Privacy policy

Regarding new legislation General Data Protection Regulation (GDPR), ALVEX, spol. s r.o. stores customer information in accordance with the introduction of this new legislation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, effective from 25 May 2018, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, which repeals Directive 95/46/ES (General Data Protection Regulation), hereinafter referred to as the “Regulation”. ALVEX, spol. s r.o., adapted all personal data processing rules in line with this new regulation.

All data obtained from customers is used solely for internal purposes and is not provided to third parties. The only exceptions are companies handling transportation or payment transactions, to which customer personal data is provided only to the minimum extent necessary for the smooth processing of an order. Without the explicit consent of customers, we handle personal data only and exclusively within the scope permitted by the Personal Data Protection Act.

IDENTIFICATION DATA OF THE CONTROLLER

The controller of personal data is ALVEX, spol. s r.o., with registered office at Štefánikova 35, 900 28 Ivanka pri Dunaji, Slovak Republic, Company ID: 34 139 435. The company is registered in the Commercial Register of the District Court Bratislava 1, Section Sro, File no. 12577/B.

PROCESSING OF PERSONAL DATA

ALVEX, spol. s r.o. processes the following customer personal data for the purpose of registration, purchases via the online store, and the exercise of rights and obligations arising between you and ALVEX, spol. s r.o.:
name, surname, phone number, email address, customer address, delivery address, customer IP address.

The legal grounds for processing personal data are the consent given to the controller under:

  • performance of a contract under Article 6(1)(b) GDPR and compliance with the controller’s legal obligations under Article 6(1)(c) GDPR,

  • Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (“GDPR”) for direct marketing purposes, where no order has been placed,

  • the legitimate interest of the controller in conducting direct marketing under Article 6(1)(f) GDPR.

Processing of personal data is necessary, in the case of purchasing goods through the online store, for the performance of the purchase contract and for the purposes of fulfilling the legal obligations of ALVEX, spol. s r.o.

The controller does not carry out automated individual decision-making within the meaning of Article 22 GDPR.

When filling out the online Contact Form, personal data is processed, specifically the customer’s name, email, and possibly phone number. The personal data provided in this form is used exclusively to contact you back and respond to your message. It is stored for the period necessary to reply to your inquiry.

PERIOD OF STORAGE OF PERSONAL DATA

Personal data is processed for the period necessary to exercise rights and obligations arising from the contractual relationship (no more than 3 years after its termination) or until the withdrawal of consent to the processing of personal data.

RECIPIENTS OF PERSONAL DATA

Recipients of personal data are the following entities:

  • courier company REMAX Courier Service, Company ID: 35 825 456

  • transport company SCHENKER, Company ID: 31 327 222, or, if required, another transport company ensuring delivery of goods to the customer

  • an additional processor is the accounting company:

    • KES, spol. s r.o., Ivanka pri Dunaji, Company ID: 35 906 731, as a processor of data for accounting purposes.

RIGHTS OF DATA SUBJECTS

Under the conditions set out in the GDPR, you have the right to:

  • access personal data

  • rectify personal data

  • restrict the processing of personal data

  • erase personal data

  • data portability

  • object to the processing of personal data

If you believe that your right to the protection of personal data has been violated, you have the right to lodge a complaint with the supervisory authority.

SECURITY OF PERSONAL DATA

The controller undertakes to adopt appropriate technical and organizational measures to secure personal data so as to prevent unauthorized access or loss. The controller declares that only authorized persons, obliged to maintain confidentiality about personal data, will have access to personal data. The controller has adopted technical measures to secure data storage and personal data recorded in paper form.

FINAL PROVISIONS

By submitting an order through the online store, you confirm that you have familiarized yourself with the conditions of personal data protection and fully agree with them. The controller reserves the right to amend these conditions. The current version of the conditions is published on the controller’s website.