Privacy Policy

I. Basic Provisions

1. The controller of personal data pursuant to § 5 letter o) of Act No. 18/2018 Coll. on the Protection of Personal Data, as amended (hereinafter referred to as the “Act”), is Lerio s. r. o., Company ID (IČO): 56270241, with registered office at Ota Holúska 9150/5B, 841 06 Bratislava (hereinafter referred to as the “controller”).

2. Contact details of the controller:

Address: Lerio s. r. o., Ota Holúska 9150/5B, 841 06 Bratislava
Email: rustbabydesigninfo@gmail.com
Phone: +421902734721

3. Personal data means any information about an identified or identifiable natural person; an identifiable natural person is a person who can be directly or indirectly identified, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

4. The controller has / has not appointed a Data Protection Officer. The contact details of the Data Protection Officer are:

II. Sources and Categories of Personal Data Processed

1. The controller processes personal data that you have provided or personal data obtained by the controller in connection with fulfilling your order.

2. The controller processes your identification and contact details and data necessary for the performance of the contract.

III. Legal Basis and Purpose of Processing Personal Data

1. The legal basis for processing personal data is:

• the performance of a contract between you and the controller pursuant to § 13(1)(b) of the Act,

• the legitimate interest of the controller in providing direct marketing (especially for sending commercial messages and newsletters) pursuant to § 13(1)(f) of the Act,

• your consent to processing for the purpose of providing direct marketing (especially for sending commercial messages and newsletters) pursuant to § 13(1)(a) of the Act.

2. The purpose of processing personal data is:

• processing your order and exercising the rights and obligations arising from the contractual relationship between you and the controller; personal data required for successful processing of the order (name and address, contact) must be provided – provision of personal data is a necessary requirement for concluding and fulfilling the contract. Without the provision of personal data, it is not possible to conclude the contract or fulfill it by the controller,

• sending commercial messages and conducting other marketing activities.

3. There is / is not automatic individual decision-making by the controller within the meaning of § 28 of the Act. You have given your explicit consent to such processing.

IV. Duration of Personal Data Storage

1. The controller stores personal data:

• for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and the enforcement of claims from such contractual relationships (for a period of 15 years after termination of the contractual relationship),

• until consent to the processing of personal data for marketing purposes is withdrawn, but for no longer than …

2. After the storage period expires, the controller will delete the personal data.

V. Recipients of Personal Data (Controller's Subcontractors)

1. Recipients of personal data are persons:

• involved in the delivery of goods / services / processing of payments under the contract,

• providing services for the operation of the e-shop (Shoptet) and other services related to the operation of the e-shop,

• providing marketing services.

2. The controller does not / does intend to transfer personal data to a third country (a non-EU country) or an international organization. Recipients of personal data in third countries are providers of mailing services / cloud services.

VI. Your Rights

1. Under the conditions set out in the Act, you have:

• the right to access your personal data pursuant to § 21 of the Act,

• the right to rectification of personal data pursuant to § 22 of the Act, or restriction of processing pursuant to § 24 of the Act,

• the right to erasure of personal data pursuant to § 23 of the Act,

• the right to object to processing pursuant to § 27 of the Act,

• the right to data portability pursuant to § 26 of the Act,

• the right to withdraw consent to processing in writing or electronically to the address or email of the controller specified in Article III of these conditions.

2. You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe your data protection rights have been violated.

VII. Conditions for Securing Personal Data

1. The controller declares that appropriate technical and organizational measures have been taken to secure personal data.

2. The controller has adopted technical measures to secure data storage and storage of personal data in paper form, especially …

3. The controller declares that only persons authorized by the controller have access to personal data.

VIII. Final Provisions

1. By submitting an order via the online order form, you confirm that you have read the Privacy Policy and that you fully accept it.

2. You agree to these conditions by checking the consent checkbox via the online form. By checking the box, you confirm that you are familiar with the Privacy Policy and that you fully accept it.

3. The controller reserves the right to change these conditions. The new version of the Privacy Policy will be published on the controller’s website and also sent to your email address that you have provided to the controller.

These conditions are effective as of 8 February 2021.