Legal information

Privacy Policy

This document was prepared in accordance with the requirements of the GDPR and Act No. 18/2018 Coll. on the protection of personal data. Effective: Poprad, 1 March 2022.

Who we are and how you can contact us

The operator of the website www.bufiky.sk and the controller for the processing of your personal data is:

Profi Trading s.r.o.
Švábovce 65, 059 12 Švábovce
mobil: +421 903 679 421, e-mail: ProfiTradingSro@gmail.com
Zapísaný v Obchodnom registri Okresného súdu Prešov, oddiel: Sro, vložka č. 45833/P
Orgán dozoru: Inšpektorát SOI pre Prešovský kraj, Obrancov mieru 6, 080 01 Prešov 1, pr@soi.sk, tel. č. 051/772 15 97

Our company has not appointed a data protection officer. If you have any questions about this document or the processing of your personal data, or wish to exercise your rights, please contact us by e-mail at ProfiTradingSro@gmail.com or in writing at the company address.

For what purposes we process your personal data and on what legal basis

Processing based on a contract and pre-contractual relations

Personal data obtained from you by filling in the contact or order form is data you provided us for pre-contractual purposes (e.g. a price quote request, contact for a personal meeting, a request for more details about services, an order for goods). We are entitled to process this data without your consent.

If you give us your consent, we process your e-mail address (and, for registered customers, your name) to send you news, offers and discounts. The legal basis is your consent under Art. 6(1)(a) GDPR and § 116 of Slovak Act No. 452/2021 Coll. on Electronic Communications.

Consent is voluntary – the box is not pre-ticked and consent is not a condition of registration or of an order.
We collect consent with a separate checkbox at registration, in the order form, in your profile or at the bottom of the page – not through the cookie banner.
The subscription becomes active only after you confirm it via the link we send you by e-mail (double opt-in).
To prove consent, we record when and how it was given, confirmed and withdrawn, and the IP address it was given from.
You can withdraw consent at any time – via the “Unsubscribe” link in every e-mail, the button in your profile, or by e-mail with the subject “Zrušenie súhlasu” to nezavislekurenie@gmail.com. Withdrawal does not affect the lawfulness of processing before it, nor your orders or account.

Protecting forms against spam

To protect our forms against automated abuse we use Google reCAPTCHA (Google Ireland Limited), which processes technical data about your device and behaviour on the page when a form is submitted. The legal basis is our legitimate interest in website security (Art. 6(1)(f) GDPR). Google's privacy policy applies.

How long we retain your personal data

We retain your personal data for the duration of the contract and for the statutory retention period, or for as long as necessary to achieve the purpose. Personal data obtained by filling in the contact form for pre-contractual purposes is processed for a period of 1 year only; if no contract is concluded, the data will be deleted from the system.

We keep the newsletter address until consent is withdrawn; the record of giving and withdrawing consent is kept for a further 3 years after withdrawal to demonstrate lawful processing. When a customer account is deleted we erase the account data; order and invoice data are kept for the period required by accounting law (10 years).

Cookies

Information about how our site uses cookies can be found in a separate document, our Cookie Policy.

Who we disclose data to

We may disclose personal data exclusively to our associates who provide administrative and technical support for the operation of the online store, or to other entities only for the purpose of fulfilling legal obligations. We do not publish or provide your personal data to other entities except in the situations below:

If you ask us to – for example when you use the site's community features and publish a product review or comment.
Analytics and advertising services – partners who help us understand site usage and measure advertising performance. More details are in the cookies section.
For legal reasons and to prevent harm – courts, government and other bodies with authority to carry out inspections, resolve disputes or enforce decisions, and, where applicable, our legal and accounting advisers and auditors.

For e-mail communication and form protection we use Google services (Gmail, reCAPTCHA) as a processor. If we start using a dedicated e-mailing service for newsletters, we will add it here.

Transfer to third countries

We do not actively transfer your personal data to third countries outside the EU ourselves. When using Google services (Gmail, reCAPTCHA), data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework, which the European Commission has recognised as ensuring an adequate level of protection.

How we protect your data

In accordance with the requirements of applicable legislation, we implement all necessary security, technical and organisational measures. Electronic data is stored in a protected database on a secure server in a data centre located exclusively within the European Union and protected against damage, destruction, loss and misuse.

What your rights are

You have several rights in connection with the processing of your data. We will inform you of the outcome of your request within 30 days of its receipt; in justified cases we may extend this period to 60 days. You may exercise these rights by sending an e-mail message or a written request to our contact details; please state your first name, surname and e-mail address so we can verify your identity.

The right to access your data
The right to rectification
The right to erasure (the right to be forgotten)
The right to restriction of processing
The right to data portability
The right to object, including to direct marketing

If you have a customer account, you can exercise some rights yourself in your profile: correct your data, download all your data (a JSON file – access and portability), withdraw your newsletter consent and delete your account (erasure).

Filing complaints

If you believe that the processing of your personal data is contrary to legal regulations, you have the right to file a complaint with the Office for Personal Data Protection of the Slovak Republic.

Confidentiality

Our employees and associates who process your personal data are required to maintain confidentiality, which continues even after their contractual relationship with us ends. Your personal data will not be disclosed to any third party without your consent.