protection of personal data and cookies notice

/Principles and instructions on the protection of personal data

provided by the operator to the affected person when obtaining personal data from

the affected person and instructions on cookies of the Internet store

www.moonlightbrand.sk/

l. Operator

1.1. The identity and contact details of the Operator are:

Business name: moonlight global sro

Headquarters : Nemocničná 615/45, Galanta 924 01, Slovak Republic

Registered in the register of the District Court of Trnava, Division Sro, Insert number 50041/T

ID: 54090067 VAT

ID: 2121567965

VAT ID: SK 2121567965

Bank account: SK0211000000002946115799

Seller is a VAT payer / values /

1.2. Email contact and telephone contact for the Operator is:

Email: viktor@moonlightokuliare.sk

Tel.no.: +421904328672

1.3. Address of the Operator for sending documents:

moonlight global s.r.o., Jas 936/5, 924 01 Galanta, Slovak

Republic

1.4. The Operator hereby in accordance with Article 13 par.1 and 2 of Regulation

(EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of natural persons in the processing of

personal data and on the free movement of such data, which repeals Directive 95/46/EC

General Data Protection Regulation ( hereinafter referred to as the "Regulation") provides the following information, instructions and explanations to the Affected Person -

(Buyer), from whom the Operator (Seller) obtains personal data relating to him

ll. Links

2.1. These principles and instructions on the protection of personal data form part of the

General

Terms and Conditions published on the Seller's website.

2.2. Pursuant to §3, par. 1, letter n), Act no. 102/2014 Coll. The seller informs

the consumer that there are no special relevant codes of conduct to which

the seller has undertaken to comply, whereby the code of conduct is understood as an agreement or

a set of rules that define the behavior of the seller, who has undertaken to comply with this

code of conduct in relation to one or more special business practices or

business sectors, if these are not established by law or other legal regulations

or by a measure of a public administration body), which the seller has undertaken to comply with, and in

the manner in which the consumer can become familiar with them or obtain their wording.

|||.Protection of personal data and the use of cookies.

Instruction and explanation of files

cookies, scripts, and pixels.

3.1. The operator of the website provides this brief explanation of the function of cookies,

scripts and pixels:

3.1.1. Cookies are text files that contain a small amount of information that is

downloaded to your device when you visit the website. Thanks to this file, the website stores information about your actions and preferences (such as

you do not need to enter again when visiting a website or browsing its individual pages.

A script is a piece of program code that is used for the correct and interactive

functioning

of websites. This code is executed on the operator's server or on your device.

Pixels are small, invisible text or images on a website that are used to monitor website traffic. In order for this to happen,

various data are stored through pixels.

3.1.2. Cookies are divided into

technical or functional cookies - they ensure the correct functioning of the Operator's

website

and its use. These cookies are used without consent.

Statistical cookies - The operator obtains statistics regarding the use of its cookies website. These cookies are used only with consent.

Marketing / Advertising cookies - Used to create advertising profiles

and similar marketing activities. These cookies are used only with consent.

3.2. How to check cookies:

3.2.1. You can check and/or delete cookies at your discretion -

see aboutcookies.org for details. You can delete all cookies stored on

your computer or other device, and you can set most browsers to prevent them from being stored.

3.3. The website of the Operator uses the following cookies:

All cookies used by the Operator can be found on the website

https://www.cookieserve.com/by entering the web address of the Operator

https://www.moonlightbrand.sk

IV. Personal data processed

4.1. The operator processes the following personal data on its website: name, surname,

residence, email address, home phone number, mobile phone number, billing

address, delivery address, data obtained from cookie files, IP addresses.

V. Contact details of the person responsible for personal data protection supervision

5.1. The operator has appointed a person responsible for personal data protection in accordance with

Regulation 2016/679 on the protection of natural persons in the processing of personal data and on the free

movement of such data. Contact: viktor@moonlightokuliare.sk

5.2. The Operator is also a Seller within the meaning of the term established in the General

Terms and Conditions of this website.

Vl. The purposes of processing the Personal Data of the Affected Person and the period of processing of

personal data

6.1. The purpose of processing the Personal Data of the Affected Person are mainly:

6.1.1. records, creation and processing of contracts and client data for the purpose of concluding contracts

with third parties.

6.1.2. processing of accounting documents and documents related to the business activity

of the Operator.

6.1.3. compliance with legal regulations in connection with the archiving of documents

and documents

, e.g. according to Act no. 431/2022 Coll., Accounting Act as amended and other

relevant regulations.

6.1.4. the activity of the Operator in connection with the fulfillment of the request, order, contract

and similar institutes of the Affected Person.

6.1.5. Newsletter, marketing and similar advertising activities of the Operator. In the case of granting the Data Subject's consent to the Operator with marketing and similar

advertising activities.

6.2. The Operator only keeps the personal data of the Affected Person for the absolutely necessary time

required for the purpose of fulfilling the contract and their subsequent archiving in accordance with the statutory deadlines

imposed on the Operator by legal regulations. In the event that the Affected Person has agreed to the sending of advertising emails and similar offers, the Personal Data of the Affected Person are processed for these purposes until the Data Subject withdraws their consent. However, the longest period is 10 years.

Vll. Legal basis for the processing of personal data of the Affected Person

7.1 In the event that the Operator carries out personal data processing based on the consent of

the Affected Person, this processing will only begin after the consent has been granted by the Affected

Person.

7.2. In the event that the Operator processes the personal data of the Affected Person for the purposes of dealing with
pre-contractual relations and the conclusion and performance of the purchase contract, and related matters
delivery of goods, products or services. The person concerned has the obligation to provide personal
data for proper performance of the purchase contract, otherwise performance cannot be ensured.
Personal data for the given purpose are processed without the consent of the person concerned.
VIII. Recipients or categories of recipients of personal data
8.1. The recipients of the personal data of the affected person will be, or at least can be:
8.1.1. Statutory bodies or their members of the Operator.
8.1.2.persons performing work in an employment or similar relationship for
The operator.
8.1.3. business representatives of the operator and other cooperating persons
with the Operator when performing the Operator's tasks. For the purposes of this document,
Employees of the Operator will be considered all natural persons performing for
Operator dependent work based on employment contract or work agreements
performed outside the employment relationship.
8.1.4. Recipients of personal data of the affected person will also be co-workers
the operator, its business partners, suppliers and contractual partners, in particular: accounting
company, a company providing services related to the creation and maintenance of software,
company providing legal services to the operator, company providing
consultancy to the operator, companies providing transportation and delivery of products
to buyers and third parties, marketing companies, companies operating social
networks, payment gateway companies and other payment methods.
8.1.5. Recipients of personal data will also be courts, law enforcement agencies, tax
office and other state bodies, if the law so provides. While personal data will be
Provided by the operator to the given office and state institutions on the basis of and in accordance with
with the legal regulations of the Slovak Republic.
8.1.6. List of third parties - intermediaries and recipients who process personal data
data of the concerned person:
Direct Parcel Distribution SK, s.r.o., with registered office at Technická 7, 82104 Bratislava, ID:
35834498 – third party providing transport services
General Logistics Systems Slovakia s.r.o., Budča 1039, 962 33 Budča, Slovak Republic –
a third party providing transport services

Packeta Slovakia s. r. o., with registered office at Kopčianska 3338/82A, 851 01 Bratislava, ID: 48136999
- a third entity providing transport services
Slovak Parcel Service s.r.o., with registered office Senecká cesta 1, 900 28 Ivanka pri Dunaji
IČO: 31329217 - third party providing transport services
STRIPE PAYMENTS EUROPE, LIMITED, C/O A & L Goodbody, Ifsc, North Wall Quay,
Dublin, D01 H104, Ireland - third party provider of the payment gateway
PHARIUS, s.r.o., Šafárikova 3178/31A, Galanta 924 01 – third entity providing
accounting
IX. Information on the provision of personal data to third countries and their duration
storage:
9.1. Not applicable. The operator does not transfer personal data of persons to third countries.
X. Instruction on the existence of relevant rights of the concerned person:
10.1. The affected person has, among other things, the following rights, while:
10.1.1. Clause 10.1 does not affect other rights of the Affected Persons.
10.1.2. The Data Subject's right to access data pursuant to Art. 15 Regulations, the content of which
is a:
the right to obtain confirmation from the Operator as to whether it is processing the Personal Data of the Affected Person, and if
yes, to what extent. At the same time, if they are processed, I have the right to find out their content and request from
Operator information about the reason for their processing, in particular information about: Reason for them
processing, categories of affected personal data, about recipients or categories
recipients to whom personal data have been or will be provided, especially in the case of recipients in
third countries or international organizations, about the expected retention period
personal data or, if this is not possible, information about the criteria for its determination, about the existence
the right to request from the Operator the correction of personal data concerning the Affected Person
or their deletion or restriction of processing and about the existence of the right to object
such processing, about the right to file a complaint with the supervisory authority, if personal data
have not obtained from the Data Subject any available information as to their source, o
the existence of automated decision-making, including the profiling referred to in Article 22 par.
1. and 4. Regulations and in these cases at least meaningful information about the procedure used, such as
also the meaning and expected consequences of such processing of personal data for
The person concerned, about adequate guarantees according to Article 46 of the Regulation, regarding the transfer
of personal data if personal data is transferred to a third country or internationally
organization.

10.1.3. the right to provide a copy of the personal data that is being processed, provided that
the condition that he may not have the right to provide a copy of the processed personal data
adverse consequences on the rights and freedoms of others.
10.1.4. the right of the affected person for correction according to Article 16 of the Regulation, the content of which is
right: for the Operator to correct incorrect personal data without undue delay
concern the concerned person. the right to supplement incomplete personal data of the Affected Person, a
this also through the provision of an additional statement of the Affected Person, the right of the Affected Person
person to delete personal data (the so-called right "to be forgotten") according to Article 17
Regulations, the content of which is:
10.1.5. the right to obtain from the Operator the deletion of personal data without undue delay
data concerning the Data Subject if any of the following reasons are met:
personal data are no longer necessary for the purposes for which they were obtained or otherwise processed,
The affected person revokes the consent on the basis of which the processing is carried out, subject to compliance
the condition that there is no other legal basis for the processing of personal data, the Affected
the person objects to the processing of personal data according to Article 21 paragraph 1. Regulations
and there are no valid reasons for processing personal data or the Data Subject
the person objects to the processing of personal data according to Article 21 paragraph 2. Regulations, personal
data was processed illegally, personal data must be deleted to comply with the law
obligation under the law of the European Union or the law of the Member State to which the Operator
is subject to, personal data was obtained in connection with the offer of information society services
according to article 8 par. 1. Regulations;
10.1.6. the right that the Operator, who published the Personal Data of the Affected Person, with regard to
he took reasonable measures for the available technology and the costs of implementing the measures
including technical measures to inform other operators who perform
processing of personal data that the Data Subject asks them to delete all references to
these personal data, their copy or replicas, the right to delete personal data applies
data containing rights according to article 17 par. 1. and 2. Regulations will not arise, as long as it is
processing of personal data necessary:
10.1.7. to exercise the right to freedom of expression and information.
10.1.8. to fulfill a legal obligation that requires processing according to European law
of the Union or the law of the Member State to which the Operator is subject, or to fulfill the task
implemented in the public interest or in the exercise of public authority entrusted to the Operator.
10.1.9. for reasons of public interest in the field of public health in accordance with Article 9 par. 2.
letter h) and i) of the Regulation, as well as Article 9 par. 3. Regulations.
10.1.10. for archiving purposes in the public interest, for scientific or historical purposes
research or for statistical purposes according to Article 89 par. 1. Regulations, as far as is likely to be
that the right referred to in Article 17 par. 1. It makes the regulations impossible or seriously difficult

achieving the goals of such personal data processing; or for proving,
exercising or defending legal claims;
10.1.11. the right of the affected person to limit the processing of personal data according to Article 18
Regulations, the content of which is:
10.1.12. the right for the Operator to limit the processing of personal data with regard to
one of the following cases: The person concerned challenges the correctness of personal data, during
period allowing the Operator to verify the correctness of personal data, processing
of personal data is illegal and the Data Subject objects to the deletion of personal data
and asks instead to limit their use, the Operator no longer needs personal data
for the purposes of processing, but the Data Subject needs them to demonstrate, apply or
defending legal claims, the person concerned has objected to the processing according to Article 21
para. 1. Regulations, until verification of legitimate reasons on the part of the Operator
prevail over the legitimate reasons of the Affected Person;
10.1.13. the right to, in the event that the processing of personal data is limited, such
limited personal data were only processed with consent, with the exception of storage
To the person concerned or to demonstrate, exercise or defend legal claims,
or to protect the rights of another natural or legal person, or for important reasons
public interest of the European Union or a member state;
10.1.14. the right to be informed in advance about the cancellation of the restriction on the processing of personal data;

10.1.15. the right of the affected person to fulfill the notification obligation towards the beneficiaries according to
Article 19 of the Regulation, the content of which is: the right for the Operator to notify everyone
to the recipient to whom personal data was provided, any correction or deletion of personal data
of data or restriction of processing carried out according to Article 16, Article 17 par. 1. a
of Article 18 of the Regulation, unless it proves to be impossible or disproportionately required
effort, the right for the Operator to inform the Data Subject about these recipients, if that
The person concerned requests;
10.1.16. the Data Subject's right to data portability according to Article 20 of the Regulation, which
the content is: the right to obtain personal data relating to the Data Subject and provided by the Data Subject
To the operator, in a structured, commonly used and machine-readable format
and the right to transfer this data to another operator without its Operator
defended if:
and/ the processing is based on the Data Subject's consent according to Article 6, paragraph 1. letter a)
Regulations or Article 9 par. 2. letter a) Regulations, or on the contract according to article 6 par. 1.
letter b) Regulations, and at the same time
b/ the processing is carried out by automated means, and at the same time:

10.1.17. the right to obtain personal data in a structured, commonly used and machine
legible format and the right to transfer this data to another operator without her
The operator defended, will not have adverse consequences on the rights and freedoms of others;
10.1.18. the right to transfer personal data directly from one operator to another
to the operator, as far as it is technically possible;
10.1.19. the right of the affected person to object according to Article 21 of the Regulation, the content of which is:
10.1.20. the right to object at any time for reasons related to the specific situation of the Affected
person against the processing of personal data concerning him, which is carried out on the basis
of article 6 par. 1. letter e) or f) of the Regulations, including objecting to profiling
based on these provisions of the Regulation;
10.1.21. in case of realization of the right to object at any time for reasons relating to specific
situation of the concerned person against the processing of personal data concerning him, which is
carried out on the basis of Article 6 par. 1. letter e) or f) of the Regulations, including objection to
profiling based on these provisions of the Regulation, the right for the Operator
did not further process the personal data of the Affected Person, unless he proves the necessary authorization
reasons for processing that prevail over the interests, rights and freedoms of the Data Subject
persons, or grounds for proving, exercising or defending legal claims
10.1.22. the right to object at any time to the processing of the personal data concerned
The person concerned, for the purposes of direct marketing, including profiling to the extent that
related to direct marketing; at the same time, it applies that if the affected person objects to the processing
personal data for direct marketing purposes, personal data may no longer be used for such purposes
to process;
10.1.23. in connection with the use of information society services, the right to exercise the right
to object to the processing of personal data through automated means
using technical specifications;
10.1.24. the right to object for reasons related to the specific situation of the concerned person against
processing of personal data concerning the Affected Person, if personal data is processed
for the purposes of scientific or historical research or for statistical purposes according to Article 89
para. 1. Regulations, but with the exception of cases where processing is necessary for performance
tasks for reasons of public interest;
10.1.25. the right of the affected person related to automated individual decision-making
according to Article 22 of the Regulation, the content of which is:
10.1.26. the right not to apply to the Affected Person the decision that is based
exclusively on the automated processing of personal data, including profiling, and which it has
legal effects that relate to it or similarly significantly affect it, except

cases according to article 22 par. 2. Regulations [i.e. except where the decision is: (a)
necessary for the conclusion or performance of the contract between the Affected Person
and the Operator,
10.1.27. permitted by the law of the European Union or the law of the member state to which
The operator is subject to, and at the same time, appropriate guarantee measures are also established
protection of the rights and freedoms and legitimate interests of the Data Subject or (c) based on
with the express consent of the concerned person.
XI. Instruction on the Data Subject's right to withdraw consent to the processing of personal data:

11.1. The affected person is entitled to revoke his consent to the processing of personal data at any time
data, without affecting the legality of personal data processing
based on the consent given before its withdrawal.
The affected person is entitled to withdraw his consent to the processing of personal data at any time
data - in its entirety or only in part. Partial withdrawal of consent to processing
personal data may relate to a certain type of processing operation / processing
operations, while the legality of personal data processing to the extent of the rest
processing operations will remain unaffected. Partial withdrawal of consent to processing
personal data may relate to a certain specific purpose of personal data processing /
certain specific purposes of processing personal data, while the legality of the processing
personal data for other purposes will remain intact.
The Data Subject may exercise the right to withdraw consent to the processing of personal data
in paper form to the Operator's address entered as its registered office in the commercial register
at the time of withdrawal of consent to the processing of personal data or in electronic form
by electronic means (by sending an e-mail to an e-mail address
of the Operator mentioned in the identification of the Operator in this document).
XII. Instruction on the right of the affected person to file a complaint with the supervisory authority:
12.1. The affected person has the right to file a complaint with the supervisory body, especially with the member body
the state of his habitual residence, place of work or in the place of the alleged violation, if
believes that the processing of personal data that concerns it is contrary to the Regulation, namely
all without prejudice to any other administrative or judicial remedies.
The affected person has the right to have the supervisory authority to which the complaint was filed, as
informed the complainant about the progress and outcome of the complaint, including the possibility of filing a lawsuit
remedy according to Article 78 of the Regulation.
12.2. The supervisory authority in the Slovak Republic is the Personal Data Protection Office
of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovak Republic. Tel. contact:
+421 /2 3231 3214, Email: statny.dozor@pdp.gov.sk,
XIII. Information related to automated decision-making, including profiling:

13.1. Since in the case of the Operator it is not a matter of processing the Data Subject's personal data
persons in the form of automated decision-making, including the profiling referred to in Article 22
para. 1. and 4. Regulations, the Operator is not obliged to provide information according to Article 13, paragraph
2 letters f) Regulations, i.e. j. information about automated decision-making, including profiling
and about the procedure used, as well as about the meaning and expected consequences of such processing
personal data for the Data Subject. Not applicable.
XIV. Final provisions
14.1. These Principles and instructions on the protection of personal data and instructions on cookies form
an integral part of the General Terms and Conditions and Complaints Procedure.
Documents - General terms and conditions and Complaints procedure of this website
are published on the domain of the Seller's website.
14.2. These Personal Data Protection Principles become valid and effective upon their publication
on the seller's website on September 14, 2022

This e-shop is certified http://www.pravoeshopov.sk