1. OUR DATA

Who we are?

• Personal data is processed by:
  Trade name: LUSOLE, s. r. o.
  reg.: Business Register of the City Court Bratislava III, section Ltd., vl. no. 181854/B
  Registered office: Černyševského 1287/10, 851 01 Bratislava, Slovakia
  Company ID: 56530587
  VAT number: SK2122341727
  email: info@lusole.com
  (hereinafter referred to as the "provider").

2. CATEGORIES OF PERSONAL DATA, PURPOSE, LEGAL BASIS AND PERIOD

What personal data do we process, for what purpose, on what legal basis and for what period?

• We only process the personal data needed to achieve the stated purpose. We process personal data for the following purposes:

Accounting agenda

• We process the personal data of customers or other persons kept in accounting, including title, first name, last name, and address, for invoicing purposes, payment data, and telephone number, email, and signature, to keep accounts and fulfil the obligations arising from the Accounting Act and other relevant legal regulations. Your payment card data is only processed by the payment gateway provider. The legal basis for processing personal data is the fulfilment of legal obligations. We keep accounting documents for ten (10) years.

Provision of digital content

• We process customers' personal data in the scope of the title, first name, last name, and address for invoicing purposes, data on orders and provided digital fulfilment, data on payments, and phone number; we process email address for the following purposes:
  • pre-contractual communication,
  • creating a user account,
  • acceptance of the order,
  • withdrawal from the contract,
  • performance of the contract and provision of digital performance,
  • issuance of a certificate,
  • records of contracts for a specified period,
  The legal basis for their processing is the fulfilment of a contractual obligation, as your data, including the creation of a user account, are necessary to provide digital content.
  We keep the personal data of interested parties from pre-contractual communication for six (6) months. We store personal data processed to conclude and fulfil the contract for five (5) years after the end of the provision of the last digital fulfilment. Personal data in the user account is stored during registration on the website.

Complaints

• We process the personal data of customers who complained about the provided digital content in the scope of the title, first name, last name, address, email, phone number, data about the order, and the complained digital content subject to the complaint to receive and process the complaint, records of complaints. The legal basis for processing this personal data is fulfilling a legal obligation under the Consumer Protection Act. We keep personal data for five (5) years from the day the claim is processed.

Contact form

• We process the personal data of interested parties in the scope of the title, first name, last name, email, and the subject of the message to receive and process your request. This personal data is processed to fulfil the contract or pre-contractual relations. We store personal data for six (6) months.

Newsletter

• We process the personal data of persons who signed up for the newsletter in the scope of name, surname, and email on the legal basis of the consent of the person concerned. Personal data of customers or other persons with whom we have a contractual relationship we process for the purpose of sending newsletters on the legal basis of legitimate interest, which is to inform about the activities of the provider, its offers and promotions. The person concerned can revoke the consent at any time or object to the processing of personal data by sending a written notice or unsubscribing from the newsletter. We process personal data for ten (10) years.

Management of social networks

• We process the personal data of fans of our official pages on social networks to manage social networks. The legal basis for processing personal data is the legitimate interest, which is the presentation of the provider and its services through social networks. We process personal data as long as you are a fan of our site.

Marketing competitions

• We process contestants' personal data, including first name, last name, username, or other data provided, for the purpose of participation and evaluation of the competition. A person's consent is the legal basis they provide when registering for the competition. We process these personal data for the duration of the competition and the winner's data for one (1) year after the end.

Cookies

• We process cookies to ensure the functionality of our website and its easier use and for advertising purposes. The legal basis for processing cookies is your consent, which you give us by clicking the appropriate button on the cookies bar. We store cookies for 15 months.

3. CONSENT

• In the above cases, we process your data on the legal basis of consent, i.e. only with your consent. You may withdraw this consent at any time by sending a notice to our email, by clicking on the link in the footer of the email in the case of newsletters or in the case of cookies by changing your browser settings.

4. PERSONS UNDER 18 YEARS OF AGE

Are you under 18?

• Digital content sold by the provider and all content published on the website is intended for persons over 18 years of age. Therefore, we do not process personal data of persons under 18.

5. RECIPIENTS

To whom do we provide your data?

• We provide personal data to a third party only if this is required by a special law or is necessary for the performance of the contract. These are mainly public administration bodies and other authorized entities.
  We may further provide your data to an intermediary who provides us with professional and specialized services. In the event that we entrust the processing of personal data to an intermediary, we have concluded a contract with them on the processing of personal data and have bound them to confidentiality. We have authorized the following intermediaries:
  - accounting office,
  - web hosting provider,
  - system provider for website administration,
  - provider of an online system for sending email,
  - payment gateway provider.

6. THIRD COUNTRIES

Where do we transfer your data?

• We transfer personal data to a third country, the USA, in connection with the use of Google services and the social network. The country mentioned provides adequate guarantees for the security of your personal data.

7. COMPLAINT

Are you not satisfied?

• If you are dissatisfied with how we process your data, you can email us at info@lusole.com. If you believe that we are processing your personal data illegally, you can also file a complaint with the Office for Personal Data Protection.
  Office for the Protection of Personal Data
  Hraničná 12, 820 07 Bratislava
  Email: statny.dozor@pdp.gov.sk

8. METHOD OF PROCESSING PERSONAL DATA

How do we process your personal data?

• We process personal data in electronic and paper form. We do not use any means of automated individual decision-making.
  We keep records of all processing activities and have the necessary technical and organizational security measures in place to ensure the protection of personal data. These measures mainly include an SSL certificate, antivirus programs, a strong password policy and encryption. We regularly back up the entrusted personal data so that we can restore them immediately in case of accidental damage or loss. Persons who process personal data have been instructed and bound by confidentiality. We approach the selection of intermediaries very responsibly while making sure that the selected intermediary provides us with adequate guarantees for the security of your data.

9. RIGHTS OF THE PERSONS AFFECTED

What rights do you have as a data subject?

• The GDPR grants you certain rights by which you can influence how we process your data. However, you may not exercise all rights in all circumstances. In doing so, the legal basis for processing personal data must be considered.

• a) Right of access to data

  You have the right to know whether we are processing your personal data. As long as we process your data, you can ask us to access it. Based on your request, we will issue a confirmation with information about our company's processing of your personal data.

• b) Right to repair

  You have the right to have your personal data processed by us to be correct, complete, and accurate. You can ask us to correct or supplement them if they need to be corrected or updated. We will correct the data without unnecessary delay, considering the technical possibilities.

• c) Right to erasure

  In certain circumstances, you have the right to have your personal data deleted. You can ask us to delete them at any time. We will delete your personal data if:
  • we no longer need them for the purpose for which you provided them to us;
  • withdraw your consent;
  • you object to the processing of your personal data;
  • we process your personal data illegally;
  • personal data must be deleted to comply with a legal obligation;
  • you are a child or the parent of a child who agreed to the processing of personal data via the Internet;

• d) Right to restriction of processing

  You can ask us to restrict the processing of your personal data. If we grant your request, we will only store your data and no longer work with it. The processing of your data will be restricted if:
  • you notify us that they are incorrect until we have verified their correctness;
  • we process them unlawfully, but you do not agree to their deletion and instead request that we only limit the processing of your personal data;
  • we no longer need them, but you need them to prove, exercise or defend your rights;
  • you object to processing your personal data until we have verified whether our legitimate interests outweigh your reasons.

• e) The right to data portability

  You have the right to have your personal data transferred to another provider in cases provided by law. This applies in particular to the processing of personal data with the consent of or for the performance of a contract if the date is processed by automated means and it is technically feasible.

• f) The right to object

  In cases where we process your personal data on the legal basis of legitimate interest, you have the right to object to their processing. Unless we prove a legitimate reason for their processing that outweighs your interests or rights, the processing of personal data will be terminated without undue delay based on your objection. You can send us your request by which you exercise some of the rights listed above by email or post to the address listed above. We will deal with all your requests and we will inform you about the result of its provision in the same way as you submit your request.

10. FINAL PROVISIONS

• These personal data protection policies come into force on May 1st, 2024, the date of their publication. We reserve the right to change these policies if the processing of personal data in our company changes.