Sign up for our newsletter and do not miss discounts and news.
x

        0 pcs 0.00 €

        shopping_cart

        GDPR - how we protect your privacy

         

        General Information

         

        As we prioritize the protection of our customers' personal data, we approach its collection responsibly and in accordance with personal data protection regulations, particularly Regulation (EU) 2016/679 (GDPR) and relevant national data protection laws. Below, we describe what personal data is collected when you visit and use the services of laherba.eu, the purposes and legal basis for which we use this data, and the further conditions of its processing.

         

        Data Controller

        The controller of the information systems in which your personal data is processed is:

        LAHERBA, s.r.o. Karpatské námestie 10/A, 83106 Bratislava, Slovakia ID No.: 54304610, VAT ID: 2121645746 E-mail: laherba@laherba.sk

         

        Data Security

        Your personal data is securely transmitted using SSL (Secure Socket Layer) encryption. We protect our websites and systems with appropriate technical and organizational measures against loss, destruction, alteration, and dissemination of data by unauthorized persons. Web hosting services are provided by ROYAL MEDIA s.r.o.

         

        Tracking, Analytics, and Cookies

         

        I. Traffic Tracking, Analysis, and Marketing (Cookies)

         

        We use cookies—small text files stored on your device—in several places on our e-shop. Cookies cannot be assigned to a specific person and do not contain direct personal data.

        The cookies we use are divided into:

        1. Strictly Necessary (Technical) Cookies:

          • They are essential for the basic functionality of the e-shop (e.g., shopping cart function, login).

          • Legal Basis: Processing is based on our Legitimate Interest (Art. 6(1)(f) GDPR), as the purchase cannot be made without them. These files are activated automatically.

        2. Analytical, Marketing, and Preferential Cookies:

          • They serve for statistical evaluation, measuring advertising effectiveness, and content personalization. This includes services like Google Analytics, Google Ads (Adwords), and Facebook Pixel.

          • Legal Basis: Processing is performed exclusively based on your explicit consent (Art. 6(1)(a) GDPR), which you provide to us via the cookie banner (Opt-in).

         

        II. Consent and Withdrawal of Consent for Cookies

         

        • Obtaining Consent (Opt-in): Analytical, Marketing, and Preferential cookies are activated only after you grant your active consent in the cookie bar/banner. Refusing these cookies does not prevent you from using the basic functions of the e-shop or making a purchase.

        • Data Collected: These tools and cookies collect pseudonymized data such as: browser type and version, operating system, Referrer URL, IP address (shortened), access time, and clicks.

        • Third-Party Cookies: The laherba.eu pages also contain links and integrated content from other websites (e.g., YouTube, Facebook). If the page being viewed uses a third-party analysis tool, you may receive cookies from these services, over which LAHERBA, s.r.o. has no control.

         

        Acquisition, Processing, and Use of Personal Data

         

        We collect only the data necessary for the provision of our services, based on clearly defined legal grounds:

        Purpose of Processing Category of Data Legal Basis for Processing Retention Period
        Performance of the Purchase Contract(Order processing, communication) Name and surname, e-mail, postal/invoicing address, telephone number. Art. 6(1)(b) Performance of a contract For the duration of the contractual relationship and subsequently for the period required to fulfil legal obligations (e.g., 10 years for VAT purposes).
        Accounting and Legal Compliance Invoicing details, data from documents. Art. 6(1)(c) Compliance with a legal obligation For the period stipulated by relevant legal regulations (e.g., 10 years under the VAT Act).
        Customer Account Registration Name and surname, e-mail, address, telephone number. Art. 6(1)(b) Performance of a contract (Account management) For the duration of the registration/account, unless you request cancellation.
        Log Files and Technical Security IP address, date/time of access, Referrer URL. Art. 6(1)(f) Legitimate Interest (Security and functionality of the e-shop) Only the necessary time to ensure system security.
        Sending Newsletters E-mail address, IP address. Art. 6(1)(a) Data Subject's Consent Until consent is withdrawn (unsubscribing).

        Note: For sending newsletters, we use the double opt-in method, requiring you to click on an activation link in the email.

         

        Recipients and Processors of Personal Data

         

        Your personal data may only be provided to third parties if necessary for the performance of the purchase contract or our legal obligations. Categories of recipients and processors include:

        • Web Hosting and E-shop Processor: ROYAL MEDIA s.r.o.

        • Shipping and Delivery Companies: The postal service, Packeta (Zásielkovňa), and courier services (according to your choice).

        • Payment Service Providers: Comgate (payment gateway) for processing cashless payments.

        • Analytical and Marketing Service Providers: Google Ireland Ltd., Meta Platforms Ireland Ltd. (Facebook), based on your consent.

        • Providers of legal and accounting services.

         

        Data Subject Rights and Final Provisions

         

        Right to Information and Other Rights

         

        You have the right to withdraw your consent to data processing at any time (e.g., by unsubscribing from the newsletter, changing cookie settings). The withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

        Subject to compliance with the requirements set out in the GDPR, you have the right to:

        • Access your personal data.

        • Rectification of incorrect personal data.

        • Erasure of personal data ("right to be forgotten"), especially if they are no longer necessary for the purposes for which they were collected.

        • Restriction of processing (blocking).

        • Object to processing (especially for direct marketing purposes).

        • Data portability to another controller (if technically feasible).

         

        Exercising Rights and Complaints

         

        • You can exercise your rights by e-mail at info@laherba.sk or by post to the company's registered address.

        • Identity Verification: If you exercise any of your rights and we cannot verify your identity, we reserve the right to request additional information. This will be used exclusively for identity verification in the sense of Art. 12 GDPR and will be deleted immediately after verification.

        • Data Protection Officer (DPO): Given the nature of the processing, LAHERBA, s.r.o. is not obliged to appoint a DPO.

        • Complaint: You have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Hraničná 12, 820 07 Bratislava, Slovakia) if you believe that we are processing your personal data in violation of the law.

         

         

        The services provided within laherba.eu, for which the consent of the person concerned is required according to these General Terms and Conditions, are not intended directly for persons under the age of 18.

        Platobná brána comgate