Privacy policy
Processing and protection of personal data
In connection with the General European Data Protection Regulation (GDPR – General Data Protection Regulation), we ask for your consent to the processing of your personal data in the e-shop www.gastronova.eu. The purpose of the GDPR is a higher level of protection of your personal data and transparency about how it is processed and about your rights.
Your personal data is processed exclusively in accordance with applicable legislation. We process personal data only with the client’s consent. It is entirely the client’s free decision whether or not to give consent to the extent we propose. Giving consent is completely voluntary, and consent once given can be withdrawn at any time. We are bound by the scope of the consent given and fully respect it.
1. Purpose of processing
We will process your personal data for the purpose of fulfilling your orders and ordered services, invoicing, or delivering orders to your contact address.
2. Scope of processing
We process the following customer data, which is necessary for fulfilling orders and which you provide to us knowingly
– first name
– last name
– street and house number
– postcode
– city
– state
– country
– phone number
– company name
– company ID (IČO)
– tax ID (DIČ)
– VAT ID (IČ DPH)
– email address
Data you provide to us unknowingly:
– IP address
3. Processing period
Your personal data will be securely stored, collected, processed and archived for the purpose of keeping accounting records and documents for a period of 10 years (pursuant to Act No. 431/2002 Coll. on Accounting, as amended) from the last completed order.
4. Cookies
We use cookies to tailor the content of our e-shop to your preferences. Cookies are small data files that our e-shop stores in your web browser when you visit it. If you do not agree to the use of cookies, set your own rules for cookies in the web browser on your device. If you block cookies, the functionality of the e-shop may be limited.
5. Web metrics and analytics
These are conversion or pixel tags, or small graphic images, which may be embedded in the code of our e-shop and which make it possible to identify the user for the purpose of recording their behaviour and measuring traffic.
We use the following systems:
Google Analytics
Facebook Pixel
Smartsupp
HotJar
6. Advertising and promotional services
In addition to processing orders, we use your contact details in the e-shop to send advertising or commercial communications. This involves processing the following data:
– first name
– last name
– email address
The data of users who have subscribed to the e-shop’s news (newsletter) is sent to and processed by a third party outside the EU – The Rocket Science Group, which operates the Mailchimp service and complies with the principles of the European data protection regulation. These are available at: https://www.smartemailing.cz/zasady-ochrany-osobni…
7. Right of access to data
The e-shop user has the right to obtain information about the purpose and scope of the processing of their personal data.
8. Right to data portability
The controller is obliged to provide the data subject with all information processed about them in a structured, commonly used, machine-readable format. By exercising this right, the user gains control over their personal data and may also transfer it in this form to another controller.
The data download tool is available to the user under “Account > Privacy (GDPR)” in their customer account.
9. Right to rectification
If the user suspects that the stored data is inaccurate, they have the right to ask the data controller to correct it. They can edit their data under “Account” in their customer account.
10. Right to restriction of processing
The user has the right to have the controller restrict the processing of their personal data, make selected personal data inaccessible or temporarily remove published data.
11. Right to erasure
The user has the right to have their personal data erased without undue delay if it is no longer needed for the purpose for which it was collected or processed and the legal reason for any archiving no longer applies. Upon a request for erasure, all data will be irreversibly deleted and related orders (if any) anonymised.
12. Right to be forgotten
The user has the right to have reasonable steps taken, including technical measures, to erase all links to their personal data and copies thereof, if the legal reason for any archiving no longer applies.
13. Right to object
The user has the right to object to the processing of personal data, or if they are unable to exercise the right to erasure.
14. Right to lodge a complaint
The user has the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data is in breach of the GDPR.
15. Recording user requests
The e-shop operator is obliged to record all user requests relating to the download, correction and erasure of their data.
16. Data security
We have modern technical and security mechanisms in place to protect the data we process against unauthorised access or transfer, loss or destruction, or any other possible misuse.
If you do not give your consent and personal data, we will not be able to provide you with any services under the European data protection regulation.
Bratislava, 18 May 2025