The eshop operator SWEETAS s.r.o. with the internet page ID 50 345 036, address: Gorazdova 40, 81104 Bratislava processes personal data provided by the buyer solely for the purpose of fulfilment and additional confirmation of the terms of the purchase contract with the purpose of electronic order processing, delivery, payment settlement and the necessary communication between the contracting parties for the period required under special regulations. Personal data will not be published and will not be transferred to other countries.

  1. Basic provision
  1. The personal data operator according to paragraph 5 letter o) act n. 18/2018 codex about the personal data protection as amended (hereinafter referred to as “the Act”) is SWEETAS s.r.o., ID 50 345 036 with address Gorazdova 40, 81104 Bratislava (hereinafter referred to as the “operator” of
  2. Contact details of the operator are: e-mail, telephone number +421 905 303 335.
  3. Personal data are all information about the identified natural or legal person.
  1. Sources of processed personal data
  1. The operator handles the personal data provided to him by the buyer and obtained by the operator on the fulfilment of the purchase contract and the processing of the electronic order on the website
  2. The operator only processes the buyer’s identification and contact details for the necessary fulfilment of the purchase contract.
  3. The operator shall process personal data for the purpose of delivery, settlement of payments and necessary communication between the parties for the period required by the individual regulations. Personal data will not be published and will not be transferred to other countries.

III. Purpose of personal data processing

Buyer’s personal data is processed by the operator for the following reasons:

  1. for the successful transaction of buyer’s electronic order (name, address, e-mail, telephone number),
  2. for the execution of the rights and obligations arising from the contractual relationship between the buyer and the operator,
  3. the provision of personal data is a necessary requirement for the conclusion and fulfilment of a purchase contract. Without the provision of personal data, it is not possible to conclude the contract
  1. Time of personal data retention
  1. The operator keeps personal data for the time necessary to exercise the rights and obligations arising from the contractual relationship between the buyer and the operator and for a period of 3 years after termination of the contractual relationship.
  2. After the retention period of the personal data has elapsed, the operator is obliged to erase the buyer’s personal data.
  1. Personal data recipients

The third party receiving the buyer’s personal data are the subcontractor of the operator. Services from these subcontractors are unconditionally related to the successful completion of a purchase contract and an electronic order between the operator and the buyer.

The subcontractors of the operator are:

– Websupport, s. r. o. (web hosting provider),

– Slovenská pošta, a. s. (shipping services),

–  Woocommerce (e-shop system),

– Google Analytics (web page analysis),

– Paypal (payment processes on the intermediary’s side),

Cardpay (payment processes on the intermediary’s side).

  1. Buyers rights

Under the conditions set out in the Act, the buyer has the right to:

  1. the right of access to their personal data under Section 21 of the Act,
  2. the right to rectify personal data under Section 22 of the Act or the limitation of processing under Section 24 of the Act,
  3. the right to delete personal data under Section 23 of the Act,
  4. the right to object to the processing under section 27 of the Act,
  5. the right to transfer data under Section 26 of the Act,
  6. the right to withdraw consent to the processing of personal data in writing or electronically to the e-mail of the operator,
  7. the right to file a complaint with the Personal Data Protection Office in the event that he / she considers that his / her right to the protection of personal data has been violated.

VII. Securing personal information

  1. The Operator declares that it has taken all appropriate technical and organisational measures to secure the buyer’s personal data.
  2. The operator has taken technical measures to secure data storage of personal data, in particular to ensure access to computers by password, the use of antivirus software and the regular maintenance of computers.


VIII. Final provisions

  1. By submitting an electronic order on the website, the buyer confirms that he / she is aware of the terms of protection of the personal data and that he / she accepts them in ful
  2. The buyer agrees with these terms by ticking the consent via the online form. By checking the consent, he/she confirms that he/she is aware of the privacy policy and that he/she accepts it in its entirety.
  3. The operator is entitled to change these conditions. The operator is required to notify the buyer in writing in electronic form to the email address provided to the Operator about a new version of the Privacy Policy and the operator is required to disclose them on his/her website.


These Terms enter into force on May 25, 2018.