I. General Provisions

1. The controller of personal data is:

SPORT MEDIA & MANAGEMENT s.r.o.

Registered office: Hviezdna 8, 931 01 Šamorín, Slovak Republic

Company Identification Number (IČO): 50 751 999

Tax Identification Number (DIČ): 2120475104

Registered in the Commercial Register maintained by the District Court of Trnava, Section Sro, File No. 44092/T

Email: marketing@magazinlovuzdar.sk

Website: www.magazinlovuzdar.sk

(hereinafter referred to as the “Controller”).

1. The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the “GDPR”), Act No. 18/2018 Coll. on Personal Data Protection, and other applicable legislation.
2. This Privacy Policy provides information about the processing of personal data relating to website visitors, individuals communicating with the Controller and subscribers to the electronic newsletter.

II. Categories and Sources of Personal Data

1. The Controller processes personal data voluntarily provided by data subjects, particularly through the newsletter subscription form or during correspondence.
2. Depending on the specific purpose, the following categories of personal data may be processed:

• Email address;
• First name and surname, where provided;
• Content of email correspondence or other communications;
• Newsletter subscription and unsubscription records;
• Technical data necessary for the operation and security of the website, such as IP addresses and access records;
• Data concerning interactions with newsletters, where such functions are used.

1. The Controller processes only personal data that is appropriate and relevant to the respective purpose.

III. Purposes and Legal Bases of Processing

1. Newsletter Distribution

The purpose of processing is to send electronic information about LOVU ZDAR magazine, its editions, articles, interviews, editorial activities, events and related news.

The legal basis is the data subject’s consent pursuant to Article 6(1)(a) of the GDPR.

Providing an email address is voluntary. Without an email address, newsletter delivery cannot be arranged.

2. Communication with Visitors

The purpose of processing is to receive and respond to enquiries, messages and other requests addressed to the Controller.

Depending on the nature of the communication, the legal basis may be the Controller’s legitimate interests under Article 6(1)(f) of the GDPR or taking steps at the request of the data subject prior to entering into a contract under Article 6(1)(b) of the GDPR.

3. Technical Operation and Security

The purpose is to ensure website functionality, protect information systems, prevent unauthorised access and address security incidents.

The legal basis is the Controller’s legitimate interests pursuant to Article 6(1)(f) of the GDPR, provided the relevant legal requirements are met.

IV. Newsletter Services Provided by Ecomail

1. The Controller uses Ecomail, a service provided by ECOMAIL.CZ, s.r.o., Czech Republic, to manage subscribers and distribute electronic newsletters.
2. The service provider processes personal data to the extent necessary to provide the agreed services, in accordance with the relevant contractual arrangements and data protection requirements.
3. Subscription to the newsletter is voluntary.
4. Subscribers may withdraw their consent at any time by using the unsubscribe link included in a newsletter or by sending a request to marketing@magazinlovuzdar.sk.
5. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
6. Subscription and unsubscription records may be processed for the purposes of managing consent and demonstrating compliance with legal obligations.

V. Retention of Personal Data

1. Subscribers’ personal data is processed for newsletter distribution for as long as their consent remains valid.
2. Following withdrawal of consent, the Controller shall cease using the relevant personal data for newsletter distribution.
3. Data necessary to demonstrate the granting or withdrawal of consent may be retained for the period required to protect legal claims or comply with statutory obligations, where an appropriate legal basis exists.
4. Data obtained through correspondence shall be retained for the period necessary to handle the relevant request and subsequently only to the extent justified by a lawful purpose.
5. Technical and security records shall be retained for a reasonable period necessary to ensure the security and operation of the website.
6. Once the relevant legal basis has ceased to apply and the necessary retention period has expired, personal data shall be deleted or anonymised, unless further retention is required by law.

VI. Recipients of Personal Data

1. Personal data may be disclosed, to the extent necessary, to service providers responsible for:

• Newsletter management and distribution;
• Web hosting and technical website operation;
• Information system administration and maintenance;
• Security and technical support.

1. Personal data may be disclosed to public authorities where required by law.
2. The Controller ensures that processors handle personal data in accordance with applicable legislation and contractual obligations.

VII. Transfers of Personal Data to Third Countries

1. When using external technical services, personal data may, in certain circumstances, be processed or transferred outside the European Economic Area.
2. Where such transfers occur, they must comply with Chapter V of the GDPR, particularly through an adequacy decision or appropriate safeguards.
3. Information concerning specific recipients, countries and safeguards shall be provided in accordance with the services actually used and their configuration.

VIII. Rights of Data Subjects

1. Subject to the conditions established by the GDPR, data subjects have the following rights:

• The right of access to their personal data;
• The right to rectification of inaccurate or completion of incomplete personal data;
• The right to erasure of personal data;
• The right to restriction of processing;
• The right to object to processing;
• The right to data portability;
• The right to withdraw consent at any time;
• The right to lodge a complaint with the competent supervisory authority.

1. Where personal data is processed on the basis of legitimate interests, data subjects have the right to object to such processing under the conditions laid down in Article 21 of the GDPR.
2. Data subjects may exercise their rights by sending a request to marketing@magazinlovuzdar.sk or by writing to the Controller’s registered office.
3. The Controller shall respond without undue delay and, as a rule, within one month of receiving the request. This period may be extended in circumstances permitted by the GDPR.

IX. Supervisory Authority

Data subjects have the right to lodge a complaint with:

Office for Personal Data Protection of the Slovak Republic

Website: www.dataprotection.gov.sk

X. Security of Personal Data

1. The Controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, damage or unauthorised disclosure.
2. Access to personal data is restricted to authorised persons to the extent necessary for the performance of their professional or contractual duties.
3. Security measures are adapted to the nature of the personal data processed and the risks associated with its processing.

XI. Automated Decision-Making

The Controller does not carry out decisions based solely on automated processing in connection with ordinary newsletter subscriptions where such decisions would produce legal effects concerning data subjects or similarly significantly affect them.

XII. Cookies and Similar Technologies

1. What Are Cookies?

Cookies are small data files that a website may store on a visitor’s device through an internet browser.

Similar technologies may be used to remember preferences, ensure website functionality or collect information about website usage.

2. Strictly Necessary Cookies

Strictly necessary cookies are used to ensure essential website functions, maintain security or provide a service expressly requested by the visitor.

Prior consent is not required for their use where the conditions laid down by applicable legislation are met.

3. Analytics and Marketing Cookies

Analytics cookies may be used to evaluate website traffic and usage.

Marketing cookies and similar technologies may be used to measure the effectiveness of marketing activities or personalise content.

These technologies are used only where they have actually been implemented on the website and the relevant legal requirements have been met.

Where applicable legislation requires the visitor’s consent, such technologies may only be activated after that consent has been obtained.

4. Cookie Consent

Where the website uses non-essential cookies requiring consent, visitors must be given the opportunity to make a free and informed choice regarding their use.

Refusing non-essential cookies must not, in itself, prevent access to the website’s ordinary informational content.

It must be as easy to withdraw consent as it is to give it.

5. Managing Cookies

Visitors may also manage or delete cookies through their internet browser settings.

Where the website uses non-essential cookies requiring consent, the Controller shall provide an appropriate mechanism for granting and withdrawing that consent.

6. Information About Cookies Used

Information about the specific cookies and similar technologies used, their providers, purposes and retention periods must reflect the website’s actual technical configuration and must be made available to visitors before their use, where required by law.

7. Newsletter and Cookies

Consent to receive the newsletter is separate from and independent of consent to the use of non-essential cookies.

Subscribing to the newsletter does not, in itself, constitute consent to the use of non-essential tracking technologies on the website.

XIII. Final Provisions

1. This Privacy Policy informs data subjects about the processing of their personal data. Reading this document does not, in itself, constitute consent to processing for purposes that require separate consent.
2. The Controller may update this Privacy Policy, particularly in response to changes in personal data processing activities, services used or applicable legislation.
3. The current version of this Privacy Policy is available at www.magazinlovuzdar.sk.
4. This Privacy Policy takes effect on the date of its publication.

SPORT MEDIA & MANAGEMENT s.r.o.