Because we value our customers' trust, Wolfpack is committed to protecting our customers' privacy. We want to assure our customers that we handle their personal data in accordance with privacy legislation and with due care and moral responsibility. We use the data generated by the use of our online shop to improve our services and provide quality service.

Data Protection Information

The seller, Lukáš Jašurek - Wolfpack Clothing (hereinafter referred to as the "Data Controller"), informs the buyer (hereinafter referred to as the "buyer") about the processing of personal data carried out by Lukáš Jašurek - Wolfpack Clothing, Raková 251, 02351 Raková, Slovakia, in accordance with the General Data Protection Regulation (GDPR) and currently applicable personal data protection laws.

1. Name and Contact Details of the Controller

The Controller: Lukáš Jašurek - Wolfpack Clothing

Email: wolfpackclth@gmail.com

Phone number: +421902671195

2.Sources and Categories of Personal Data Processing

The Data Controller processes personal data that you have provided or personal data obtained through the fulfillment of your order.

The Data Controller processes your identification, contact data, and data necessary for the performance of the contract.

3.Legal Basis and Purpose of Personal Data Processing

The legal basis for personal data processing is:

• The performance of the contract between you and the Data Controller based on § 13 para. 1 letter b) of the law.
• The legitimate interest of the Data Controller to provide direct marketing (especially for sending business announcements and newsletters) based on § 13 para. 1 letter f) of the law.
• Your consent for processing for the purpose of direct marketing (sending business announcements and newsletters) based on § 13 para. 1 letter a) of the law, in case no order for goods or services was made.

The purpose of personal data processing is:

• Processing your order and fulfilling rights and obligations arising from the contractual relationship between you and the Data Controller. Personal data is required when you place an order (name, address, contact information). The provision of personal data is necessary to conclude and perform the contract. Without it, the contract cannot be signed or fulfilled.
• To send business announcements and perform other marketing activities.
• The Data Controller may make automated individual decisions based on § 28 of the law. You have explicitly consented to such processing.

4.Legal Basis for the Processing of Personal Data

The legal basis is § 13 para. 1 letter b) of the Law on the Protection of Personal Data: processing of personal data is necessary for the performance of the contract, where the buyer is a contracting party, or for the creation of measures before concluding the contract at the request of the buyer.

The Data Controller notifies the buyer and the person interested in purchasing that, based on Article 6 para. 1 letter b) of the GDPR, personal data will be processed without the buyer’s consent, as part of pre-contractual relations and the conclusion of a purchase contract.

Another legal basis is § 13 para. 1 letter c) of the Law on Protection of Personal Data: processing of personal data is required by special regulation.

The Data Controller also notifies the buyer that, based on Article 6 para. 1 letter c) of the GDPR, personal data will be processed without the buyer’s consent to fulfill the legal obligations of the Data Controller, such as tax obligations.

5.Recipient Identification and Categories

The recipient categories that process personal data include:

• Persons involved in the supply of goods/services/execution of payments under the contract.
• Persons providing e-shop operation services and other related services.
• Persons providing marketing services.
• State institutions for the purpose of fulfilling the obligations of the Data Controller, such as:
• Tax Office
• Government and public administration organizations for control, review, and supervision (Slovak Trade Inspection, Office for the Protection of Personal Data)
• Court, law enforcement authorities, etc.

6.Transfer of Personal Data to Third Countries

The Data Controller does not intend to transfer personal data to third countries (outside the EU) or international organizations.

7.Retention Period of Personal Data

The retention period of personal data is determined by law to exercise rights and obligations resulting from the concluded purchase contract (for example, based on § 599 para. 1 of the Civil Code, the buyer can file a claim for defects within 24 months of receiving the goods). Personal data will be retained to identify the contracting party. Longer processing of personal data is only possible for the purpose of archiving accounting documents according to special regulations.

Personal data processed for marketing purposes will be retained until consent is revoked, for a maximum of 10 years.

8.The Buyer’s Rights

The buyer has the right:

• To request access to personal data concerning them.
• To correct personal data.
• To delete personal data or restrict its processing.
• To object to the processing of personal data.
• To request the portability of personal data.
• To file a complaint with the supervisory authority (Office for Personal Data Protection) based on § 100 of the law on personal data protection.

9.Legal or Contractual Requirement

The buyer is required to provide personal data for the purpose stated in these terms, and failure to do so may prevent the conclusion of the purchase contract and fulfillment of obligations under the contract.

10.Personal Data Security

The Data Controller declares that appropriate technical and organizational measures have been taken to secure personal data.

These terms take effect on 19.10.2022.