Information on the processing of personal data
the identification data of the controller and the responsible person The controller of personal data is Rack-art™, s.r.o. with registered office: Kolónia 3232/46, 924 01 Galanta, ID No: 53 931 033, registered in the Commercial Register of the District Court of Trnava, file number 47705/T, section Sro, e-mail: hello@rack-art.com, (hereinafter referred to as "Seller" or "Rack-art™" or "Rack-art™"), which processes personal data under the conditions specified below.
Processing of personal data for individual purposes:
Purchase of goods via the e-shop, delivery of goods, handling of complaints and handling of insurance claims Rack-art™ processes the following personal data of the Customer for the purpose of purchasing goods via the e-shop and delivery of goods: First name, last name, telephone number, e-mail address, address, details of the goods purchased and details of the payment for the goods (account number, amount paid, date on which the payment was credited to the Rack-art™ account), for the processing of complaints in addition to the details of the goods complained about referred to in the previous point and details provided by the customer when registering a claim, for the processing of insurance claims in addition to the details of the goods insured referred to in the previous point and details provided by the customer when registering an insurance claim.
The legal basis for the processing of personal data is Article 6(1)(b) of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (the "General Data Protection Regulation") ("GDPR") and Article 6(1)(c) of the GDPR in the case of the purchase of goods via the e-shop, the delivery of the goods to the customer and the processing of insurance claims.
The processing of personal data by Rack-art™ is necessary for the performance of the contract for the purchase of goods via the e-shop, the delivery of goods to the customer and the settlement of insurance claims, as well as for the settlement of claims for the fulfilment of Rack-art™'s legal obligation.
The recipients of the personal data are the following:
the courier or transport company arranging the delivery of the goods to the customer, as an additional entrepreneur or intermediary,
service partners, suppliers, insurance companies, external legal representatives, other consumer protection authorities, transport companies in connection with the settlement of claims and insurance claims, as controllers or intermediaries
Financial administration authorities, tax advisors and auditors as operators or intermediaries, if this is necessary for the fulfilment of Rack-art™'s legal obligation.
Personal data is processed during the performance of the purchase contract and during the warranty period for the delivered goods.
Sale of goods outside the e-shop offer
Rack-art™ processes the following personal data of the customer for the purpose of selling goods outside the e-shop offer: First name, last name and order data.
The legal basis for the processing of personal data is Article 6(1)(b) of the General Data Protection Regulation. The processing of personal data by Rack-art™ is necessary if a customer wishes to purchase goods that are not offered in the e-shop. The personal data are processed during the performance of the purchase contract and the expiry of the warranty period for the delivered goods.
Registration and operation of the e-shop
Rack-art™ processes the following personal data for the purpose of registration and operation of the e-shop: First name, last name, telephone number, e-mail address, address and order history.
The legal basis for the processing of personal data is Article 6(1)(b) of the General Data Protection Regulation. The processing of personal data by Rack-art™ is necessary to ensure the registration in the e-shop and the operation of the e-shop.
The personal data are processed for the duration of the registration in the e-shop.
Supporting customers by telephone and e-mail
Rack-art™ processes the following personal data of customers for the purpose of telephone and e-mail support: First name, last name, telephone number, e-mail address, address, order history.
The legal basis for the processing of personal data is Article 6(1)(b) of the General Data Protection Regulation (GDPR) and, in relation to the recording of telephone conversations, Article 6(1)(a) of the GDPR. The processing of personal data by Rack-art™ is necessary for the provision of services.
The personal data is processed for the duration of the warranty period of the purchased goods.
Resolution of customer complaints
Rack-art™ processes the following personal data for the purpose of resolving customer complaints: First name, last name, the data indicated in the complaint and, depending on the nature of the complaint, the address, telephone number or e-mail address of the customer.
The legal basis beif. Enforcement of Rack-art™ claims.
Rack-art™ processes the following data for the purpose of asserting Rack-art™ claims: Data from contracts with customers and suppliers, data from complaints, data necessary for the assertion of Rack-art™'s claims, data from a lawsuit against Rack-art™, data from theft records, data from accounting records and other data necessary in connection with the possible assertion of claims or the protection of Rack-art™'s interests.
The purpose of the processing of this personal data is the legitimate interest of the controller and the legal basis for the processing is Article 6(1)(f) of the General Data Protection Regulation. The processing of personal data by Rack-art™ is necessary for the purposes of the legitimate interests of Rack-art™. The legitimate interests of Rack-art™ are the protection of its assets and the protection against unjustified claims against Rack-art™.
The recipients of the personal data are:
Courts, public authorities, legal representatives, tax advisors and other professional advisors as controllers.
Personal data will be processed for the duration of the litigation and for the limitation period during which claims against Rack-art™ may be brought or during which Rack-art™ may bring its own claims.
Enforcement of Rack-art™'s claims.
Rack-art™ processes the following data for the purpose of asserting Rack-art™'s claims: Data from contracts with customers and suppliers, Data from complaints, Data necessary for Rack-art™ to make a claim, Data from a claim against Rack-art™, Data from theft records, Data from accounting records and other Data necessary in connection with the possible making of a claim or the protection of Rack-art™'s interests.
The purpose of the processing of these personal data is the legitimate interest of the controller and the legal basis for the processing is Article 6(1)(f) of the General Data Protection Regulation. The processing of personal data by Rack-art™ is necessary for the purposes of the legitimate interests of Rack-art™. The legitimate interests of Rack-art™ are the protection of its assets and the protection against unjustified claims against Rack-art™.
The recipients of the personal data are:
courts, public authorities, legal representatives, tax advisors and other professional advisors as controllers.
personal data will be processed for the duration of the litigation and for the limitation period during which claims may be brought against Rack-art™ or during which Rack-art™ may bring its own claims.
Compliance with Rack-art™'s legal obligations
Rack-art™ processes the personal data referred to in points a) to f) for the purposes of complying with Rack-art™'s legal obligations.
The legal basis for the processing is Article 6(1)(c) of the GDPR (e.g. the Accounting Act, the VAT Act, the Income Tax Act, the Consumer Protection Act, the Archives and Records Act). The processing of personal data by Rack-art™ is necessary for Rack-art™ to comply with its legal obligations.
The recipients of the personal data are the following:
Tax advisors, auditors, courts and authorities as controllers.
The personal data will be processed for the period provided for in the relevant legislation.
Rights of the data subject
The data subject has the right to bring an action before the Office for Personal Data Protection of the Slovak Republic if he or she considers that his or her rights under the General Data Protection Regulation or under applicable law are directly affected.
The data subject has the right of access to personal data, rectification of personal data, erasure of personal data, restriction of the processing of personal data, the right to personal data portability and the right to object to the processing of personal data against the controller. The data subject may exercise these rights by contacting Rack-art™:
(a) by sending a written letter to the address of the registered office of the Company, stating the name and surname of the person responsible on behalf of the Company,
(b) by electronic means by sending an e-mail to the above e-mail address; or
(c) by telephone at the number set out above.
YouTube
Our website uses the provider YouTube LLC , 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for the integration of videos. Normally, when you call up a page with embedded videos, your IP address is already sent to YouTube and cookies are installed on your computer. However, we have embedded our YouTube videos with the extended data protection mode (in this case, YouTube still contacts Google's Double Klick service, but according to Google's privacy policy, personal data is not evaluated). This means that YouTube no longer stores any information about visitors unless they watch the video. If you click on the video, your IP address is transmitted to YouTube and YouTube learns that you have watched the video. If you are logged in to YouTube, this information is also assigned to your user account (you can prevent this by logging out of YouTube before viewing the video).
We have no knowledge of and no influence on the possible collection and use of your data by YouTube. You can find more information in YouTube's privacy policy at www.google.de/intl/de/policies/privacy/. In addition, we refer to our general presentation in this data protection declaration for the general handling and deactivation of cookies.
The relevant legal provisions are in particular the GDPR Regulation, the applicable Data Protection Act as amended and other applicable generally binding