Yuliia Kuznietsova, Company ID (IČO) 56 494 041, Zoolabs.eu (hereinafter referred to as “we” or the “Controller”), operating the online store www.zoolabs.eu, processes personal data of our customers, website visitors, and other individuals.

This document provides you with information about what personal data we process, for what purposes, on what legal basis, for how long, and to whom we disclose it, in accordance with:

  • Regulation (EU) 2016/679 (GDPR),
  • Act No. 18/2018 Coll. on Personal Data Protection.

1. Customer Account


2. Resolution of Issues During the Ordering Process (Incomplete Purchase)

Category of data subjects:
Customers who started an order but did not complete it

Purpose of processing:
Assistance in completing the order if the process failed (e.g. technical issue, website crash, disconnection), sending an email about an abandoned/incomplete cart.

Legal basis and personal data:
Our legitimate interest in resolving issues and enabling completion of the order you started, as well as pre-contractual measures.

We process mainly:

  • email address
  • cart contents
  • basic contact details you managed to fill in

Retention period:
Maximum of 30 days from the incomplete order; after that, data is no longer used for this purpose.


3. Purchase Agreements

3. Conclusion and Performance of Purchase Agreements (Standard E-shop Purchase)

Category of data subjects:
Customers – buyers (consumers or entrepreneurs ordering via the e-shop)

Purpose of processing:

  • receiving and processing orders
  • conclusion and performance of the purchase agreement (delivery of goods)
  • communication regarding orders
  • order history and complaint handling

Legal basis and personal data:
Performance of a contract – without these data we cannot deliver goods; partly also compliance with legal obligations (accounting, consumer law).

We process mainly:

  • identification data: name, surname, company name if applicable, IČO
  • contact data: delivery and billing address, email, phone number
  • order data: products ordered, price, discounts, shipping method, payment method
  • payment data: amount, bank account number (for bank transfer), payment gateway information
  • complaint-related data: product identification, defect description, resolution method

Retention period:
For the duration of the contractual relationship and warranty period; afterwards as required for accounting and legal claims.


4. Legal Claims

Category of data subjects:
Customers and other persons subject to potential legal claims

Purpose of processing:

  • enforcement and recovery of claims
  • defense against third-party claims (e.g. complaints, disputes)

Legal basis:
Legitimate interest in protecting our rights.

We process mainly:

  • order data
  • contract, communication, complaint and payment data

Retention period:
Typically 5 years after termination of the contract or from the claim’s origin; longer if legal proceedings are ongoing.


5. Accounting and Tax Obligations

Category of data subjects:
Customers

Purpose:
Accounting, issuing and archiving tax documents, compliance with tax and accounting laws.

Legal basis:
Legal obligation.

We process mainly:

  • identification and billing data
  • payment and transaction data

Retention period:
Usually 10 years after the end of the accounting period.


6. Newsletter

Category of data subjects:
Newsletter subscribers and customers

Purpose:

  • sending marketing and commercial communications
  • personalisation of content

Legal basis:
Consent and legitimate interest (with opt-out option)

We process:

  • email address, possibly name
  • tracking of opens and clicks (if enabled)

Retention period:
Until consent is withdrawn or objection is raised.


7. Reviews

Category of data subjects:
Customers

Purpose:

  • product and purchase reviews
  • sending review request emails

Legal basis:
Consent and legitimate interest

We process:

  • name or nickname
  • email
  • review content
  • purchased product information

Retention period:
Until deletion is requested or product is no longer offered.


8. Analytics and Improvement

Category of data subjects:
Website visitors and customers

Purpose:

  • website traffic analysis
  • optimisation of the e-shop

Legal basis:
Legitimate interest and cookies consent

We process:

  • usage data
  • IP address, device and browser info
  • aggregated order and interaction data

9. Communication

Category of data subjects:
Anyone contacting us

Purpose:
Handling inquiries, complaints and communication.

Legal basis:
Legitimate interest and/or contract performance

We process:

  • name
  • email
  • phone number
  • communication content

Retention period:
Usually 30 days after resolution.


10. Competitions

Category of data subjects:
Participants in competitions

Purpose:

  • organisation and evaluation of competitions
  • winner contact and prize delivery

Legal basis:
Consent, contract (competition rules), legitimate interest

We process:

  • identification and contact data

Retention period:
Duration of competition + up to 1 year.


DATA SHARING

We may share data with:

  • carriers (Slovenská pošta, GLS, others)
  • payment providers
  • accountants and tax advisors
  • IT and marketing service providers
  • public authorities if required by law

All processors are contractually bound under GDPR.


TRANSFERS OUTSIDE THE EU

Some partners (e.g. Shopify, IT services) may process data outside the EU (Canada, USA), under GDPR safeguards (adequacy decisions, standard contractual clauses, etc.).


COOKIES

We use:

  • essential cookies
  • analytical cookies
  • marketing cookies

More details are in the Cookies Policy. Non-essential cookies are used only with consent.


YOUR RIGHTS

You have the right to:

  • access data
  • correction
  • deletion
  • restriction
  • objection
  • data portability
  • withdraw consent
  • lodge a complaint

HOW TO EXERCISE YOUR RIGHTS

Email: zoolabs.shop@gmail.com
Address: 930 41 Slovakia, Kvetoslavov, Senecká ulica 531/68

Response time: usually within 30 days.


Supervisory authority:

Data Protection Authority of the Slovak Republic
Hraničná 12, 820 07 Bratislava
www.dataprotection.gov.sk


Children

We do not collect data from persons under 16