Privacy Protection and Cookie Notice

I. Operator

1.1. The identity and contact details of the Operator are:

Business Name: SOLUQA Technology s. r. o.
Registered Office: 1. mája 2598/43, Pezinok 902 01, Slovak Republic
Registered in the Commercial Register of the Bratislava III District Court, Section Sro, Insert Number 172557/B
Company ID (IČO): 55758266
Tax ID (DIČ): 2122076209
Bank Account: SK31 1100 0000 0029 4415 8496
The Seller is a VAT payer

1.2. The email and phone contact for the Operator are:
Email: [email protected]
Phone: +421 917 242 888

1.3. The address for sending written correspondence, complaints, and contract withdrawals is:
SOLUQA Technology s. r. o.
1. mája 2598/43
Pezinok 902 01
Slovak Republic

1.4. The Operator, in accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter referred to as the "Regulation"), as well as in accordance with Act No. 18/2018 Coll. on the Protection of Personal Data and on the Amendment and Supplementation of Certain Acts, as amended, and in accordance with Act No. 452/2021 Coll. on Electronic Communications, as amended, provides the Data Subject (the Buyer), from whom the Operator (the Seller) obtains personal data concerning them, with the following information, notices, and explanations:

II. References

2.1. These privacy policy principles and notices form part of the General Terms and Conditions published on the Seller's Website.

2.2. Pursuant to §3, paragraph 1, letter n) of Act No. 102/2014 Coll., the Seller informs the consumer that there are no special applicable codes of conduct to which the Seller has committed to adhere. A code of conduct is understood as an agreement or a set of rules defining the behavior of the Seller, who has committed to following this code of conduct in relation to one or more specific business practices or industries, provided these are not established by law, other legal regulations, or measures of public administration authorities. The Seller informs the consumer about the absence of such commitments and the ways in which they can access or obtain the wording of any applicable codes of conduct.

III. Duration

3.1. The Operator retains the personal data of the Data Subject only for the necessary period required to fulfill the contract and for subsequent archiving in accordance with statutory deadlines imposed by legal regulations. If the Data Subject has agreed to receive promotional emails and similar offers, their personal data will be processed for these purposes until they withdraw their consent, but for no longer than 3 years.

IV. Processed Personal Data

4.1. The Operator processes the following personal data on its website: user nickname, first name, last name, residence address, email address, home phone number, mobile phone number, billing address, delivery address, data obtained from cookies, IP addresses, screenshots from the user's game, device parameters, running processes on the user's computer, and the user's game configuration.

V. Contact Details of the Data Protection Officer

5.1. The Operator has appointed a Data Protection Officer in accordance with Regulation 2016/679 on the protection of natural persons regarding the processing of personal data and the free movement of such data.
Contact:
Email: [email protected]
Phone: +421 917 242 888

5.2. The Operator is also the Seller as defined in the General Terms and Conditions of this website.

VI. Purposes of Processing the Data Subject's Personal Data and Duration of Processing

6.1. The purposes of processing the Data Subject's personal data include, in particular:

6.1.1. Recording, creating, and processing contracts and customer data for the purpose of entering into agreements with third parties.

6.1.2. Processing accounting documents and documents related to the Operator's business activities.

6.1.3. Compliance with legal regulations regarding the archiving of documents and records, for example, in accordance with Act No. 431/2002 Coll., the Accounting Act, as amended, and other applicable regulations.

6.1.4. The Operator's activities related to fulfilling requests, orders, contracts, and similar obligations of the Data Subject.

6.1.5. Newsletter, marketing, and similar advertising activities of the Operator. If the Data Subject consents to marketing and similar advertising activities, their personal data will be processed for these purposes.

VII. Legal Basis for Processing the Data Subject's Personal Data

7.1. If the Operator processes personal data based on the Data Subject's consent, such processing will begin only after the Data Subject has given their consent.

7.2. If the Operator processes the Data Subject's personal data for the purpose of negotiating pre-contractual relationships, concluding, and fulfilling a purchase contract, as well as delivering the relevant goods, product, or service, the Data Subject is required to provide their personal data for the proper fulfillment of the purchase contract. Otherwise, the fulfillment cannot be ensured. Personal data for this purpose is processed without the Data Subject's consent.

VIII. Recipients or Categories of Recipients of Personal Data

8.1. The recipients of the Data Subject's personal data will be or may include:

8.1.1. The statutory bodies or their members of the Operator.

8.1.2. Persons performing work activities under an employment or similar relationship for the Operator.

8.1.3. The Operator's sales representatives and other individuals cooperating with the Operator in fulfilling its tasks. For the purposes of this document, all individuals performing dependent work for the Operator under an employment contract or agreements on work performed outside an employment relationship will be considered employees of the Operator.

8.1.4. The recipients of the Data Subject's personal data will also include the Operator’s collaborators, business partners, suppliers, and contractual partners, specifically: an accounting company, a company providing software development and maintenance services, a company providing legal services to the Operator, a company providing consulting services, companies responsible for transportation and delivery of products to buyers and third parties, marketing companies, companies operating social networks, companies managing payment gateways, and other payment method providers.

8.1.5. The recipients of personal data will also include courts, law enforcement authorities, the tax office, and other state authorities, if required by law. The Operator will provide personal data to these authorities and state institutions based on and in accordance with the legal regulations of the Slovak Republic.

8.1.6. A list of third-party processors and recipients processing the Data Subject’s personal data:

STRIPE PAYMENTS EUROPE, LIMITED, C/O A & L Goodbody, IFSC, North Wall Quay, Dublin, D01 H104, Ireland - third-party provider managing the payment gateway.

IX. Information on the Transfer of Personal Data to Third Countries and Data Retention Period

9.1. Applicable. The Operator transfers personal data in the form of cookies to third countries, specifically to:

Google HQ, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. More information on privacy protection can be found at: Google Analytics Privacy Policy.

X. Information on the Existence of Relevant Rights of the Data Subject:

10.1. The Data Subject has, among other things, the following rights:

10.1.1. The rights listed in section 10.1 do not affect other rights of the Data Subject.

10.1.2. The Data Subject has the right to access data under Article 15 of the Regulation, which includes:

The right to obtain confirmation from the Operator as to whether the Data Subject’s personal data is being processed, and if so, to what extent. If the data is processed, the Data Subject has the right to review its content and request information from the Operator about the purpose of processing, including:

• The reason for processing.
• The categories of processed personal data.
• The recipients or categories of recipients to whom the personal data has been or will be disclosed, especially in cases where recipients are in third countries or international organizations.
• The estimated retention period for personal data or, if not possible, the criteria used to determine the retention period.
• The existence of the right to request the Operator to correct, delete, or restrict the processing of the Data Subject’s personal data.
• The existence of the right to object to such processing.
• The right to file a complaint with a supervisory authority.
• If the personal data was not obtained from the Data Subject, any available information regarding its source.
• The existence of automated decision-making, including profiling, as specified in Article 22(1) and (4) of the Regulation. In such cases, the Data Subject has the right to obtain meaningful information about the applied procedure, its significance, and the anticipated consequences of such personal data processing.
• Appropriate safeguards under Article 46 of the Regulation concerning personal data transferred to a third country or international organization.

10.1.3. The right to obtain a copy of the processed personal data, provided that granting a copy does not adversely affect the rights and freedoms of others.

10.1.4. The right of the Data Subject to rectification under Article 16 of the Regulation, which includes:

• The right to have the Operator correct inaccurate personal data concerning the Data Subject without undue delay.
• The right to have incomplete personal data completed, including by providing a supplementary statement from the Data Subject.
• The right of the Data Subject to erasure of personal data (the so-called "right to be forgotten") under Article 17 of the Regulation, which includes:

10.1.5. The right to have the Operator erase personal data concerning the Data Subject without undue delay if one of the following conditions is met:

• The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
• The Data Subject withdraws consent on which the processing is based, provided that there is no other legal basis for processing the personal data.
• The Data Subject objects to the processing of personal data under Article 21(1) of the Regulation, and there are no overriding legitimate grounds for processing, or the Data Subject objects to processing under Article 21(2) of the Regulation.
• The personal data was processed unlawfully.
• The personal data must be deleted to comply with a legal obligation under European Union law or the law of a Member State to which the Operator is subject.
• The personal data was collected in connection with the offer of information society services under Article 8(1) of the Regulation.

10.1.6. The right to have the Operator, which has made the Data Subject’s personal data public, take reasonable measures (including technical measures), considering available technology and implementation costs, to inform other controllers processing the personal data that the Data Subject has requested the deletion of all links to this data, its copies, or replications.

However, the right to erasure under Article 17(1) and (2) of the Regulation does not apply if the processing of personal data is necessary:

• For the exercise of the right to freedom of expression and information.

10.1.7. For the exercise of the right to freedom of expression and information.

10.1.8. To comply with a legal obligation that requires processing under European Union law or the law of a Member State to which the Operator is subject, or to fulfill a task carried out in the public interest or in the exercise of official authority vested in the Operator.

10.1.9. For reasons of public interest in the field of public health, in accordance with Article 9(2)(h) and (i) of the Regulation, as well as Article 9(3) of the Regulation.

10.1.10. For archiving purposes in the public interest, for scientific or historical research, or for statistical purposes in accordance with Article 89(1) of the Regulation, provided that the right referred to in Article 17(1) of the Regulation would likely prevent or seriously impair the achievement of such data processing purposes; or for the establishment, exercise, or defense of legal claims.

10.1.11. The right of the Data Subject to restriction of personal data processing under Article 18 of the Regulation, which includes:

10.1.12. The right to have the Operator restrict the processing of personal data in one of the following cases:

• The Data Subject contests the accuracy of the personal data, for a period allowing the Operator to verify the accuracy of the data.
• The processing of personal data is unlawful, and the Data Subject opposes the deletion of the personal data and instead requests the restriction of its use.
• The Operator no longer needs the personal data for processing purposes, but the Data Subject requires it for the establishment, exercise, or defense of legal claims.
• The Data Subject has objected to processing under Article 21(1) of the Regulation, pending verification of whether the Operator's legitimate reasons override those of the Data Subject.

10.1.13. The right to ensure that if the processing of personal data is restricted, such restricted data shall, with the exception of storage, only be processed with the consent of the Data Subject or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for important public interest reasons of the European Union or a Member State.

10.1.14. The right to be informed in advance of the lifting of the restriction on the processing of personal data.

10.1.15. The right of the Data Subject to have the notification obligation fulfilled towards recipients, in accordance with Article 19 of the Regulation. This includes the right to require the Operator to inform every recipient to whom personal data has been provided about any correction, deletion, or restriction of data processing carried out under Article 16, Article 17(1), and Article 18 of the Regulation, unless this proves impossible or requires disproportionate effort. The Data Subject also has the right to be informed about these recipients, if requested.

10.1.16. The right of the Data Subject to data portability under Article 20 of the Regulation, which includes: The right to obtain personal data concerning the Data Subject, which they have provided to the Operator, in a structured, commonly used, and machine-readable format, and the right to transfer this data to another operator without obstruction by the Operator, provided that:

• a) The processing is based on the consent of the Data Subject under Article 6(1)(a) of the Regulation or Article 9(2)(a) of the Regulation, or on a contract under Article 6(1)(b) of the Regulation, and at the same time
• b) The processing is carried out by automated means.

10.1.17. The right to obtain personal data in a structured, commonly used, and machine-readable format and the right to transfer this data to another operator without interference from the Operator, provided that this does not adversely affect the rights and freedoms of others.

10.1.18. The right to transfer personal data directly from one Operator to another, where technically feasible.

10.1.19. The right of the Data Subject to object under Article 21 of the Regulation, which includes:

10.1.20. The right to object at any time, due to reasons related to the Data Subject’s specific situation, to the processing of their personal data carried out on the basis of Article 6(1)(e) or (f) of the Regulation, including objections to profiling based on these provisions of the Regulation.

10.1.21. If the Data Subject exercises their right to object at any time, due to reasons related to their specific situation, to the processing of their personal data based on Article 6(1)(e) or (f) of the Regulation, including objections to profiling, the Operator must cease processing the personal data unless it demonstrates compelling legitimate grounds for processing that override the interests, rights, and freedoms of the Data Subject, or for the establishment, exercise, or defense of legal claims.

10.1.22. The right to object at any time to the processing of personal data concerning the Data Subject for direct marketing purposes, including profiling to the extent that it relates to direct marketing. If the Data Subject objects to the processing of personal data for direct marketing purposes, their personal data may no longer be processed for such purposes.

10.1.23. In connection with the use of information society services, the right to object to the processing of personal data through automated means using technical specifications.

10.1.24. The right to object, due to reasons related to the Data Subject’s specific situation, to the processing of their personal data if such data is processed for scientific or historical research or statistical purposes under Article 89(1) of the Regulation, except in cases where processing is necessary for the performance of a task carried out in the public interest.

10.1.25. The right of the Data Subject related to automated individual decision-making under Article 22 of the Regulation, which includes:

10.1.26. The right not to be subject to a decision based solely on automated processing of personal data, including profiling, that has legal effects concerning them or similarly significantly affects them, except in cases specified in Article 22(2) of the Regulation. These exceptions include cases where the decision:

• (a) Is necessary for entering into or the performance of a contract between the Data Subject and the Operator.
• (b) Is authorized by European Union or Member State law to which the Operator is subject, and which also provides for suitable measures to safeguard the rights, freedoms, and legitimate interests of the Data Subject.
• (c) Is based on the explicit consent of the Data Subject.

XI. Information on the Data Subject's Right to Withdraw Consent for Personal Data Processing:

11.1. The Data Subject has the right to withdraw their consent for the processing of personal data at any time, without affecting the legality of data processing based on consent given before its withdrawal.

The Data Subject can withdraw consent for the processing of personal data either in full or partially. A partial withdrawal of consent may apply to a specific type of processing operation(s), ensuring that the legality of processing for remaining operations remains unaffected. Similarly, a partial withdrawal may apply to a specific processing purpose(s), while processing for other purposes remains lawful.

The right to withdraw consent for personal data processing can be exercised in writing at the Operator’s registered address (as recorded in the commercial register at the time of withdrawal) or electronically via email to the Operator’s email address provided in this document.

XII. Information on the Data Subject's Right to File a Complaint with the Supervisory Authority:

12.1. The Data Subject has the right to file a complaint with the supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged violation, if they believe that the processing of their personal data violates the Regulation. This right applies without prejudice to any other administrative or judicial remedies. The Data Subject also has the right to be informed by the supervisory authority about the progress and outcome of their complaint, including the possibility of seeking judicial remedies under Article 78 of the Regulation.

12.2. The supervisory authority in the Slovak Republic is:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava 27, Slovak Republic
Phone: +421 /2 3231 3214
Email: [email protected]

XIII. Information Related to Automated Decision-Making, Including Profiling:

13.1. Since the Operator does not process the Data Subject's personal data using automated decision-making, including profiling as specified in Article 22(1) and (4) of the Regulation, the Operator is not required to provide information under Article 13(2)(f) of the Regulation. This includes details on automated decision-making, profiling, and the applied procedure, as well as its significance and expected consequences for the Data Subject. Not applicable.

XIV. Personal Data Protection and Use of Cookies – Explanation of Cookies, Scripts, and Pixels

14.1. The website operator provides the following brief explanation of the function of cookies, scripts, and pixels:

14.1.1. Cookies are text files containing a small amount of information that are downloaded to your device when you visit a website. Thanks to these files, the website retains information about your actions and preferences (such as login credentials, language, font size, and other display settings) for a certain period, so you do not need to re-enter them every time you visit the site or browse its pages.

A script is a piece of program code used to enable the proper and interactive functioning of websites. This code runs on the operator’s server or on your device.

A pixel is a small, invisible text or image element on a website used to monitor website traffic. To enable this, pixels store various data.

14.1.2. Types of cookies:
- Essential cookies – Ensure the proper functioning of the Operator’s website and its usability. These cookies are used without consent.
- Functional cookies – Relate to user choices regarding the use of cookies on the website, including the ability to accept, decline, or customize cookie settings based on privacy preferences.
- Statistical cookies – Used by the Operator to collect statistics regarding the use of its websites. These cookies are used only with consent.
- Advertising cookies – Used to create advertising profiles and similar marketing activities. These cookies are used only with consent.

14.2. How to control cookies:

14.2.1. You can control and/or delete cookies at your discretion – for details, visit aboutcookies.org. You can delete all cookies stored on your computer or other device, and most browsers can be set to prevent them from being saved.

14.3. Cookies accessible by third parties:
- Google HQ, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
More information on privacy protection can be found at: Google Analytics Privacy Policy.

XV. Final Provisions

15.1. These Privacy Policy Guidelines and Cookie Notices form an integral part of the General Terms and Conditions and the Complaints Policy. The documents – General Terms and Conditions and Complaints Policy – are published on the Seller's website domain.

15.2. These Privacy Policy Guidelines become valid and effective upon their publication on the Seller’s website on February 4, 2025.