INFORMATION OBLIGATION OF THE OPERATOR – TOWARD CLIENTS

pursuant to Articles 13 and 14 of the European Parliament and the Council Regulation 2016/679 on the protection of natural persons with regard to processing of personal data and on the free movement of such data and repealing the Directive 95/46/ES (hereinafter referred to as „Regulation“)

We would like to briefly inform you with regard to your personal data processing. This information does not concern personal data of legal entities, including the name, legal form and contact details of the legal entity.

1. WHO IS THE OPERATOR OF YOUR PERSONAL DATA?

The operator of your personal data is as follows:

KELLYS BICYCLES s.r.o. , company established and existing under the laws of the Slovak Republic, with its registered office at Slnečná cesta 374, 922 01 Veľké Orvište, company ID No.: 17 641 322, entered in the Commercial Registry of the District Court Trnava, Section Sro, File No. 37/T (hereinafter referred to as „the Operator“)

2. IN WHAT SITUATIONS WILL THE OPERATOR PROCESS YOUR PERSONAL DATA?

Your personal data are processed without your consent only in cases where the valid legal regulations allow us to perform such processing. Personal data which are provided by you according to a contract, specific instructions or according to an eligible interest must be provided by you, otherwise we can´t provide you with our services.

Your personal data are processed without your consent in the following cases and based on the following legal basis:

• Sale of the goods to e-shop clients
• Fulfilment of rights and obligations resulting from contractual relations
• Handling of the claim process

We can process your personal data also on the basis of your consent, which we may ask for from your upon each such operation. Provision of a consent is optional, i.e. it is up to you whether you provide us with personal data or not. Provided you provide us with your consent, you may withdraw it any time consequently.

We can process your personal data with your consent only in the following cases:

• Sales support: marketing proposals, newsletter, sending of catalogues, information on products and news with regard to any persons / parties interested (not being in the position of the Operator´s client); photographs.

3. ELIGIBLE INTERESTS DUE TO WHICH YOUR PERSONAL DATA ARE PROCESSED

The Operator may sometimes process your personal data without your consent based on its eligible interest in processing or based on the eligible interests of third parties. The Operator processes your personal data according to the following eligible interests:

• Eligible interest of the Operator in protection of a server as well as protection of its business, eligible interest in proper operation of web page (cookies). We use cookies as part of Google Analytics service on the www.kellysbikes.com pages as well as Kellys web pages, which help us to adjust the page to your needs. All these data re anonymous and do not record any personal data of the user or any other data which could lead to identification of the person. These data are used for statistic and technical purposes.

We process standard personal data of your, as well as a specific category of personal data, mainly

• Name, surname, address,, e-mail, telephone number, other data necessary for achievement of the purpose
• Photographs

4. HOW LONG WILL WE PROCESS YOUR PERSONAL DATA?

We will keep your personal data as long as it is required for purposes for which such personal data are processed. Upon maintaining the personal data we follow specific regulations which define the time periods of storing and / or basic principles of the GDPR with regard to maintaining and disposal of personal data.

Personal data processed according to your consent are maintained for a time period for which you provided us the consent only.

5. WHAT SOURCES DOES THIS INFORMATION COME FROM?

Personal data which we process about you come from you as concerned persons or other persons who ordered our services in your favour.

6. WHO IS THE RECIPIENT OF PERSONAL DATA

Your personal data are provided in reasoned cases and in necessary extent to the following categories of recipients only:

• Slovenská obchodná inšpekcia (Slovak Trade Inspection), Orgán alternatívneho riešenia sporu (Alternative solution of the dispute body), Policajný zbor (police forces), court, Expert institutions and experts, other eligible subject

7. WHAT ARE YOUR RIGHTS WITH REGARD TO PERSONAL DATA PROCESSING?

• Right to access - you may ask us for Access to your personal data which we process about you. The Operator shall also provide you with a copy of the processed personal data.
• Right to correct - you may ask us to correct incorrect or incomplete personal data which we process about you.
• Right to delete - you may ask us to delete your personal data if any of the following situations occurs:
  • (i) Personal data are not required for purposes for which they have been collected or otherwise processed;
  • (ii) You withdraw your consent based on which your personal data have been processed and there is no legal reason for their further processing;
  • (iii) You raise an objection against the fact that you shall be the subject of a decision based on automated processing of your personal data and there are no prevailing eligible grounds existing for such processing or you raise an objection against processing of your personal data for direct marketing;
  • (iv) Your personal data have been processed illegally;
  • (v) Your personal data must be deleted for purposes of fulfilment of legal obligation defined in the right of the Union or a member state which relates to the Operator;
  • (vi) Your personal data have been collected with regard to an offer of information company services.
• Right to limit processing - you may ask the Operator to limit processing of your personal data provided that one of the following situations occurs:
  • (i) You have denied the correctness / accuracy of personal data for a time period which is necessary for the Operator to verify the correctness / accuracy of your personal data;
  • (ii) Processing of your personal data is illegal, but you refuse these data to be deleted, instead you request the limitation of such data use,
  • (iii) The Operator does not need the personal data for purposes of processing, but you require such data for determination, execution or defence of legal claims;
  • (iv) You have raised an objection against the processing of your personal data pursuant to Art. 21 Section 1 of the GDPR, for as long as it is verified that the eligible grounds / reasons of the Operator prevail over your eligible reasons / grounds.
• Right to transfer the data – if we process your personal data based on your consent or because it is necessary for fulfilment of the contract which you are one of the parties, and at the same time it concerns processing of data by way of automated means of processing you have right to obtain personal data which concern you and which you have provided to the Operator in a structured, commonly used and machinery readable form whereas the rights and freedoms of other persons can´t be unfavourably affected by this right.
• Right to withdraw the consent – provided that processing of your personal data is based on your consent, you have right to anytime withdraw your consent with processing of personal data which you have provided.
• Right to raise an obligation – you may raise an obligation against your personal data processing anytime at the Operator for purposes of direct marketing performed according to an eligible interest of the Operator and always when your personal data are processed according to an eligible interest or public interest including profiling.
• Right to file a complaint – you have right to file a complaint at the supervising body.