PRINCIPLES OF PERSONAL DATA PROTECTION
Principles of personal data protection in the online store and when handling personal data. These principles summarize the ways in which personal data are processed by the operator. The operator ensures that personal data are maximally protected, and their processing is only to the necessary extent and for the necessary time.
Definitions of Terms
Affected Person – every person whose personal data are processed
E-shop – a web application with a range of goods and services that can be ordered
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data
Store – the seller’s premises where goods or services can be purchased
Personal Data – any information concerning an identified natural person or identifiable natural person
Operator – a person who determines the method and purpose of processing personal data
Information about the Operator and Its Contacts
The operator processing personal data is Stoneclass s.r.o., with registered office at Hlavná 22, 943 01 Sturovo, ID: 55740936. This operator determines the means and purpose of processing customer personal data and is responsible for processing the acquired personal data.
If you have any questions regarding the protection of personal data, you can contact us:
- By email at stoneclasssro@gmail.com
- By mail at the company’s registered address mentioned above
- At the company’s branches
List of Processed Personal Data, including their Purposes and Legal Basis
(Translation includes the provided table with details of processed personal data, purposes, legal basis, retention period, and additional recipients.)
Your Rights in the Field of Personal Data Protection
| Your Right | Clarification of the Right |
|---|---|
| to information | You have the right to information about who, how, for what, how long, etc., processes your personal data (information published in this document). |
| to access data | You can request information about who accesses your personal data. This request can be addressed in writing or by email. |
| to rectification | If personal data are outdated, you can request their correction to ensure accuracy. |
| to erasure | If you do not want the operator to continue processing personal data, you can request their erasure, except when processing or archiving is required by law. |
| to restriction of processing | Applies only if data are processed based on the legitimate interest of the operator. During the objection period, this right can be exercised, and it involves the non-processing of personal data during that period. |
| to withdraw consent to processing | Applies when consent has been given. If the data subject no longer wishes such data to be processed according to the given consent, the consent can be withdrawn, and the operator will no longer process personal data. |
| to data portability | You can request data transfer only if personal data are processed based on the data subject’s consent or for the purpose of fulfilling contractual or pre-contractual relationships. |
| to lodge a complaint with the supervisory authority | If you believe that personal data have been processed in violation of the Law or Regulation, you have the right to lodge a complaint with the relevant supervisory authority, the Office for Personal Data Protection based in Bratislava. |
How to Exercise Your Rights?
You can exercise your rights as follows:
- By email
- In person
- By mail
The operator has the right to request a reasonable fee from the data subject or refuse requests if they are deemed manifestly unfounded, excessive, or repetitive.
How We Ensure Protection and Store Data
Personal data are secured offline and online against unauthorized access, destruction, damage, or loss using rigorous electronic, organizational, and physical security measures.
Do We Use Profiling?
Profiling is not used.
Cookie Usage Policy
Cookies are created during page browsing and stored on your computer. They help distinguish you from other users and provide a more intuitive search and page content.
Cookies are divided into temporary (deleted automatically after closing the browser) and permanent (not deleted automatically and must be deleted manually) files. They serve technical, preference, analytical/performance, and advertising purposes.
Cookie settings can be adjusted in your browser or on our website.
Data Storage Duration for Cookies
| Subgroup of Cookies | Validity Period | Note |
|---|---|---|
| Website | Session | Functional |
| Google Analytics | 1460 days | Analytical tool |
| App.livechatoo.com | 730 days | Chat application |
| Facebook Inc. | 90 days | Marketing |
Who Generally Has Access to My Personal Data?
Employees, operators, and contractual intermediaries or recipients (e.g., a carrier) may have access to personal data. Employees and intermediaries are internally instructed to adhere to strict rules for protecting personal data.
Which Legal Regulations Apply to Personal Data Protection?
Regulations include the Charter of Fundamental Rights of the European Union, GDPR, the Constitution of the Slovak Republic, and Act No. 18/2018 Coll. on Personal Data Protection and Amendment of Certain Laws.
Who Provides Services?
- System management (including website management): Stoneclass s.r.o.
- Customer account management: Stoneclass s.r.o.
- Complaints handling, contract cancellations, invoicing, goods shipment: Stoneclass s.r.o.
- Email newsletter: Stoneclass s.r.o.
- Hosting services: [Hosting service provider name, address, country]
- Accounting and payroll processing: MUFIS s.r.o.
Can I Make Purchases if I am Under 16?
No. This e-shop is intended for users over 18 years old. If a parent allows you to use our site, including making purchases, you can do so.
Please note that the translation provided here is a general representation, and specific legal terms or requirements may need further review based on the legal context and jurisdiction.
