Privacy Policy

PRIVACY POLICY AND COOKIE NOTICE
/ Privacy Policy and Information Notice provided by the Controller to the Data Subject when collecting personal data and Cookie Notice of the online store www.bikepeakstore.com /
Controller
1.1. The identity and contact details of the Controller are:
- Business name: BIKE PEAK, s.r.o.
- Registered office: Mierová 854/37, 972 47 Oslany, Slovak Republic
- Registered in: Commercial Register of the District Court Trenčín, Section: Sro, Insert No.: 3645/R
- Company ID: 31627633
- Tax ID: 2021250462
- VAT ID: SK2021250462
- Bank account: SK0902000000002155550954
- The Seller is a VAT payer
1.2. The Controller’s contact email and phone number:
- Email: shop@bikepeakstore.com
- Phone number: +421 46 5492 332
1.3. The address for sending written documents, complaints, and contract withdrawals:
- BIKE PEAK, s.r.o., Mierová 854/37, 972 47 Oslany, Slovak Republic
1.4. The Controller hereby provides the Data Subject (Buyer) with the following information, notices, and explanations in accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “Regulation”), as well as in accordance with Act No. 18/2018 Coll. on the Protection of Personal Data, as amended, and Act No. 452/2021 Coll. on Electronic Communications, as amended.
Links
2.1. This Privacy Policy and Cookie Notice forms an integral part of the General Terms and Conditions published on the Seller’s Website.
2.2. Pursuant to §3(1)(n) of Act No. 102/2014 Coll., the Seller informs the consumer that there are no special codes of conduct to which the Seller has committed to comply. A code of conduct refers to an agreement or set of rules defining the conduct of the Seller concerning one or more specific business practices or industry sectors if not established by law or other regulations.
Personal Data Protection and Use of Cookies. Cookie Notice and Explanation of Cookies, Scripts, and Pixels
3.1. The Controller of the website provides the following brief explanation of cookies, scripts, and pixels:
- Cookies: Text files that contain small amounts of information that are downloaded to your device when you visit a website. This allows the website to remember your actions and preferences (such as login name, language, font size, and other display settings) for a certain period so that you do not have to re-enter them each time you visit the website or browse its individual pages.
- Scripts: A portion of program code used to ensure the proper and interactive functionality of websites. This code runs on the Controller’s server or on your device.
- Pixels: A small, invisible text or image on a website used to monitor website visits. Various data are stored through pixels.
3.2. Types of Cookies
- Technical or Functional Cookies: Ensure the proper functioning and use of the website. These cookies are used without consent.
- Statistical Cookies: Used by the Controller to obtain statistics about the use of the website. These cookies are used only with consent.
- Marketing / Advertising Cookies: Used to create advertising profiles and similar marketing activities. These cookies are used only with consent.
3.3. How to Control Cookies
- You can control and/or delete cookies as you wish – for details, see aboutcookies.org. You can delete all cookies stored on your computer or other devices, and most browsers can be set to prevent their storage.
3.4. Cookies Used on the Controller’s Website:
- All cookies used by the Controller can be found on https://www.cookieserve.com by entering the website address www.bikepeakstore.com
- Technical or Functional Cookies: Accessed by the Controller, valid for 2 years.
- Statistical Cookies: Accessed by the Controller, valid for 2 years.
- Marketing and Advertising Cookies: Accessed by the Controller, valid for 2 years.
3.5. Cookies Shared with Third Parties:
- Google Analytics, Google Ads: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information about privacy is available at Google Analytics Help
- META Pixels: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. More information about privacy is available at Facebook Privacy
Processed Personal Data
4.1. The Controller processes the following personal data on its website:
- First name, last name, residence address, email address, home phone number, mobile phone number, billing address, delivery address, data collected from cookies, and IP addresses.
Contact Details of the Data Protection Officer
5.1. The Controller has appointed a Data Protection Officer in accordance with Regulation (EU) 2016/679:
- Email: shop@bikepeakstore.com
- Phone number: +421 46 5492 332
5.2. The Controller is also the Seller as defined in the General Terms and Conditions of this website.
Purposes of Processing Personal Data and Retention Period
6.1. The purposes of processing personal data are mainly:
- 6.1.1. Recording, creating, and processing contracts and client data to conclude contracts with third parties.
- 6.1.2. Processing accounting documents and documents related to the Controller's business activities.
- 6.1.3. Compliance with legal regulations related to document and record archiving (e.g., Act No. 431/2002 Coll. on Accounting, as amended).
- 6.1.4. Activities related to fulfilling the Data Subject’s requests, orders, contracts, and similar obligations.
- 6.1.5. Newsletter, marketing, and similar advertising activities of the Controller, provided that the Data Subject has given consent.
6.2. Personal data is stored only for the necessary period required to fulfill the contract and subsequent archiving according to legal deadlines. If the Data Subject has consented to receive marketing emails and similar offers, personal data will be processed for these purposes until the Data Subject withdraws consent, but no longer than 10 years.
Legal Basis for Processing Personal Data
7.1. If the Controller processes personal data based on the Data Subject’s consent, such processing will only begin after consent is granted.
7.2. If the Controller processes personal data for the purpose of negotiating pre-contractual relations, concluding and fulfilling the purchase contract, and related delivery of goods, products, or services, the Data Subject is required to provide personal data for the proper fulfillment of the purchase contract; otherwise, fulfillment cannot be ensured. Personal data is processed for this purpose without the Data Subject’s consent.
Recipients or Categories of Recipients of Personal Data
8.1. Recipients of the Data Subject’s personal data will or may include:
- 8.1.1. Statutory bodies or their members of the Controller.
- 8.1.2. Employees or individuals performing work for the Controller.
- 8.1.3. The Controller’s sales representatives and other individuals collaborating with the Controller.
- 8.1.4. Business partners, suppliers, and contractual partners, including:
- Slovak Parcel Service s.r.o., Senecká cesta 1, 900 28 Ivanka pri Dunaji, Company ID: 31 329 217 – Transport services provider
- Packeta Slovakia s.r.o., Kopčianska 3338/82A, 851 01 Bratislava, Company ID: 48136999 – Transport services provider
- GoPay s.r.o., Planá 67, 370 01 Planá, Czech Republic, Company ID: 26046768 – Payment gateway provider
- Heureka Shopping s.r.o., Karolinská 650/1, 186 00 Prague 8, Czech Republic, Company ID: 02387727 – Customer satisfaction service (Verified by Customers program)
Transfer of Personal Data to Third Countries and Retention Period
9.1. Not applicable. The Controller does not transfer personal data to third countries.
Relevant Rights of the Data Subject
10.1. The Data Subject has the following rights, among others:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure (“right to be forgotten”) (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object (Article 21 GDPR)
- Right not to be subject to automated decision-making (Article 22 GDPR)
Right to Withdraw Consent
11.1. The Data Subject has the right to withdraw consent to the processing of personal data at any time without affecting the lawfulness of processing based on consent before its withdrawal. The Data Subject can withdraw consent either in writing or electronically by sending an email to the Controller’s email address provided in this document.
Right to Lodge a Complaint with the Supervisory Authority
12.1. The Data Subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement, if they believe that the processing of personal data infringes the Regulation.
12.2. The supervisory authority in the Slovak Republic is:
- Office for Personal Data Protection of the Slovak Republic
- Hraničná 12, 820 07 Bratislava 27, Slovak Republic
- Phone: +421 /2 3231 3214
- Email: statny.dozor@pdp.gov.sk
Information on Automated Decision-Making, Including Profiling
13.1. Not applicable. The Controller does not perform automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the Regulation.
Final Provisions
14.1. This Privacy Policy and Cookie Notice forms an integral part of the General Terms and Conditions and the Complaint Policy. These documents are published on the Seller’s website.
14.2. This Privacy Policy is valid and effective from July 1, 2024 upon publication on the Seller’s website.