PRIVACY POLICY TERMS
Data Protection Conditions
When concluding a contract with the seller via the e-shop, using the e-shop, registering in the e-shop, or subscribing to newsletters, the buyer or registered user (hereinafter collectively referred to as “the buyer”) enters their personal data into forms. In terms of protecting your personal data, we adhere to the measures from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (the General Data Protection Regulation, also known as “GDPR”), and from the measures outlined in Act No. 18/2018 Coll. on the protection of personal data and on amendments to certain acts as amended (hereinafter referred to as “the Personal Data Protection Act”).
Definition of the term personal data
Personal data is information related to an identified or identifiable natural person. This person can be identified directly or indirectly based on a commonly used identifier, or other identifiers such as name, surname, identification number, location data, online identifier, or other characteristics specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of the person.
Nature of personal data processing
The processing of personal data includes any operations or set of operations with personal data, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction, performed using automated or non-automated means.
Recipient/Administrator of Personal Data
The recipient is anyone to whom personal data are provided, regardless of whether they are a third party. Public authorities processing personal data under a special regulation are not considered recipients. These are individuals involved in the delivery of goods, services, and the realization of payments under a contract. The administrator does not provide, disclose, or make personal data available to third countries.
Sources and Types of Processed Personal Data
The personal data administrator is the company Doodles – Slovakia s.r.o., located at Mojš 278, Žilina 010 01, ID: 50949501, registered in the Commercial Register of the District Court Žilina, section: Sro, insert No. 68018/L. Individuals can exercise their rights via the email address: info@haffun.com.
The administrator processes personal data that you have provided directly or that were obtained in connection with the fulfilment of your order. These data include your identification, contact details, and information necessary for fulfilling the contract. We work only with those personal data that allow us to provide services within the scope of our activities, namely to process orders in terms of administration and delivery, to comply with legal obligations, and also to protect our legitimate interests. In such cases, personal data are processed only to the extent necessary for the conclusion and fulfilment of the respective contract. This primarily includes fulfilling the subject of the contract, customer support, contract management, and participant records. Providing personal data by buyers is voluntary in the case of an order but necessary for the successful conclusion of the purchase contract and its subsequent fulfilment.
Processing Data for Marketing Purposes
We also process the personal data of buyers for marketing purposes when we have obtained consent for this purpose. Marketing primarily involves the following activities:
a) Offering products and services of Doodles – Slovakia s.r.o. – we send offers electronically, via emails, based on your consent.
b) Sending informational emails containing commercial offers, articles, and information about the activities of our company.
The consent provided for marketing purposes is voluntary. However, it is necessary in order for us to send you offers of services from Doodles – Slovakia s.r.o. Without granted consent, we cannot provide individual offers of goods and services. Consent for the processing of personal data for marketing purposes is based on voluntariness, therefore, the client can withdraw it at any time via email at info@haffun.com. When revoking, it is necessary to provide your name, surname, email, and a brief description stating that you no longer wish us to process your personal data for marketing purposes.
How long do we retain personal data:
a) For the period necessary to perform the rights and obligations arising from the contractual relationship between you (the customer) and us (the administrator) and to enforce claims arising from these contractual relationships. We process personal data necessary for the conclusion and fulfilment of the contract for the duration of the contractual relationship and for an additional 10 years after the end of the contractual relationship, as required by generally binding legal regulations.
b) For the period until the consent for processing personal data for marketing purposes is revoked.
After the expiration of the data retention period as required by Law No. 395/2002 Coll., the Law on Archives and Registries and amending certain laws, the operator will delete the personal data.
Customer Rights Regarding the Processing of Personal Data
The processing of customers’ personal data is based on specific legal regulations, which are further specified by the seller in accordance with these regulations.
Right to Access – The buyer has the right to obtain a copy of the personal data that the administrator has about the buyer, as well as information on how the personal data is used by the operator. In most cases, personal data will be provided to the individuals in written form – via email.
Right to Rectification – The administrator is required to ensure the accuracy, completeness, and timeliness of the personal data processed by the buyers.
Right to Erasure (Right to be Forgotten) – The customer has the right to request the deletion of personal data, for example, if the personal data are no longer necessary for the purposes for which they were collected. However, this right will be assessed by the administrator considering all relevant circumstances.
Right to Restriction of Processing – Under certain circumstances, the customer has the right to ask the administrator to stop using their personal data. For example, cases where the customer believes that their personal data may be inaccurate.
Right to Data Portability – Under certain circumstances, the customer has the right to request the operator to transfer their personal data to another third party of their choice. The right to data portability applies only to personal data that the administrator obtained based on consent or on the basis of a contract in which the customer is a party.
Right to Object – The buyer has the right to object to the processing of their personal data if they believe or find, that their personal data are being processed in violation of their privacy and personal life, or if the data processing is contrary to applicable legislation.
Right to Withdraw Consent – In cases where personal data are processed based on consent, the customer has the right to withdraw this consent at any time. Consent can be withdrawn in writing. The withdrawal of consent does not affect the legality of the processing of personal data.
Right to Lodge a Complaint – If the customer believes that their personal data is being processed unfairly or unlawfully, they may file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic.
To exercise your rights, you can contact us in the following ways:
By email at info@haffun.com
By mail at Mojš 278, 010 01 Žilina
You can exercise your right to protect personal data provided to Doodles – Slovakia s.r.o. at the email address info@haffun.com. Responses are provided free of charge. In cases where the request is excessive or repetitive, we reserve the right to charge a reasonable fee that reflects the administrative costs of providing the information.
Cookie Usage
Cookies are small text files stored on your computer or mobile device when you access our websites. These files allow our websites to remember your recent actions and preferences such as login information, language settings, font size, or your display preferences for a certain duration. This means you won’t need to reconfigure these settings on your next visit.
As you browse our websites, certain data like your browser type, operating system, the domain of the websites you are coming from, the number of visits, and the average duration of page views are automatically processed. This data is collected to help enhance the attractiveness of our sites and to improve their functionality and content. This also serves our legitimate interest, which forms the legal basis for processing your data. This data processing utilizes cookies, IP addresses, and other technical tools to determine popular areas of our websites, what visitors view, and how long they spend on our pages. Cookies are pieces of information that a web server sends to and stores in your internet browser. This information is then relayed back to the web server every time you visit our sites, enabling the web server to identify and track your browser. The cookies used by the Operator are categorized as technical cookies, essential for tracking data transfers and tailoring our web pages to visitor needs.
Upon visiting our websites, you can choose to accept cookies by clicking on a consent button. If you do not provide your consent, or if you disable cookies, your access to our websites will remain unchanged, as if you had consented. However, this may result in less precise data collection for our purposes, namely website optimization. Note that even after accepting cookies, you can delete them from your browser at any time. Should you do so, you will be asked to give your consent again during your next visit to our sites.
