Privacy policy
If you are our customer or a visitor of the website www.zrubko.sk, you provide us with your personal data, for which we as the controller are responsible and which we protect in accordance with applicable legal regulations. Please familiarize yourself with these privacy policy principles, which regulate the way your personal data is processed and your rights arising from the legislation of the Slovak Republic and the European Union, in particular the GDPR regulation.
Provision of Information According to Legal Regulations
The processing of personal data is governed mainly by:
- Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
- Act No. 18/2018 Coll. on Personal Data Protection,
- and other applicable legal regulations of the Slovak Republic.
The controller processes personal data through its employees and collaborators who are bound by confidentiality obligations, have been properly instructed on personal data protection, and are responsible for any breach of these obligations. To ensure certain activities, we use services of processors who process personal data exclusively in accordance with applicable legislation.
The controller declares that the personal data of data subjects is adequately secured and processed only for the purposes for which consent was granted or based on a lawful legal basis.
Identification and Contact Details of the Controller
The controller of personal data is:
Zrubko s. r. o.
Registered office: Pribinova 3030/30, 010 01 Žilina
Company ID: 55933190
Tax ID: 2122132529
VAT ID: SK2122132529
Phone: +421 911 869 777
E-mail: info@zrubko.sk
The controller operates the website www.zrubko.sk, the online store, ordering system, and related services.
Contact Details for Data Protection Matters
The controller has not appointed a dedicated Data Protection Officer under Article 37 of the GDPR.
All questions related to personal data protection can be addressed to the e-mail:
info@zrubko.sk
Identification of Processors and Recipients of Personal Data
Personal data may be disclosed mainly to the following recipients:
- providers of accounting and tax services,
- providers of IT services and hosting,
- payment service providers (Stripe),
- delivery and logistics service providers,
- state authorities in cases required by law.
Purpose of Personal Data Processing
We process personal data mainly for the following purposes:
1. Conclusion and Fulfillment of a Contractual Relationship
The processing of personal data is necessary to process the order, deliver goods, communicate with the customer, and exercise rights arising from the contract.
2. Accounting and Legal Obligations
Personal data is processed for the purpose of issuing tax documents, maintaining accounting records, and fulfilling tax obligations.
3. Marketing and Business Communication
Your personal data may be processed for sending newsletters, information about products, promotions, and news:
- based on legitimate interest under Article 6(1)(f) GDPR, or
- based on your explicit consent under Article 6(1)(a) GDPR.
Consent can be withdrawn at any time.
Advertising and Analytical Tools
Our website may use third-party tools, especially:
- Google Analytics
- Google Tag Manager
- Google Ads
- Hotjar
These tools use cookies for analytical and marketing purposes. The use of cookies is subject to your consent via the cookie banner.
List of Processed Personal Data
We mainly process the following personal data:
- name and surname,
- address,
- e-mail address,
- phone number,
- billing details,
- order information,
- IP address and cookies.
Personal data is not used for automated decision-making or profiling.
Security of Personal Data
The controller has adopted appropriate technical and organizational measures to protect personal data against loss, misuse, or unauthorized access.
Retention Period of Personal Data
Personal data is stored:
- for the duration of the contractual relationship,
- for the period required by specific legal regulations,
- for marketing purposes for a maximum of 3 years from the last interaction or until consent is withdrawn.
Rights of the Data Subject
The data subject has the right to:
- access personal data,
- correct or delete personal data,
- restrict processing,
- object to processing,
- data portability,
- file a complaint with the supervisory authority (Office for Personal Data Protection of the Slovak Republic).
Final Provisions
The controller reserves the right to update this privacy policy at any time.
This privacy policy becomes valid on the date of its publication on the website www.zrubko.sk.