Introduction

 

We are committed to safeguarding the privacy of our website visitors and customers. This policy outlines how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).

 

Data Controller

 

Hunat s.r.o. is the data controller responsible for your personal data. If you have any questions about this policy or our data practices, you can contact us at:

 

    •    Contact Person: [Data Protection Officer, if applicable]

    •    Email: [Email Address]

    •    Address: [Business Address]

 

What Personal Data We Collect

 

We may collect and process the following types of personal data:

 

    •    Name, contact information (email address, phone number, etc.)

    •    Payment details

    •    IP address and browser type

    •    Usage data, including cookies and session information

    •    Any other information you provide directly to us through forms, surveys, or other interactions

 

How We Use Your Data

 

We process your data for the following purposes:

 

    •    To provide you with our products and services

    •    To manage and fulfill orders, payments, and deliveries

    •    To personalize your experience on our website

    •    To improve our website and services through analytics and feedback

    •    To send you marketing communications (only if you have consented)

    •    To comply with legal and regulatory obligations

 

Legal Basis for Processing

 

We process your data under the following legal bases:

 

    •    Consent: Where you have provided explicit consent for specific processing activities, such as receiving marketing emails.

    •    Contractual necessity: When processing is required to fulfill a contract with you (e.g., order fulfillment).

    •    Legitimate interests: Where processing is necessary for our legitimate business interests, provided it is not overridden by your rights.

    •    Legal obligations: Where we are required to process your data by law.

 

Your Rights Under GDPR

 

Under GDPR, you have the following rights regarding your personal data:

 

    1.    Right to Access: You have the right to request a copy of the personal data we hold about you.

    2.    Right to Rectification: You can ask us to correct any inaccuracies in your data.

    3.    Right to Erasure (“Right to be Forgotten”): You may request that we delete your personal data, subject to certain conditions.

    4.    Right to Restrict Processing: You have the right to request that we limit how we process your data in certain situations.

    5.    Right to Data Portability: You may request that we transfer your data to another service provider, in a structured, commonly used, and machine-readable format.

    6.    Right to Object: You may object to the processing of your data in specific situations, including direct marketing.

    7.    Right to Withdraw Consent: If you have given consent for a particular processing activity, you have the right to withdraw it at any time.

 

You can exercise any of these rights by contacting us at [Insert Contact Email].

 

Data Retention

 

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once no longer necessary, your data will be securely deleted or anonymized.

 

Data Sharing and Disclosure

 

We may share your personal data with third parties under the following circumstances:

 

    •    Service Providers: We may share your data with third-party service providers who assist in our operations (e.g., payment processors, delivery partners, analytics providers), ensuring they also comply with GDPR.

    •    Legal Compliance: We may disclose your data where required to comply with legal obligations or protect our rights, property, or safety.

    •    Business Transfers: In the event of a merger, sale, or transfer of assets, your data may be transferred to the new owner, subject to the same terms of protection.

 

International Data Transfers

 

If we transfer your data outside the European Economic Area (EEA), we will ensure it is protected with appropriate safeguards, such as Standard Contractual Clauses or another legal framework recognized by the GDPR.

 

Data Security

 

We are committed to protecting your personal data and use appropriate technical and organizational measures to safeguard it from unauthorized access, loss, or disclosure. Despite these measures, no method of transmission over the internet is 100% secure.

 

Cookies

 

Our website uses cookies and similar technologies to enhance user experience and analyze usage. You can manage your cookie preferences through our cookie settings or your browser settings. For more details, please review our [Cookie Policy].

 

Marketing Communications

 

We will only send you marketing communications if you have provided your consent. You can opt-out of receiving these communications at any time by clicking the “unsubscribe” link in the email or contacting us directly.

 

Third-Party Links

 

Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their privacy policies.

 

Children’s Data

 

Our services are not intended for individuals under the age of 16, and we do not knowingly collect personal data from children. If we discover that a child’s data has been inadvertently collected, we will delete it promptly.

 

Changes to this Policy

 

We may update this privacy policy periodically to reflect changes in our practices or legal obligations. The latest version will always be available on our website, and significant changes will be communicated to you directly where required by law.

 

Complaints

 

If you have any concerns about our use of your personal data, please contact us. You also have the right to file a complaint with the supervisory authority in your country of residence.

 

Supervisory Authority Contact:

 

    •    [Insert Supervisory Authority Name]

    •    [Insert Supervisory Authority Contact Information]

 

By including these GDPR statements, you’ll ensure that your privacy policy is transparent, informative, and compliant with the regulations while giving your customers confidence that their data is handled responsibly.