This Privacy Policy provides information on which personal data are processed, for what purposes such processing is carried out, and which rights are available to data subjects.
Personal data are processed in accordance with the General Data Protection Regulation (GDPR) and the applicable national data protection legislation of the Member States of the European Union.
The purposes of personal data processing include, in particular, the performance and administration of orders and contracts, invoicing and compliance with statutory obligations, customer communication, administration of customer accounts, distribution of newsletters and marketing communications (only on the basis of consent or a legitimate interest in accordance with applicable law), as well as the improvement of services and analysis of website usage.
Personal data shall be retained only for the period necessary to fulfil the respective purpose for which they were collected or as required by applicable statutory retention periods.
The Buyer shall, in particular, have the following rights under the GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object to processing, the right to withdraw consent previously granted, and the right to lodge a complaint with the competent data protection supervisory authority.
This Privacy Policy applies to all online shops operated by the Operator within the European Union, unless specific provisions expressly stated for a particular online shop provide otherwise.
The Buyer may optionally create a customer account. Such customer account contains personal data, including, but not limited to, the Buyer's name, address, telephone number, and e-mail address. These data are stored in the Operator’s database and are processed exclusively for the purposes of administering the customer account and processing orders.
This Privacy Policy applies to personal data that the Buyer has entered on the Operator’s websites or has otherwise provided to the Operator in the course of their mutual communication.
2. Personal Data and Their Use
The personal data provided by the Buyer shall be processed for the purpose of fulfilling contractual obligations, processing orders, communicating with customers, and improving the services offered.
In addition, technical data that may be automatically transmitted by the Buyer's browser when visiting the Website are processed, including, in particular, the IP address, browser type, operating system, date and time of access, and information relating to the cookies used.
Such technical data are processed primarily for the purpose of ensuring the security and proper functionality of the Website.
3. Data Protection
The Operator implements appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
Access to customer accounts is protected by a password. Communication between the User’s browser and the Website is secured through an encrypted HTTPS connection.
4. Cookies and Third-Party Services
The Website uses cookies and similar technologies to ensure the proper functioning of the Website, improve user experience, analyze statistical information, and optimize marketing activities. The legal basis for the use of technically necessary cookies is Article 6(1)(f) of the GDPR.
The legal basis for the use of analytics and marketing cookies is your consent pursuant to Article 6(1)(a) of the GDPR.
Cookies that are not technically necessary are used exclusively on the basis of your explicit consent. You may withdraw or modify your consent at any time through the cookie banner or the cookie settings.
The management of cookies and user consents is carried out through the consent management tool used on the Website (CookieYes), which is displayed upon your first visit and enables you to individually configure your preferences.
Marketing and analytics cookies are activated only after you have provided your explicit consent.
The Website may use, in particular, necessary cookies, functional cookies, analytics cookies, and marketing cookies.
Google Analytics
The Website may use Google Analytics, a web analytics service provided by Google Ireland Limited and/or Google LLC.
Google Analytics is activated only after your explicit consent has been obtained. Processing may be carried out using IP anonymization where applicable.
Google Analytics uses cookies to analyze the use of the Website. The information generated by these cookies may be transmitted to and stored on Google's servers.
Further information is available at:
https://policies.google.com/privacy
https://business.safety.google/privacy/
You may prevent the storage of cookies by adjusting the settings of your browser. In addition, you may prevent the collection and processing of your data by Google by downloading and installing the following browser add-on:
https://tools.google.com/dlpage/gaoptout
The Website may also use third-party services, including, but not limited to, Google Ads, Meta/Facebook, YouTube, Mailchimp, live chat services, and affiliate tracking systems.
Any transfer of personal data to third countries shall take place exclusively in compliance with the requirements set out in Articles 44 et seq. of the GDPR. Where personal data are transferred to the United States, such transfer shall be based on appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses or, where applicable, the EU–U.S. Data Privacy Framework.
Users may access and modify their cookie preferences at any time through the CookieYes cookie banner.
5. Information Obligation Towards Data Subjects
SOLA Switzerland EU GmbH processes the personal data of website visitors, customers, newsletter subscribers, and business partners as a data controller within the meaning of the GDPR.
Personal data may also be processed by data processors, in particular providers of hosting services, IT services, marketing services, accounting services, as well as delivery and courier services.
The purposes of personal data processing include, in particular, the conclusion and performance of purchase contracts, delivery of goods, invoicing, administration of customer accounts, handling of complaints, customer communication, distribution of newsletters, direct marketing, analysis and improvement of services, and compliance with legal obligations.
The legal bases for processing personal data are the performance of a contract, compliance with legal obligations, the legitimate interests of the Controller, and the consent of the data subject.
You may object to the receipt of direct marketing communications at any time.
For the purpose of processing orders, the Operator processes, in particular, the first name and surname, delivery and billing address, telephone number, e-mail address, payment information, and company details in the case of legal entities.
Without these data, the processing and fulfilment of an order is not possible.
Personal data shall be retained only for the period necessary for the relevant purpose, namely for the duration of the contractual relationship, for the periods required by applicable statutory retention obligations, until consent is withdrawn, or until an objection to direct marketing is raised.
The Operator may use applications and services established outside the European Union, including, in particular, Mailchimp, Google, and Meta Platforms.
Any transfer of personal data shall take place exclusively in compliance with the GDPR and subject to appropriate safeguards.
Data subjects shall, in particular, have the following rights: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to object, the right to data portability, and the right to withdraw consent at any time.
Data subjects also have the right to lodge a complaint with the competent data protection supervisory authority.
Competent Supervisory Authority for the Operator:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12
820 07 Bratislava
Slovakia
E-mail: statny.dozor@pdp.gov.sk
Website: https://dataprotection.gov.sk
For any questions regarding personal data protection, the Operator may be contacted at:
SOLA Switzerland EU GmbH
Novozámocká 1065
951 12 Ivanka pri Nitre
Slovakia
E-mail: info@gastrofactory.eu
6. Amendments to this Privacy Policy
The Operator reserves the right to amend or update this Privacy Policy at any time.
The current version of this Privacy Policy shall be published on the respective Website.
7. Information on the Possibility of Alternative Dispute Resolution
If the Buyer is not satisfied with the manner in which a complaint has been handled or with the way in which their rights have been exercised, the Buyer has the right to contact the Seller with a request for remedy.
If the Seller responds negatively to such request or fails to respond within 30 days of its receipt, the Consumer shall have the right to submit a proposal for alternative dispute resolution to the competent alternative dispute resolution body in accordance with the legal regulations of the country in which the Consumer has their habitual residence or in which the Seller has its registered office.
Further information regarding the competent alternative dispute resolution bodies may be obtained from the national consumer protection authorities of the respective Member States of the European Union.
8. Validity and Applicable Law
Should any provision of this Privacy Policy be or become invalid, unlawful, or unenforceable, the validity and enforceability of the remaining provisions shall remain unaffected.
This Privacy Policy shall be governed by and construed in accordance with the laws of the Slovak Republic, without prejudice to the mandatory consumer protection provisions applicable under the laws of the Member States of the European Union.