Privacy Policy

Personal Data Protection Principles

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”) and Act No. 18/2018 Coll. on the protection of personal data (“Personal Data Protection Act”). Ensuring the security of personal data and processing it in a lawful manner is our top priority. Below you will find how we process your personal data and how we ensure its protection.

OUR DETAILS
Who are we?

Personal data is processed by:
Company name: HEMING hunting s.r.o.
Registered in: Commercial Register of the District Court Bratislava III, Section Sro, File No. 176338/B
Registered office: Mierová 371/24, 821 05 Bratislava
Company ID: 56060661
Tax ID: 2122209694
VAT ID: SK2122209694
Email: heming@heminghunting.com
Phone: +421 940 999 191
(hereinafter referred to as the “Controller”).

CATEGORIES OF PERSONAL DATA, PURPOSE, LEGAL BASIS, AND RETENTION PERIOD
What personal data do we process, for what purpose, under what legal basis, and for how long?

We process only the personal data that is necessary to achieve the specified purpose. We process personal data for the following purposes:

Accounting
We process customer data (and data of other persons included in accounting) to the extent of name, surname, billing address, bank account number, payment information, phone number, email, and signature, for the purposes of bookkeeping and fulfilling obligations under accounting and other legal regulations. The legal basis for processing is compliance with legal obligations. Accounting records are stored for 10 years.

E-shop
We process customer data such as name, surname, shipping address, billing address, order details, bank account number, payment information, phone number, and email for the following purposes:

  • pre-contractual communication

  • order acceptance

  • contract fulfillment and goods delivery

  • contract recordkeeping for the specified period
    The legal basis is the performance of a contract. Pre-contractual communication data is kept for 6 months. Data processed for contract fulfillment is stored for 10 years. Data in the user account is kept for the duration of registration on the website.

Claims
We process data of customers who file claims to the extent of title, name, surname, address, email, phone number, order and product information, and claim details, for the purpose of receiving and handling claims, and claim records. The legal basis is compliance with the Consumer Protection Act. Data is stored for 5 years from the date the claim is resolved.

Contact Form
We process the personal data of individuals contacting us via the form to the extent of name, surname, email, and message subject, for the purpose of responding to inquiries. The legal basis is performance of a contract or pre-contractual relations. Data is stored for 6 months.

Direct Marketing
We process customer data or data of individuals with whom we have a contractual relationship for direct marketing purposes under the legal basis of legitimate interest—specifically to inform about our activities, offers, and promotions. We process data of newsletter subscribers with their consent. Individuals can object to processing or withdraw consent at any time by sending a written notice or unsubscribing via the link in every email footer. Data is stored for 10 years.

Contests
We process the data of contest participants to the extent of name, surname, username, or other provided data for participation and evaluation of contests. The legal basis is the participant's consent provided upon entry. Data is processed for the duration of the contest, and winners’ data for 1 year after it ends. Consent may be withdrawn at any time, which results in removal from the contest.

Social Media Management
We process data of followers of our official social media pages for the purpose of managing our social media presence. The legal basis is legitimate interest, specifically the promotion of the Controller and its services. Data is processed as long as the individual follows our page.

Cookies
We process cookies to ensure the functionality of our website, improve usability, and for advertising purposes. The legal basis is your consent, which is given by clicking the appropriate button on the cookie banner. Cookies are stored for 15 months. More about cookies and their processing can be found in our Cookie Policy.

CONSENT
In the above cases, we process your personal data based on your consent. You can withdraw your consent at any time—by deleting your user account, unsubscribing from the newsletter, sending us an email, or adjusting your browser settings for cookies.

RECIPIENTS
Who do we share your personal data with?

We share personal data with third parties only if required by law or if necessary to fulfill a contract. This includes public authorities and other authorized bodies.
We may also share your data with processors who provide us with expert and specialized services. We have signed a data processing agreement with these processors and required confidentiality from them. These include:

  • accounting services provider

  • web hosting provider

  • provider of online invoicing systems

  • e-shop system provider

  • email marketing service provider
    We may also share your data with other parties, such as delivery services or business partners involved in e-shop and marketing operations.

THIRD COUNTRIES
Where do we transfer your personal data?

Your personal data may be transferred to the United States (USA), but only in connection with the use of services provided by Google and Meta.

COMPLAINTS
Not satisfied?

If you are not satisfied with how we process your personal data, you can contact us at heming@heminghunting.com. You also have the right to lodge a complaint with the Data Protection Authority if you believe your data is being processed unlawfully.

Data Protection Authority
Hraničná 12, 820 07 Bratislava
Email: statny.dozor@pdp.gov.sk

METHOD OF PERSONAL DATA PROCESSING
How do we process your personal data?

We process personal data in electronic and paper form. We do not use automated individual decision-making.
We maintain records of all processing activities and have implemented technical and organizational security measures, including antivirus programs, strong password policies, and encryption. Data is regularly backed up to ensure quick recovery in case of damage or loss. All personnel have been trained and are bound by confidentiality. We carefully select processors who guarantee adequate security of your data.

RIGHTS OF DATA SUBJECTS
What are your rights as a data subject?

Under GDPR, you have certain rights that influence how we process your data. These rights depend on the legal basis of the processing.

Right of access
You have the right to know whether we process your data. If we do, you can request access. We will confirm the processing and provide information about it.

Right to rectification
You have the right to ensure your data is accurate, complete, and up to date. You may request a correction or update at any time.

Right to erasure
You may request that we delete your personal data if:

  • it is no longer needed for the original purpose,

  • you withdraw your consent,

  • you object to the processing,

  • the processing is unlawful,

  • erasure is necessary to comply with legal obligations,

  • you are a child or the parent of a child who consented to online processing.

Right to restriction of processing
You may request that we restrict the processing of your data. In such a case, we will only store your data without further processing. This applies if:

  • you contest the accuracy of the data,

  • the processing is unlawful, but you do not want erasure,

  • we no longer need the data, but you need it for legal claims,

  • you object to the processing until we verify our legitimate grounds.

Right to data portability
In certain cases, you may request that your data be transferred to another controller. This applies to data processed based on consent or contract performance using automated means, if technically feasible.

Right to object
If your data is processed based on legitimate interest, you have the right to object. Unless we demonstrate compelling legitimate grounds, we will stop processing your data without delay.

You may exercise any of the above rights by sending a request via email or post to the address listed above. We will respond in the same way you submitted the request and inform you of the outcome.

FINAL PROVISIONS
This privacy policy is valid as of the date of publication, i.e., April 14, 2025. We reserve the right to update this policy in the event of changes to our data processing practices.