Privacy policy

The e-shop operator Box Made s.r.o.
 on the website www.boxmade.sk, Company ID 36237621, registered office Jablonica 583, Jablonica, Slovakia (hereinafter the "Controller") processes the personal data provided by the Buyer for the purpose of performing and subsequently confirming the Terms and Conditions, processing the electronic order, arranging delivery, settling payments and carrying out the necessary communication between the parties, for the period required by specific legislation.

Basic provisions

1.The controller of personal data pursuant to Section 5(o) of Act No. 18/2018 on the Protection of Personal Data, as amended (hereinafter the "Act"), is the Controller;

2. The controller’s contact details are: e-mail: obchod@boxmade.sk, tel.: +421 915 555 358;

3. Personal data means all information identifying a natural or legal person.

Sources of the personal data processed

1. The Controller processes personal data provided to it with the buyer’s consent and obtained by the Controller on the basis of performing the Purchase Contract and processing the electronic order in the online shop boxmade.sk;

2. The Controller processes only the buyer’s identification and contact details necessary to perform the Purchase Contract;

3. The Controller processes personal data for the purpose of delivery, settling payments and the necessary communication between the parties, for the period required by specific legislation. Personal data will not be published and will not be transferred to other countries.

Purpose of processing personal data

The Controller processes the buyer’s personal data for the following reasons:

1. For the purpose of registration on the website boxmade.sk pursuant to Section 13(1)(a) of Act No. 18/2018 on the Protection of Personal Data;

2. For the purpose of handling the buyer’s electronic order (name, address, e-mail, telephone number);

3. For the purpose of fulfilling the rights and obligations arising from the contractual relationship between the buyer and the Controller;

4. Providing personal data is a necessary requirement for performing the purchase contract. Without personal data the contract cannot be concluded.

Retention period for personal data

1. The Controller retains personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between the buyer and the Controller, and for 3 years after the contractual relationship ends;

2. Once the retention period expires, the Controller is obliged to delete the data.

Recipients and processors of personal data

The third parties that receive the buyer’s personal data are the Controller’s subcontractors. The services of these subcontractors are indispensable to the successful performance of the purchase contract and the electronic order between the controller and the buyer.

The controller’s subcontractors are:

  • Shopify (running the e-shop);
  • SDS – Slovak Delivery System (delivery service);
  • DPD (delivery service);
  • Stripe (processing online payments);
  • Superfaktúra (invoicing);
  • Judge.me (ratings and reviews);
  • Klaviyo (e-mail and SMS communication);
  • Google Analytics (website analytics);

Buyer’s rights

Subject to the conditions laid down in the Act, the buyer has the right:

1. To access their personal data;

2. To have personal data corrected;

3. To have personal data erased;

4. To object to processing;

5. To data portability;

6. To withdraw consent to the processing of personal data in writing or electronically at the e-mail address: obchod@boxmade.sk;

7. To lodge a complaint with the Office for Personal Data Protection if they believe their right to the protection of personal data has been infringed.

Security of personal data

1. The Controller declares that it has taken all appropriate technical and organisational measures necessary to secure the buyer’s personal data;

2. The Controller has taken technical measures to secure the data storage of personal data, in particular password protection of access to computers, the use of antivirus software and regular computer maintenance.

Final provisions

1. By submitting an electronic order on the website boxmade.sk the buyer confirms that they have been informed of the personal data protection conditions and that they accept them in full;

2. The buyer agrees to these rules by ticking the box in the order;

3. The Controller is entitled to amend these Rules at any time. It is obliged to publish the new version of the Rules on its website.

These Rules take effect on 26.7.2023