{"id":1462,"date":"2026-10-09T01:16:04","date_gmt":"2026-10-08T23:16:04","guid":{"rendered":"https:\/\/nidavellir.ooo\/ochrana-osobnych-udajov\/"},"modified":"2026-10-20T21:52:46","modified_gmt":"2026-10-20T19:52:46","slug":"ochrana-osobnych-udajov","status":"publish","type":"page","link":"https:\/\/nidavellir.ooo\/en\/ochrana-osobnych-udajov\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"\n<p class=\"uk-text-lead wp-block-paragraph\">This page explains which personal data we process when you shop in our online store, book a course, register a gift voucher or write to us, why we do it, who we share it with and what your rights are. We follow Regulation (EU) 2016\/679 (GDPR) and Slovak Act No. 18\/2018 Coll. on the protection of personal data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Effective from: 23 October 2026<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Who processes your data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The website nidavellir.ooo and the Nidavellir knife workshop are operated by:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>bitWorks s. r. o.<\/strong><br>Pova\u017esk\u00e9 Podhradie 214, 017 04 Pova\u017esk\u00e1 Bystrica, Slovakia<br>Company ID (I\u010cO): 44 193 530<br>Registered in the Commercial Register of the District Court Tren\u010d\u00edn, section Sro, file No. 31909\/R<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For data protection matters write to <a href=\"mailto:gdpr@nidavellir.ooo\">gdpr@nidavellir.ooo<\/a> or call <a href=\"tel:+421949057544\">+421 949 057 544<\/a>. We have not appointed a data protection officer (DPO), as the law does not require it.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">2. What data we process and why<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">2.1 Orders in the online store \u2013 knives, accessories, courses and gift vouchers<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Data:<\/strong> name, email, phone, the content and price of the order, payment method; for deliveries also the address or chosen pick-up point. For courses the participants&#8217; names, for gift vouchers the names \u201cFrom\u201d and \u201cFor\u201d, for a made-to-order knife your requirements (type, steel, handle, description).<\/li>\n\n<li><strong>Purpose:<\/strong> to accept and fulfil the order, deliver goods or the voucher, prepare the course, communicate with you about the order and handle complaints.<\/li>\n\n<li><strong>Legal basis:<\/strong> performance of a contract and steps before entering into it (Art. 6(1)(b) GDPR); issuing and keeping accounting documents and handling complaints are legal obligations (Art. 6(1)(c) GDPR).<\/li>\n\n<li><strong>How long:<\/strong> while the order is handled and during the warranty period; accounting documents for 10 years from the end of the year they relate to (Slovak Accounting Act No. 431\/2002 Coll.).<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If you give us the names of other people (course participants or the voucher recipient), please let them know and point them to this page. We use their names only for the course and the voucher.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The data needed for an order is a contractual requirement \u2013 without it we cannot process the order. You do not need a customer account to buy.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2.2 Customer account<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Data:<\/strong> name, email, password (stored only in encrypted form \u2013 we do not know it), billing details and saved delivery addresses, company details if you buy as a business, and an overview of your orders, knives, vouchers, courses, warranties and service or complaint requests (including photos you attach).<\/li>\n\n<li><strong>Purpose:<\/strong> so that you do not have to enter your details with every purchase and have your orders, warranties, vouchers and service in one place.<\/li>\n\n<li><strong>Legal basis:<\/strong> performance of a contract \u2013 the account you asked for (Art. 6(1)(b) GDPR).<\/li>\n\n<li><strong>Email confirmation:<\/strong> after registration we send you an email with a link. Confirming it shows us that the address is yours; only then do we add the orders and vouchers you made with this address without logging in.<\/li>\n\n<li><strong>Delivery addresses:<\/strong> you can also save other people&#8217;s addresses (for example when sending a gift). Please save them only if they agree; we use them only for delivery.<\/li>\n\n<li><strong>Owners&#8217; wall:<\/strong> if you tick the consent in your account, we show your first name (and town, if you fill it in) on the About us page. You can withdraw the consent in your account at any time (Art. 6(1)(a) GDPR).<\/li>\n\n<li><strong>How long:<\/strong> until you close the account \u2013 in your account (Account details \u2192 Request account deletion) or by email to gdpr@nidavellir.ooo. Order data is then kept only as described in section 2.1.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">2.3 Buying as a business \u2013 data from public registers<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When you buy as a company or sole trader and start typing the name or company ID, we fill in the billing details from the Slovak <strong>Register of Legal Entities<\/strong> (kept by the Statistical Office). We keep a copy of its public data \u2013 the name of the company or trader, company ID and registered or business address, including data of sole traders \u2013 in our own database, update it daily and delete entities that no longer exist. We use it only to fill in billing details. The tax ID comes from the Register of Financial Statements and the VAT ID is checked in the European Commission&#8217;s VIES system. The legal basis is our legitimate interest in correct billing details and an easier purchase (Art. 6(1)(f) GDPR); the data is kept while it is in the register.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2.4 Gift voucher registration and date requests<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Data:<\/strong> name, phone, email, voucher number, chosen course and date, number of people and your comment (for example when a date would suit you).<\/li>\n\n<li><strong>Purpose:<\/strong> to check the voucher, reserve your seat or agree on another date with you.<\/li>\n\n<li><strong>Legal basis:<\/strong> performance of a contract and steps taken at your request before entering into it (Art. 6(1)(b) GDPR).<\/li>\n\n<li><strong>How long:<\/strong> until the course has taken place; if it does not take place, until the request is settled, at most 1 year.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">2.5 Contact forms, email and phone<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Data:<\/strong> name, email, phone (if given), the message and the page you wrote from.<\/li>\n\n<li><strong>Purpose:<\/strong> to answer your question.<\/li>\n\n<li><strong>Legal basis:<\/strong> our legitimate interest in answering questions (Art. 6(1)(f) GDPR); for questions about an order, performance of a contract (Art. 6(1)(b)).<\/li>\n\n<li><strong>How long:<\/strong> until the question is settled, then at most 1 year. Messages that lead to an order are kept with the order.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">2.6 Notice of a free seat (\u201cLet me know\u201d)<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Data:<\/strong> email and the course date you are interested in.<\/li>\n\n<li><strong>Purpose:<\/strong> to email you when a seat becomes free on a fully booked date.<\/li>\n\n<li><strong>Legal basis:<\/strong> your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to gdpr@nidavellir.ooo.<\/li>\n\n<li><strong>How long:<\/strong> until we send the notice or the date has passed.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">2.7 News from the workshop (newsletter)<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Data:<\/strong> email, first name, language of the website and a record of your consent \u2013 when and where you gave it (with an order or in your account) and its wording.<\/li>\n\n<li><strong>Purpose:<\/strong> to send you an occasional email from the workshop \u2013 new knives, open course dates and what we are working on.<\/li>\n\n<li><strong>Legal basis:<\/strong> your consent (Art. 6(1)(a) GDPR), given by ticking the newsletter box at the checkout or in your account. The box is optional and your purchase does not depend on it; without your consent we send you no news.<\/li>\n\n<li><strong>Withdrawal:<\/strong> at any time with one click on the link in every email, in your account (Account details \u2192 Unsubscribe) or by writing to gdpr@nidavellir.ooo.<\/li>\n\n<li><strong>How long:<\/strong> until you withdraw your consent. After you unsubscribe we send you nothing more; we keep the record of the consent and its withdrawal for 3 more years so that we can prove our emails were sent lawfully (legitimate interest, Art. 6(1)(f) GDPR).<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">2.8 Spam protection of forms<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Our contact forms are protected by Google reCAPTCHA, which evaluates technical data about your device and behaviour on the page (such as IP address and cookies) to tell people from bots. The legal basis is our legitimate interest in protecting the website from abuse (Art. 6(1)(f) GDPR). The service is operated by Google Ireland Limited.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2.9 Cookies, statistics and videos<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We use necessary cookies to run the store (for example the cart). Statistics cookies (Google Analytics) and embedded YouTube videos load only with your consent, given in the cookie banner (Art. 6(1)(a) GDPR), which you can change at any time. Details are in our <a href=\"\/cookie-policy-eu\/\">Cookie policy<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2.10 Server logs<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When you visit the website, the server automatically records technical data (IP address, time, page visited, browser). We use it for security and troubleshooting \u2013 our legitimate interest (Art. 6(1)(f) GDPR). Logs are kept only briefly, according to the hosting provider&#8217;s settings.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">3. Who we share data with<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We do not sell your data. We share it only as far as necessary with:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>WebSupport s.r.o.<\/strong> \u2013 website and database hosting (processor);<\/li>\n\n<li><strong>Microsoft Ireland Operations Limited<\/strong> \u2013 Microsoft 365 email service we use to send and receive email (processor);<\/li>\n\n<li><strong>Google Ireland Limited<\/strong> \u2013 Google Analytics (only with consent), reCAPTCHA and YouTube;<\/li>\n\n<li><strong>Packeta Slovakia s.r.o.<\/strong> \u2013 delivery of parcels (name, phone, email, pick-up point or address);<\/li>\n\n<li><strong>the bank<\/strong> \u2013 processes your payment details as an independent controller when you pay by bank transfer;<\/li>\n\n<li><strong>SuperFaktura, s.r.o.<\/strong> \u2013 invoicing system in which we issue proforma invoices and invoices (processor);<\/li>\n\n<li><strong>Matej Krist\u00edn<\/strong>, company ID 56 043 490 \u2013 bookkeeping (processor);<\/li>\n\n<li><strong>public authorities<\/strong> (for example the tax office or a court) where the law requires it.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">4. Transfers outside the European Union<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Google and Microsoft may also process data in the USA. Such transfers rely on the European Commission&#8217;s adequacy decision (EU-US Data Privacy Framework, 10 July 2023), under which these companies are certified, or on standard contractual clauses approved by the European Commission.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">5. Your rights<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>to know whether and which of your data we process, and to get a copy (Art. 15 GDPR);<\/li>\n\n<li>to have incorrect data corrected or incomplete data completed (Art. 16);<\/li>\n\n<li>to have data erased when we no longer need it or process it unlawfully (Art. 17) \u2013 we cannot erase data we must keep by law;<\/li>\n\n<li>to restrict processing (Art. 18);<\/li>\n\n<li>to receive the data you gave us in a machine-readable format and transfer it (Art. 20);<\/li>\n\n<li>to object to processing based on legitimate interest (Art. 21);<\/li>\n\n<li>to withdraw consent at any time \u2013 this does not affect processing before the withdrawal;<\/li>\n\n<li>to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hrani\u010dn\u00e1 12, 820 07 Bratislava 27, <a href=\"https:\/\/dataprotection.gov.sk\">dataprotection.gov.sk<\/a>.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">To exercise your rights, email <a href=\"mailto:gdpr@nidavellir.ooo\">gdpr@nidavellir.ooo<\/a>. We reply without undue delay and within one month at the latest.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">6. Automated decision-making<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We do not use automated decision-making or profiling that would have legal or similarly significant effects on you.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">7. Changes<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We may update this information, for example when we add a new service (card payments or a service for sending our news). The current version with its effective date is always on this page.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This page explains which personal data we process when you shop in our online store, book a course, register a gift voucher or write to us, why we do it, who we share it with and what your rights are. We follow Regulation (EU) 2016\/679 (GDPR) and Slovak Act No. 18\/2018 Coll. on the protection [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-1462","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/nidavellir.ooo\/en\/wp-json\/wp\/v2\/pages\/1462","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nidavellir.ooo\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/nidavellir.ooo\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/nidavellir.ooo\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nidavellir.ooo\/en\/wp-json\/wp\/v2\/comments?post=1462"}],"version-history":[{"count":4,"href":"https:\/\/nidavellir.ooo\/en\/wp-json\/wp\/v2\/pages\/1462\/revisions"}],"predecessor-version":[{"id":1782,"href":"https:\/\/nidavellir.ooo\/en\/wp-json\/wp\/v2\/pages\/1462\/revisions\/1782"}],"wp:attachment":[{"href":"https:\/\/nidavellir.ooo\/en\/wp-json\/wp\/v2\/media?parent=1462"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}