Privacy policy

Privacy policy

 

Updated on 23.10.2025

 

“We process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (the “GDPR“), which is binding on all Member States of the European Union, as well as Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Supplements to Certain Acts (the “Act“).

 

We hereby inform you about the manner and conditions of processing your personal data, as well as about your rights related thereto.

 

1.              Identity and contact details of the controller

 

The purposes and means of processing your personal data for the Eterno Stile e-shop administration are determined by the controller Soňa Brissoni - ETERNO STILE, with its registered office at: 840, Veľký Lapáš 951 04, ID No.: 56 579 390, register by Municipal Office Nitra in trade register under ID No. 430-70024, email address: info@eternostile.sk.

 

2.              Purpose and legal basis for processing personal data

 

We process your personal data only for specific purposes listed below, ensuring that there is an appropriate legal basis for each processing operation and that the processing of your personal data is lawful.

 

AREA	PURPOSE	LEGAL BASIS	RETENTION PERIOD
Subscription to newsletter/news updates	Sending newsletters/news updates	Art. 6 (1)(a) GDPR: the data subject has given consent to the processing of personal data	For the duration of consent, but no longer than 3 years
Direct marketing   You have the right to object to the processing of your personal data for direct marketing purposes at any time (see the rights of the data subject below).	Offering own similar goods and services to persons whose personal data the controller has obtained in connection with the sale of goods or services (existing customers).	Art. 6 (1)(f) GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.   The legitimate interest is the controller's interest in increasing the sales of products in its portfolio and developing its business activities by offering its own similar products via email to persons whose personal data was obtained in connection with the previous provision of products.	For 3 years after the termination of the contractual relationship
General contact form	Handling requests and/or answering questions of the data subject or a third party who filled out and submitted the form	Art. 6 (1)(b) GDPR: processing is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract	For 4 years after the termination of the contractual relationship
Unsubscribe form	Unsubscribing from newsletters	Art. 6 (1)(c) GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject	For 5 years after receiving the unsubscription
Chat	Handling requests and/or answering questions of the data subject or a third party via chat	Art. 6 (1)(b) GDPR: processing is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract	For 4 years after the termination of the contractual relationship
Pre-contractual relationships	Communication with potential or existing customers regarding the possibility and conditions of delivery of performance by the controller, in particular negotiations regarding contractual terms and conditions	Art. 6 (1)(b) GDPR: processing is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract	For 4 years after the termination of the contractual relationship
Conclusion of the contract	Preparation of the contract text or confirmation of the customer's order if no written contract is concluded, registration of the performance request in the internal system for the purpose of proper and timely performance of the contract with the customer. Securing the payment gateway, packaging, and delivery.	Art. 6 (1)(b) GDPR: processing is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract	For 4 years after the termination of the contractual relationship
Termination of contractual relationships	Termination of the contractual relationship by proper and timely delivery of performance, or by other means (withdrawal, termination, agreement, etc.), actions related to the termination of the contractual relationship	Art. 6 (1)(b) GDPR: processing is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract	For 4 years after the termination of the contractual relationship
Statutory representatives and other contact persons in contractual relationships	Ensuring communication with customers, or the performance of contracts, through statutory representatives and other contact persons.	Article 6(1)(f) of the GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party   The legitimate interest is specified in the contractual relationship with the supplier, where, in connection with the performance of the contract, the personal data of persons who are not parties to the contract (e.g., statutory body, authorized employee) are processed.	For 4 years after the termination of the contractual relationship
Legal relations	Monitoring compliance with legal regulations, providing legal advice, enforcing legal claims, defending against third-party claims.	Article 6(1)(f) GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party   The legitimate interest is interest to ensure compliance with applicable legal regulations, to protect and enforce our legal rights and claims, to obtain necessary legal advice for the proper conduct of our business, and to defend ourselves against potential claims from third parties   and                                                  Article 6(1)(c) GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject	For the period necessary to achieve the purpose, for a maximum of 10 years from the date of the decisive event (e.g., unjust enrichment in bad faith)
User account	Creating a user account for the purpose of administering client orders and communicating with us.	Art. 6 (1)(b) GDPR: processing is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract	For 4 years after the termination of the contractual relationship
Articles, advertising and marketing materials	Preparation and possible publication of articles, blogs, and other advertising and marketing materials that may contain personal data of the author, third parties (in the case of references or other statements), and their physical appearance (photographs, image or audio-visual recordings).	Article 6(1)(a) of the GDPR: the data subject has given consent to the processing of personal data or                                   Article 6(1)(b) of the GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract	For a period of 3 years from the granting of consent and for a period of 4 years after the termination of the contractual relationship
Security and fraud protection	Authenticating and verifying access to your account so that we can ensure secure payment and purchase, detect, investigate, or take action regarding potential fraudulent, illegal, dangerous, or harmful activity, and secure our services.	Article 6(1)(f) GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party   Our legitimate interest is to protect our services and users from fraudulent or illegal activity, to enable the proper functioning and security of payment transactions, to prevent account abuse, and to ensure the integrity of our systems.	For 4 years after the termination of the contractual relationship
Data protection	Handling inquiries, requests, security incidents, and fulfilling obligations under the GDPR and the Act.	Article 6(1)(c) of the GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject	For a period of 5 years after the decisive event (e.g., after the data subject's request has been processed)
Cookies - essential cookies	Cookies enabling the basic functionality of the website.	Article 6(1)(f) of the GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party   The legitimate interest is the controller's interest in the proper operation of the website https://eternostile.sk/ and ensuring its basic functionality.	For the period set by the data subject in their web browser
Cookies - non-essential cookies	Remembering user settings. Better tailoring of the website to the interests of the persons concerned and the functionality of the website, creating statistics. Use of Google Analytics, Google Adwords, and Facebook Pixel.	Article 6(1)(a) of the GDPR: the data subject has given consent to the processing of personal data	For the period set by the data subject in their web browser

 

3.              Recipients or categories of recipients

 

We protect personal data and do not disclose or provide it to third parties or entities, with the exception of persons who provide us with marketing and advertising services, persons providing cloud services, IT service providers, accountants, lawyers, and other consultants, persons who help us process, pack, and deliver orders, and persons who process payments for us. If personal data is disclosed for the purpose of its processing, the recipients are all persons who have visited our website and the Controller's social networks. If such an obligation arises from the law or a decision of a public authority, your personal data will also be provided to public authorities or other entities.

 

4.              Transfer to third countries or international organizations

 

For these purposes, your personal data will not be transferred to third countries and/or international organizations. If such a transfer occurs, we will do so expressly on the basis of a European Commission adequacy decision or, where applicable, using other safeguards provided for in the GDPR to ensure that your personal data remains secure.

 

5.              Retention periods

 

We only store your personal data for as long as is necessary for the purposes for which it is processed, with these periods being specified in section 2 of this privacy policy. For example, for the purposes of subscribing to a newsletter, for a period of three (3) years, or for the period specified by generally binding legal regulations, with the 3-year period beginning on the first day of the calendar year following the year in which the personal data was obtained; in the case of cookies, we only store data for the period for which you have set the storage of cookies in your web browser. After the expiry of the personal data retention period, we ensure their deletion or anonymization, in full compliance with the GDPR.

 

6.              Data subject rights

 

As a data subject, you have several rights under the GDPR, which we would like to draw your attention to, namely:

 

Right of access to personal data

You have the right to request confirmation from us as to whether we are processing personal data concerning you and, if we are, you have the right to access that personal data and to obtain basic information about the processing of your personal data.

 

Right to rectification and/or completion of personal data

You have the right to request that we rectify inaccurate personal data concerning you without undue delay, as well as the right to have incomplete personal data completed.

 

Right to erasure of personal data

You have the right to request the immediate erasure of your personal data only if:

·       the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

·       you withdraw your consent on which the processing is based and there is no other legal ground for the processing;

·       you object to the processing and there are no overriding legitimate grounds for the processing;

·       the personal data have been unlawfully processed;

·       the personal data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State to which we are subject;

·       the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

For this purpose, you may contact us at any time. We will then assess whether in your case there are exceptions where erasure is not required, even if one of the above conditions is met (e.g. where the data are necessary for the establishment, exercise or defense of legal claims).

 

Right to restriction of processing of personal data

You have the right to request that we restrict the processing of your data (i.e. we will only store your data without otherwise processing it) if:

·       you have contested the accuracy of the personal data;

·       the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

·       we no longer need your personal data for the purposes of processing, but you require them for the establishment, exercise or defense of legal claims;

·       you have objected to the processing.

For this purpose, you may contact us at any time. We will then assess whether in your case there are exceptionsallowing your personal data to be processed in ways other than mere storage.

 

Right to object to the processing of personal data

You have the right to object to the processing of your personal data if the processing is necessary for the purposes of the legitimate interests pursued by us or a third party, except in cases where such interests are overridden by your interests, rights, and freedoms that require the protection of personal data, particularly if the data subject is a child. We may only continue to process your personal data if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. You have the right to object at any time to the processing of your personal data for direct marketing purposes (!).

 

Right to data portability

If the processing of your personal data is carried out by automated means, based on your consent or for the performance of a contract, you have the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit these data to another controller, provided that it is technically feasible.

 

Right to withdraw consent to the processing of personal data at any time

Finally, you have the right to withdraw your consent to the processing of your personal data at any time, if you have previously given such consent, by sending a withdrawal to the contact details provided in Section 1. The withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal.

 

Right to file a complaint with a supervisory authority

We also inform you that if you believe that the rights of individuals regarding the processing of your personal data have been violated or that the GDPR has been breached, you may submit a compaint to initiate proceedings for the protection of personal data to the Office for Personal Data Protection of the Slovak Republic. (A template for the complaint is available on the website of the Office for Personal Data Protection of the Slovak Republic: www.dataprotection.gov.sk).

 

7.              Requirement to provide personal data

 

Providing your personal data is voluntary. However, if your personal data are required, for example, to make a certain service or information available (e.g., responding to a request on social media, concluding a contract), and you do not provide them, we will not be able to properly fulfill the related obligations.

 

8.              Cookies

 

To improve our services and the functionality of our website, we use cookies. Cookies are small text files stored on your computer or mobile device that contain information about your activities on the website, whilst this information is then sent back to the website server on your next visit.

 

Cookies are useful, among other things, for:

 

• ensuring the proper functionality of the website,
• identifying which web pages and features you use most often so we can tailor our offerings to your needs and interests.

 

The cookies we use can be categorized by duration into two (2) types:

 

• Session cookies (short-term) – remain in your browser only until you close it.
• Persistent cookies (long-term) – remain stored even after you close your browser.

 

The storage duration of cookies can be adjusted according to your preferences, as it depends on the cookie settings and your browser.

 

• Essential cookies – necessary for the website to function properly, for example, to ensure fast and correct loading of the website.
• Non-essential cookies – not strictly necessary, e.g., analytical cookies that collect data to tailor advertising, track visitor activity, etc.

 

Our website uses both types of cookies. For non-essential cookies, we require your consent to use them. You can disable essential cookies either specifically for this website or for all websites via your browser settings. However, some features may no longer function properly if essential cookies are disabled. In detail, we are processing the following cookies:

 

Required
Cookie	Purpose	Retention	Consent
_merchant_essential	This cookie contains essential information for the correct functionality of merchant surfaces such as the admin area.	This is a long-term cookie that remains stored even after closing the browser for a period of 1 year.	No
_shopify_essential	This cookie contains essential information for the correct functionality of a store such as session and checkout information and anti-tampering data.	This is a long-term cookie that remains stored even after closing the browser for a period of 1 year.	No
_shopify_essential_	This cookie contains an opaque token that is used to identify a device for all essential purposes.	This is a long-term cookie that remains stored even after closing the browser for a period of 1 year.	No
keep_alive	This cookie is used when international domain redirection is enabled to determine if a request is the first one of a session.	This in a short term cookies that remain in your browser only until you close your browser	No
Datr	This is a Facebook cookie to provide fraud prevention.	This is a long-term cookie that remains stored even after closing the browser for a period of 10 months.	No
dpr	This Facebook for recording the device pixel ratio of your screen and whether or not you’ve enabled high-contrast mode, so that we can render our sites optimally.	This is a long-term cookie that remains stored even after closing the browser for a period of 7 days.	No
wd	This is a Facebook cookie to read screen resolution.	This is a long-term cookie that remains stored even after closing the browser for a period of 3 days.	No
__cf_bm	This cookie is used to to read and filter requests from bots.	This is a long-term cookie that remains stored even after closing the browser for a period of 30 min.	No
Personalization
Cookie	Purpose	Retention	Consent
cart	This cookie contains information related to the user's cart.	This is a long-term cookie that remains stored even after closing the browser for a period of 2 weeks.	Yes, we need your consent before storing this cookie on your computer or mobile device
localization	This cookie is used to localize the cart to the correct country.	This is a long-term cookie that remains stored even after closing the browser for a period of 2 weeks.	Yes, we need your consent before storing this cookie on your computer or mobile device
Marketing
Cookie	Purpose	Retention	Consent
_fbp	This is a Facebook cookie that tracks a user’s visits across different websites and reports that behavior to Facebook. Facebook can then use the data it collects to understand that user better and show better, more relevant advertising.	This is a long-term cookie that remains stored even after closing the browser for a period of 3 months.	Yes, we need your consent before storing this cookie on your computer or mobile device
fr	This is a Facebook cookie to provide ad delivery or retargeting.	This is a long-term cookie that remains stored even after closing the browser for a period of 3 months.	Yes, we need your consent before storing this cookie on your computer or mobile device
Oo	This is a Facebook cookie to help to disable the display of ads from Meta based on your activity on third-party websites	This is a long-term cookie that remains stored even after closing the browser for a period of 1 month.	Yes, we need your consent before storing this cookie on your computer or mobile device
presence	This is a Facebook cookie to support your use of Messenger windows	This in a short term cookies that remain in your browser only until you close your browser	Yes, we need your consent before storing this cookie on your computer or mobile device
Sb	This is a Facebook cookie to store browser details	This is a long-term cookie that remains stored even after closing the browser for a period of 10 months.	Yes, we need your consent before storing this cookie on your computer or mobile device
xs	This is a Facebook cookie to store a unique session ID.	This is a long-term cookie that remains stored even after closing the browser for a period of 1 year.	Yes, we need your consent before storing this cookie on your computer or mobile device
Analytics
Cookie	Purpose	Retention	Consent
_ga	This cookie registers a specific ID that is used to generate statistical data about how a visitor uses the website.	This is a long-term cookie that remains stored even after closing the browser for a period of 13 months.	Yes, we need your consent before storing this cookie on your computer or mobile device
_shopify_analytics	This cookie contains analytics data for buyer surfaces such as the storefront or checkout.	This is a long-term cookie that remains stored even after closing the browser for a period of 1 year.	Yes, we need your consent before storing this cookie on your computer or mobile device
_shopify_s	This cookie is used to identify a given browser session/shop combination.	This is a long-term cookie that remains stored even after closing the browser for a period of 30 min.	Yes, we need your consent before storing this cookie on your computer or mobile device
_shopify_y	This cookie is used for Shopify analytics	This is a long-term cookie that remains stored even after closing the browser for a period of 1 year.	Yes, we need your consent before storing this cookie on your computer or mobile device
is_shopify_merchant	This cookie is used to determine if a user is a Shopify merchant.	This is a long-term cookie that remains stored even after closing the browser for a period of 1 year.	Yes, we need your consent before storing this cookie on your computer or mobile device

 

 

9.              Google-Analytics a Google Adwords

 

In addition to the above, we may use Google Analytics and Google Ads—web analytics services provided by Google Ireland Limited (“Google”), a company incorporated and operating under Irish law (registration number 368047), with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics and Google Ads use cookies, i.e., data files stored on your computer, which allow the analysis of your use of our website.

 

Information about your use of this website collected via cookies is generally transmitted to Google’s servers and stored there. Only in exceptional cases is the full IP address transmitted to Google’s server. Upon our request, Google uses this information to evaluate your website usage, compile reports for us on website activity, and provide services related to website use. More information about how Google processes your personal data is available at: https://policies.google.com/technologies/ads?hl=en.

 

Your consent is required to use these cookies.

 

10.           Facebook a Instagram

 

Our website may include social plugins from Meta Platforms Ireland Limited, which you can recognize by the Facebook or Instagram logos displayed on the site. An overview of all Facebook plugins can be found here: http://developers.facebook.com/docs/plugins/

 

During your visit to our website, this plugin establishes a direct connection between your browser and Facebook’s servers, through which Facebook receives information that someone from your IP address is accessing our website. If you are logged into your Facebook or Instagram account and click the Facebook or Instagram logo on the website, you allow a connection with your Facebook profile. Facebook can then associate your website visit with your user account. More detailed information can be found in Facebook’s data protection policy: https://sk-sk.facebook.com/privacy/explanation.

 

Your consent is required to use these cookies. If you do not want Facebook to associate visits to our website with your Facebook user account, please log out of your Facebook account.

 

11.           Shopify

 

The e-shop services, such as content, features, information, tools, products, or services (the "Services") are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve its services to you. The information you enter into the Services will be sent to and shared with Shopify, as well as third parties that may be located in countries other than your country of residence, in order to provide and improve the Services to you. In addition, to help protect, develop, and improve our business, we use certain enhanced features of Shopify that include data and information obtained from your interactions with our store, along with other merchants and Shopify. To provide these enhanced features, Shopify may use personal information collected about your interactions with our store, along with other merchants and Shopify. In these circumstances, Shopify is responsible for processing your personal information, including responding to your requests to exercise your rights regarding the use of your personal information for these purposes. To learn more about how Shopify uses your personal information and what rights you have, you can visit Shopify's Consumer Privacy Policy . Depending on where you live, you may be able to exercise certain rights regarding your personal information here: Shopify's Privacy Portal.

 

12.           Third party pages

 

Our e-shop may contain links to websites or other online platforms operated by third parties. If you click on links to sites that are not affiliated with or controlled by us, you should read their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of the information contained on such sites. Information you provide in public or semi-public areas, including information you share on third-party social networking sites, may also be visible to other users of the e-shop and/or users of these third-party platforms without restriction on their use by us or any third party. The inclusion of such links does not in itself imply any endorsement of the content of these platforms or their owners or controllers, except as provided in these terms and conditions.