Go to Cart 0 €0
Cart is empty

Privacy policy (GDPR)

Data Protection

Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR"), the Slovak Act No. 18/2018 Coll. on Personal Data Protection, as well as the UK Data Protection Act 2018.

Company Details

Responsible for the content published under the domain www.xtremgear.com is:

  • Xtremgear, s.r.o., Ľ. Podjavorinskej 21, 98401 Lučenec, Slovakia, Phone: +421905167640, Email: info@xtremgear.com, Managing Director: Ing. Martin Danko, Company Registration Number: 47534621, VAT Registration Number: SK2023980783
  • Business Activity: Retail trade of sporting goods and sportswear
  • Person responsible for content: Samuel Danko, Ľ. Podjavorinskej 21, 98401 Lučenec, Slovakia

PROTECTION OF PERSONAL DATA AND RIGHTS OF THE DATA SUBJECT

The data subject is a natural person whose personal data is processed by the Data Controller. The Data Controller is a Slovak commercial company based in Slovakia, governed by Slovak law. The Data Controller is authorized to process personal data only under the conditions set out below and in accordance with Regulation (EU) 2016/679 (GDPR) and applicable legislation.

1. Processing of personal data for purchase purposes (Performance of a contract) - In the case of a purchase through the e-shop, the buyer (hereinafter "data subject"), if a natural person, provides the seller (Data Controller) with their identification and contact details: first and last name, residential address including postal code, phone number, email address, and possibly a bank account number (when using a payment gateway). The data subject provides these details voluntarily in order to fulfill the obligations arising from the purchase contract and for further communication. Without providing these details, the Data Controller cannot properly fulfill the purchase contract, and therefore its conclusion would not be possible.

  • Purpose of processing: Issuing a tax document, fulfillment of pre-contractual relations, identification of the buyer, order confirmation, delivery of goods, and management of the user account on www.xtremgear.com.
  • Legal basis: Performance of a contract pursuant to Art. 6(1)(b) of the GDPR. The data subject declares that the provided data is true and is aware of the consequences of intentionally providing false information.

2. Processing for marketing and newsletter purposes (Consent) - The Data Controller processes personal data for the purpose of sending newsletters (direct marketing), inclusion in discount programs, or for public opinion research only based on the clear and voluntary consent of the data subject.

  • The data subject expresses their consent by checking the relevant box during ordering or registration in the e-shop. If the box is not checked, the Data Controller does not process this data for marketing purposes.
  • Legal basis: Consent of the data subject pursuant to Art. 6(1)(a) of the GDPR.
  • Withdrawal of consent: The data subject has the right to withdraw their consent to marketing processing at any time. The Data Controller will then ensure the immediate cessation of processing for these purposes and deletion from marketing databases in accordance with the "right to be forgotten".

3. Transfer and storage of personal data - By submitting an order, the data subject acknowledges that their personal data is processed for the registration of purchase contracts, accounting, and to ensure transport services.

  • Cross-border transfer: The data subject is informed about the cross-border transfer of personal data within EU Member States (and the UK), which is fully guaranteed without restrictions. The Data Controller declares that personal data is not transferred to third countries outside the EU/EEA without ensuring an adequate level of protection.
  • Retention period: The Data Controller processes personal data only for the time necessary to fulfill the obligations arising from the purchase contract and generally binding legal regulations (e.g., accounting and tax laws), respecting the principle of data minimization and taking into account the legitimate interests of the Data Controller.

4. Right to erasure and list of Data Processors - The data subject may at any time request the deletion of their personal data in situations where there is no longer a legitimate or legal reason for its further processing. We will comply with your request in accordance with local laws and GDPR rules. If specific legal reasons (e.g., the obligation to retain invoices) prevent us from deleting the data, we will inform you without delay.

  • Requests for deletion or withdrawal of consent can be sent to the email: info@xtremgear.com

The Data Controller must not provide personal data to a third party unless it is necessary for the performance of the purchase contract. To ensure parcel delivery, the Data Controller uses verified partners (Data Processors) who guarantee data security and protection in accordance with the GDPR:

  • Direct Parcel Distribution SK s.r.o. - Registered office: Pri letisku 5, 821 04 Bratislava - Ružinov, Slovakia (for parcel delivery)
  • GLS General Logistics Systems Slovakia s.r.o. - Registered office: Budča 1039, 962 33 Budča, Slovakia (for parcel delivery)
  • Packeta Slovakia s. r. o. - Registered office: Sliačska 1E, 83102 Bratislava - Nové Mesto, Slovakia (for parcel delivery)
  • Poiint Group s. r. o. - Registered office: Železničná 1534, 90501 Senica, Slovakia (for parcel delivery)
  • Comgate a.s. - Registered office: Gočárova třída 1754 / 48b, Hradec Králové, Czech Republic (for online payments)
  • Stripe Payments Europe, Limited - Registered office: 1 Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland (for online payments)
  • PayPal (Europe) S.à r.l. et Cie, S.C.A. - Registered office: 22-24 Boulevard Royal, L-2449 Luxembourg (for online payments)
  • EVici webdesign s.r.o. - Registered office: Petra Bezruče 139, 747 91 Štítina, Czech Republic (e-shop management)

5. Updating and correcting data - The data subject has the right and opportunity to update, check, or request the correction of their personal data at any time directly online on the e-shop website after logging into the "My Account" section.

6. Declaration of the Data Controller - The Data Controller honorably declares that it processes the personal data of data subjects strictly in accordance with the law, GDPR rules, and good morals.