Privacy Policy

Information on the acquisition and processing of personal data

according to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation") and according to Act No.18/2018 Coll. on the protection of personal data (hereinafter referred to as the "Law")

 

Introduction

Dedoles, s. r. o., Košická 49, 821 08 Bratislava – Ružinov, registered under the identification number (IČO) 46 706 305 in the Commercial Register of the City Court Bratislava III, Section Sro, Insert No. 81976/B, as the Data Controller (hereinafter referred to as the "controller"), hereby informs its B2B business partners about the acquisition and processing of their personal data. This information is intended primarily for our business partners, as well as their employees responsible for various areas of communication related to the supply of products and services within contractual relationships.

 

Principles of personal data protection

We process your personal data only on the basis of legal conditions outlined in the Regulation or Law. As the Data Controller, we are responsible for protecting your personal data acquired from you or obtained in accordance with the Regulation and Law, to the extent and manner specified in this statement.

Your personal data will be securely stored and backed up in accordance with our security policy and the security policy of our intermediaries, only for the duration specified below.

Recipients and individuals authorized by us (in particular employees and other cooperating persons) who process your personal data will have access to it based on our instructions and in accordance with our security policy. As the Data Controller, we are obliged to ensure data backup in accordance with the security requirements of the Regulation and Law.

 

Source of obtaining personal data

We primarily obtain your personal data directly from you when you voluntarily provide it to us in connection with inquiries or requests for our products or services, which you address to us electronically through a form on our website, via email, or by phone, based on your request.

If you are an employee of our business partner who is a legal entity, or self-employed individual, and your employer has designated you as their authorized person for various areas of communication related to the supply of products and services within contractual relationships, we obtain your personal data from your employer; if you have a business contract with a legal entity, we may obtain data from your contractual partner. The provision of data included in this information does not affect the information obligations of your employer/contractual partner to the extent specified in Article 13 of the Regulation or § 19 of the Law concerning the acquisition and processing of your personal data in connection with the employment relationship between the employee and the employer or in connection with the business contract between you and your business partner.

 

Categories of personal data and other information

The data we typically process about customers and business partners, including personal data of their employees, include:

Identification and contact information: Primarily contact and postal address; telephone contacts; email contacts; and if you are a self-employed individual, also your business name, business address or registered office address, identification number, and tax identification number.

Purchase and discount data: Information about your order (especially order number, purchase date, type and quantity of ordered goods, purchase price of ordered goods, delivery and payment method, information about automatic purchase notifications sent to the email address provided at purchase, order status).

Banking, financial, and transaction data: Bank account information; payment data.

Information created by our company as a result of entering into the relevant contract: Customer number; date and number of issued accounting and tax documents; type and quantity of purchased goods or services; purchase price of purchased goods or services; date and method of payment for goods or services; date and method of delivery of goods or service implementation; duration of provided warranty for goods or services.

Information about our mutual communication or other contact related to contract conclusion and fulfillment: Communication channel used; date and content of communication; in the case of using customer support lines, audio recordings.

Information related to possible withdrawal from distance contracts: Date of withdrawal; method of settlement of already realized purchase.

Information related to your filed complaint about purchased goods/services: Date of complaint filing; numbers and details of complaint documents; description of claimed defect; requested method of complaint settlement; method of complaint settlement; date of complaint settlement.

Information related to your filed complaint or appeal: Identification and contact details of the complainant or appellant; reason for complaint or appeal; method of complaint, appeal, or dispute resolution.

Information for marketing purposes created by our company based on your use of our services: Information about your purchases in our company and your classification into individual customer groups.

Video recordings from the camera system in case of your personal visit to our premises, where video monitoring is carried out for the purpose of increasing security and protecting property.

 

Necessity of providing personal data

We necessarily require your personal data from you for the purpose of concluding and performing the contract because without it, the establishment of a contractual relationship between the supplier and the customer cannot occur. According to the law of the Slovak Republic, Act No. 513/1991 Coll., the Commercial Code, as amended, your identification as a contracting party is one of the essential requirements of the contract. However, if you choose not to provide us us with data that is not necessary for the conclusion and performance of the contract, such as your telephone number or email address, it does not prevent the establishment of a contractual relationship, but our mutual communication may not be as effective as if you had provided them. If you do not provide an email address, we will not be able to send you electronic invoices, which we will issue based on the Contract, and we will only be able to send them to you by mail.

We will request the provision of identity document numbers only from customers' authorized persons designated to receive our deliveries. The purpose is the need for clear identification during the delivery and receipt of our products and to prevent the possibility of someone else taking them; as well as the successful resolution of any potential complaint proceedings.

Furthermore, it is noted that failure to provide your personal data may significantly impede or even prevent the fulfillment of contracts or may result in the difficulty or even impossibility of communication between the contracting parties.

 

Recipients of personal data

All your personal data will be stored in our internal systems and may be further provided by us to various cooperating entities. Recipients of personal data may include:

  • Authorities such as regulatory, supervisory, and other state bodies during performance of their activities in accordance with special legal regulations (e.g., the Slovak Trade Inspection, Office for Personal Data Protection, Tax Authority, etc.),
  • Courts and authorities involved in criminal proceedings based on their request, or within the legitimate interests of the data controller in proving, enforcing, and defending legal claims,
  • Government authorities and other entities: Your personal data may also be disclosed to other entities if our Company believes that such disclosure of personal data is:
    • in accordance with a generally binding legal regulation, data protection law or GDPR; or
    • as necessary for the purposes of asserting, establishing or defending a legal right/claim of our Company; or
    • as necessary to protect the important interests of our Company or the important interests of another person;

and it may be the provision of personal data to any of the following entities: 

    • regulator;
    • a notary as a court commissioner;
    • the tax office;
    • supervisory and control authorities;
    • a government agency;
    • the bailiff;
    • an administrator or interim administrator in bankruptcy or restructuring proceedings, composition or discharge proceedings, or a supervisory administrator exercising supervisory administration;
    • a municipality, a city, a higher territorial unit;
    • Ministry;
    • the National Audit Office of the Slovak Republic;
    • to the National Security Authority of the Slovak Republic;
    • the Slovak Trade Inspection;
    • the Judicial Treasury;
    • the Office for Personal Data Protection of the Slovak Republic;
    • the Financial Directorate of the Slovak Republic;
    • or other entity.
  • Contractually authorized service providers who:
    • technically handle the distribution of our business and promotional materials e.g. Bloomreach SK s.r.o., Shopify International Limited, a private share-based limited liability company, registered in Ireland under registration number 560279, with its registered office on the 2nd floor of Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, VAT ID IE 3347697KH.);
    • provide us with management, hosting, and maintaining services for software applications we use, (for example, Shopify International Limited);
    • handle the delivery of goods you have ordered from us (Slovak Post, delivery companies, couriers);
    • assist in processing and settling complaints you have submitted (manufacturers or suppliers of goods);
    • provide us with legal services, especially ensuring the protection of our legally protected interests and representing us in identifying, defending, and enforcing our legal claims (lawyers, bailiffs), or they provide us with technical solutions that allow us to display only relevant content and advertisements for you on our website or other websites;
    • interpreters and translators, if in connection with the activities of our Company, the provision of our services, goods or for any other purpose, it is necessary to ensure the translation of certain documents into or from a foreign language.
  • Another recipients to whom the data controller may provide personal data in accordance with specific laws or legitimate interests, such as auditors, legal advisors, tax and accounting advisors, insurance companies, banks, credit registers, third parties evaluating the use of services by our contractual partners, individuals in an employment or similar relationship with us, to the extent that is necessary for the performance of their work or rights, and who will also have the obligation to maintain confidentiality regarding the provided or accessible personal data to the extent and under the conditions agreed upon in a written contract concluded with them or established by generally binding legal regulations.

We have properly concluded contracts with all intermediaries, ensuring the protection of your personal data. We ensure that these intermediaries provide an adequate level of protection for personal data in accordance with applicable laws relating to data protection. Information about a specific business partner to whom your personal data may be disclosed in a particular case will be provided to you upon your request sent to the address of our company's headquarters or to the email address gdpr@dedoles.sk.

 

Purpose and duration of the processing of personal data

We will obtain and further process your personal data for the following purposes:

  • Fulfillment of contractual obligations related to the ordering of goods and services

To fulfill obligations or take measures at your request before we enter into a contract with you, especially for the purposes of processing and sending price quotes (preparation and sending of wholesale price lists; preparation and sending of price quotes for specific product categories, products, or designs), reservations, processing and delivery of orders, preparation and conclusion of contracts, record-keeping of contracts including all their changes in our internal system, monitoring the performance of contracts and obligations of contractual parties, especially within purchase agreements and framework contracts, as well as other obligations related to contract management, receipt and delivery of goods, handling insurance events, processing complaints, invoicing related to the delivery of goods and services, retention of related documentation and records, mutual communication between contractual parties, etc.

The legal basis for processing of your personal data for this purpose is:

    • Article 6(1)(b) of the Regulation, and, therefore, where the processing is necessary for the performance of a contract to which the data subject is a party or for pre-contractual measures to be taken at the request of the data subject. In this case, we will process your personal data on this legal basis in the event that you act under your own name and surname (for example, a natural person or entrepreneur, or a legal entity whose business name includes your name and/or surname);
    • Article 6(1)(f) of the Regulation, i.e. if the processing is necessary for the purposes of our legitimate interests. On this legal basis, we process your personal data in the event that the contracting party is a legal entity and you act as a person authorized to act and/or communicate on behalf of this legal entity. We have a legitimate interest in processing your personal data as well, as without such processing the conclusion and performance of the contract would be impossible or disproportionately difficult.

The Controller needs the personal data in question for this purpose for the entire duration and performance of the contract. After the proper performance or termination of the contractual relationships in question,  the Controller further archives the personal data (documentation) in question in accordance with the relevant regulations in order to fulfil its legal and/or contractual obligation (we keep accounting records for a period of ten (10) years following the year to which they relate, for the purpose of providing a guarantee, we may keep the contract for the entire period during which we provide the warranty or during which the client can assert liability for defects, whichever is longer).

  • Registration on the website

In order to place an order for goods through our website, it is necessary to fill out a registration form. For these purposes, and therefore for the purposes of registration, we may process your personal data, while the purpose of registration is the proper ordering of the goods. For this reason, the legal basis for the processing of your personal data is Article 6(1)(b) of the Regulation, and thus  the performance of the contract, in this case it is a pre-contractual relationship.

  • Fulfillment of legal obligations

Article 6(1)(a) c) of the Regulation, i.e. the fulfilment of the legal obligations of the operator arising in particular from the Act of the National Council of the Slovak Republic No. 513/1991 Coll., the Commercial Code, as amended, the Accounting Act, the Value Added Tax Act, the Income Tax Act, the Consumer Protection Act, the Archives and Registries Act.

For these purposes, we store your personal data in accordance with the deadlines set by the laws applicable to the company, in particular under the Accounting Act and the Act on Archives and Registries. After the termination of the contractual relationship, your personal data will be stored for a period of 10 years from the end of the contract, unless special legal regulations specify a longer retention period.

  • Customer complaint resolution and handling the personal data protection agenda

We process the following personal data for the purpose of resolving customer complaints: name; surname; details provided in the complaint; and depending on how the customer submitted the complaint, their address, telephone number, or email address. The legal basis for processing personal data is:

    • Article 6(1)(b) of the GDPR. The processing of personal data by the Company is necessary to resolve a complaint that is related to the performance of a contract.
    • Article 6(1)(c) of the GDPR as our company has a legal obligation arising from Articles 12 to 21, 33 and 34 of the GDPR to handle requests and other suggestions of data subjects related to the protection of their personal data.

Your requests/suggestions, the manner of their handling and related communication and documentation are further stored by our company on the basis of our company's legitimate interest, which consists in asserting and defending our legal claims in the event of an inspection by a supervisory authority or in the event of initiating a lawsuit that will relate to your request. 

We process personal data for the purpose in question for the period necessary to handle requests and suggestions, and we record/store these requests/suggestions, including documents on their processing, for a maximum period of four (4) years from the processing of the request/inquiry, but at least until the moment of the final termination of the administrative proceedings initiated in connection with this request/inquiry.

  • Commercial information about products and various promotions

With your consent, we will send you commercial information about products and various promotions via email or other means. When filling out the B2B partner registration form, you can choose whether you wish to receive regular updates on new developments. Commercial information will only be sent to you to the extent and frequency that is not burdensome to you.

The legal basis for processing of your personal data for this purpose is Article 6(1)(a) of the Regulation, i.e., the consent of the data subject. You can withdraw your consent at any time by sending an email expressing your disagreement with sending of commercial notifications to the email addresses: trading@dedoles.sk or gdpr@dedoles.sk. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. In case you object to the processing of your personal data for direct marketing, at any time, we will cease processing your personal data for this purpose. 

We may also send you commercial information about products and various promotions on the basis of a legitimate interest. The legitimate interest of our company in the processing of contact and identification personal data of our former and current clients (customers) for the purpose of direct marketing lies in the fact that through the promotion of our company's services and products, the development and growth of our company is provided, at the same time, from communication with our former and current clients, our company is able to identify,  how to improve our services and products and how to eliminate any shortcomings. Our company has an eminent interest in providing its clients with the best and highest quality services and products, so it is in the legitimate interest of our company to use the basic contact and identification data of our former and current clients on the basis of legitimate interest to send information about our offers and at the same time to obtain possible ongoing feedback from them from communication with them. This is almost necessary for the proper functioning and development of our company, because in today's modern times, every company operating on the market tries to maintain regular contact with its clients.

You have the right to object to the processing of personal data on the basis of a legitimate interest. If you object to the processing of your personal data on the basis of a legitimate interest, specifically for the purpose of direct marketing, our company will not further process your personal data for the purpose in question.

We store personal data processed on the basis of consent for this purpose for the period of validity of the consent, which is provided for 2 years as a standard. We store the personal data of our former clients (customers) processed on the basis of a legitimate interest for this purpose for a maximum period of five (5) years.

  • Exercise of the rights of Data Subjects

It is the legal obligation of the controller to ensure the proper handling of requests by which data subjects exercise their rights in accordance with the Regulation.

Your personal data processed for the purpose of proper handling of the rights of data subjects may be processed for a period of up to 5 years if you exercise the data subject's right.

  • Exercising company claims

The company processes the following data for the purpose of asserting company claims: data specified in contracts with customers and suppliers; data specified in complaints; data necessary for filing a lawsuit by the company; data specified in lawsuits against the company; data specified in records of thefts; data maintained in accounting; and other data necessary in connection with the potential assertion of claims or defense of the company's interests. The processing of this personal data is based on the legitimate interests of the controller, and the legal basis for processing is Article 6(1)(f) of the GDPR. The processing of personal data by the company is necessary for the purposes of the legitimate interests pursued by the company. The legitimate interest of the company includes protecting its assets as well as safeguarding against unjustified claims against the company.

In the event that we assert legal claims against you or engage in judicial or administrative proceedings, or if you assert legal claims against us and engage in judicial or administrative proceedings against us, personal data will be processed for the purpose of establishing, exercising, or defending legal claims until the final resolution of such proceedings.

In the event that you fail to fulfill your obligation towards our company, resulting in damage to us due to your actions, or conversely, if you assert your claims against our company through legal means, or if there is a real threat that such situations may occur in the future, we may process your personal data to the extent mentioned above based on our company's legitimate interest in enforcing our claims and/or protecting the rights and legally protected interests of our company (for example, determining, defending, or enforcing legal claims in court or before an alternative dispute resolution body). For this purpose, we retain your personal data for the period of limitation prescribed by Law.

  • Protection of property and enhancement of security at the premises through a camera system

The company conducts video monitoring at some of its premises through a camera system with recording, for the purpose of enhancing security and protecting property, aiming to prevent criminal activity and other antisocial behavior, particularly in the area of property crime, primarily burglary, theft, and vandalism, as well as to safeguard individuals, their property, and health on the operator's premises. The legal basis is the legitimate interest of the operator (Article 6(1)(f) of the GDPR).

Access to the real-time video feed and locally stored video recordings on our server is granted only to authorized personnel of the company to the extent necessary to perform their duties. In cases of suspicion or proceedings regarding offenses and criminal acts, the recordings from the company's camera system are provided to the Police Corps or authorities responsible for criminal proceedings, administrative and misdemeanor proceedings, and legal matters for the purpose of clarification, investigation, verification, or operational investigation concerning the matter to which such recording relates. Temporary access to your personal data may also be granted to our contracted company, which is commissioned to perform service and maintenance of the camera system if necessary.

The video recordings from the camera system are retained for a period of 72 hours from the date of recording.

 

Transfer to third countries or international organizations

Some technical solutions that we use, especially for evaluating the performance of our websites, analyzing user behavior on our websites, and ensuring the display of relevant ads on the web, are provided by companies based in non-EU countries. Therefore, as part of processing certain data, especially data obtained through cookie files, there may be a transfer of this data to servers of these providers located outside the European Union, as described on the page https://dedoles.com/pages/cookies. However, your personal data will not be sent/made available in countries that do not provide a sufficient level of protection foryour personal data. When transferring personal data to third countries, we will comply with all the conditions set out in Articles 44 to 49 of the GDPR as well as other conditions of the GDPR so that this transfer meets all security standards and that your rights and freedoms are not violated.

 

Withdrawal of consent

If we process your personal data based on your consent, you have the right to withdraw this consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of processing personal data based on consent before its withdrawal. You can withdraw your consent in the same way it was given.

 

Privacy protection on our websites

The data you provided voluntarily

On our website, you may voluntarily provide certain information for a specific purpose, such as any information entered when expressing interest in being contacted. Such data may include personal contact information such as name, company name, address, phone number, email address, job title, or demographic information, and any other information you provide.

We use the collected data to contact you. For this reason, we may share the data with an external partner, if necessary, to address your inquiries.

Cookies, usage data and similar tools

When visiting our websites, we collect certain information through automated means such as cookies, pixel tags, browser analysis tools, etc. Further information regarding cookies, usage data, and similar tools we use can be found on the page https://dedoles.com/pages/cookies.

Linked sites

From our website, we may provide links to third-party websites ("linked sites"). Linked sites may be not necessarily controlled or reviewed by us. Each linked site has its own terms of use and privacy information. We are not responsible for the policies and practices of any linked sites and any additional links contained within them, so we encourage users to read the terms and notices of these linked websites before using them.

Our website uses buttons for the following social networks, for example: Facebook, Instagram. The buttons display the logos of the respective social networks. However, these buttons are not standard social plugins provided by social networks, but rather links with button icons. These buttons are activated only by intentional actions (clicking). If you do not click on the buttons, no data will be transferred to social networks. By clicking on the buttons, you accept communication with the servers of the social network, thereby activating the buttons and creating a connection. If you do not want social networks to collect data about you, do not click on the button.

Children

Our websites are not directed at children, and we do not knowingly collect personal information from children or market to them. If we learn that a child has provided personal information through one of our websites, we will remove this information from our systems.

 

Your other rights in redards to the protection of personal data

In connection with the processing of your personal data, you have the following rights in addition to the rights listed above:

  • Right of access to your personal data

(Article 15 of the Regulation); you have the right to obtain confirmation from us as to whether we are processing your personal data, and if so, you have the right to access this personal data (their copies), as well as the right to additional information within the scope set out in Article 15 of the Regulation. In most cases, we will provide you with copies of your personal data and additional information in written form, unless you request another means of provision. If you have requested this information electronically, it will be provided to you electronically if technically feasible. If your image is recorded on a camera system, you also have the right to request and have a copy of your own personal data from the recording available. Based on a written request specifying the requested recording – date, time span, spatial determination, we can provide you with the recording in justified cases. If other persons are visible in the recordings, the recording will be edited before being provided, for example, by blurring.

  • Right to rectify your personal data

(Article 16 of the Regulation); we take reasonable measures to ensure the accuracy, completeness, and timeliness of the information we have about you. However, this right allows you to request from us to correct your incorrect personal data or to complete your personal data without undue delay if they are inaccurate, incomplete, or not up to date. Please note that you are obliged to provide us with only such personal data that are complete and correct, and you are responsible for the accuracy of the personal data you have provided to us.

  • Right to erase your personal data

(the 'right to be forgotten') (Article 17 of the Regulation) without undue delay once this right is exercised, for example, if your personal data are no longer necessary for the purposes for which we obtained or processed them, if you have withdrawn your consent to the processing of personal data, based on which we process your personal data, and there is no other legal basis for the processing of personal data (such as a Contract (or other contracts) we have concluded with you), if you object to the processing of personal data under Article 21 (1) of the Regulation, or if your personal data are processed in violation of the Regulation and the Law. However, this right needs to be assessed considering all relevant circumstances. For example, we may have certain legal and regulatory obligations, which means we may not be able to comply with your request.

  • Right to limit the processing of personal data

(Article 18 of the Regulation); in the cases provided by law, you have the right to request us to cease processing of your personal data; for example, if you dispute the accuracy of the personal data we hold about you, but only for a period allowing us to verify the accuracy of your personal data, you object to the processing of personal data by automated decision-making; or the processing of your personal data is in violation of the Regulation and the Law, and you object to the erasure of your personal data, instead requesting restriction of their use; or you object to the erasure of your personal data, which we, as the provider, no longer need and wish to delete, but you need them, for example, in ongoing legal proceedings.

  • Right to transfer of your data

(Article 20 of the Regulation) means the right to receive from us your personal data that you have provided to us previously, in a structured, commonly used, and machine-readable format, and the right to request that we transfer your personal data to another controller, subject to legal conditions; exercising this right does not affect your right to have your personal data erased by the provider. However, the right to data portability applies only to personal data that we have obtained from you based on consent or based on a Contract of which you are a party.

  • Right to object to the processing of personal data

(Article 21 of the Regulation) applies if the processing of your personal data is based on our legitimate interests or if we process your personal data for the purpose of direct marketing of our services and products, including profiling in such processing. If you object and we do not demonstrate compelling legitimate grounds for processing your personal data, or if you object to the processing of your personal data for the purpose of direct marketing of our services and products, we will not further process your personal data for these purposes.

  • Right not to be subject to a decision based solely on automated processing,

including profiling, if such automated decision-making and profiling would have legal effects on you or significantly affect you (Article 22 of the Regulation); however, as we have stated, there is no automated decision-making or profiling involved in the processing of your personal data by us.

  • Right to file a complaint with a supervisory authority

(Article 77 of the Regulation); if you believe that the processing of your personal data is in breach of the Regulation or the Law, you may file a complaint with the Office for Personal Data Protection of the Slovak Republic at https://dataprotection.gov.sk, Hraničná 12, 820 07 Bratislava 27; telephone number: +421 /2/ 3231 3214; Email: statny.dozor@pdp.gov.sk, (request for initiation of proceedings for the protection of personal data pursuant to § 100 of the Act).

    You can also exercise your rights here.

     

    Final provisions

    In case of any questions regarding the processing of your personal data, you can directly contact our Data Protection Coordinator at gdpr@dedoles.sk, or you can contact us in person or in writing at the address of our headquarters.

    This information is current and valid from 11.09.2025.

    We reserve the right to change, modify, and update this privacy information at any time. Please regularly check to ensure you are familiar with our most current notice.