under Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (the “Regulation”), intended for you as the so-called data subjects whose personal data we collect and process as the so-called controller.
Controller, contact details
The controller is Man Revolution, s.r.o., with its registered office at Mickiewiczova 2, 811 07 Bratislava – Staré Mesto, Company ID No.: 50485598, registered in the Commercial Register of the District Court Bratislava I, Section: Sro, File No.: 148711/B (the “Controller”).
Personal data subject to processing
We process the following categories of your personal data:
identification data (for example, first name, surname)
contact data (for example, delivery address, billing address, email address, telephone number)
demographic data (for example, gender, date of birth)
payment data relating to your orders (for example, a list of purchased goods, preferred method of delivery, preferred method of payment, data relating to product complaints)
your account settings and use of the functionalities of our website (for example, password, list of favourite products, newsletter subscription, sold-out product tracking, ratings and reviews)
data about your behaviour on our website (for example, date and time of access, information about your internet browser, IP address, operating system)
information obtained through cookies
Purposes and legal bases for the processing of personal data
We generally process your personal data for the following purposes and on the following legal bases:
Purpose of processing
Legal basis for processing
Processing your order and/or performance of the contract concluded between you and the Controller
- processing is necessary for the performance of a contract concluded between you and the Controller or in order to take steps prior to entering into a contract at your request (pre-contractual relations) within the meaning of Article 6(1)(b) of the Regulation
Consumer competitions
- processing is carried out on the basis of your consent to the processing of personal data within the meaning of Article 6(1)(a) of the Regulation
Marketing promotion and communication
- processing is necessary for the purposes of the legitimate interests pursued by the Controller within the meaning of Article 6(1)(f) of the Regulation
- in justified cases, for example, if you have not previously ordered any goods from us and are not a registered user, processing is carried out on the basis of your consent to the processing of personal data within the meaning of Article 6(1)(a) of the Regulation
User settings and functionalities of our website
- processing is necessary for the purposes of the legitimate interests pursued by the Controller within the meaning of Article 6(1)(f) of the Regulation
- in justified cases, processing is carried out on the basis of your consent to the processing of personal data within the meaning of Article 6(1)(a) of the Regulation
Compliance with obligations arising from legal regulations
- processing is necessary for compliance with the legal obligations of the Controller within the meaning of Article 6(1)(c) of the Regulation
Establishing, exercising and defending legal claims
- processing is necessary for the purposes of the legitimate interests pursued by the Controller within the meaning of Article 6(1)(f) of the Regulation
Legitimate interests
The legitimate interests of the Controller or of a third party in processing your personal data generally consist in using personal data for the purposes of marketing communication, promotion and presentation of the Controller and the goods it offers, enabling you to use the functionalities of your account and the Controller’s website, and establishing, enforcing or defending the rights, legitimate interests and claims of the Controller or third parties.
Retention period of personal data
The retention period of personal data varies depending on the purpose and legal basis for the processing of your personal data. In general, the Controller retains your personal data for the following periods:
if personal data are processed for the purpose of complying with a legal obligation – for the period required by the applicable law
if personal data are processed for the performance of a contract – for the duration of the contract (including pre-contractual negotiations) and for the period during which rights and claims arising from or related to the contract may be established, exercised or defended
if personal data are processed on the basis of the legitimate interests pursued by the Controller or a third party – for the duration of the relevant legitimate interest and for the period during which rights and claims arising from or related to that legitimate interest may be established, exercised or defended
if personal data are processed on the basis of consent – for the period for which consent was granted or until such consent is withdrawn
Recipients of personal data
We do not disclose your personal data to third parties except where you have granted consent to the disclosure of your personal data to a third party or where another legal basis exists for the disclosure of your personal data to a third party, for example where disclosure is required to comply with a legal obligation of the Controller, where disclosure is necessary for the performance of a contract with the data subject, or where disclosure is necessary for the protection of the legitimate interests of the Controller, such as establishing, enforcing or defending the Controller’s legal claims.
In the above cases, the personal data of the data subject may in particular be disclosed to the following recipients or categories of recipients:
contractual partners (for example, suppliers of goods, service providers)
processors who process personal data on behalf of the Controller
joint controllers who process personal data together with the Controller (for example, Facebook Ireland Limited or Google Ireland Limited)
courts, state administration and local government authorities, public institutions, law enforcement authorities, tax authorities, customs authorities and financial administration bodies, notarial offices, bailiff offices
supervisory and regulatory authorities
Transfer of personal data to third countries
As part of the processing of your personal data, your personal data are not transferred to third countries outside the European Union or to international organisations.
Your rights in connection with the processing of personal data
Right of access to data
The data subject has the right to obtain confirmation from the Controller as to whether personal data concerning them are being processed and, if so, the right to obtain access to those personal data and additional information arising from Article 15 of the Regulation.
Right to rectification
The data subject has the right to request that the Controller correct inaccurate personal data concerning them without undue delay and/or that their personal data be completed.
Right to erasure of personal data
The data subject has the right to request that the Controller erase their personal data without undue delay where the conditions set out in Article 17 of the Regulation are met (for example, the purpose for which the personal data were processed no longer exists; consent to the processing of personal data has been withdrawn and no other legal basis for the processing of personal data exists).
Right to restriction of the processing of personal data
The data subject has the right to request restriction of the processing of their personal data where the conditions set out in Article 18 of the Regulation are met (for example, the data subject contests the accuracy of the personal data; the processing of personal data would be unlawful; the Controller no longer needs the personal data for processing purposes, but the data subject requires them for the establishment, exercise or defence of legal claims).
Right to object to the processing of personal data
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data carried out by the Controller for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller, or where the processing is based on the legitimate interests of the Controller or of a third party, including objecting to profiling related to such processing. The data subject also has the right to object to the processing of personal data for direct marketing purposes, including profiling to the extent that it is related to such direct marketing.
Right to data portability
The data subject has the right to obtain from the Controller the personal data they have provided to the Controller in a structured, commonly used and machine-readable format. The data subject has the right to transmit those personal data to another controller without hindrance from the Controller. Such portability of personal data is possible where the personal data of the data subject have been processed on the basis of consent or on the basis of a contract, and where the processing is carried out by automated means. Where technically feasible, the data subject has the right to have the personal data transmitted directly from one controller (from the Controller) to another controller.
Right to withdraw consent to processing
Where personal data are processed on the basis of the data subject’s consent, the data subject is entitled to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of the processing of the data subject’s personal data prior to such withdrawal.
Exercising your rights vis-à-vis the Controller
If the data subject decides to exercise any of the above rights vis-à-vis the Controller in connection with the processing of their personal data, they may do so in writing at the address of the Controller’s registered office or electronically at: it@begentleman.sk
Right to lodge a complaint with a supervisory authority
The data subject has the right to lodge a complaint with the supervisory authority competent to supervise the processing of personal data. In the Slovak Republic, this authority is the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 4826/12, 820 07 Bratislava.
Obligation/voluntary provision of personal data
If the Controller processes your personal data for the purpose of complying with a legal obligation, you are obliged to provide such data to the Controller.
If the provision of personal data is a contractual requirement or a requirement necessary for entering into a contract between you and the Controller, the provision of personal data is voluntary.
If you refuse to provide the Controller with personal data required under legal regulations or personal data necessary for the conclusion and performance of a contract or for carrying out the requested action, the Controller has the right to refuse to enter into a contractual relationship with you or to perform the requested action.
Automated decision-making/profiling
The Controller does not use decision-making based on automated processing of your personal data, including profiling, which would have legal effects concerning you or otherwise significantly affect you.
Sources of personal data
The Controller obtains personal data primarily from you as the data subjects (directly or through processors who process personal data on behalf of and in accordance with the Controller’s instructions). The Controller may also obtain your personal data from publicly available sources and registers, or from third parties, mainly in connection with the conclusion or performance of a contract with the Controller.
Cookies
What are cookies?
Cookies are small encrypted text files that are stored on your computer or on another device you use when visiting websites. Cookies are sent and stored through websites in your browser. When you visit the website again, your browser sends the cookies back to our website so that your device can be recognised and the website can therefore be adapted to your preferences.
What cookies do we use?
In addition to ensuring the basic functionality of our website, the cookies we use enable us in particular to recognise you when logging into the user environment, remember your previous selection when opening a new window, especially the contents of your shopping cart, measure traffic on our website and analyse how it is used, connect you to social networks, including automatic login to social networks, and adapt the content of our advertising displayed on the websites and social networks of third parties.
Specifically, we use the following cookies:
Essential cookies. These are necessary for the functioning of our website. Your consent is not required for the use of these cookies.
Functional cookies. These are important, although not essential, for the functioning of our website. Your consent is required for the use of these cookies. If consent is not granted, our website may not function properly.
Performance cookies. These cookies allow us to measure and continuously improve the performance of our website and thus provide you with the most relevant content possible. Your consent is required for the use of these cookies.
Marketing cookies. These cookies help us target you specifically and thus provide you with the most relevant advertising possible. Your consent is required for the use of these cookies.
Third-party cookies. Through our website, cookies of the operators of marketing tools used on our website may be stored on your device, and we may share with those operators information obtained through such cookies. Cookies used by third parties and the way in which data obtained through them are used are governed by the privacy policies of the respective third parties. You grant consent to the use of these cookies on our website.
Our website also uses advertising and affiliate systems for marketing purposes provided through [Facebook, Heureka, Google AdWords, …]. If you click on a link or banner on the website of one of our advertising or affiliate partners, such link will direct you to our website and store cookies on your device that recognise that you arrived at our website via that affiliate partner. You grant consent to the use of these cookies on the website of our affiliate partner.
In addition, our website also uses so-called social plugins, which are identified on our website by logos. When you visit our website, your browser establishes a direct connection to the servers on which these plugins are operated. The content of the plugins is transferred directly to your browser and then integrated into our website. The integration of plugins causes the social plugin to receive information that you have made available on our website. If you are logged in to social networks, it will be possible to assign your visit to your account on those social networks. If you do not want social networks to collect data about you through our website, you must log out of social networks before visiting our website.
How can you grant or withdraw consent to the use of cookies?
When you visit our website, we inform you about the use of cookies through a banner placed at the bottom of our website. By adjusting your web browser settings, you may at any time grant or withdraw consent already given to the use of cookies – pursuant to Section 55(5) of Act No. 351/2011 Coll. on Electronic Communications, the settings of your web browser are deemed to constitute consent to the use of cookies.
You may also configure your web browser to block the storage of cookies on your device. It is also possible to block or allow the storage of cookies only for certain websites. Cookies that are already stored on your device may then be deleted at any time.
Specific guidance for the most commonly used web browsers can be found here:
Chrome
Safari
Mozilla
Internet Explorer
Android
Changes to this notice, current version
The Controller may from time to time amend or update this information on the processing of personal data, in particular for the purpose of bringing it into line with changes in applicable legal regulations or reflecting changes in the purposes, legal bases or means of processing personal data. The current version of this information (including any amendments made) is available on the Controller’s website at www.begentleman.sk, as well as in paper form at the address of the Controller’s registered office.