Privacy Policy and Information on Data Protection Provided by the Operator to the Data Subject at the Time of Collection of Personal Data and Cookie Notice of the Online Store www.mrkebab.eu
I. Operator
1.1 The identity and contact details of the Operator are:
Company name: Mr. KEBAB s.r.o.
Registered office: Vozárová 1, 040 17 Košice, Slovak Republic
Registered in the Commercial Register of the Municipal Court of Košice, Section Sro, Insert No. 13482/V
Business ID: 47511869
Tax ID: 2023964338
VAT ID: SK7020000999
Bank account: SK79 1100 0000 0029 2991 0563
The Seller is a VAT payer.
1.2 The Operator’s email and phone contact:
Email: office@hook.sk
Phone: +421 903 900 150
1.3 The Operator's address for receiving correspondence:
HOOK, s.r.o., Rozvojová 2, 040 11 Košice, Slovak Republic
1.4 The Operator provides the following information to the Data Subject in compliance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the “Regulation”), and in accordance with Act No. 18/2018 Coll. on Personal Data Protection and Act No. 452/2021 Coll. on Electronic Communications, to the Data Subject (Customer) from whom the Operator (Seller) collects personal data.
II. References
2.1 This Privacy Policy and Information on Data Protection forms part of the General Terms and Conditions published on the Seller’s Website.
2.2 In accordance with §3 para. 1 letter n) of Act No. 102/2014 Coll., the Seller informs consumers that there are no specific codes of conduct to which the Seller has committed. The code of conduct refers to an agreement or set of rules outlining the behavior of the Seller.
III. Data Protection and Use of Cookies. Cookie, Script, and Pixel Notice
3.1 The website Operator provides the following brief explanation of the functions of cookies, scripts, and pixels:
3.1.1 Cookies are text files containing small amounts of information that are downloaded to your device when you visit a website. This allows the website to remember your actions and preferences (such as login, language, font size, and other display settings) over time so that you don’t have to re-enter them each time you visit or browse different pages.
A script is a part of programming code used for the proper and interactive functioning of websites. This code runs on the server or on your device.
A pixel is a small, invisible text or image on a website that monitors traffic. Through pixels, various data is stored to enable tracking.
3.1.2 Types of cookies:
Technical or functional cookies – ensure the proper functioning of the Operator’s website and its use. These cookies are used without consent.
Statistical cookies – enable the Operator to gather statistics on website use. These cookies are used only with consent.
Marketing/Advertising cookies – used to create advertising profiles and similar marketing activities. These cookies are used only with consent.
3.2 How to control cookies:
3.2.1 You can control and/or delete cookies as you wish—see aboutcookies.org for details. You can delete all cookies on your computer or other devices, and most browsers allow you to prevent them from being stored.
3.3 The Operator’s Website uses the following cookies:
All cookies used by the Operator can be found at https://www.cookieserve.com/ by entering the website address of the Operator https://www.mrkebab.eu.
- Technical or functional cookies – managed by the Operator. Duration: 2 years.
- Statistical cookies – managed by the Operator. Duration: 2 years.
- Marketing and advertising cookies – managed by the Operator. Duration: 2 years.
3.3.1 Cookies accessible to third parties:
- Google Analytics, Google Ads: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy information at https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008.
- META Pixels: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Privacy information at https://www.facebook.com/about/privacy/.
IV. Personal Data Processed
4.1 The Operator processes the following personal data on its website: first name, last name, home address, email address, landline phone number, mobile phone number, billing address, delivery address, data obtained from cookies, IP addresses.
V. Contact Details of the Data Protection Officer
5.1 The Operator has appointed a Data Protection Officer in accordance with Regulation 2016/679 on the protection of individuals regarding the processing of personal data and on the free movement of such data.
Contact: Email: mrkebab@hook.sk, Phone: +421 903 900 150
5.2 The Operator is also the Seller as defined in the General Terms and Conditions of this website.
VI. Purposes and Duration of Personal Data Processing
6.1 The purposes of personal data processing are primarily:
- 6.1.1 Recording, creating, and processing contracts and client data for entering into contracts with third parties.
- 6.1.2 Processing accounting documents related to the Operator’s business activities.
- 6.1.3 Compliance with legal requirements for document and record retention, for example, under Act No. 431/2002 Coll., Accounting Act.
- 6.1.4 Activities related to fulfilling the request, order, contract, or similar instruments of the Data Subject.
- 6.1.5 Newsletter, marketing, and similar promotional activities, subject to the Data Subject's consent.
6.2 Personal data is stored only for the time necessary to fulfill the contract and subsequently archived according to legal retention periods. For promotional emails and similar offers, personal data is processed until the Data Subject withdraws consent, for a maximum of 10 years.
VII. Legal Basis for Personal Data Processing
7.1 If the Operator processes personal data based on the Data Subject's consent, processing begins only after consent is granted.
7.2 If the Operator processes data for pre-contractual relationships, the Data Subject must provide personal data for proper contract performance.
VIII. Recipients or Categories of Recipients of Personal Data
8.1 Recipients may include:
- 8.1.1 Statutory bodies or their members.
- 8.1.2 Individuals employed by the Operator.
- 8.1.3 Agents and business partners.
- 8.1.4 Third-party service providers, including accounting, software maintenance, legal services, transport companies, marketing, social media, and payment processing companies.
8.1.5 Recipients may also include courts, law enforcement, tax authorities, and other state agencies.
IX. Information on Data Transfers to Third Countries and Retention Periods
9.1 Not applicable. The Operator does not transfer personal data to third countries.
X. Information on Data Subject Rights
10.1 The Data Subject has the following rights, among others:
10.1.1 Right of access (Article 15 of the Regulation): The Data Subject has the right to obtain confirmation from the Operator as to whether personal data concerning them is being processed and, if so, access to that data. This includes information about the purpose of processing, categories of personal data, recipients, expected retention period, rights to rectification or erasure, restriction of processing, and the right to lodge a complaint with a supervisory authority.
10.1.2 Right to a copy of the data: The Data Subject has the right to obtain a copy of their personal data, provided it does not adversely affect the rights of others.
10.1.3 Right to rectification (Article 16 of the Regulation): The Data Subject has the right to have inaccurate personal data corrected without undue delay, and to complete any incomplete personal data.
10.1.4 Right to erasure ("right to be forgotten") (Article 17 of the Regulation): The Data Subject has the right to request the deletion of personal data in certain circumstances, including if the data is no longer necessary for the purpose for which it was collected or if the Data Subject withdraws their consent.
10.1.5 Right to restriction of processing (Article 18 of the Regulation): The Data Subject can request restricted processing in certain cases, such as when the accuracy of the data is contested or if the processing is unlawful.
10.1.6 Right to data portability (Article 20 of the Regulation): The Data Subject has the right to receive personal data concerning them, which they provided to the Operator, in a structured, commonly used, and machine-readable format, and to transfer that data to another controller where technically feasible.
10.1.7 Right to object (Article 21 of the Regulation): The Data Subject has the right to object, on grounds relating to their particular situation, to the processing of personal data based on the Operator’s legitimate interest, including profiling. They may also object to data processing for direct marketing purposes.
10.1.8 **Rights related to automated decision-making and profiling** (Article 22 of the Regulation): The Data Subject has the right not to be subject to a decision based solely on automated processing, including profiling, that significantly affects them, unless this decision is necessary for a contract, permitted by law, or based on explicit consent.
XI. Right to Withdraw Consent
11.1 The Data Subject has the right to withdraw consent for personal data processing at any time, without affecting the legality of processing based on consent given before its withdrawal. The Data Subject may withdraw consent entirely or partially, which may affect specific types of processing or purposes, leaving other processing activities unaffected.
The right to withdraw consent can be exercised in writing at the Operator’s registered office or electronically by sending an email to the address specified in this document.
XII. Right to Lodge a Complaint with a Supervisory Authority
12.1 The Data Subject has the right to lodge a complaint with a supervisory authority, particularly in their country of habitual residence, place of work, or place of the alleged infringement, if they believe that the processing of personal data concerning them infringes the Regulation. The Data Subject has the right to be informed of the progress and outcome of the complaint, including the right to seek a judicial remedy under Article 78 of the Regulation.
12.2 The supervisory authority in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovak Republic.
Phone: +421 /2 3231 3214, Email: statny.dozor@pdp.gov.sk.
XIII. Information on Automated Decision-Making and Profiling
13.1 Since the Operator does not process personal data using automated decision-making, including profiling as per Article 22 para. 1 and 4 of the Regulation, it is not required to provide information on automated decision-making and profiling. This does not apply.
XIV. Final Provisions
14.1 This Privacy Policy and Information on Cookies form an integral part of the General Terms and Conditions and the Complaints Policy. The documents—General Terms and Conditions and Complaints Policy—are published on the Seller’s Website.
14.2 This Privacy Policy is effective as of its publication on the Seller’s Website on April 12, 2024.
---
This online store is certified by http://www.pravoeshopov.sk.
