Privacy Policy

This page explains how we process personal data when you visit and use the online shop pup-babe.sk.

1. Controller

The controller responsible for data processing on this website is
PUP.BABE Mgr. Henrieta Gassenmaier

address: 95618 Bošany, Malobošianska 1487/39
Email: support@pup-babe.sk
phone: ‎+421 903 684 169

2. Types of data we process

We process different categories of personal data depending on how you use our shop.

Server log data (IP address, date and time of access, browser and operating system).
Order data (name, address, contact details, ordered products, payment information).
Account data if you create a customer account (login details, order history).
Cookie and tracking data if you allow analytics and marketing cookies.

3. Purposes and legal bases

We process personal data only where there is a legal basis under the GDPR.

To provide and operate the website and shopping functions (Art. 6(1)(b) GDPR).
To process and deliver your orders and handle payments (Art. 6(1)(b) GDPR).
To answer enquiries and provide customer support (Art. 6(1)(b) and (f) GDPR).
To comply with legal obligations, for example tax and commercial law retention duties (Art. 6(1)(c) GDPR).
For statistics, optimisation and marketing, only on the basis of your consent (Art. 6(1)(a) GDPR).

4. Cookies and tracking (Google Tag Manager, analytics, marketing)

We use cookies and similar technologies. Some cookies are technically necessary so that the website and the shopping cart work correctly. These necessary cookies are used on the basis of Art. 6(1)(b) and (f) GDPR and do not require consent.

Analytics and marketing tools are managed via Google Tag Manager. These cookies are activated only if you click “Accept all” in the cookie banner. The legal basis is your consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time by deleting the cookie named "cookie_consent" in your browser or by adjusting your browser settings.

5. Storage periods and recipients

We store personal data only for as long as necessary for the purposes mentioned or as required by law. Server logs are usually kept for up to 30 days. Order and invoice data are stored for up to 10 years in line with tax and commercial law. For hosting, payment processing and analytics we use carefully selected service providers who process data on our behalf under data processing agreements. Some providers may be located outside the EU/EEA; in such cases appropriate safeguards such as standard contractual clauses are used.

6. Your rights

Right of access to the personal data we hold about you.
Right to rectification of incorrect or incomplete data.
Right to erasure where the legal requirements are met.
Right to restriction of processing under the conditions of Art. 18 GDPR.
Right to data portability for data processed on the basis of consent or contract.
Right to object to processing based on our legitimate interests.
Right to withdraw consent at any time with effect for the future.
Right to lodge a complaint with a data protection supervisory authority.

7. Contact

If you have questions about data protection or wish to exercise your rights, you can contact us using the details provided on the contact / imprint page of this website.