Privacy Policy

The controller of personal data pursuant to Section 5(o) of Act No. 18/2018 on the Protection of Personal Data, as amended (hereinafter referred to as the “Act”), is David Fartel, ID No. 55173802, Tax ID No.: 2121890353, with its registered office at Jégeho 6, Bratislava 82108 (hereinafter referred to as the “Controller”)

The Controller’s contact details are: email: damifit.familygym@gmail.com, tel.: 0904 303 520

Personal data refers to any information that identifies a natural or legal person.

Sources of processed personal data
1. The Controller processes personal data provided to it by the Buyer with the Buyer’s consent and obtained by the Controller in connection with the performance of the Purchase Agreement and the processing of an electronic order in the Damifit online store;
2. The Controller processes only the Buyer’s identification and contact information necessary for the performance of the Purchase Agreement;
3. The Controller processes personal data for the purposes of delivery, payment settlement, and necessary communication between the contracting parties for the period required by specific legal regulations. Personal data will not be disclosed and will not be transferred to other countries.

Purpose of Personal Data Processing
The controller processes the buyer’s personal data for the following reasons:
1. For the purpose of registration on the website www.damfit.sk pursuant to Section 13(1)(a) of Act No. 18/2018 on the Protection of Personal Data;
2. For the purpose of processing the buyer’s electronic order (name, address, email, phone number);
3. For the purpose of fulfilling the rights and obligations arising from the contractual relationship between the buyer and the Controller;
4. The provision of personal data is a necessary requirement for the performance of the purchase contract. Without the provision of personal data, it is not possible to conclude the contract.

Retention Period for Personal Data
1. The Controller retains personal data for the period necessary to exercise the rights and fulfill the obligations arising from the contractual relationship between the buyer and the Controller, and for a period of 3 years following the termination of the contractual relationship;
2. Upon expiration of the retention period for personal data, the Controller is obligated to delete the data.
Recipients and Processors of Personal Data
The third parties that receive the buyer’s personal data are the Controller’s subcontractors. The services provided by these subcontractors are strictly related to the successful fulfillment of the purchase agreement and electronic order between the Controller and the buyer.

The controller’s subcontractors are:

Webnode AG (e-shop system);

Slovak Post (delivery service);

Google Analytics (website analytics); Buyer’s Rights

Under the terms set forth in the Act, the buyer has the right:
1. To access their personal data;
2. To correct personal data;
3. To have personal data erased;
4. To object to processing;
5. To data portability;
6. To withdraw consent to the processing of personal data in writing or electronically at the email address: damifit.familygym@gmail.com;
7. To file a complaint with the Office for Personal Data Protection if the data subject believes that their right to personal data protection has been violated.

Security of Personal Data
1. The controller declares that it has taken all appropriate technical and organizational measures necessary to secure the buyer’s personal data;
2. The Controller has implemented technical measures to secure personal data storage, including password-protected computer access, the use of antivirus software, and regular computer maintenance.