Privacy Policy

1. Data Subject – Buyer/Website Visitor

Operator – operator of the online store:

Company BAT-MAN, s.r.o., registered office Andraščíkova 618/1, 085 01 Bardejov, ID No.: 47113618, registered in the Commercial Register at the District Court in Prešov, Section SRO, Insert No. 27799/P

2. Recipients of Personal Data:

• Provider of e-shop solution – Shoptet, a.s., Dvořeckého 628/8, Břevnov, 169 00 Prague 6, Czech Republic

• Carriers DPD – Direct Parcel Distribution SK, s.r.o., Technická 7, 82104 Bratislava, Slovakia and Balíkobot, s.r.o., Revoluční 1200/16, 110 00 Prague 1 – Nové Město, Czech Republic

• Service provider Heureka, operated by Heureka Shopping s.r.o., Karolinská 706/3, 186 00 Prague, Czech Republic

• Smartsupp.com, s.r.o., Milady Horákové 13, 602 00 Brno, Czech Republic

• GOPAY s.r.o., Planá 67, 370 01 České Budějovice, Czech Republic

• Accounting management – Ing. Anna Kokindová – ECON, Fraňa Kráľa 6, 08501 Bardejov, Slovakia

3. Responsible Person:

The Operator, given the scope and subject of its activity, is not obliged under § 44 Act No. 18/2018 Coll. on the Protection of Personal Data to appoint a data protection officer. However, if you have any questions regarding your personal data, please contact us by email at info@bat-man.sk by phone at 0910 946793, or visit us in person at the above address.

The website operator is responsible for processing personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and the free movement of such data (hereinafter referred to as GDPR). The data subject has the right to request information in writing from the operator regarding their personal data being processed, or to request the correction or deletion of their personal data.

4. Obligation of the Data Subject:

The data subject is obliged to provide accurate and up-to-date personal data. The rights of the data subject are governed by Chapter 3 of the GDPR. The data subject has the right to: file a complaint with the supervisory authority, object to processing, request access to personal data concerning them, request correction or deletion, restrict processing, and the right to data portability.

---

Information on the Rights of the Data Subject

The data subject has the right, on written request to the operator, to demand:

a. confirmation of whether or not personal data concerning them are being processed,

b. information in an easily understandable form on the processing of personal data in the information system, including: operator and processor identification (if appointed); purpose of processing; list or scope of processed personal data; whether providing personal data is voluntary or mandatory; validity period of consent or legal obligation to provide personal data; third parties to whom data may be disclosed; recipients; form of publication if personal data are to be published; third countries if data transfer occurs,

c. in an easily understandable form, the exact source from which the operator obtained their personal data,

d. an easily understandable list of personal data processed about them,

e. correction or deletion of incorrect, incomplete, or outdated personal data,

f. deletion of personal data whose processing purpose has expired; for official documents containing personal data, return may be requested,

g. deletion of personal data processed unlawfully,

h. blocking of personal data due to withdrawal of consent before the end of its validity if the operator processes data based on consent.

Requests regarding personal data breaches or other significant issues related to personal data processing may be addressed to the operator at the above address, phone number 0910 946793, or email info@bat-man.sk

Right of Access to Personal Data

The data subject has the right to obtain confirmation from the operator whether their personal data are being processed. If personal data are processed, the data subject has the right to access information about the purpose, category of data, recipients, including third-country recipients, retention period, and, if applicable, the source of the data. The data subject has the right to request correction, deletion, or restriction of data, and to object to processing, including automated decision-making and profiling.

---

Right to Correct Personal Data

The data subject has the right to have the operator correct inaccurate personal data without undue delay and to complete incomplete personal data.

---

Right to Object to Processing

The data subject may object to the processing of their personal data if processing is based on legitimate interest or for profiling. Objections to personal data processing for direct marketing purposes, including profiling, must be respected by the operator.

---

Right to Erasure (Right to be Forgotten)

The data subject may request deletion of personal data if:

a. the data are no longer necessary for processing purposes,
b. consent is withdrawn and no other legal basis exists,
c. objection to processing is upheld,
d. data are processed unlawfully,
e. deletion is required to comply with a legal obligation,
f. data were collected in relation to offering information society services to a child.

Exceptions include data necessary for: freedom of expression, legal obligations, public interest in health, archiving, scientific, historical, or statistical purposes, or legal claims.

---

Right to Restrict Processing

The data subject may request restriction of processing when:

a. they contest accuracy,
b. processing is unlawful,
c. the operator no longer needs the data, but they are required by the data subject,
d. an objection to processing is filed.

---

Right to Data Portability

The data subject may receive personal data in a structured, commonly used, machine-readable format and transfer it to another operator if technically feasible.

---

Right to Lodge a Complaint

If the data subject considers their rights violated, they may lodge a complaint with the Slovak Personal Data Protection Office (Hraničná 12, 820 07 Bratislava 27, Slovakia) or via its website www.dataprotection.gov.sk.

---

Processing of Personal Data for Order Fulfillment

• Purpose: issuing tax documents, contacting customers, fulfilling contracts, handling warranty claims.

• Legal basis: processing of personal data (name, surname, title, address, ZIP code, city) is required by law (Act No. 222/2004 Coll. on VAT); processing of email and phone number is necessary to fulfill the contract.

• Retention: order data – 10 years, registration data – 5 years.

---

Processing of Personal Data for Marketing

• Purpose: sending marketing information

• Legal basis: Art. 6(1)(a) GDPR – consent of the data subject

• Retention: 5 years

---

Processing of Personal Data for Cookies

• Purpose: services, ad personalization, traffic analysis, chat support, online payments, analytics, etc.

• Legal basis: Art. 6(1)(a) GDPR – consent

• Retention: session cookies are temporary; persistent cookies remain until manually deleted or expired.

---

Automated Decision-Making and Profiling

The data subject has the right not to be subject to decisions based solely on automated processing, including profiling, with legal or similarly significant effects.

---

Cookie Types and Usage:

---

Google Ads and Remarketing

The operator uses Google AdWords for targeted ads and remarketing. Cookies for remarketing can be disabled via browser settings.

---

Social Media (Facebook & Instagram)

The operator maintains a presence on Facebook and Instagram. Data sharing requires prior consent. Activities include sharing content, promotions, and photos. Data processing follows social media policies.