1) Who is the controller of your data and how to contact us

2) What personal data we process

We process only the data we need to fulfill orders, communicate with you, or improve our services. This typically includes:

• first and last name
• delivery address and billing address
• email address and phone number
• order, payment, and purchase history data
• technical data about website use (e.g., IP address and basic information about your visit to the site)
• information from surveys or feedback, if you provide it to us voluntarily

3) Why we process data (purposes) and on what basis

We process your data only when we have a legal basis to do so. The most common situations are:

4) Who we may share your data with (recipients)

We do not share your data with “just anyone.” We share it only with partners needed to operate the e-shop (for example, to deliver a package or send a newsletter). These include:

• Shopify Inc. – e-shop platform
• Ecomail.cz, s.r.o. – email marketing (newsletter)
• Heureka Shopping s.r.o. – reviews (e.g., Verified by Customers)
• Packeta Slovakia s.r.o., Slovak Parcel Service s.r.o., GLS - General logistics Systems Slovakia s.r.o, SDS - Smart Delivery Service SK, s.r.o – package delivery
• TPA GetFinDone sro – accounting services

5) Transfers to third countries (outside the EU/EEA)

Because we use the Shopify platform, some data may also be processed outside the EU/EEA (e.g., in Canada or the USA). In such cases, we ensure an appropriate level of data protection, particularly through standard contractual clauses (SCCs) or other legal mechanisms under the GDPR.

6) How long we keep your data

We keep data only for as long as necessary for the relevant purpose:

• for the duration of the contractual relationship and 10 years after it ends (especially accounting documents)
• for marketing, generally 3 years (if you have given your consent), or until you withdraw your consent
• or for the period required by law

7) Your rights

As a data subject, you have the following rights under the GDPR. To exercise them, email us at info@artmie.sk.

• the right to access your data (what data we have about you)
• the right to rectification (if your data is inaccurate or out of date)
• the right to erasure (if the data is no longer needed or if you withdraw your consent, where possible)
• the right to restrict processing
• the right to data portability
• the right to object to processing (particularly where it is based on legitimate interest)
• the right to withdraw your consent at any time (if processing is based on consent)
• the right to lodge a complaint with the supervisory authority – Office for Personal Data Protection of the Slovak Republic

8) How we protect your data

We take security seriously. We use appropriate technical and organizational measures to protect data from loss, misuse, or unauthorized access, for example:

• encryption and secure data transmission (HTTPS)
• regular system updates
• restricted access for authorized personnel only
• monitoring and checking data transmission

9) Children's data

Our services are not intended for anyone under 16 years of age. We do not knowingly collect or process children's personal data. If we discover that we have obtained such data, we will remove it as appropriate.

10) Changes to these policies

We may update these policies from time to time (for example, due to changes in legislation or our services). The current version will always be published at www.artmie.sk.