PROVISION OF INFORMATION ACCORDING TO THE PERSONAL DATA PROTECTION ACT
Pursuant to Act No. 18/2018 Coll. on the protection of personal data and on amendments and supplements to certain laws, as well as in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), we hereby provide you with information about the processing of your personal data.
WHO OPERATES YOUR PERSONAL DATA?
The data controller is the company BUSPARTNER s.r.o., Svätoplukova 89/3, 971 01 Prievidza, Company ID No.: 56 793 499, Registered in the Commercial Register of the District Court Trenčín, Section Sro, Insert No. 55985/R (hereinafter referred to as “BUSPARTNER”).
WHAT PERSONAL DATA DO WE PROCESS?
Orders:
In connection with processing your orders, we process the following personal data:
First name and last name,
Email address,
Billing and delivery address,
Telephone number (if provided).
These data are processed for the purpose of fulfilling and delivering your order, as well as to fulfill legal obligations (e.g., accounting and tax).
Legal basis: performance of a contract according to Article 6(1)(b) GDPR and compliance with legal obligations according to Article 6(1)(c) GDPR.
Retention period: 10 years from the date of issue of the accounting document (in accordance with accounting law).
Contact form, e-mail or telephone communication:
If you contact us via the contact form, email, or phone, we process:
Your contact details (e.g., name, email, telephone),
The content of your message or request.
These data are used to handle your requests or respond to your questions.
Legal basis: our legitimate interest according to Article 6(1)(f) GDPR.
Retention period: 3 months after handling the request. If an order arises from the communication, the data will be processed further according to the above rules.
If necessary for protecting legal claims, we may retain data for 3 years and 1 year after the expiry of that period, especially if a complaint was filed at the end of the limitation period. In case of legal proceedings, data are retained for the duration of the proceedings and the remainder of the limitation period after its end. You have the right to object to processing based on legitimate interest.
Newsletter / Email marketing:
If you have given consent to receive marketing information (e.g., newsletters), we process:
Your email address,
Possibly your first and last name (if provided during registration or order).
These data are processed for the purpose of sending information about our products, promotions, news, and other marketing activities.
Legal basis: consent of the data subject according to Article 6(1)(a) GDPR.
Retention period: until withdrawal of consent. You may unsubscribe from newsletters at any time by clicking the link at the bottom of each email or by contacting the controller.
Competitions and marketing campaigns:
If you participate in a competition organized via our website or social networks, we process:
First name and last name,
Email address,
Delivery address (if required to send the prize),
Other data you provide as part of your participation.
These data are necessary to run the competition, contact winners, and send prizes.
Legal basis: consent of the data subject according to Article 6(1)(a) GDPR, or contract performance.
Retention period: during the competition and up to 6 months after its end unless a longer period is legally required.
COOKIES
The company BUSPARTNER uses cookies on the website www.buspartner.sk that are necessary for the proper functioning of the site and providing our services:
We use the following types of cookies:
Necessary cookies – these cookies are technically necessary for the functioning of the website. They are automatically deleted after closing the site and provide only non-personal statistical data about visits, such as the number of visitors or duration of the visit.
Functional cookies – allow remembering the visitor’s login details and ensure secure login. They also help customize the web interface according to your preferences.
Third-party cookies – these cookies are generated exclusively by external service providers that the controller (BUSPARTNER) cannot read or influence. These may include:
Analytical cookies (e.g., Google Analytics) – measure user behavior on the site to improve its functioning and content,
Social networks (Facebook, Instagram, YouTube, etc.) – enable content sharing and display targeted advertising.
Cookie consent management:
On your first visit to our site, you have the option to consent or refuse consent to the use of certain types of cookies (except necessary ones). This consent can be revoked or changed at any time in your browser settings or via the cookie management tool available on our site.
STORAGE / SECURITY
We process your personal data only for the necessary period, i.e., only as long as the purpose of processing lasts or until withdrawal of consent if the processing is based on consent. After this period, personal data are deleted or anonymized unless further storage is required by law (e.g., accounting law).
We protect the personal data in our possession to the greatest extent against leakage, misuse, or damage. Files containing personal data are password protected, and access is limited to a small number of employees and collaborators trained in personal data protection and handling.
WHO ELSE MAY HAVE ACCESS TO YOUR DATA?
Your personal data may be accessed by BUSPARTNER as the controller, its employees, and contractual intermediaries, mainly companies providing IT services, programming, e-shop management, and accounting services.
Your personal data may also be shared with third parties such as delivery companies ensuring the transportation of your order. These entities act either as independent controllers or contractual processors under Article 28 GDPR and are contractually bound to confidentiality and compliance with personal data protection principles.
WHAT RIGHTS DO YOU HAVE?
When your personal data is being processed, as a data subject you may exercise the following rights:
Right to information about the processing of your personal data
This information mainly includes: identification and contact details of the controller, its representative, and, if applicable, the data protection officer; the purposes of processing; categories of personal data concerned; recipients or categories of recipients of personal data; information about transfers of personal data to third countries; the period for which personal data will be stored; authorized controllers; a list of your rights; the possibility to contact the Office for Personal Data Protection; the source of the processed personal data; information about whether and how automated decision-making and profiling occur. This information will be provided to you at the time of data collection or at any time upon your request.
Right of access
You have the right to receive a copy of the personal data we hold about you, as well as information on how we use your personal data. If you request this information electronically, it will be provided to you electronically, if technically feasible.
Right to rectification
Do we process inaccurate or outdated personal data about you? For example, have you changed your residence address? Please inform us and we will correct your personal data.
Right to data portability
If you wish for us to provide your personal data to another company, we will deliver it in a suitable format to the entity you specify, provided that the processing is based on your consent or on a contract and is carried out by automated means.
Right to erasure (“right to be forgotten”)
In certain cases defined by law, we are obliged to delete your personal data upon your instruction. This right applies especially when:
the personal data are no longer necessary for the purposes for which they were collected,
you withdraw your consent and there is no other legal ground for processing,
the processing was unlawful.
Right to restriction of processing
You have the right to request restriction of processing of your data if:
you contest the accuracy of the data,
the processing is unlawful, but you do not want the data erased,
the controller no longer needs the data, but you require them to assert legal claims,
you have objected and the verification of whether legitimate interests override is pending.
Right to file a complaint
You may at any time address your complaint regarding the processing of personal data to the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava 27, tel.: +421 2 3231 324, email: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk/uoou/. If you submit a complaint electronically, it must meet the requirements under § 19(1) of Act No. 71/1967 Coll. on Administrative Procedure (Administrative Code).