About Personal Data Processing

1. Operator & Responsible Person IDs

The operator of the personal data is Vladimír Kočnár - ARA, with its registered office at Slnečná 33, 90201 Pezinok, ID 30037191, Trade License Number: cj: Zo 1342/1992 / P, Trade License No: 107-5442 ) which processes personal data under the conditions below. ARA is represented by Vladimír Kočnár, e-mail address ara@stonline.sk, phone number 0917/820377

2. Processing personal data for individual purposes:

a) Buying goods through e-commerce, shipping, handling complaints

For the purposes of the purchase of goods through the e-shop and the delivery of goods, ARA processes the following personal data of the customer: name, surname, telephone number, e-mail address, address, purchased item data, and data related to payment for goods (account number, amount paid, date of credit credited to ARA's account), (ii) for claim handling, in addition to the data listed in (i), data on the goods claimed and data provided by the customer when claiming. The legal basis for the processing of personal data is (i) in the case of the purchase of goods through the e-shop, delivery of the goods to the customer, Article 6 (1) (b) the Protection of Individuals with regard to the Processing of Personal Data and the Free Movement of such Data, repealing Directive 95/46 / EC (General Data Protection Regulation) (hereinafter the "GDPR Regulation") and (ii) 6 ods. (1) c) GDPR regulations. The processing of personal data by ARA is (i) in the case of the purchase of goods through the e-shop and the delivery of goods to the customer necessary for the performance of a contract for the purchase of the goods, and (ii) in the case of complaints handling ARA's legal obligations.

The following are the recipients of your personal information:

• A courier or shipping company that provides the delivery of goods to the customer, as another operator or intermediary

• External legal representation, other consumer authorities, shipping companies in relation to claims handling and insured events as operators or intermediaries, financial advisors, tax advisors and auditors as operators or intermediaries if this is necessary to meet the statutory duty of a company ARA.

Personal data is processed during the period of performance of the purchase agreement and during the delivery of the warranty period for the delivered goods.

b) Selling goods outside e-shop offerings

For the purpose of selling goods outside of e-shop offers, ARA processes the following customer's personal details: name, surname and order details. The legal basis for the processing of personal data is Article 6 (1) b) GDPR Guidelines.

The processing of personal data by ARA is necessary at the customer's request to purchase goods that are not in the e-shop offer. Personal information is processed during the contract of purchase of the goods and the guarantee period for the delivered goods.

c) Non-binding Order of Goods

For the purposes of a non-binding order, ARA processes the following personal data of the potential customer: name, surname, telephone number, e-mail address, and non-binding order details. The legal basis for the processing of personal data is Article 6 (1) b) GDPR regulations. The processing of personal data by ARA is necessary at the request of a prospective customer for a non-binding order for goods. Personal data are processed from the time of request for a non-binding order to the conclusion of a purchase contract or cancellation of a non-binding order.

d Ordering the goods in the name of the customer via e-shop

For the purpose of ordering goods in the name of the customer, ARA processes the following personal data: name, surname, telephone number, e-mail address, and ordering information. The legal basis for the processing of personal data is Article 6 (1) b) GDPR regulations. The processing of personal data by ARA is essential for the performance of a contract for the purchase of goods.

The following are the recipients of personal information:

• courier and shipping companies that supply the goods.

e) Registration and operation of the e-shop

For the purposes of registering and operating the e-shop, ARA processes the following personal data: name, surname, telephone number, e-mail address, address, and order history. The legal basis for the processing of personal data is Article 6 (1) b) GDPR Guidelines.

The processing of personal data by ARA is essential to ensure registration in e-shops and e-shop operations.

Personal data is processed during the registration period in the e-shop.

f) Providing telephone and email support to customers

ARA processes the following customer's personal information for telephone and email support: name, surname, phone number, e-mail address, address, order history. The legal basis for the processing of personal data is Article 6 (1) b) GDPR regulations and in connection with the recording of a telephone call Article 6 (1) a) GDPR Guidelines.

The processing of personal data by ARA is essential to provide support.

Personal data is processed during the warranty period of the purchased goods.

g) Customer Complaint Solving

For the purposes of solving customer complaints, ARA processes the following personally identifiable information: name, surname, data in the complaint and depending on how the customer has lodged the complaint with his address, phone number, or email address. The legal basis for the processing of personal data is Article 6 (1) b) GDPR regulations. The processing of personal data by ARA is essential to resolve the customer's complaint. Personal data is processed for as long as the customer's complaint is resolved.

h) Claiming ARA Claims

For the purpose of applying ARA's claims, ARA processes the following data: data contained in customer and supplier contracts, claims data, ARA data, data reported in the ARA claim, data reported in the ARA records theft, data in the accounts, and other data required for the potential claims or interest protection of ARA.

The purpose of processing this personal data is the legitimate interest of the operator and the legal basis for the processing is Article 6 (1) f) GDPR Guidelines.

The processing of personal data by ARA is necessary for the legitimate interests of ARA. ARA's legitimate interest is to protect its assets as well as to protect against unwarranted claims against ARA.

The following persons are the recipients of the personal data: courts, public authorities, lawyers, tax advisors, and other professional advisers as operators.

Personal information is processed during the course of the litigation and during the limitation period during which claims may be claimed against ARA or during which the company may claim its own claims.

i) Compliance with ARA's legal obligations

ARA processes the personal information listed in (a) to (h) for the purpose of fulfilling the legal obligations of ARA. The legal basis for the processing is Article 6 (1) (c) GDPR Regulations (eg Accounting Act, Value Added Tax Act, Income Tax Act, Consumer Protection Act, Archives and Registry Act).

The processing of personal data by ARA is essential for ARA's compliance with legal obligations.

The following are the recipients of personal data: tax advisers, auditors, courts and public authorities as operators.

Personal data is processed for the time required by applicable law.

3rd Rights of the person concerned

The person concerned has the right to file a petition with the Office for the Protection of Personal Data of the Slovak Republic if it considers that it is directly concerned by its rights established by the GDPR Regulation or the relevant legislation.

The person concerned has the right to (i) request access to personal data, (ii) to repair personal data, (iii) to erase personal data, (iv) to restrict the processing of personal data, (v) and (vi) the right to object to the processing of personal data.

These rights can be claimed by contacting ARA:

a) in writing by sending the letter to the address of the company's registered office, stating the name and surname of the responsible person under the name of the company,

b) By e-mail electronically to the above email address or

c) by phone at the above number.

d). Relevant legislation

The applicable legislation is, in particular, the GDPR Regulation, the applicable law on the protection of personal data, as amended, and other applicable generally binding legal regulations.