Privacy

The protection of our customers’ privacy in processing of personal data is of utmost importance to us. We process your personal data in compliance with applicable legislation and ensure their protection to the greatest extent possible. All visitors of our website who are in contact with us as clients provided their personal data to us in this context. This web page will give you all the necessary information concerning personal data processing.

This Memorandum on Personal Data Protection (hereinafter referred to as “Memorandum”) will provide you with information on how we handle your personal data, how you can contact us to exercise your rights or to ask questions regarding the processing of your personal data at info@merchyou.com. The Memorandum is an integral part of the General Business Conditions of MERCHYOU s.r.o.

We recommend that you carefully read the information contained within this Memorandum. Changes in the conditions of personal data protection are published on our website www.merchyou.com in the form of an update. This allows us to make sure that you have up-to-date information about the terms under which we process your personal data.

1. About us

Our website www.merchyou.com allows you, as our customer, to order printing on textiles. We are obliged to process your personal data in connection with the purchase and sale of our products.

We process your personal data in compliance with the legislation of the Slovak Republic, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or GDPR), Act No. 18/2018 on the protection of personal data, as well as other legislation.

The controller of the information systems used to process your personal data is MERCHYOU s.r.o., with its registered office in Prešovská 45, 821 02 Bratislava, Company ID: 44307110, registered in the Business Register of the Bratislava I District Court, Section: Sro, Record No.: 53702/B.

2. What kinds of your data do we process?

Personal data refer to any data which enable the identification of a specific natural person. Thus, personal data include not only the well-known identifiers such as first name, surname or date of birth. In fact, GDPR defines personal data as any information allowing the identification of a natural person. Each natural person the personal data relate to is considered to be the data subject having the respective rights to the personal data.

MERCHYOU s.r.o. only processes personal data required to provide you with professional services, while the scope of such personal data is determined by generally binding legal regulations. In case we process your personal data based on your consent, the list and/or scope of data is specified in the consent itself in the extent necessary to achieve the purpose for which the personal data are processed.

The processed data mainly include the following categories of personal data:

Billing details: first name, surname, billing address, e-mail address, telephone number, delivery address
Registration data: data collected during the purchase of products on www.merchyou.com or during registration
Transaction data: data on received and sent payments
Marketing data: first name and surname, date of birth, address, IP address, e-mail address, telephone number

3. Why do we need your personal data?

We process your personal data to the extent necessary while most of the processing is justified by the fact that the data are needed to supply the purchased product.

3.1. We fulfil our obligations arising from applicable legislation.

We are obliged to identify you during your purchase of goods and when you place an order under your name.
For payment transactions, we are obliged to provide information to the receiving and the sending payment institution.
We are obliged to perform our activities with caution and respect your rights as the consumer in compliance with Act No. 102/2014 on the protection of consumers in sale of goods or provision of services under remote contracts or contracts executed outside the business premises.
We are also obliged to respond to the requests of courts, bailiffs, law enforcement authorities and other competent authorities especially in connection with criminal and court proceedings pursuant to the Code of Criminal Procedure or the Code of Civil Procedure.

We process your data in these cases because we are obliged to do so according to relevant law under which we act. This includes, for instance, Act No. 102/2014 on the protection of consumers in sale of goods or provision of services under remote contracts or contracts executed outside the business premises.

3.2. We assess the possibility of supplying our products

Before a contract for a specific product is concluded, it is necessary for us to process certain data with the aim of fulfilling your order.

4. What purpose do we process your data for?

We process your data only to the extent necessary for the relevant purpose. Most of our processing operations is justified by the fact that we need your personal data to supply the product you requested. For this reason, we collect the data for the purpose of concluding and performing our contractual relationship from you. Thus, it is important that you provide us with complete, correct, up-to-date and true personal data.

We at MERCHYOU s.r.o. process your personal data for various purposes, in particular for purposes that fall into these categories:

identification of customers and verification of their identification
concluding and performing contractual relationships (the sale of goods)
registration of customers
fulfilling obligations that arise for MERCHYOU s.r.o. from specific legislation (complaints)
marketing purposes

5. We protect your data

MERCHYOU s.r.o. has rules in place that lay down the conditions under which our employees or other authorised persons have access to your personal data and which personal data they may process. The personal data of data subjects are not made accessible outside MERCHYOU s.r.o. except for cases when applicable legislation authorises us to do so (e.g. if we are asked by the police or the tax authority).

We process personal data using manual as well as automated means of processing in our information systems, which are secured and protected in compliance with relevant safety standards and regulations on the protection of personal data.

The authorisation of employees to process personal data on behalf of MERCHYOU s.r.o. arises from their employment relationship with MERCHYOU s.r.o. as well as from generally binding legal regulations. Our employees have regulated access authorisations to individual systems used to process our clients’ personal data.

When processing your data, we are obliged to fulfil certain obligations. The most important obligations we follow are the following:

We process and collect your personal data only for clear and lawful purposes and only for the period until the purpose for which we collected such personal data has been achieved.
We do not interfere, knowingly and without authorisation, with your right to privacy.
We protect your personal data from loss, destruction and abuse.
All our employees are bound by the requirement to maintain confidentiality and they may not provide clients’ personal data to third parties.

6. Where do your personal data go (categories of recipients)

Your personal data are not made available to third parties, unless such personal data are provided to our processors, or such processing is based on your consent or relevant legal regulation. This means that your personal data can be made available or provided to other third parties or recipients, if we are obliged to do so by law, a directly enforceable legally binding act of the European Union or an international treaty by which the Slovak Republic is bound.

7. What are your rights?

You have the right of access to your data

You have the right to require our confirmation as to whether we process your personal data and if we do, you have the right to access the data, as well as the following information:

identity and contact details of MERCHYOU s.r.o.
purpose of processing
categories of personal data
categories of the recipients of your data
personal data processing based on a legitimate interest
duration of the data processing
information about the source from which we acquired your data
information on the right to object, the right to erasure and the right to restrict personal data

You have the right to the rectification of your data

It can happen that some information we have about you is not or ceased to be correct. However, we naturally cannot do without your help. For this reason, it is important that you inform us about any change in your personal data without delay. As the data subject, you are also responsible for the personal data you provided to MERCHYOU s.r.o. being correct, up-to-date, complete and true.

As our customer, you have the right to have your incorrect and outdated data in our information systems rectified. Do not hesitate to contact us, if you learnt that we have incorrect or outdated information about you, especially with regard to the address for the delivery of purchased goods or other contact details.

You have the right to object to the processing of your data

If you disagree with the fact that we process your personal data in certain cases, you have the right to object to such processing. You have the right to object especially in cases when we process your personal data for the needs of a legitimate interest on our side.

If you do not wish that we use your personal data for direct marketing, you can change your marketing preferences so that we no longer use your data for this purpose.

You have the right to the restriction of the processing of your data

In some circumstances, there may be no further reason to continue processing your personal data or you may wish to restrict their erasure to exercise your legal claims.

You have the right to refuse fully automated processing of your data

MERCHYOU s.r.o. does not process personal data using fully automated methods that would have direct legal consequences for data subjects.

You have the right to the erasure of your data

If you believe that we process certain data about you unlawfully, you have the right to require that we erase the indicated data. If this is the case, it is necessary to prove the unlawfulness of the processing using relevant documents.

You have the right to the portability of your data

ou have the right to receive the personal data that you provided to us in an electronic and structured form. You have the right to request that we transmit your data to another entity, which must be clearly indicated in your request sent to info@merchyou.com together with the e-mail address of the third party and their telephone number needed to send a text message with the password to the file containing your personal data.

How do you exercise your rights connected to personal data*

You can exercise your rights concerning your personal data in MERCHYOU s.r.o. by sending a request to:

E-mail address: info@merchyou.com

Correspondence address: MERCHYOU s.r.o., with its registered office in Prešovská 45, 821 02 Bratislava

*Pursuant to GDPR, MERCHYOU s.r.o. reserves the right to require identifying information of the data subject so that it ensures sufficient identification of the requestor in the interest of protecting the rights of data subjects.

MERCHYOU s.r.o. must process the request within thirty days of its receipt. That period may be extended by two further months where necessary, considering the complexity and the number of the requests. MERCHYOU s.r.o. shall inform the requestor of any such extension within one month of receipt of the request, together with the reasons for the delay. In such case, the requestor shall be informed about the extension of the period in the form he or she chose for the delivery of the response to his or her request.

Information requested by the requestor in the request shall be provided free of charge. Should the request be obviously unjustified or inappropriate, especially because of its repeated nature, MERCHYOU s.r.o. has the right to either: (i) demand an appropriate payment considering the administrative costs for providing information, for the notification, or for adopting the requested measure, or (ii) refuse to act based on the request.

The right to lodge a complaint with the supervisory body

If you believe that your rights to personal data or the conditions of processing your data have been breached, you have the right to lodge a complaint with the supervisory body, i.e. the Office for Personal Data Protection of the Slovak Republic, with its registered address: Hraničná 12, 820 07 Bratislava.

8. What period do we process your personal data for?

We store and protect your personal data for the period defined in applicable legislation, or in case the data is processed based on your consent, for the period to which you agreed in your consent. The storage periods differ among different purposes for which the data is processed. This period is defined by adding a retention period after terminating the contractual relationship with the client of a duration not shorter than the law requires. We do not store data in our company for more than 15 years.

9. Processing your personal data based on your consent

We consider marketing activities for a suitable tool to inform you about new products, services or benefits we prepared for you.

In order to be able to prepare the most appropriate offer for you, we need to process your data. Using targeted offers, you will only get marketing information that can be interesting and beneficial for you. We don’t want to bother you with useless advertising and products which are not relevant for you. We believe that by knowing your marketing preferences we can provide better services and favourable products.

If you gave us your consent with processing your data for this purpose, we are entitled to inform you about the offer of our products, campaigns and competitions or the offer of our contractual partners in different forms, such as e-mail, telephone, text messages or directly in our shops. If you are not interested in getting information about our current offers through marketing, you can contact us to change your marketing preferences using the address: info@merchyou.com.

You can withdraw any consent you gave us to process your personal data at any time at info@merchyou.com.

You provide your personal data voluntarily. We cannot in any way force you to give us your consent to process your personal data and you have the right to refuse to provide your personal data.

10. Processing your personal data through our websites

When using our website www.merchyou.com (hereinafter referred to as “the Website”), you may be required to provide your personal data to access certain parts of the Website. Providing such data is required to access the Website or is necessary for the Website to work correctly, and so it is required that you give us your consent to process the personal data you provided.

11. Processing your personal data through cookies

We are entitled to collect data about the visitors and users of our Website and process them in other ways using tools for automated data collection, especially cookies, protocols and other commonly used tools for collecting information via a website.

The term ‘cookie’ represents a small amount of data that is sent to your computer (tablet, smart phone) in the form of a file from the website you are currently using. The file with data is saved in the computer, and any time you visit the same website in the future, the computer sends the information to our server.

Cookies are used by most websites, including ours. The purpose of cookies is to make the use of our websites easier and more pleasant for you. The cookie file will also allow the website to identify whether you have already visited in the past and which section you were interested in. At the same time, cookies allow you to save your user settings like language recognition or remembering your user name. Cookies allow us to store data that are not connected to you personally and we do not identify the client based on the collected data.

Using cookies is not dangerous for you. Cookies cannot transfer viruses or read data from the hard drive of the device.

By visiting our website, you automatically consent to using this technology. This procedure is based on Article 55(5) of Act No. 355/2011 on e-communications, which says that consent for this purpose is also defined as using respective settings in the web browser or other computer programme.

Using cookies and enabling them in the web browser is based on the free choice of each user of the website. You may freely delete cookies or set your browser to refuse accepting cookies, or to notify you when a server tries to send a cookie to you. However, then it can happen that websites dependent on the support of cookies will not work according to your expectations, or that parts of the websites will not be accessible to you.

We use permanent cookies that help us identify your device during a repeated visit of the Website and so enable us to provide services according to your expectations. We store cookies for the period of one year.

12. The group of recipients

We do not make your personal data accessible to any entities without a reason. However, it is necessary for some personal data to be made accessible to a defined group of recipients of personal data. In case goods are sent to you as the end customer, we provide your personal data to postal carriers or courier companies. During the management and maintenance of our website, your personal data are made accessible to the administrator of the website. Finally, recipients include persons like the accountant or tax advisor.

The group of recipients:

Postal carriers within the meaning of Act No. 324/2011 on postal services
Courier company
Server administrator
Website administrator
E-mail provider
Tax and accounting advisor
Subcontractors

13. Final provisions

The controller is MERCHYOU s.r.o., with its registered office in Prešovská 45, 821 02 Bratislava. The company operates the www.merchyou.com website. In case you have questions regarding personal data protection, and you haven't found the answers in this document, contact us at info@merchyou.com.

Personal data protection

Memorandum on Personal Data Protection of MERCHYOU s.r.o.