Privacy policy

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”) and Act No. 18/2018 Coll. on the protection of personal data (hereinafter referred to as the “Data Protection Act”). Ensuring the security of personal data and their lawful processing is our top priority. Below, you will find how we process and secure your personal data.

 

OUR DETAILS

Who are we?

Personal data is processed by:

Company Name: doružova s.r.o.

Registered in: Commercial Register, District Court Bratislava III, Section Sro, File No. 16315/B

Address: Karpatské námestie 10A, 831 06 Bratislava - Rača

Company ID (IČO): 35 736 186

VAT Registration ID (IČ DPH): SK2021355259

Email: hello@doruzova-studio.com

Phone Number: +421903215871

(hereinafter referred to as the "controller").

 

CATEGORIES OF PERSONAL DATA, PURPOSE, LEGAL BASIS, AND RETENTION PERIOD

What personal data do we process, for what purpose, under which legal basis, and for how long?

We process only personal data necessary to achieve the designated purpose. Personal data is processed for the following purposes:

Accounting

We process personal data of customers and other individuals recorded in our accounting system, including name, surname, address (for invoicing purposes), bank account number, payment details, phone number, email, and signature, for maintaining accounting records and fulfilling statutory obligations arising from the Accounting Act and other relevant laws. The legal basis for processing personal data is compliance with legal obligations. Accounting records are retained for 10 years.

E-shop

We process personal data of customers, including name, surname, delivery address, billing address, order details, bank account number, payment information, phone number, and email, for the following purposes:

• Pre-contractual communication,
• Creating a user account,
• Accepting orders,
• Fulfilling contracts and delivering goods,
• Keeping records of contracts for a specified period.

The legal basis for processing this data includes:

• Performance of a contractual obligation,
• Consent of the data subject (for creating a user account).

We retain personal data from pre-contractual communication for 6 months. Data processed for contract fulfillment is retained for 10 years. User account data is retained for as long as the account remains active.

Complaints

We process personal data, including title, name, surname, address, email, phone number, order and product details, and complaint specifics, for handling complaints and maintaining complaint records. The legal basis is compliance with legal obligations under consumer protection law. Personal data is retained for 5 years from the settlement of the complaint.

Contact Form

We process data collected from inquiries via the contact form, including name, surname, email, and the subject of the message, for addressing your request. The legal basis for processing is the performance of a contract or pre-contractual relationships. Data is retained for 6 months.

Newsletter

We process personal data of individuals who subscribe to our newsletter (name, surname, email) based on their consent. For customers or others with whom we have a contractual relationship, the legal basis is our legitimate interest in informing them about our activities, offers, and promotions. Consent can be withdrawn at any time by written notice or unsubscribing from the newsletter. Personal data is retained for 10 years.

Contests

We process personal data of contest participants, including name, surname, username, or other provided details, for participation and evaluation of contests. The legal basis is the consent of the data subject. Data is retained for the duration of the contest and for 1 year after its conclusion for winners. Consent can be withdrawn anytime, resulting in exclusion from the contest.

Customer Reviews

We process personal data of customers providing reviews, including title, name, surname, email, phone number, and review content. This data is processed with consent for publication on our website and social media. Data is retained for 5 years, and consent can be withdrawn by email notification.

Direct Marketing

We process personal data of customers or contract parties for sending promotional messages based on our legitimate interest in direct marketing, informing them about our activities, offers, and events. Data subjects can object to processing at any time by written notice or by unsubscribing via the link in our emails. Data is retained for 10 years.

Social Media Management

We process personal data of followers of our official social media pages to manage the pages and promote our services. The legal basis is our legitimate interest in presenting our company and its services through social media. Personal data is processed as long as you remain a follower of our page.

Cookies

Cookies are processed to ensure website functionality, facilitate use, and serve advertising purposes. The legal basis for processing cookies is your consent, provided by clicking the relevant button on the cookie bar. Cookies are retained for 15 months. For more details on cookies, refer to our Cookie Information.

 

CONSENT

We process your personal data based on your consent only in specific cases. You can withdraw your consent at any time by:

• Deleting your user account,
• Unsubscribing from the newsletter,
• Sending us a written notice via email,
• Changing your browser cookie settings.

 

RECIPIENTS

Who do we share your personal data with?

We share personal data with third parties only if required by specific laws or necessary to fulfill a contract. This includes government authorities and authorized entities.

We may provide personal data to processors supplying specialized services. We have agreements and confidentiality clauses with these processors. Our appointed processors include:

• Online invoicing system providers,
• E-commerce platform providers,
• Mailing system providers.

Personal data may also be shared with carriers or business partners for contract fulfillment purposes.

THIRD COUNTRIES

Where do we transfer your personal data?

Personal data may be transferred to the USA exclusively in relation to the use of Google and Meta services.

 

COMPLAINTS

Not satisfied?

If you're dissatisfied with how we process your personal data, contact us at hello@doruzova-studio.com. You may also lodge a complaint with the Office for Personal Data Protection if you believe we process your personal data unlawfully.

Office for Personal Data Protection

Address: Hraničná 12, 820 07 Bratislava

Email: statny.dozor@pdp.gov.sk

 

DATA PROCESSING METHOD

How do we process your personal data?

Data is processed both electronically and in paper form. No automated individual decision-making is utilized. We maintain records of processing activities and implement technical and organizational security measures, including antivirus software, strong password policies, encryption, and regular backups. Employees handling personal data are trained and bound by confidentiality agreements.

Processors are carefully selected to ensure they guarantee the security of your data.

 

RIGHTS OF DATA SUBJECTS

What rights do you have?

The GDPR grants you several rights to control the processing of your personal data. The applicability of these rights depends on the legal basis for processing. Your rights include:

• Access to data
• Rectification
• Erasure
• Restriction of processing
• Data portability
• Objection to processing

For detailed explanations of your rights and how to exercise them, contact us via email or post.

 

FINAL PROVISIONS

This privacy policy is effective from February 26, 2025. We reserve the right to amend this policy if there are changes in how we process personal data.

Complaints Procedure

Use of Cookies