PRIVACY POLICY
The security of your personal data is our priority. This Privacy Policy (hereinafter referred to as the "Policy") explains how we collect, use, store, and protect your personal data when you visit and shop on the e-shop cronostone.sk.
1. IDENTIFICATION OF THE CONTROLLER
The Controller determining the purposes and means of processing your personal data is:
- Business Name: Tomáš Herczeg CRONOSTONE
- Registered Office / Place of Business: Ludvíka Svobodu 1680/20, 979 01 Rimavská Sobota, Slovakia
- ID No. (IČO): 37304704
- Tax ID No. (DIČ): 1044300510
- Business Registry: District Office Rimavská Sobota, Trade License Register No.: 609-8133
- Contact E-mail: eshop@cronostone.sk
- Contact Phone: +42190514604
(hereinafter referred to as the "Controller")
2. SCOPE AND PURPOSE OF PERSONAL DATA PROCESSING
We process your personal data only to the extent necessary for the following purposes:
- Order processing and contract fulfillment: We process data such as first name, last name, billing address, delivery address, e-mail, phone number, and details of the ordered goods. This data is necessary to process the order, dispatch the goods, and handle potential claims or complaints.
- Accounting and tax compliance: We process your billing data and purchase history to fulfill our legal obligations under tax and accounting regulations.
- Marketing (Newsletter distribution): If you are our customer or have given us your explicit consent, we process your e-mail address to send information about news and discounts. You can unsubscribe at any time.
- Customer support services: If you contact us via form, e-mail, or phone, we process the data you provide to answer your inquiries.
- Cookies and analytics: While browsing the website, we process information about your behavior on the site, IP address, and device type to improve website functionality and marketing.
3. LEGAL BASIS FOR PROCESSING PERSONAL DATA
We process your data based on the following legal grounds under the GDPR:
- Performance of a contract (Art. 6 (1) (b) GDPR): Necessary for purchasing, delivering goods, and communicating regarding the order.
- Compliance with a legal obligation (Art. 6 (1) (c) GDPR): Mandatory retention of data in accounting and registry management.
- Legitimate interest (Art. 6 (1) (f) GDPR): Direct marketing to existing customers (sending newsletters) or protecting our legal claims (e.g., debt collection).
- Consent of the data subject (Art. 6 (1) (a) GDPR): For sending newsletters to new visitors or for using non-essential marketing and analytical cookies. Consent is voluntary and can be revoked at any time.
4. PERIOD OF DATA RETENTION
We store your personal data only for the time necessary to fulfill the given purpose:
- Order and contract data: For the duration of the contractual relationship and subsequently during the limitation period (standardly 3 to 4 years from the termination of the contract).
- Accounting and tax documents: In accordance with the special regulations of the Slovak Republic for a period of 10 years following the year to which they relate.
- Marketing and newsletter: Until you withdraw your consent, but for a maximum of 3 years from its granting or from the last purchase.
- Cookies: For the validity duration of individual cookies (specified in the cookies table below).
5. RECIPIENTS OF PERSONAL DATA (PROCESSORS)
We do not sell your data to third parties. For the proper functioning of the e-shop, however, we use verified subcontractors who process data on our behalf:
- Delivery and Courier Services:
- Packeta Slovakia s. r. o. (Kopčianska 3338/82A, 851 01 Bratislava, Slovakia, ID: 48 136 999)
- Slovenská pošta, a. s. (Partizánska cesta 9, 975 99 Banská Bystrica, Slovakia, ID: 36 631 124)
- General Logistics Systems Slovakia s.r.o. / GLS (Lieskovská cesta 13, 962 21 Lieskovec, Slovakia, ID: 36 624 942)
- Payment Service Providers (Payment Gateways):
- ComGate a.s. (Gočárova třída 1754/48b, Pražské Předměstí, 500 02 Hradec Králové, Czech Republic, ID: 279 24 505) – for card payments or fast bank transfers.
- GOPAY s.r.o. (Planá 67, 370 01 Planá, Czech Republic, ID: 260 46 954) – for card payments or online banking.
- TrustPay, a.s. (Za kasárňou 1, 831 03 Bratislava, Slovakia, ID: 36 865 843) – for cashless payments.
- E-commerce and IT Service Providers: PrestaShop S.A. (and your web hosting provider ensuring the operational capacity and data storage of the e-shop).
- Marketing and Analytical Tools: Google LLC (Google Analytics), Meta Platforms, Inc. (Facebook Pixel) for anonymous traffic analysis and advertising.
We do not transfer your personal data to third countries outside the European Economic Area (EEA) that do not guarantee an adequate level of protection, unless technically necessary (e.g., using global cloud services certified under the EU-US Data Privacy Framework).
6. YOUR RIGHTS AS A DATA SUBJECT
In connection with the processing of your personal data, you have extensive rights under the GDPR, which you can exercise by sending a request to our contact e-mail:
- Right of access: You have the right to know what data we process about you and to obtain a copy of it.
- Right to rectification: You have the right to request the correction of inaccurate or incomplete data.
- Right to erasure (Right to be forgotten): You can request the deletion of your data if it is no longer needed, if you have withdrawn consent, or if we process it unlawfully. (Note: Data we must retain by the Accounting Act cannot be deleted).
- Right to restriction of processing: You can request that we temporarily stop processing your data (e.g., while verifying its accuracy).
- Right to data portability: You have the right to request the transfer of your data to another controller in a structured format.
- Right to object: You have the right to object to data processing based on our legitimate interest (including direct marketing).
- Right to lodge a complaint: If you believe we are violating the GDPR, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR).
7. SECURITY OF YOUR DATA
Our website cronostone.sk uses an encrypted SSL (HTTPS) connection, which prevents data leakage during its transmission on the Internet. Access to personal data is restricted to authorized persons instructed on data security.
8. INFORMATION ABOUT COOKIES
We use cookies on our website to ensure the best functionality, analyze traffic, and personalize ads. Cookies are divided into the following categories:
A. Necessary (Functional) Cookies
These cookies are required for the basic operation of the e-shop (PrestaShop platform). Without them, the website could not function properly (e.g., storing items in the cart, logging into a customer account, remembering language or currency choices). We do not need your consent for these cookies.
| Cookie Name | Provider | Purpose | Validity Period |
|---|---|---|---|
| PrestaShop-* | PrestaShop | Stores the user session identifier (cart, login). | 20 days / until browser close |
| PHPSESSID | PrestaShop | Maintains user states across page requests. | Until browser close |
| cookie_consent | cronostone.sk | Stores your preferences regarding cookie consent. | 1 year |
B. Analytical and Statistical Cookies
These cookies help us understand how visitors interact with the website (which products they view most often, how long they stay on the site). We collect this data anonymously and process it only with your prior consent given in the cookie banner.
| Cookie Name | Provider | Purpose | Validity Period |
|---|---|---|---|
| _ga | Google Analytics | Registers a unique ID used to generate statistical data on website usage. | 2 years |
| _gid | Google Analytics | Registers a unique ID used to generate statistical data on website usage during a single day. | 24 hours |
| _gat | Google Analytics | Used to throttle request rate. | 1 minute |
C. Marketing Cookies
These are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user (e.g., remarketing on social networks). They are processed only with your consent.
| Cookie Name | Provider | Purpose | Validity Period |
|---|---|---|---|
| _fbp | Meta (Facebook) | Used to deliver advertisement products on Facebook after visiting our website. | 3 months |
How to change cookie settings?
You can change your cookie settings at any time by clicking the "Cookie Settings" link in the footer of our website, or you can block or delete them directly in your web browser (Chrome, Firefox, Safari, etc.).
9. FINAL PROVISIONS
This Policy enters into force and takes effect on June 25, 2026. The Controller reserves the right to change or supplement this Policy at any time. We will inform you about changes by publishing the updated version on our website.
To learn more about how advertisers use cookies, please visit the following links: