal claims
'TimesNew Roman', serif; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: SK;">
10.1.22. the right to object at any time to the processing of personal data concerning the Data Subject for direct marketing purposes, including profiling to the extent that it is related to direct marketing; however, if the Data Subject objects to the processing of personal data for direct marketing purposes, the personal data shall no longer be processed for such purposes;
10.1.23. in connection with the use of information society services, the right to exercise the right to object to the processing of personal data by automated means using technical specifications;
'TimesNew Roman'; mso-fareast-language: SK;">10.1.24. the right to object, on grounds relating to the particular situation of the Data Subject, to processing of personal data concerning the Data Subject, where the personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the Regulation, except where the processing is necessary for the performance of a task carried out for reasons of public interest;
10.1.25. the right of the Data Subject related to automated individual decision-making pursuant to Article 22 of the Regulation, the content of which is:
10.1.26. the right not to be subject to a decision based solely on automated processing of personal data, including profiling, which produces legal effects concerning him or her or similarly significantly affects him, except in cases pursuant to Article 22(2) of the Regulation [i.e. except where decision: (a) necessary for entering into, or performance of, a contract between the Data Subject and the Controller,
10.1.27. permitted by European Union law or the law of a Member State to which the Controller is subject and which also lays down suitable measures to safeguard the rights and freedoms and legitimate interests of the Data Subject or (c) based on the Data Subject's explicit consent.
XI. Information on the Data Subject's right to withdraw consent to the processing of personal data:
New Roman'; mso-fareast-language: SK;">
11.1. The data subject has the right to withdraw his or her consent to the processing of personal data at any time, without this affecting the lawfulness of the processing of personal data based on the consent given before its withdrawal.
The data subject has the right to withdraw his or her consent to the processing of personal data at any time, in whole or in part. Partial withdrawal of consent to the processing of personal data may concern a certain type of processing operation(s), while the lawfulness of the processing of personal data to the extent of the remaining processing operations remains unaffected. Partial withdrawal of consent to the processing of personal data may concern a certain specific purpose(s) of the processing of personal data, while the lawfulness of the processing of personal data for other purposes remains unaffected.
The Data Subject may exercise the right to withdraw consent to the processing of personal data in written form to the address of the Operator registered as its registered office in the Commercial Register at the time of withdrawal of consent to the processing of personal data or in electronic form. by electronic means (by sending an e-mail to the Operator's e-mail address specified in the Operator's identification in this document).
XII. Information on the Data Subject's right to lodge a complaint with the supervisory authority:
12.1. The data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement, if he or she considers that the processing of personal data concerning him or her infringes the Regulation, without prejudice to any other administrative or judicial remedy.
12.2. The supervisory authority in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovak Republic. Tel. contact: +421 /2 3231 3214, Email: statny.dozor@pdp.gov.sk,
XIII. Information related to automated decision-making, including profiling: EN;">
13.1. Since the Controller does not process the personal data of the Data Subject in the form of automated decision-making, including profiling referred to in Article 22(1) and (4) of the Regulation, the Controller is not obliged to provide information pursuant to Article 13(2)(f) of the Regulation, i.e. information on automated decision-making, including profiling, and on the procedure used, as well as on the significance and foreseeable consequences of such processing of personal data for the Data Subject. Not applicable.
XIV. Privacy and Cookies Policy. Instructions and Explanation of Cookies, Scripts, and Pixels
14.1. The website operator provides the following brief explanation of the function of cookies, scripts and pixels:
A script is a piece of programming code that is used for the correct and interactive functioning of websites. This code runs on the operator's server or on your device.
Pixels is a small, invisible text or image on a website that is used to monitor website traffic. To do this, various data are stored via pixels.
14.1.2.Cookies are shared
Technical or necessary cookies – ensure the proper functioning of the Operator's website and its use. These cookies are used without consent.
Preference cookies - yes relate to users' choices regarding the use of cookies on the website, including the ability to accept, reject or adjust cookie settings based on their privacy preferences.
Statistical cookies – The operator obtains statistics regarding the use of its websites. These cookies are used only with consent.
Marketing / Advertising cookies – Used to create advertising profiles and similar marketing activities. These cookies are only used with consent.
14.2.How to control cookies:
14.2.1.You can control and/or delete cookies at your discretion - see the page for details. aboutcookies.org . You can delete all cookies stored on your computer or other device, and you can set most browsers to prevent them from being stored.
14.3.1.Cookies made available to third parties:
Google HQ. 1600 Amphitheater Parkway. Mountain View, CA 94043, USA. For more information about privacy, please see: https://support.google.com/analytics/topic/2919631?hl=sk&ref_topic=1008008
Heureka Shopping s.r.o., Karolinská 650/1, 186 00 Prague 8 – Karlín, Czech Republic, ID number: 02387727
XV. Final provisions
15.1. These Principles and instructions on the protection of personal data and instructions on cookies form an integral part of the General Terms and Conditions and the Complaints Procedure. Documents – General Terms and Conditions and Complaints Procedure of this Website are published on the Website domain The seller.
15.2. These Personal Data Protection Principles shall enter into force and effect upon their publication on the Seller's Website on 15.11.2024.
style="font-size:12.0pt; line-height: 115%; font-family: 'Times New Roman',serif;">
This e-shop is certified https://www.pravoeshopov.sk