Privacy policy

Privacy Policy

This policy explains how Gazebo s.r.o. processes the personal data of visitors and customers of the gazebo-altanky.sk online shop, in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on personal data protection.

Data controller

The controller that determines the purposes and means of processing your personal data is Gazebo s.r.o., with its registered office at Ružová dolina 4145/6, 940 56 Nové Zámky, reg. no. 53 258 185, VAT ID: SK2121338362.

For matters relating to personal data protection you can contact us by email at altanky@gazebo-altanky.sk or by phone on +421 907 260 142.

What personal data we process

We process only the data you provide to us yourself, or that arises when you use our website and when we handle your orders:

  • Identification and contact details: name and surname, email address, telephone number, address.
  • Order and billing data: the goods ordered and their configuration, billing and delivery details, order history.
  • Payment data: the information needed to process a card payment, which is handled by the payment gateway provider (Stripe); we never receive your full payment card details.
  • Communication data: the content of messages from the contact form, emails and phone calls.
  • Technical data: IP address, browser type and data from cookies collected automatically as you browse the site.

Purposes and legal bases for processing

We process your personal data for the following purposes and on these legal bases under Article 6 of the GDPR:

  • Processing your order and delivering the goods – performance of the purchase contract (Article 6(1)(b) GDPR).
  • Responding to an enquiry from the contact form or a request for a quote – taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
  • Bookkeeping and meeting tax obligations – compliance with a legal obligation (Article 6(1)(c) GDPR).
  • Sending marketing communications and news – your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
  • Improving and securing the website and analytics – our legitimate interest (Article 6(1)(f) GDPR).

Recipients and processors

We do not sell your personal data or provide it to third parties for their own purposes. To run the shop, however, we use trusted processors who process data on our behalf:

  • Stripe Payments Europe, Ltd. – processing online card payments.
  • Web hosting and content delivery provider – running and securing the website.
  • Transport and installation companies – delivering and installing the goods you order. [TO ADD: specific carriers/installation firms, if used]
  • Analytics and marketing tools – measuring traffic and advertising based on consent. [TO ADD: exact list of active tools, e.g. Google Analytics, Meta Pixel]
  • Public authorities, where required by specific legislation.

Retention period

We keep personal data only for as long as necessary to achieve the purpose of processing. Order data and accounting records are kept for the period required by law, usually 10 years. Data processed on the basis of consent is kept until that consent is withdrawn.

Transfers to third countries

Some of our processors (for example Stripe or providers of analytics tools) may also process data outside the European Economic Area. In such cases the transfer is safeguarded by appropriate measures under the GDPR, in particular the standard contractual clauses approved by the European Commission.

Cookies and analytics

Our site uses cookies to provide essential functions, measure traffic and for marketing. We use non-essential cookies only with your consent. You can change your cookie settings at any time in your browser or through the consent bar on our site.

Your rights

In connection with the processing of personal data, you have the following rights under the GDPR:

  • the right to access your personal data,
  • the right to rectify inaccurate or incomplete data,
  • the right to erasure (the right to be forgotten),
  • the right to restrict processing,
  • the right to data portability,
  • the right to object to processing based on our legitimate interest or for direct marketing purposes,
  • the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal,
  • the right to lodge a complaint with a supervisory authority.

Supervisory authority

If you believe we are processing your personal data unlawfully, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, www.dataprotection.gov.sk. Before lodging a complaint, however, you are welcome to contact us and we will try to resolve the matter directly with you.