Principles of personal data processing and protection

Our approach to the protection of your personal data is extremely responsible and we place great emphasis on it.

We rely on Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain regulations (hereinafter referred to as the "Act on the Protection of Personal Data") and REGULATION OF THE EUROPEAN PARLIAMENT AND COUNCIL (EU) 2016/679 (hereinafter referred to as GDPR).

When processing your personal data, we pay attention to the principles of legality, limitation of the purpose of personal data, minimizing the scope of storage, correctness, integrity, confidentiality and responsibility.

 

1. We are the operator of the processing of your personal data:

Company name: Tuli.sk, sro

Headquarters address: Nádražná 1853/39, 900 28 Ivanka pri Dunaji, Slovakia

ID: 45248451

VAT number: 2022934716

VAT number: SK2022934716

Statutory body: manager - Ing. Martin Guttman

Mlynárska 13

Pezinok 902 03, Slovakia

Registered in the commercial register: Company registered in the Commercial Register of the Bratislava I District Court, section Sro, insert number 61320/B.

 

2. Responsible person

Due to the subject of our activity, our company is not obliged to establish and publish the contact details of the responsible person. In case of any questions regarding the processing of your personal data, you can contact us in writing, electronically or by phone at:

Company name: Tuli.sk, sro
Registered office address: Nádražná 1853/39, 900 28 Ivanka pri Dunaji, Slovakia
ID: 45248451
VAT number: 2022934716
VAT number: SK2022934716
Registered in the commercial register: Company registered in the Commercial Register of the Bratislava I District Court, section Sro, insert number 61320/B.
contact information: Lenka Harčariková, lenka.harcarikova@tuli.sk , +421 917 561 740

 

3. Reason for processing personal data

The company Tuli.sk, s.r.o. processes the provided personal data for several purposes:

When you visit our website, for security reasons, our web servers always store the connection data of the computer connecting to our website, the list of websites you visit within our website, the date and duration of your visit, the identification data of the type of browser and operating system used, as well as website through which you connect to our site. Additional personal information such as name, address, telephone location or e-mail address is not collected unless you provide this information voluntarily, e.g. when you directly fill out a contact form as part of a registration, overview, competition, performance of a contract or information request.

Purchase of goods and services

We process your personal data in order to properly process and deliver your order. If any problems arise, thanks to your personal data, we know who to contact.

Customer care

If you contact us with a question/problem, we have to process your data to answer/solve it. In some cases, personal data may also be transferred to third parties (e.g. goods carrier).

User account

Thanks to the personal data you provide us in your user profile, a number of useful functions become available to you (e.g. if you provide your phone number, we can easily inform you when your order will be delivered). You can change the data you entered at any time, with the exception of the e-mail address that is used to access your user account.

E-mail marketing

We send you email marketing communications based on your consent. You can easily unsubscribe from notifications in the email footer.

Marketing competitions

In some cases, the winner of the competition may be photographed, or filmed, mainly due to increasing the transparency of our marketing competitions. We carry out this processing of personal data on the basis of our legitimate interest, which consists in increasing the credibility of marketing competitions in the eyes of other competitors and in increasing the attractiveness of these competitions

Improving our services

Using the history of your orders and behavior on the web, we can offer more relevant offers for other goods. To optimize elements on the website, we can also use tools for testing different variants (so-called A / B testing), Google Analytics, Facebook Analytics, etc.

Customer evaluations of goods and services

After you purchase goods or services from us, you may be asked to rate them. The evaluation can also be entered on one's own initiative.

 

4. Legal basis for processing personal data of interested persons

Our company proceeds according to Act no. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain regulations (hereinafter referred to as the "Act on the Protection of Personal Data") and REGULATION OF THE EUROPEAN PARLIAMENT AND COUNCIL (EU) 2016/679 (hereinafter referred to as GDPR).

The legal basis for processing personal data is:

Fulfillment of contractual conditions

We need your personal data in the form of name, surname, phone, email, address to create and conclude a contract regarding the services/product you use with us. The purpose of the processing is for the purpose of pre-contractual and contractual relations. In case of refusal to provide your personal data for the above purpose, it is not possible to enter into a contractual relationship.

Legitimate interest

We process your personal data in order to provide you with relevant content that is of interest to you. We use cookies for this purpose. More information about cookies can be found in point 5.

We send relevant emails to our customers, which serve to obtain new information related to the purchase of services you have made with us.

You can revoke the processing of personal data based on legitimate interest (cookies, sending emails) using the unsubscribe function in individual emails or by email to lenka.harcarikova@tuli.sk , ext. +421 917 561 740. You can adjust the processing of cookies directly in your browser.

Consent to the processing of personal data

The person concerned gives consent to the processing of personal data freely, without coercion and coercion, as well as without being conditioned by the threat of rejection of the contractual relationship, services provided or obligations arising for the operator.

The affected person gives consent separately for each purpose of personal data processing.

The affected person can cancel the consent at any time electronically or in writing. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

The company considers the provided personal data to be confidential and emphasizes respect for privacy.

 

5. Use of web tracking and use of cookies

We use tracking software to determine how many users visit our website and how often. We do not use this software to collect personal data or individual IP addresses. This data is used exclusively in anonymous and aggregated form for statistical purposes and for the development of the website.

Use of cookies:

Cookies are small text files that can be sent to the browser when visiting websites and stored on your device (computer or other device with Internet access, such as a smartphone or tablet). Cookies are stored in a folder in your browser. Cookies usually contain the name of the website from which they originate, validity and value. The next time you visit the page, the web browser reloads the cookie files and sends this information back to the website that created the original cookies.

The company uses the following types of cookies:

 

1, Basic cookie files

Necessary for the most important functions of the website, enabling the website to function properly. It remembers your username, which will provide you with a quick login the next time you visit the site. These cookies do not collect any information about you that could be used for marketing purposes.

Smartsupp- Smartsupp.com, sro, Lidická 20, 602 00 Brno , Czech Republic

More information on privacy protection can be found here , while you can refuse cookies here .

 

2, Analytical cookies

These cookies serve to obtain data about the traffic of our website, information about searches performed on our site and also to find out how you move around our site, so that we can make it as easy as possible for you to use.

Google Analytics - Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

More information about privacy protection can be found here , while to refuse cookies you can install a software add-on available here .

Googe Tag Manager - Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, United States.

More information about privacy protection can be found here , while to refuse cookies you can install a software add-on available here .

Smartlook- Smartsupp, Milady Horákové 13, 602 00 Brno, Czech Republic

More information on privacy protection can be found here , while you can refuse cookies here .

 

3, Marketing cookies

We use these cookies so that we can show you content on our site that is of interest to you according to your previous preferences, and also for the purpose of displaying advertising based on your interests. We store cookies of this type only based on your consent. We use the following third-party solutions for these cookies:

Google AdWords - Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland

More information about privacy protection can be found here .

Facebook Pixel - Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbor Dublin 2, Ireland

More information about privacy protection can be found here .

Ecomail - ECOMAIL.CZ, sro, Na Zderaz 1275/15, Prague 2, 120 00, ID: 02762943, VAT number: CZ02762943, Czech Republic

More information about privacy protection can be found here .

Instructions for changing cookies can be found in the help menu of each browser. If you use different devices to access the pages (e.g. computer, smartphone, tablet), we recommend that each browser on each device adapt cookies to your preferences.

We will respect if you change the default cookie setting. However, turning off some cookies may have an impact on the use of some functions of our website.

 

6. Beneficiaries

To provide some services, the company needs to know some personal data of the affected persons and needs to provide them to other recipients in order to fulfill legal obligations and provide services of the highest quality.

In addition to its business activities, the company cooperates with several intermediaries who take care to provide services of the highest possible quality. When performing their contractual activities for the company, the following entities process the personal data of the persons concerned:

SnazzyBee, sro Račianska 69/B, 831 02 Bratislava, Company ID: 46 972 986, VAT ID: 2023703055, VAT ID: SK2023703055 (technical security of the information system)

Amicount, s.r.o. Diakovská 1239/9A, 927 01 Šaľa, Company ID: 44253583, VAT ID 2022642567, VAT ID SK 2022642567 (accounting firm)

Manifold sro Drevná 381/4 120 00 Prague 2, ID: 03774112, DIČ: CZ03774112 (accounting firm)

Mautic, Inc. 53 State Street, 10th Floor, Boston, MA 02109, United States of America (online marketing, newsletter)

Vultr 14 Cliffwood Ave Suite 300, Matawan, NJ 07747, United States (server)

Slovenská pošta as Partizánska cesta 9, 975 99 Banská Bystrica, ID number: 36631124

Zelená pošta sro Galvaniho 17/B, 821 04 Bratislava, ID: 46529233; VAT number: 2023432158, VAT number: SK2023432158 (sending letter items)

TOPTRANS EU, as Na Priehon 50, 949 05 Nitra , ID: 36703923 , VAT ID: 2022296199 , VAT ID: SK2022296199 (transportation of goods)

DHL Parcel Slovakia spol. s ro Na pantoch 18, 831 06 Bratislava-Rača, Company ID: 47927682, VAT ID: 2024147400, VAT ID: SK2024147400 (transportation of goods)

IN TIME sro Senecká cesta 1, 900 28 Ivanka pri Dunaji, ID: 31 342 621, VAT ID: 2020337451, VAT ID: SK2020337451 (transportation of goods)

123Kurier, sro , Vojtaššákova 616, 027 44 Tvrdošín, Company ID: 46598863, VAT ID: 2023488610, VAT ID: SK2023488610 (transportation of goods)

Packeta Slovakia s.r.o., Kopčianska 3338/82A, 851 01 Bratislava , ID : 48136999 , VAT number : 2120099014 (transportation of goods)

Creative Sites sro Heyrovského 8, 84103 Bratislava, ID: 36662674, VAT ID: 2022226448 VAT ID: SK2022226448 (website management)

Webglobe – Yegon, sro Stará Prievozská 2, 821 09 Bratislava, ID: 36306444, VAT ID: 2020114987, VAT ID: SK2020114987 (e-mails, domains)

State authorities - in case of enforcement of our rights, your personal data may be transferred to a third party (e.g. a lawyer). If the legal order or a state authority (e.g. PZ SR) imposes an obligation on us to hand over your personal data, we must do so.

The company honestly declares that, when selecting individual intermediaries, it paid attention to their professional, technical, organizational and personnel competence and their ability to guarantee the security of processed personal data through security measures adopted in accordance with the Personal Data Protection Act.

When choosing a suitable intermediary, the company proceeded in such a way as not to endanger the rights and legally protected interests of the persons concerned.

The company entered into an agreement with intermediaries pursuant to Art. 28 par. 3 Regulations of the written contract on ensuring the protection of personal data processed by intermediaries, who have been entrusted with the processing of personal data of the affected persons to the extent, under the conditions and for the purpose agreed in the contract and in the manner according to the Personal Data Protection Act.

The company can also provide information to third parties - Health Insurance Companies, Social Insurance Company, Tax Office, Labor, Social Affairs and Family Office, Supplementary Pension Companies, Supplementary Management Companies, banks, commercial insurance companies, executor, ...)

 

7. Conditions and method of processing personal data of affected persons

The company does not publish processed personal data. The only exception can be the request of a special legal regulation or a decision of a court or other state body.

The company will not process your personal data without your consent or other lawful legal basis for a purpose other than that stated.

 

8. Storage period of personal data of the persons concerned

It is determined according to the specific purpose of processing personal data and according to the requirements of special regulations.

Specifically, the retention period is prescribed by the company's internal regulation, the Registry Plan, drawn up in accordance with the Act on Archives and Registries. In the case of processing personal data for which consent to the processing of personal data has been granted, your data will be processed for a period of 5 years (for marketing purposes) and 10 years (photos and videos of winners and models) or until your consent is revoked.

The company securely disposes of all personal data whose processing purpose and retention period have ended. After the end of the defined purpose, the company is authorized to process personal data to the extent necessary for research or statistical purposes in their anonymized form.

The company ensures the processing of personal data of the affected persons in a form that enables the identification of individual affected persons for a period not longer than is necessary to achieve the purpose of the processing.

 

9. Transfer of personal data to third countries

We process your personal data (marketing data, communication tools) using online applications that have servers located in the USA. Based on the decision of the European Commission, servers in the USA guarantee adequate protection of personal data, and operators have provided adequate guarantees for the security of your data and guaranteed that personal data is processed in accordance with the GDPR regulation.

 

10. The rights of the person concerned related to the processing of his personal data

Based on a written request, the data subject may exercise the following rights in all forms of personal data processing (legal obligation, consent of the data subject, legitimate interest, contractual relationships):

• request from the operator access to personal data relating to the person concerned,
• to correct processed personal data,
• deletion of personal data processing (only if we do not have to legally store them, e.g. invoices, tax documents, etc.),
• to object to the processing of personal data
• submit a complaint or proposal to initiate proceedings to the supervisory authority
• access to your own personal data
• to the list of own personal data that are the subject of processing
• liquidation of her personal data, which are the subject of processing, if there has been a violation of the law
• prevent the processing of her personal data, which she assumes are or will be processed for marketing purposes without her consent
• the right to file a motion to initiate proceedings pursuant to § 100 in the event that the person concerned suspects that their personal data is being processed unlawfully

Based on a written request, the data subject has the right (in case of consent to the processing of personal data and contractual relationships):

• withdraw consent to the processing of personal data at any time
• the right to portability of personal data from the operator to another operator as long as it is technically possible

Based on a written request, the data subject has the right (in case of legitimate interest):

• restriction of the processing of his personal data - if the data subject suspects that we are processing his personal data illegally, he can raise an objection. In the event of an objection, the data subject has the right to restrict the processing of his personal data.

In the event that the person concerned does not have legal capacity, his rights may be represented by a legal representative.

According to the Personal Data Protection Act, the company handles the request of the person concerned free of charge, except for a payment in an amount that cannot exceed the amount of material costs incurred for the purpose of making copies, supplying technical media and sending information to the person concerned, unless a special law provides otherwise.

The company is obliged to handle the request of the affected person no later than 30 days from the date of delivery of the request or to inform about the reasons why the verification did not take place and the possibility of exercising the right of the affected person to file a motion to initiate proceedings according to § 100 and for other legal protection according to a special regulation.

The company is obliged to notify the affected person of a breach of personal data protection without undue delay, if such a breach of personal data protection may lead to a high risk for the rights of the affected person.

The company has informed you, as the person concerned, about the protection of your personal data. You have been informed about your rights in relation to the protection of personal data.

In Ivanka near the Danube, on September 22, 2021.