GENERAL PRIVACY RULES (GDPR)

1. Operator

The company happyderma s. r. o., with registered office at Janotova 2/e 841 04 Bratislava, Slovak Republic, ID number: 48274097, (hereinafter referred to as the "Operator") is the administrator of personal data pursuant to Art. 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in connection with the processing of personal data and on the free movement of such data.

2. The person concerned

The affected person is the Customer or Site Visitor, because his personal data company happyderma s. r. o., with registered office at Janotova 2/e 841 04 Bratislava, Slovak Republic, ID number: 48274097, spracúva.

3. Personal data

Personal data is any data on the basis of which the data subject is identified or identifiable. The scope of personal data that happyderma s. r. o. with registered office at Devín 4270, 841 10 Bratislava - Devín district, Slovak Republic, ID number: 57313041, processes, depends on the purpose for which these personal data are processed. We do not process special categories of personal data that are particularly sensitive (data revealing racial or ethnic origin (so it is not possible to process nationality, data revealing political opinions, data revealing religious faith or philosophical beliefs, trade union membership / only for the purpose of fulfilling legal obligations under the Labor Code, genetic data, biometric data, data related to health and data related to sex life or sexual orientation).

4. Legal reason and purpose of personal data processing

The customer or site visitor provides their personal data to the Operator, primarily Contact data (Name, Surname, address, e-mail, telephone contact). The customer or site visitor provides personal data to the Operator voluntarily for the purpose of further communication with him. Without their provision, the Operator cannot properly fulfill pre-contractual relations and/or the contract with the Customer and therefore it will not be possible to conclude it with the Customer. The purpose of processing this personal data is communication with the Customer, issuance of a tax document, pre-contractual relations and identification of the Customer, implementation of marketing and statistical activities, informing about promotions, news and discounts.

If the Customer and/or visitor places an order or fills in any form containing their personal data on the Operator's website, they also consent to the processing of their personal data.

5. Sources of personal data

The customer and/or website visitor expresses his consent to the processing of personal data through the website. The customer and/or website visitor can, by ticking the appropriate box, express their consent in terms of the Personal Data Protection Act for the Operator to process and store their personal data, especially those listed above and/or which are necessary for the Operator's activities.

6. Data retention period

The customer and/or website visitor grants the Operator this consent:

- for the period necessary to exercise the rights and obligations arising from the contractual relationship

- for the period absolutely necessary for the performance of the services

- for an indefinite period or until further notice in writing.

7. Withdrawal of consent

Consent to the processing of personal data can be revoked by the Customer and/or website visitor at any time in writing. The consent expires within 1 month from the delivery of the Customer's and/or website visitor's withdrawal of consent to the Operator at the address of the Operator's headquarters.

8. Recipients of personal data

The company happyderma s. r. o., with registered office at Janotova 2/e 841 04 Bratislava, Slovak Republic, ID: 48274097, processes personal data primarily for its own purposes. In addition, it can provide personal data to its business partners, especially for the purpose of fulfilling contractual relations between the Operator and the Customer.

9. Method of processing personal data

The operator processes personal data electronically and in paper form (e.g. contracts, accounting and tax documents, paper correspondence) in systematically organized records.

10. Terms of security of personal data

The operator declares that it will collect personal data exclusively for the purpose of processing personal data.

The Operator declares that the personal data of third parties, obtained through contractual relations with the Customer, also fall under these personal data protection rules and are used exclusively for the purpose of fulfilling contractual relations with the Customer.

The operator is not responsible for the violation of the privacy policy of third parties caused by the customer.

The operator declares that he will ensure that personal data is processed and used exclusively in a manner that corresponds to the purpose for which it was collected.

The operator declares that it will process personal data in accordance with good morals and will act in a manner that does not contradict generally binding legal regulations.
The operator declares that only persons authorized by him and persons participating in business cooperation, who thereby fulfill the very essence of the service, have access to personal data.

11. Final Provisions

By expressing consent on the Operator's website, the customer or site visitor confirms that he has given the aforementioned consents to the Operator voluntarily and is entitled to withdraw them in writing at any time. As a Customer or site visitor, he also declares that he has been informed about the terms of personal data processing.

The operator is entitled to change these conditions. It will publish the new version of the personal data protection conditions on its website.

These rules were created for the purpose of explaining the protection of personal data and strengthening transparency in their processing.

These rules enter into force on August 1, 2026.