Privacy Policy

1. Scope and Legal Definitions

1.

Data Subject: Any customer or visitor of the website jawharp.sk.
2.

Data Controller: Oberta s.r.o. In accordance with Art. 37 GDPR, our company does not fall under the statutory obligation to appoint a Data Protection Officer (DPO).

2. Purpose and Legal Basis of Processing

1.

Performance of Contract (Art. 6(1)(b) GDPR): Processing contact and delivery data is necessary to execute orders, process payments, and dispatch handmade instruments.
2.

Statutory Obligations (Art. 6(1)(c) GDPR): Maintenance of accounting and tax records in compliance with Slovak and EU tax laws.
3.

Legitimate Interests (Art. 6(1)(f) GDPR): Handling direct customer inquiries and safeguarding legal claims.

3. Data Processors and Third Parties

We disclose personal data strictly to certified third parties essential to order fulfillment:

  • Packeta Slovakia s. r. o. (courier delivery service)
  • Slovenská pošta, a. s. (postal carrier services)
  • Certified accounting partners and secure web hosting providers.

4. Data Retention

1.

Accounting documentation and associated order data are retained for 10 years following the transaction year, as required by statutory law. General contact inquiries are retained for at most 1 year.

5. Your Rights as a Data Subject

1.

Under GDPR, you have the right to access, rectify inaccurate data, request erasure, restrict processing, data portability, and object to processing.
2.

To exercise any rights, contact us at info@jawharp.sk. You also possess the right to file a complaint with the Slovak Data Protection Office (dataprotection.gov.sk).