Who we are and where you can contact us
We are the operators in the processing of your personal data:
CMA Group, s.r.o.
with registered office: Bellušova 6, 974 01 Banská Bystrica
ID: 44 01 33 61
The company is registered in the Commercial Register of the District Court of Banská Bystrica, Section Sro, File No. 14452 / S.
Our company has appointed a person responsible for personal data protection, which is Ing. Roman Cingel. If you have any questions about this document or the use of your personal data or want to exercise your rights described in this document, you can contact our responsible person by e-mail at eshop@cmagroup.sk or in writing at the address of our company.
What data do we collect?
When providing our services, we collect the following information about you:
Purchase details
When purchasing, we ask you for the data necessary to equip it. The obligatory data are therefore only those without which we cannot send you the purchase and process your order, such as your name, e-mail address, delivery address, telephone number and the subject of the order itself.
In our store, you do not enter any information that would be directly related to working with money in your accounts. All currently offered forms of electronic banking (payment for goods via the Internet) are implemented directly on the bank’s website, which will provide us only with information about the success or failure of payment and your name or account number (so we can identify the payment and return if necessary).
In no case will we know any other information, such as your login details or your account balance. The only information we store in this regard is related to the “remember” function of your card. However, this function is also provided by the bank, and only it can match your card number with the anonymized data under which our system remembered your card.
Data when creating an account
If you decide to create a user account with us, we also collect all related data. The only required information is your name and email address, which we use to communicate with you.
Creating an account is mandatory with us only if you want to open a B2B account and trade with us on a wholesale basis. We can’t make this content available to you without it. In such a case, we need to register the name of the company, or the name of the trade, ID number, VAT number, or VAT ID, billing address, delivery address, telephone contact and email for business communication.
Data obtained when using our services
When you use our services, we also obtain information about how you use them. This is information about your interactions with our services, such as when you access our site, what you look for on it, when you create an account, and when you log in to your account.
We also store information about your processed orders.
We also collect information about the devices and computers you use to access our services, including IP addresses, browser settings, information about operating systems, or information about your mobile device, information from which website you access us, pages you visit, and information from cookies and similar tools.
We use how data
We use the information we collect about you for the following purposes:
Providing our services
Based on the information we collect from you, we can deliver our services to you in accordance with our Terms and Conditions. We use the data we obtain from you when creating an order to process it, or to remind you if you have not completed the order with a binding order. We also need this information in our accounting and billing policies.
The information and information we have obtained about you during the provision of our services and after logging in to your account is used by us to ensure that your account and the information available in it are up to date.
Communication with you
We use your contact details to send us notifications related to order processing and service provision, or when we want to respond to your contact, when you ask us what is happening with your order, you want to report to us e.g. a new delivery address, or you can ask us to change your information in your order or user account. We also process your contact details as well as details of your purchases in the event that you claim the delivered goods.
Improving and personalizing our services and marketing
We also use the data we store to improve and personalize our services, as well as for marketing. For example, we use information about your purchase history and the products you have purchased from us to recommend other products that may be of interest to you and to display content that is relevant to you on our site.
We also use information about visits and movements on our website and its individual sections and displayed products for advertising and marketing purposes, on our website, as well as on other websites. We also use this information for analytical purposes to understand how people use our website and to make it more intuitive and user-friendly.
Security and protection of rights
We also use your information to ensure the security of the services we provide, to respond to claims that have been made against us in proceedings before state and other authorities that control our activities, and to enforce claims that we have incurred.
Cookies
We also use cookies and similar tools for all the above purposes.
Legal basis
Although we do not wish to burden you with legal personality, in accordance with the requirements of personal data protection legislation, we must inform you of the legal basis for the processing of your personal data, which are:
Fulfillment of the contract – in the case of ordering goods and setting up a user account, but also in the case of your participation in a consumer competition and also when informing about the discounts to which you are entitled.
Consent – especially in connection with the sending of commercial communications about news and current offers, or other forms of marketing. Any consent given is voluntary and can be revoked at any time, but this does not affect the lawfulness of the processing prior to its revocation.
Fulfillment of our legal obligations – when keeping data about you and your order in our accounting or when making data available to state and other authorities that supervise our activities or that resolve disputes or the implementation of decisions.
Our legitimate interest – in improving and personalizing our services, certain marketing activities, including sending information about news to the email obtained during the purchase process, if you have not refused, or in connection with security and protection of rights, as mentioned above. In these cases, we always carefully consider whether the processing will not constitute a disproportionate interference with your rights. If you want to know more information about this assessment, write to us at eshop@cmagroup.sk.
To whom do we make the data available
We do not disclose, make available, or provide your personal information to any other entity, except as described below:
If you ask us to
We publish or make available personal data if you request it from us. We make a publication when you use the community features of our website and publish your review of a book or your comment. We make the data available to third parties in the case of the delivery service that you have chosen when ordering. We currently work with the following companies:
IN TIME, s.r.o., Senecká cesta 1, 900 28 Ivanka pri Dunaji, IČO: 31342621,
entered in the Commercial Register of the District Court Bratislava 1, Section Sro, File no. 4376 / B
Slovak Parcel Service s.r.o. Senecká cesta 1, 900 28 Ivanka pri Dunaji, IČO: 31329217, entered in the Commercial Register of the District Court Bratislava 1, Section Sro, File no. 3215 / B
Analytical and advertising services
We also work with partners who provide us with analytical and advertising services. These allow us to better understand how users use our website, place our ad online, and measure its performance. These companies may use cookies and similar technologies to collect information about your interaction with our services as well as other sites.
For legal reasons and to prevent damage
We may also store or disclose your information to others to comply with legal obligations, government and other authorities’ claims, to assert our claims or to defend ourselves in proceedings where others are asserting them against us.
The categories of third parties to whom we disclose personal data for these reasons include, for example, courts, government and other authorities competent to exercise control over our business, to resolve disputes or enforce decisions, or to our legal and accounting advisers and auditors.
Transfer to third countries
We do not actively transfer your personal data to third countries outside the EU. However, some of the partners with whom we cooperate in the processing of personal data carry out such transfers, specifically to the USA. The persons to whom this information is disclosed in the US comply with the terms of the US-EU Privacy Shield and thus provide an adequate level of protection for your personal data. We will be happy to provide you with more information if you write to us at eshop@cmagroup.sk.
How we protect your data
We work very hard to ensure that your personal information is safe. In accordance with the requirements of applicable legislation, we take all necessary security, technical and organizational measures to protect your personal data. Electronic data is stored in a protected database on a server that is ours or is reserved for us. We protect the database containing personal data against damage, destruction, loss and misuse. If you would like more information about the security of your personal data, please contact us at eshop@cmagroup.sk.
How long we keep the data
We retain the personal information associated with your user account for as long as you have an account, as it is necessary for us to be able to operate the account for you. If you do not have an account (you did not create a password during the creation of the order), we store your personal data concerning the processed order for the necessary period, which is usually three and a half years from its delivery.
If we use your personal data to deliver commercial communications to your e-mail address or in other cases where you have given us your consent, we will retain this data until you revoke the relevant consent. However, we must warn you that even if any of the reasons for processing fail, it may not result in us retiring the storage of your personal data. We can and sometimes have to process this personal data for another purpose with a different legal basis.
What are your rights?
We have several rights as a result of the processing of your personal data. If you exercise any of the rights below, we will notify you of the processing of your application within 30 days of its delivery to us. In justified cases, we may extend this period to 60 days, of which we will inform you.
How to exercise your rights
You can exercise your rights by sending an email or a written request to our contact details listed in the “Contacts” section.
Please state in your application your name, surname, e-mail address or address of permanent residence. If you do not provide us with the information provided, we will not be able to comply with your request. We require this information from you in order to verify your identity and not provide your personal data to an unauthorized person.
Right of access to data
You have the right to obtain confirmation from us as to whether personal data about you are being processed and, if we process your personal data, we will provide you with information on what data we process about you, for what purpose to whom your personal data were provided or whether they were processed. transferred to a third country and how long we will keep your personal data.
Right of correction
It’s human to make mistakes. If you believe that our company is processing incorrect personal information about you, you can exercise this right directly in your account settings or ask us to correct it. We care that we process the right personal information about you, so be sure to exercise this right whenever, for example, you move or change any of your personal information that is important to your relationship with us.
Right of erasure (right to be forgotten)
You have the right to delete your personal data that we process about you if the following conditions are met and legal exceptions do not apply:
the data are no longer needed for the purposes for which they were obtained
you withdraw your consent to the processing of your personal data and there is no other legal basis for their processing
you object to the processing of your personal data, based on a legitimate interest, based on your specific situation and there are no legitimate reasons for processing, or you object to processing for direct marketing purposes
personal data were processed illegally.
In the event that your personal data is disclosed and you exercise the right to delete from us, we will also delete such disclosed personal data. At the same time, we will inform other recipients of your personal data that you have exercised the right to delete and should therefore delete all references to your personal data, if technically possible, taking into account the technology available and the cost of carrying out these measures.
If you cancel your account with us, we will proceed to delete the data for which it is possible and to cancel the account within 10 days. However, for technical reasons (eg due to data backup), some data may be deleted after a longer period, which should not exceed 60 days.
Right to restrict processing
You also have the right to ask us for a temporary processing restriction in the following cases:
if you believe that we are processing incorrect personal data about you, until the accuracy of this personal data has been verified
the processing of your personal data is illegal and you decide instead to delete personal data to request a restriction on their processing
we no longer need personal data for processing purposes, but this is necessary for your own purposes to prove, assert or defend your legal claims
in case you object to the processing of your personal data, until the verification or the legitimate reasons for the processing of personal data prevail over your legitimate interests
Right to data portability
You have the right to obtain personal data that we process about you on the basis of consent and / or contract and process it by automated means, in a structured, commonly used and machine-readable format. You can also transfer this data to another person, so if it is technically possible, we will transfer your personal data directly to the operator of your choice at your request.
The right to object
You have the right to object, for reasons relating to your specific situation, to the processing of your personal data, which is carried out on the basis of our legitimate interest, including the right to object to profiling based on our legitimate interest.
You also always have the right to object to the processing of your personal data if it is processed for direct marketing purposes.
Filing complaints
If you believe that the processing of your personal data by our company is in conflict with applicable legislation on personal data protection, you have the right to file a complaint with our main supervisory body – the Office for Personal Data Protection of the Slovak Republic, whose contact details can be found here. If you live in the Czech Republic, you also have the right to file a complaint with the local supervisory authority – the Office for Personal Data Protection, whose contact details can be found here.
What are cookies, pixels and what do we need them for?
Like many other companies providing their services on the Internet, we use cookies, pixels and other technologies. In this article, we will describe how they work and what we need them for.
Cookies are small pieces of data that are stored on your browser or mobile device while browsing the web. Pixels are small images or “pieces of code” found on a website or in an email that collect information about your browser or mobile device, and some of them may also store cookies.
Each cookie has a different “shelf life” – different storage times on your device. Some cookies are deleted from your device after you close the browser window (session cookie), others remain stored on your device even after you finish browsing our website (permanent cookie).
Why do we use cookies?
Cookies allow us to remember your actions and preferences (such as login details, order information in the shopping cart) during a certain period of time, so that you do not have to re-enter them every time you return to the website or move from one website to another .
At the same time, cookies help us understand what interests you on our website, whether it is clear enough for you and you can find what you are looking for on it. Therefore, we also use cookies in order to improve the user experience.
Cookies can also record additional information, such as the number of visitors to our website and also which subpages of our website you visit most often. They are also used to show you ads and site content that are relevant to you based on your interests and needs.
What cookies do we use?
Functional and technical cookies – these cookies ensure the proper functioning of our website, for example, ensure the function of logging in to the user account on the site, storing goods in the shopping cart, detect attempts to log in to the account unauthorized, or enable effective display of content. Without these cookies, our website would not work properly, their use is necessary, the retention period is usually short, and therefore we do not ask your consent for their storage and access. We also include cookies in this category, thanks to which we will store the contents of the basket for you even without you being logged in – many of you require us to find the books that you put in the basket with us during the year before Christmas so that you can please your loved ones with perfect gifts.
Analytical cookies – these cookies are used to obtain data about traffic to our website, information about searches performed on our website and also to find out how you navigate our website so that we can make it as easy as possible for you to use. As we have taken measures to prevent their misuse (anonymization on the part of our suppliers) and at the same time measures are implemented to make it easy for you to control and restrict the use of these cookies, we do not ask your consent for their use. We use the following third party solutions for these cookies:
Address: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
You can find more information about privacy here, while you can install the software add-on available here to refuse cookies.
3. Marketing and advertising cookies – we use these cookies in order for us to be able to display advertising that you may be interested in according to your previous preferences and for the implementation of similar marketing activities. We store cookies of this type only with your consent. We use the following third party solutions for these cookies:
Address: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland. You can find more information about privacy here, and you can refuse cookies here.
Address: Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbor Dublin 2, Ireland. You can find more information about privacy here, and you can refuse cookies here.
Your choices
There are several ways to manage or limit how we and our partners use cookies and similar technologies:
Browser settings: Although most browsers have basic settings that accept cookies, their settings allow you to delete or reject cookies. However, we need to warn you that some of the services provided may not work properly in this case.
Third parties: Third party solutions can be used to limit cookies, for example at optout.aboutads.info.
Partners’ own solutions: to reduce cookies, it is also possible to use the solutions offered by individual partners, which we mentioned above.
Contact us
If you have any questions about cookies and this document, ask us at eshop@cmagroup.sk.