Processing of personal data

Brief information
on the processing of personal data of the buyer/visitor
of the hodinkyvostok.sk online store interface (hereinafter referred to as "buyer"
and "visitor"). This information does not concern the personal data of legal
entities, including the name, legal form, and contact details of the legal entity.

1. Administrator of personal data of the buyer/visitor

The administrator of
your personal data is the company
CD-TIME, s.r.o.
with registered office at
Rybná 716/24, 110 00 Praha 1, Czech Republic,
ID: 24390313
VAT ID: CZ24390313
e-mail: info@chronoforte.sk, tel.+421911665423

(hereinafter referred to as "Administrator").

2. Processing of personal data of the buyer/visitor

A. Data processing with the consent of the buyer/visitor

We ask for consent if the buyer/visitor is not yet
our registered customer and we do not have another similar relationship with them that meets
the requirements of recital no. 47 of the General Data Protection Regulation
(hereinafter referred to as the "GDPR Regulation")
but wishes to receive marketing offers from us.

B. Data processing without the consent of the buyer/visitor

Without the consent of the buyer/visitor, we may
process personal data based on the following legal bases and for the
following purposes:

a) Legal basis:
Performance of a contract or implementation of pre-contractual measures
taken at the request of the
buyer/visitor.

Purpose:

fulfillment
of contractual obligations, including related commercial and financial communication;

customer
program.

b) Legal basis:
Protection of the Administrator's rights and legally protected interests.

Purpose:

to
recover outstanding amounts for delivered goods or other receivables of the
Administrator;

in
selected cases, to assess the creditworthiness of the buyer/visitor;

direct
marketing aimed exclusively at our registered customers and persons
meeting the requirements according to recital no. 47 of the GDPR Regulation, consisting of
offering products and services provided by the Administrator.

c) Legal basis:
Fulfillment of a legal obligation arising from law.

Purpose:

providing
cooperation to state authorities based on law and within its limits, including
data retention based on law;

accounting;

electronic
sales registration.

3. Specification of personal data of the buyer/visitor that are processed

We process
the following personal data:

- identification and
contact data of the buyer;

- data about products
purchased by the customer, or services provided to them;

- data from mutual
communication (whether in person, in writing, by phone or otherwise);

- payment data
(e.g., amount paid, etc.);

- only in selected
cases, data on the customer's creditworthiness, for the purpose of a so-called blacklist (see
the Administrator's terms and conditions).

4. Sources of information about personal data

Personal data
processed by the Administrator for the purposes described in point 2 of this information
comes exclusively from the customer, i.e., data provided to us, for example, in
connection with the conclusion of a contract (purchase of goods) or for the purpose of a customer
program and registration therein.

5. Recipient of personal data

In justified cases and only to the necessary or specified extent, we transfer the buyer's personal data
to these categories of recipients:

- our contractual
partners, whom we need for our normal operation and implementation of the contractual
relationship with the buyer, e.g., IT providers,
courier or postal service providers;

- other entities in
cases where legal regulations require us to provide such data, or
if it is necessary to protect our legitimate interests (e.g., courts, Slovak police,
etc.);

- if the customer grants consent to the extent of their email address,
used within a purchase on our e-shop pages,
to a direct marketing operator or a service generating and
sending satisfaction surveys. Such an operator is in the position of a personal data processor
towards our company. By transferring this
personal data, however, we ensure all the aforementioned rights of the buyer.

6. Rights of the buyer/visitor when processing personal data

Regarding the personal data of the buyer/visitor, they have the following rights:

Right
of access –
They may request the administrator to access the personal data they
process about them. The administrator will also provide a copy of the processed personal data.

Right
to rectification –
They may request the administrator to correct inaccurate or incomplete personal
data they process about them.

Right
to erasure –
They may request the administrator to erase their personal data if any of the
following situations occur:

a) Personal data
is no longer necessary for the purposes for which it was collected or otherwise processed;

b) the buyer/visitor has withdrawn their consent on the basis of which their personal
data was processed, and there is no other legal reason for its processing;

c) the buyer/visitor
has objected to being subject to a decision based on automated processing of their personal
data and there are no overriding legitimate reasons for such processing, or has
objected to the processing of their personal data for direct marketing purposes;

d) The personal data of the buyer/visitor
was processed unlawfully;

e) The personal data of the buyer/visitor must be erased to comply with a legal
obligation stipulated in Union law or the law of a Member State to which the
Administrator is subject;

Right
to restriction of processing – the buyer/visitor may request
the Administrator to restrict the processing of their personal data if any of
the following situations occur:

a) the buyer/visitor
has contested the accuracy of the personal data, for a period enabling the Administrator to verify the
accuracy of the personal data;

b) the processing
of the buyer's/visitor's personal data is unlawful, but they oppose the erasure
of the data and instead request the restriction of its use;

c) The Administrator no longer
needs the personal data for the purposes of processing, but the buyer/visitor
requires it for the establishment, exercise or defense of legal claims;

d) the buyer/visitor
has objected to processing of their personal data pursuant to Article 21(1) of
the GDPR Regulation, pending the verification whether the legitimate grounds of the Administrator
override their legitimate grounds.

Right
to data portability – in cases provided for by the GDPR Regulation, the
buyer/visitor has the right to receive the personal data concerning them,
which they provided to the Administrator, in a structured, commonly used and machine-readable format, provided that
this right shall not adversely affect the rights and freedoms of others.

Right
to withdraw consent – if the processing of the buyer's/visitor's personal data is based
on consent, they have the right to withdraw their consent to the processing of personal data for the purpose
for which they gave consent, at any time.

The buyer/visitor
may object at any time to the processing of their personal data by the
Administrator for direct marketing purposes carried out on the basis of the
Administrator's legitimate interest.

Right
to lodge a complaint –
the buyer/visitor has the right to lodge a complaint with the supervisory authority, which is
the Office for Personal Data Protection, Hraničná 4826/12, 820 07 Ružinov,
Slovakia, https://www.dataprotection.gov.sk/

7. Is consent to the processing of personal data voluntary or mandatory?

We will ask for the buyer's/visitor's
consent if they are not yet our registered customer, and we do not have another similar relationship with them that meets
the requirements of recital no. 47 of the GDPR Regulation and they wish to receive marketing
offers from us. Granting this consent is entirely voluntary. Granting this consent is not
a condition for obtaining any goods or services offered by our company.

8. Is it possible to withdraw granted consent to the processing of personal data?

Consent granted for
marketing purposes can be withdrawn at any time.

9. How can consent to the processing of personal data be withdrawn?

Consent to the
processing of personal data can be withdrawn by written statement sent to our company's address or to the email: info@chronoforte.sk

10. How can the buyer/visitor defend against direct marketing
carried out without their consent?

The buyer/visitor has the right
to object at any time, free of charge, to such processing of their personal
data to any of our contacts listed in point 1.

11. Further information on personal data protection in the terms and conditions.

Further detailed information on
the processing of personal data of the buyer/visitor
is available in our terms and conditions at https://chronoforte.sk/pages/obchodne-podmienky