Personal data protection

Information pursuant to Section 15(1) of Act No. 122/2013 Coll. on the Protection of Personal Data, as amended by later legal regulations

In order to process your order, we need information about your personal data.

We process these in accordance with Act No. 122/2013 Coll. on the Protection of Personal Data, as amended, and they will be used exclusively for processing your order and our further communication with you.

1. Online store operator:

1) The operator of the information system is the legal entity:

Climbing wall, sro
Old Ivanska Street 1/B,
821 04 Bratislava
Registered in the Commercial Register, section: Ltd., file number: 83430/B
ID: 46 735 151
VAT number: 202 357 92 17

(hereinafter referred to as the "operator")

2. Purpose of processing personal data

1) The operator processes personal data for the purpose of concluding a purchase contract with the buyer via the online store www.lezeckastena.sk or in another appropriate manner and by fulfilling the obligations arising from this contract.

2) The operator processes the personal data of buyers for the following purpose:
• customer registration on the online store www.lezeckastena.sk
• ordering goods through an online store www.lezeckastena.sk
• order confirmation
• conclusion of a purchase contract
• issuing a tax document for payment of the purchase price for the ordered goods in accordance with Act No. 222/2004 Coll. on Value Added Tax, as amended
• delivery of the ordered goods to the destination specified by the buyer and their handover to the authorized person
• registration of buyers for administrative purposes
• order records for resolving any complaints

3. List of processed personal data

1) The operator processes the personal data of the data subjects to the extent specified in the relevant legal regulations, in contracts and other documents of the operator to the extent that this personal data will be provided to the operator in documents, letters and notifications, or in telephone calls or electronic communication between the operator and the buyer.
2) The operator processes in particular the following personal data of the data subjects:
• first and last name
• delivery address
• billing address
• contact details (phone number, email)
• order data
3) If the operator also processes other personal data of the data subjects, as specified in Art. 3, paragraph 1) of these terms and conditions for processing personal data, it processes them to the extent necessary to fulfill the obligations arising from the purchase contract.

4. Voluntary provision of personal data

1) The operator obtains personal data from buyers to the extent necessary to fulfill the obligations arising from the purchase contract concluded between the operator and the buyer, the subject of which is the delivery of the ordered goods for the agreed purchase price in accordance with Section 10, paragraph 3, letter b) of Act No. 122/2013 Coll. on the protection of personal data, as amended by later legal regulations, without the consent of the data subject.
2) The Buyer provides this personal data to the Operator voluntarily for the purpose of fulfilling his obligations arising from the purchase contract and further communication with him.
3) The buyer acknowledges that his personal data will be made available or provided to a third party (e.g. a carrier) for the purpose of fulfilling his obligations arising from the purchase contract.
4) The operator processes the personal data of the data subject only for the period necessary to fulfill its obligations arising from the contract and generally binding legal regulations.

5. Provision and access to personal data

1) The operator of the online store provides personal data about buyers obtained through the online store www.lezeckastena.sk to a third party only to the extent necessary for the purpose of fulfilling its obligations arising from the purchase contract. In accordance with the above, the operator provides personal data about buyers in the scope of name, surname, delivery address, billing address, telephone number and, if necessary, the total price of the order to a third party that ensures delivery of the order to the buyer.
2) The operator does not disclose personal data to any third party except in cases where this is necessary to fulfill the obligations arising from the purchase contract.

6. Disclosure of personal data

1) The operator does not publish personal data about buyers.

7. Information about the rights of the data subject

1) The data subject is entitled, upon written request, to request from the controller
a) confirmation of whether or not personal data about him/her are being processed,
b) in a generally understandable form, information on the processing of personal data in the information system to the extent pursuant to Section 15, paragraph 1, letters a) to e), second to sixth points of the aforementioned Act; when issuing a decision, the data subject is entitled to familiarize himself with the procedure for processing and evaluating operations,
c) in a generally understandable form, precise information about the source from which he obtained her personal data for processing,
d) a list of their personal data that are subject to processing in a generally understandable form,
e) correction or destruction of your incorrect, incomplete or outdated personal data that is the subject of processing,
f) destruction of his/her personal data, the purpose of processing of which has ended; if the subject of processing are official documents containing personal data, he/she may request their return,
g) destruction of their personal data that are the subject of processing if there has been a violation of the law,
h) blocking of his/her personal data due to withdrawal of consent before its expiry, if the controller processes personal data based on the consent of the data subject
2) The right of the data subject under paragraph 1 letters e) and f) of the aforementioned Act may be restricted only if such restriction results from a special law or its application would violate the protection of the data subject or the rights and freedoms of other persons.
3) The data subject has the right to object to the controller upon written request.
a) processing of their personal data which they assume are or will be processed for direct marketing purposes without their consent, and to request their destruction,
b) the use of personal data referred to in Section 10, paragraph 3, letter d) of the said Act for the purposes of direct marketing by post, or
c) provision of personal data referred to in § 10 para. 3 letter d) of the cited Act for the purposes of direct marketing.
4) The data subject, upon written request or in person, if the matter cannot be postponed, has the right to object to the processing of personal data at any time to the controller in cases pursuant to §10, paragraph 3, letter a), e), f) or g) of the aforementioned Act by stating legitimate reasons or by submitting evidence of an unjustified interference with his or her rights and legally protected interests, which are or may be damaged in a specific case by such processing of personal data; if this is not prevented by legal reasons and it is proven that the objection of the data subject is justified, the controller is obliged to block and destroy the personal data, the processing of which the data subject has objected, without undue delay, as soon as circumstances permit.
5) The data subject, upon written request or in person, if the matter cannot be postponed, shall have the right to object to the controller at any time and not to submit to a decision of the controller that would have legal effects or a significant impact on him or her, if such a decision is issued solely on the basis of automated processing of his or her personal data. The data subject shall have the right to request the controller to review the issued decision by a method other than automated processing, while the controller shall be obliged to comply with the data subject's request, in such a way that the authorized person will have the decisive role in reviewing the decision; the controller shall inform the data subject of the method of review and the result of the finding within the period pursuant to Section 29, paragraph 3 of the cited Act. The data subject shall not have this right only if it is provided for by a special law that regulates measures to safeguard the legitimate interests of the data subject, or if within the framework of pre-contractual relations or during the existence of the data subject.
6)If the data subject exercises his/her right
a) in writing and the content of his/her request indicates that he/she is exercising his/her right, the request shall be deemed to have been submitted in accordance with this Act; the person concerned shall deliver a request submitted by e-mail or fax in writing no later than three days from the date of its dispatch,
b) in person orally in a record, which must clearly state who exercised the right, what is being claimed and when, and who prepared the record, his signature and the signature of the person concerned; the controller is obliged to provide a copy of the record to the person concerned,
c) in the case of an intermediary pursuant to letter a) or letter b), the intermediary is obliged to submit this request or minutes to the controller without undue delay.
7) If the data subject suspects that his or her personal data is being processed unlawfully, he or she may submit a motion to the Office to initiate proceedings on the protection of personal data.
8) If the person concerned does not have full legal capacity, his or her rights may be exercised by a legal representative.
9) If the person concerned is not alive, his/her rights under this Act may be exercised by a close person.
10) The data subject is obliged to provide only true personal data. The person who provided them to the information system is liable for the falsity of personal data pursuant to Section 16, paragraph 1 of Act No. 122/2013 Coll. on the Protection of Personal Data, as amended by later legal regulations.

8. Operator's liability

1) The operator is not responsible for the misuse of personal data by a third party who has accessed this personal data without authorization.
2) The liability of the controller for violation of individual provisions of Act No. 122/2013 Coll. on the protection of personal data, as amended by later legal regulations, is governed by the provisions of this Act.

Cookie Policy

1. What are cookies?

Cookies are small text files that are stored on your device when you visit a website. These files contain information about your interaction with the website and help us provide better services, optimize the functionality of our site, and improve your user experience.

2. What types of cookies do we use?

Necessary cookies

These cookies are necessary for the basic functions of the website, such as security, session management and access to secure areas of the site. Without them, the website would not be able to function properly.

Analytical cookies

They help us understand how visitors use our site, which parts are most visited and how we can improve our site. These cookies collect data anonymously.

Advertising cookies

They are used to display personalized ads and measure their performance. These cookies allow us to tailor the content of ads to your interests and preferences.

Functional cookies

These cookies allow the site to remember your choices (e.g. language settings) and improve functionality.

3. How do we use cookies?

Cookies allow us to:

To facilitate your navigation on the site and improve the user experience.
To collect statistical data to improve our services.
Show relevant content and ads.

4. How can you manage cookies?

You have the option to manage or delete cookies in your browser:

Browser settings: Most browsers allow you to manage or block cookies. However, please note that some parts of the site may stop working if you block essential cookies.

For details on how to manage cookies, please refer to your browser settings or visit our website. www.allaboutcookies.org.