Privacy Policy and Cookie Notice
Summary: Privacy Policy
This Privacy Policy page contains complete information about how we process your data, how we use cookies, and what rights you have as a data subject. The protection of our customers’ personal data is a priority for MAN’S SET.
/ Principles and information on the protection of personal data provided by the controller to the data subject when obtaining personal data from the data subject, and information on cookies of the mansset.sk online store /
I. Controller
1.1. The identity and contact details of the Controller are:
- Company name: Dmytro Nykytiuk
- Registered office: Agatova 3460/7F, 84101 Bratislava-Dubravka, Slovak Republic
- Company ID: 56703538
- Tax ID: 3122099057
- Bank account: SK08 1100 0000 0029 4721 2179
- The Seller is not a VAT payer
1.2. The email contact and telephone contact for the Controller are:
- Email: info@mansset.sk
- Phone no.: +421911704726
1.3. The Controller’s address for sending correspondence:
Dmytro Nykytiuk, Tupeho 30, Bratislava 831 01, Slovak Republic
1.4. The Controller hereby, in accordance with Article 13(1) 1. and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “Regulation”), and further in accordance with Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, as amended, and in accordance with Act No. 452/2021 Coll. on Electronic Communications, as amended, provides the Data Subject – (the Buyer) from whom the Controller (the Seller) obtains personal data relating to them, with the following information, instructions, and explanations:
II. References
2.1. These privacy policy principles and information form part of the General Terms and Conditions published on the Seller’s Website.
2.2. Pursuant to §3(1)(n) of Act No. 102/2014 Coll., the Seller informs the consumer that there are no special applicable codes of conduct to which the Seller has committed to adhere, whereby a code of conduct means an agreement or a set of rules defining the conduct of sellers who have committed to comply with this code of conduct in relation to one or more specific commercial practices or business sectors, provided these are not established by law, another legal regulation, or a measure of a public administration authority, which the Seller has committed to comply with, and the manner in which the consumer may become acquainted with them or obtain their wording.
III. Protection of Personal Data and the Use of Cookies. Information and Explanation of Cookies, Scripts, and Pixels
3.1. The operator of the website provides this brief explanation of the function of cookies, scripts, and pixels:
3.1.1. Cookies are text files that contain a small amount of information, which are downloaded to your device when you visit a website. Thanks to this file, the website stores information about your actions and preferences (such as login name, language, font size, and other display settings) for a certain period of time, so you do not need to re-enter them the next time you visit the website or browse its individual pages.
A script is a piece of program code that is used for the correct and interactive functioning of websites. This code runs on the operator’s server or on your device.
A pixel is a small, invisible text or image on a website that is used to monitor website traffic. For this to happen, various data is stored through pixels.
Types of Cookies
3.1.2. Cookies are divided into:
Technical or functional cookies – ensure the proper functioning of the Controller’s website and its use. These cookies are used without consent.
Statistical cookies – The Controller obtains statistics regarding the use of its website. These cookies are used only with consent.
Marketing / Advertising cookies – Used to create advertising profiles and similar marketing activities. These cookies are used only with consent.
How to Control Cookies
3.2. How to control cookies:
3.2.1. You can control and/or delete cookies as you see fit – for details, please visit the website aboutcookies.org. You can delete all cookies stored on your computer or other device, and you can set most browsers to prevent them from being stored.
What Cookies We Use
3.3. The Controller’s website uses the following cookies:
You can find all cookies used by the Controller on the website https://www.cookieserve.com/ by entering the Controller’s web address https://mansset.sk
Technical or functional cookies – the website Controller has access to the information. Cookie duration: 2 years.
Statistical cookies – the website Controller has access to the information. Cookie duration: 2 years.
Marketing and advertising cookies – the website Controller has access to the information. Cookie duration: 2 years.
3.3.1. Cookies made available to third parties:
Google Analytics, Google ADS: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information on privacy protection can be found at https://support.google.com/analytics/topic/2919631?hl=sk&ref_topic=1008008
Facebook Pixels: Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland. More information on privacy protection can be found at https://www.facebook.com/about/privacy/
IV. Personal Data Processed
4.1. The Controller processes the following personal data on its website: first name, last name, place of residence, email address, home phone number, mobile phone number, billing address, delivery address, data obtained from cookies, IP address.
V. Contact Details of the Person Responsible for Overseeing Personal Data Protection
5.1. The Controller has appointed a person responsible for personal data protection in accordance with Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. Contact:
- Email: info@mansset.sk
- Phone no.: +421951097300
5.2. The Controller is also the Seller within the meaning of the term established in the General Terms and Conditions of this website.
VI. Purposes of Processing the Personal Data of the Data Subject and the Data Processing Period
6.1. The purposes of processing the Data Subject’s personal data are in particular:
6.1.1. record-keeping, creation and processing of contracts and client data for the purpose of concluding contracts with third parties.
6.1.2. processing of accounting documents and documents related to the Controller’s business activities.
6.1.3. compliance with legal regulations related to the archiving of documents and records, e.g. pursuant to Act No. 431/2002 Coll. on Accounting, as amended, and other relevant regulations.
6.1.4. the Controller’s activities in connection with fulfilling the Data Subject’s request, order, contract, and similar arrangements.
6.1.5. Newsletter, marketing, and similar advertising activities of the Controller. In the case the Data Subject grants the Controller consent to marketing and similar advertising activities.
6.2. The Controller retains the Data Subject’s personal data only for the period strictly necessary for the purpose of fulfilling the contract and its subsequent archiving in accordance with the retention periods imposed on the Controller by legal regulations. If the Data Subject has consented to receiving advertising emails and similar offers, the Data Subject’s personal data is processed for these purposes until the Data Subject withdraws their consent, but for no longer than 10 years.
VII. Legal Basis for Processing the Data Subject’s Personal Data
7.1 If the Controller carries out the processing of personal data based on the consent of the Data Subject, this processing will only begin after the Data Subject has granted the relevant consent.
7.2. If the Controller processes the Data Subject’s personal data for the purpose of negotiating pre-contractual relations and concluding and performing the purchase agreement, and the related delivery of goods, products or services. The Data Subject is obliged to provide personal data for the proper performance of the purchase agreement; otherwise, performance cannot be ensured. Personal data for this purpose is processed without the consent of the Data Subject.
VIII. Recipients or Categories of Recipients of Personal Data
8.1. The recipients of the Data Subject’s personal data are, or at a minimum may be:
8.1.1. the statutory bodies or their members of the Controller.
8.1.2. persons performing work activities in an employment or similar relationship for the Controller.
Categories of Data Recipients
8.1.3. the Controller’s business representatives and other persons cooperating with the Controller in performing the Controller’s tasks. For the purposes of this document, all natural persons performing dependent work for the Controller on the basis of an employment contract or agreements on work performed outside an employment relationship will be considered employees of the Controller.
8.1.4. The recipients of the Data Subject’s personal data will also be the Controller’s collaborators, business partners, suppliers and contractual partners, in particular: an accounting company, a company providing software development and maintenance services, a company providing legal services to the Controller, a company providing consulting services to the Controller, companies ensuring the transport and delivery of products to buyers and third parties, marketing companies, companies operating social networks, companies providing payment gateways and other payment methods.
8.1.5. Recipients of personal data will also include courts, law enforcement authorities, the tax office and other state authorities, if so provided by law. Personal data will be provided by the Controller to these authorities and state institutions on the basis of, and in accordance with, the legal regulations of the Slovak Republic.
8.1.6. List of Third Parties – Processors and Recipients Who Process the Data Subject’s Personal Data:
Specific Processors and Recipients
General Logistics Systems Slovakia s.r.o., Budča 1039, 962 33 Budča, Slovak Republic – third party providing transport services
Packeta Slovakia s. r. o., with registered office at Kopčianska 3338/82A, 851 01 Bratislava, Company ID: 48136999 – third party providing transport services
STRIPE PAYMENTS EUROPE, LIMITED, C/O A & L Goodbody, IFSC, North Wall Quay, Dublin, D01 H104, Ireland – third party providing the payment gateway
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24, Boulevard Royal, 2449, LUXEMBOURG, Luxembourg – third party providing the payment gateway
Heureka Shopping s.r.o., Karolinská 650/1, 186 00 Prague 8 – Karlín, Czech Republic, Company ID: 02387727 – third party ensuring monitoring of satisfaction with the functioning of the website and ensuring the operation of the Verified by Customers service
Other Service Providers
8.2. The Controller of the e-commerce store verifies satisfaction with the purchase through email questionnaires as part of the Verified by Customers program, in which the Controller’s e-commerce store participates. The Controller sends an email to the Data Subject – Buyer every time the Data Subject – Buyer makes a purchase from the Controller’s e-commerce store, unless, pursuant to Act No. 452/2021 Coll., as amended, the Data Subject – Buyer declines the sending of electronic mail for direct marketing purposes.
The Controller processes personal data for the purpose of sending questionnaires as part of the Verified by Customers program on the basis of the Controller’s legitimate interest, which consists in ascertaining the Data Subject’s – Buyer’s satisfaction with the purchase through the Seller’s e-commerce store.
For sending questionnaires, evaluating the Data Subject’s – Buyer’s feedback, and analyzing market position, the Controller uses a data processor, which is the operator of the Heureka.sk portal. For these purposes, the Controller may transmit information about the purchased goods and the email address of the Data Subject – Buyer. When sending email questionnaires, the personal data of the Data Subject – Buyer is not transmitted to any third party for its own purposes.
The Data Subject – Buyer may object at any time to the sending of email questionnaires as part of the Verified by Customers program by declining further questionnaires using the link in the questionnaire email. In the event of an objection by the Data Subject, the Controller will no longer send the questionnaire to the Data Subject – Buyer.
IX. Information on the Provision of Personal Data to Third Countries and the Period of Their Retention:
9.1. Not applicable. The Controller does not transfer personal data of persons to third countries.
X. Information on the Existence of the Data Subject’s Relevant Rights:
10.1. The Data Subject has, among others, the following rights, whereby:
10.1.1. Point 10.1 does not affect the other rights of Data Subjects.
Right of Access to Data
10.1.2. The Data Subject’s right of access to data under Article 15 of the Regulation, the content of which is:
- the right to obtain confirmation from the Controller as to whether it processes the Data Subject’s personal data, and if so, to what extent. Furthermore, if the data is processed, the right to learn its content and to request information from the Controller about the reasons for its processing, in particular information on: the purpose of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly recipients in third countries or international organisations, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, the existence of the right to request from the Controller rectification of personal data concerning the Data Subject or their erasure or restriction of processing, and the existence of the right to object to such processing, the right to lodge a complaint with a supervisory authority, if the personal data were not collected from the Data Subject, any available information as to their source, the existence of automated decision-making, including profiling referred to in Article 22(1) 1. and (4) of the Regulation, and in such cases, at least meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing of personal data for the Data Subject, about appropriate safeguards pursuant to Article 46 of the Regulation relating to the transfer of personal data, if personal data are transferred to a third country or an international organisation.
10.1.3. the right to obtain a copy of the personal data being processed, provided that the right to obtain a copy of the processed personal data must not adversely affect the rights and freedoms of others.
Right to Rectification and Erasure of Data
10.1.4. the Data Subject’s right to rectification under Article 16 of the Regulation, which includes the right to: have the Controller rectify, without undue delay, inaccurate personal data concerning the Data Subject; have incomplete personal data completed, including by means of providing a supplementary statement by the Data Subject; the Data Subject’s right to erasure of personal data (the so-called “right to be forgotten”) under Article 17 of the Regulation, the content of which is:
10.1.5. the right to obtain from the Controller, without undue delay, the erasure of personal data concerning the Data Subject, if one of the following grounds applies:
- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; the Data Subject withdraws the consent on which the processing is based, and no other legal ground for the processing exists; the Data Subject objects to the processing of personal data pursuant to Article 21(1) of the Regulation and there are no overriding legitimate grounds for the processing, or the Data Subject objects to the processing of personal data pursuant to Article 21(2) of the Regulation; the personal data have been unlawfully processed; the personal data must be erased for compliance with a legal obligation under Union or Member State law to which the Controller is subject; the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the Regulation;
10.1.6. the right that the Controller, which has made the Data Subject’s personal data public and is obliged to erase them, shall, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers processing the personal data that the Data Subject has requested the erasure of any links to, copies, or replications of that personal data, whereby the right to erasure of personal data with the content of the rights under Article 17 1. and (2) of the Regulation shall not apply where the processing of personal data is necessary:
Exceptions to the Right to Erasure
10.1.7. to exercise the right to freedom of expression and information.
10.1.8. for compliance with a legal obligation which requires processing under Union or Member State law to which the Controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.
10.1.9. for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) of the Regulation, as well as Article 9(3) of the Regulation.
10.1.10. for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89 1. of the Regulation, insofar as the right referred to in Article 17 1. of the Regulation is likely to render impossible or seriously impair the achievement of the objectives of such processing of personal data; or for the establishment, exercise, or defense of legal claims;
Right to Restriction of Processing and Data Portability
10.1.11. the Data Subject’s right to restriction of processing under Article 18 of the Regulation, the content of which is:
10.1.12. the right to have the Controller restrict the processing of personal data where one of the following applies: the Data Subject contests the accuracy of the personal data, for a period enabling the Controller to verify the accuracy of the personal data; the processing is unlawful and the Data Subject opposes the erasure of the personal data and requests the restriction of their use instead; the Controller no longer needs the personal data for the purposes of processing, but they are required by the Data Subject for the establishment, exercise, or defense of legal claims; the Data Subject has objected to processing pursuant to Article 21(1) 1. of the Regulation, pending verification whether the legitimate grounds of the Controller override those of the Data Subject;
10.1.13. the right that, where processing of personal data has been restricted, such restricted personal data shall, with the exception of storage, be processed only with the Data Subject’s consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State;
10.1.14. the right to be informed in advance about the lifting of the restriction on the processing of personal data;
Notification Obligation and Data Portability
10.1.15. the Data Subject’s right to the fulfilment of the notification obligation towards recipients under Article 19 of the Regulation, the content of which is: the right that the Controller shall notify each recipient to whom personal data have been disclosed of any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) 1. and Article 18 of the Regulation, unless this proves impossible or requires disproportionate effort; the right for the Controller to inform the Data Subject about these recipients, if the Data Subject so requests;
10.1.16. the Data Subject’s right to data portability under Article 20 of the Regulation, the content of which is: the right to receive the personal data concerning the Data Subject, which they have provided to the Controller, in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller without hindrance from the Controller, if:
- a/ the processing is based on the consent of the Data Subject under Article 6(1)(a) of the Regulation or Article 9(2)(a) of the Regulation, or on a contract pursuant to Article 6(1)(b) of the Regulation, and at the same time
- b/ the processing is carried out by automated means, and at the same time:
Data Portability and the Right to Object
10.1.17. the right to obtain personal data in a structured, commonly used, and machine-readable format and the right to transmit those data to another controller without hindrance from the Controller, shall not adversely affect the rights and freedoms of others;
10.1.18. the right to have personal data transmitted directly from one controller to another controller, where technically feasible;
10.1.19. the Data Subject’s right to object under Article 21 of the Regulation, the content of which is:
Right to Object to Processing
10.1.20. the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them, which is carried out pursuant to Article 6 1. (e) or (f) of the Regulation, including objecting to profiling based on those provisions;
10.1.21. where the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them, which is carried out pursuant to Article 6 1. (e) or (f) of the Regulation, including objecting to profiling based on those provisions, is exercised, the right that the Controller shall no longer process the Data Subject’s personal data unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the Data Subject, or for the establishment, exercise, or defense of legal claims
10.1.22. the right to object at any time to the processing of personal data concerning the Data Subject for direct marketing purposes, including profiling to the extent that it is related to direct marketing; whereby, if the Data Subject objects to the processing of personal data for direct marketing purposes, the personal data shall no longer be processed for such purposes;
10.1.23. in connection with the use of information society services, the right to exercise the right to object to the processing of personal data through automated means using technical specifications;
10.1.24. the right to object, on grounds relating to their particular situation, to the processing of personal data concerning the Data Subject, where the personal data is processed for scientific or historical research purposes or statistical purposes pursuant to Article 89 1. of the Regulation, except where the processing is necessary for the performance of a task carried out for reasons of public interest;
Automated Individual Decision-Making
10.1.25. the Data Subject’s right related to automated individual decision-making under Article 22 of the Regulation, the content of which is:
10.1.26. the right not to be subject to a decision based solely on automated processing of personal data, including profiling, which produces legal effects concerning them or similarly significantly affects them, except in the cases referred to in Article 22 2. of the Regulation [i.e. except in cases where the decision is: (a) necessary for entering into, or the performance of, a contract between the Data Subject and the Controller,
10.1.27. authorised by Union or Member State law to which the Controller is subject and which also lays down suitable measures to safeguard the Data Subject’s rights, freedoms, and legitimate interests, or (c) based on the Data Subject’s explicit consent.
XI. Information on the Data Subject’s Right to Withdraw Consent to the Processing of Personal Data:
11.1. The Data Subject is entitled to withdraw their consent to the processing of personal data at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.
The Data Subject is entitled to withdraw their consent to the processing of personal data at any time – in whole or only in part. A partial withdrawal of consent to the processing of personal data may relate to a specific type of processing operation / processing operations, whereby the lawfulness of the processing of personal data in respect of the remaining processing operations shall remain unaffected. A partial withdrawal of consent to the processing of personal data may relate to a specific purpose / specific purposes of processing personal data, whereby the lawfulness of the processing of personal data for the remaining purposes shall remain unaffected.
The Data Subject may exercise the right to withdraw consent to the processing of personal data in written form at the Controller’s address registered as its registered office in the Commercial Register at the time of withdrawing consent to the processing of personal data, or electronically (by sending an email to the Controller’s email address specified in the identification of the Controller in this document).
XII. Information on the Data Subject’s Right to Lodge a Complaint with a Supervisory Authority:
12.1. The Data Subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement, if they consider that the processing of personal data concerning them infringes the Regulation, all without prejudice to any other administrative or judicial remedy.
The Data Subject has the right for the supervisory authority to which the complaint was lodged to inform them, as the complainant, of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the Regulation.
12.2. The supervisory authority in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovak Republic. Tel. contact: +421 /2 3231 3214, Email: statny.dozor@pdp.gov.sk,
XIII. Information Related to Automated Decision-Making, Including Profiling:
13.1. Since the Controller does not process the Data Subject’s personal data in the form of automated decision-making, including profiling, referred to in Article 22 par. 1 1. and 4 of the Regulation, the Controller is not obliged to provide the information pursuant to Article 13 par. 2 letter f) of the Regulation, i.e. information on automated decision-making, including profiling, and the procedure used, as well as the significance and anticipated consequences of such processing of personal data for the Data Subject. Not applicable.
XIV. Final Provisions
14.1. This Privacy Policy and cookie notice forms an integral part of the General Terms and Conditions and the Complaints Procedure. The documents – the General Terms and Conditions and the Complaints Procedure of this Website are published on the domain of the Seller’s Website.
14.2. This Privacy Policy shall enter into force and effect upon its publication on the Seller’s Website on 05.08.2023
Privacy Policy Page Updates
We may periodically update the Privacy Policy and cookie notice document, for example when legal regulations change. You can always find the current version on this page. If you have any questions about the processing of your data, please contact us at info@mansset.eu or via the Contact page. Data protection is a priority for us – we only process the data we absolutely need.