top of page

Privacy Policy

 

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "GDPR") and Act No. 18/2018 Coll. on the protection of personal data (hereinafter referred to as the "Act on Personal Data Protection"). The security of personal data and its lawful processing is our top priority. Here you can find out how we process your personal data and how we ensure its security.

                                                                                         

1. OUR INFO

Who we are?

Personal data is processed by

Business Name: Katarína Bohácsová – BK PATTERNS

Registered in the Commercial Register of Bratislava District Office, Reg. No. 870-15061

Place of Business: 83104 Bratislava-Nové Mesto, Vajnorská 1351/30

TAX No.: 42241669

VAT No.: SK1076048149

IBAN: SK3011000000002949202126

Email: contact@bkpatterns.com

Phone No.: +421 904 640 864

(hereinafter referred to as the "controller").

 

2. CATEGORIES OF PERSONAL DATA, PURPOSE, LEGAL BASIS AND PERIOD

What personal data do we process, for what purpose, on what legal basis, and for how long?

We only process personal data that we truly need to achieve a specific goal. We process personal data for these reasons:

Accounting matters

We process the personal data of customers or other persons listed in our accounting records, including their first name, last name, billing address, bank account number, payment details, telephone number, email address, and signature, for the purposes of accounting and fulfilling our obligations under the Accounting Act and other relevant legal regulations. The legal basis for the processing of personal data is the fulfillment of legal obligations. We keep accounting documents for 10 years.

Sale of designs

We process the personal data of customers, including their first name, last name, delivery address, billing address, order details, bank account number, payment details, telephone number, and email address, for the following purposes:

  • pre-contractual communication,

  • order acceptance,

  • contract performance and delivery of digital content or goods,

  • recording of contracts for a specified period,

The legal basis for their processing is the execution of the contract. We store the personal data of interested parties from pre-contractual communication for 6 months. We store personal data processed for the purposes of concluding and executing the contract for 10 years.

Registration on the website

We process the personal data of customers who have created a user account on the website, including their username, email address, and the data provided in the user account, for the purpose of creating and managing the user account on the legal basis of the consent of the data subject. You can withdraw your consent at any time by deleting your user account or sending a notification to our email address. Personal data in the user account is stored for the duration of registration on the website.

Complaints

We process the personal data of customers who have filed complaints about digital content or goods, including their title, first name, surname, address, email address, telephone number, order details, details of the digital content or goods complained about, and the subject of the complaint, for the purpose of receiving and handling complaints and keeping records of complaints. The legal basis for the processing of this personal data is the fulfillment of a legal obligation under the Consumer Protection Act. We store personal data for 5 years from the date of handling the complaint.

Contact form

We process the personal data of interested parties, including their first name, last name, email address, and subject of the message, for the purpose of receiving and handling your inquiry. The legal basis for the processing of this personal data is the execution of a contract or pre-contractual relations. We store personal data for 6 months.

Newsletter

We process the personal data of persons who have subscribed to the newsletter using the designated form, including their first name, last name, and email address, on the legal basis of the consent of the data subject. We process the personal data of our customers or other persons with whom we have a contractual relationship for the purpose of sending the newsletter on the legal basis of legitimate interest, which is to provide information about the controller‘s activities, offers, and promotions. The data subject may withdraw their consent at any time or object to the processing of personal data by sending a written notice or unsubscribing from the newsletter. We process personal data for a period of 10 years.

Social media management

We process the personal data of followers of our official social media pages for the purposes of social media management. The legal basis for processing personal data is a legitimate interest, which is the presentation of the controller and its services through social media. We process personal data for as long as you are a follower of our page.

Cookies

We process cookies to ensure the functionality of our website and to make it easier to use. The legal basis for processing cookies is your consent, which you give us by clicking the appropriate button on the cookie bar. We store cookies for 14 months. You can find out more about what cookies are and how we process them in our Cookie Policy.

 

3. CONSENT

In the above cases, we process your personal data on the legal basis of consent, i.e. only with your consent. You can revoke this consent at any time by deleting your user account, unsubscribing from the newsletter, sending a notification to our email address, or, in the case of cookies, changing your browser settings.

 

4. RECIPIENTS

Who do we provide your personal data to?

We only provide personal data to third parties if we are required to do so by a specific law or if it is necessary for the execution of a contract. These are mainly public authorities and other authorized entities.

We may also provide your personal data to a data processor who provides us with professional and specialized services. If we entrust the processing of personal data to an data processor, we have concluded a personal data processing agreement with them and have bound them to confidentiality. We have entrusted the processing of your personal data to the following data processors:

  • accounting firm

  • WIX website creation platform provider

  • Online email distribution system provider

Your personal data may also be provided to other parties for the purpose of fulfilling the contract, such as a carrier or business partner providing services related to website administration and marketing.

 

5. THIRD COUNTRIES

Where do we transfer your personal data?

Personal data may be transferred to a third country, namely the USA, but only in connection with the use of Google and Meta services.

 

6. GRIEVANCE

Not satisfied?

If you are not satisfied with how we process your personal data, you can let us know by emailing contact@bkpatterns.com. You also have the option of filing a grievance with the Office for Personal Data Protection Office if you believe that we are processing your personal data unlawfully.

Personal Data Protection Office

Hraničná 12, 820 07 Bratislava

Email: statny.dozor@pdp.gov.sk

 

7. HOW WE PROCESS PERSONAL DATA

How do we process your personal data?

We process personal data in electronic and paper form. We do not use any means of automated individual decision-making.

We keep records of all processing activities and have implemented the necessary technical and organizational security measures to ensure the protection of personal data. These measures include, in particular, antivirus programs, strong password policies, and encryption. We regularly back up the personal data entrusted to us so that we can immediately restore it in the event of accidental damage or loss. Persons who process personal data have been instructed and are bound by confidentiality. We approach the selection of intermediaries very responsibly, ensuring that the selected intermediary provides us with adequate guarantees for the security of your personal data.

 

8. RIGHTS OF THE PERSONS CONCERNED

What are your rights as person concerned?

The GDPR grants you certain rights that allow you to influence how we process your personal data. However, not all rights can be exercised in all circumstances. This depends on the legal basis for the processing of personal data.

a) Right of access

You have the right to know whether we process your personal data. If we do, you can request access to the data. Upon your request, we will issue a confirmation with information about the processing of your personal data by our company.

b) Right to rectification

You have the right to have your personal data that we process be accurate, complete, and up to date. If it is inaccurate or out of date, you can request that we correct or supplement it. We will make the correction without undue delay, taking into account the technical possibilities.

c) Right to erasure

Under certain circumstances, you have the right to have your personal data erased. You can request this at any time. We will erase your personal data if:

  • we no longer need it for the purpose for which you provided it to us;

  • you withdraw your consent;

  • you object to the processing of your personal data;

  • we process your personal data unlawfully;

  • the personal data must be erased in order to comply with a legal obligation;

  • you are a child or the parent of a child who has consented to the processing of personal data via the internet;

d) Right to restrict processing

You may request that we restrict the processing of your personal data. If we comply with your request, we will only store your data and will no longer process it. The processing of your data will be restricted if:

  • you notify us that it is incorrect, until we verify its accuracy;

  • we process it unlawfully, but you do not agree to its deletion and instead request that we only restrict the processing of your personal data;

  • we no longer need it, but you need it to prove, exercise, or defend your rights;

  • you object to the processing of your personal data, until we verify whether our legitimate interests outweigh your reasons.

e) Right to data portability

In cases specified by law, you have the right to have your personal data transferred to another controller. This applies in particular to the processing of personal data based on consent or for the performance of a contract, if the data is processed by automated means and it is technically feasible. 

f) Right to object

In cases where we process your personal data on the legal basis of legitimate interest, you have the right to object to its processing. Unless we demonstrate that there is a serious legitimate reason for processing that outweighs your interests or rights, the processing of personal data will be terminated without undue delay on the basis of your objection.

You can send us your request to exercise any of the above rights by email or post to the address above. We will deal with all your requests and inform you of the outcome in the same way you submitted your request.

 

9. FINAL PROVISIONS

This Privacy Policy shall become effective on the date of its publication, i.e. on the 28th of July, 2025. We reserve the right to change this policy if there is a change in the processing of personal data in our company.

bottom of page