Privacy Policy

Privacy Policy (GDPR)

Operator: KMIŤ s.r.o. • Web: b2b-laces.com • Valid from: 1 January 2026 • Last updated: 27 April 2026

This document explains what personal data we process, why we process it, on what legal basis, how long we retain it and what rights you have.

Preamble

This Privacy Policy (hereinafter "Policy") governs the way in which KMIŤ s.r.o. (hereinafter "we", "us", "our", "operator") processes the personal data of customers, business partners and visitors to www.b2b-laces.com (hereinafter "data subjects").

The operator processes personal data exclusively in accordance with the GDPR Regulation (EU) 2016/679 and applicable data protection legislation. Appropriate technical, organisational and personnel measures have been implemented to protect the data processed. All parties who come into contact with personal data are bound by a statutory or contractual duty of confidentiality.

Operator contact details: KMIŤ s.r.o., Pri rybníku 1851/11, 091 01 Stropkov • Tel.: +421 54 74 22 111 • E-mail: sales@b2b-laces.com

1. Introduction

  1. 1.1 We are committed to protecting the privacy of our visitors and customers.
  2. 1.2 This Policy applies where we act as a data controller (i.e. we determine the purpose and means of processing).
  3. 1.3 On your first visit to our website, we may ask for your consent to the use of cookies in accordance with this Policy.
  4. 1.4 "We", "us" and "our" means KMIŤ s.r.o.

2. How we use personal data

This section sets out the categories of data, source, purpose and legal basis for processing.

  1. 2.1 Usage data — IP address, browser, OS, referrer, visit duration, page views. Purpose: analysis and improvement of the website. Legal basis: consent and/or legitimate interest.
  2. 2.2 Contact and order data — name, address, email, phone from orders and communications. Purpose: order fulfilment, delivery, invoicing. Legal basis: performance of contract, legal obligation.
  3. 2.3 Legal claims — data required to establish, exercise or defend legal claims. Legal basis: legitimate interest.
  4. 2.4 Legal obligation — processing required by law (e.g. accounting, tax records). Legal basis: legal obligation.

3. Purposes of processing personal data

Your personal data may be processed for the following purposes:

Purpose Legal basis Retention
Conclusion of purchase contract, delivery of goods, processing of payment, fulfilment of contractual obligations including exercise of warranty rights. Art. 6(1)(b) GDPR — performance of a contract or pre-contractual measures. 10 years
Handling of warranty and defect claims. Legal obligation under applicable consumer protection legislation. 5 years
Records management. Legal obligation under applicable archives and records legislation. 5 years
Proper maintenance of accounting records. Art. 6(1)(c) GDPR — legal obligation under applicable accounting legislation. 10 years
Proper maintenance of tax records. Legal obligation under applicable income tax and VAT legislation. 10 years
Court proceedings, assertion and defence of the operator's legal claims. Legal obligation under applicable civil procedure and insolvency legislation. 5 years
Records of data subject requests exercised under GDPR. Legal obligation under GDPR Regulation (EU) 2016/679. 5 years
Direct marketing — sending marketing offers and discount information to existing customers.
The data subject has the right to object to processing for direct marketing purposes — the operator will then cease processing data for that purpose.
 Legitimate interest of the operator under Art. 6(1)(f) GDPR. 5 years
from the date of the last purchase

4. Sharing your personal data with third parties

We share data only to the extent necessary with the following categories of recipients:

  • Delivery and courier companies
  • National postal service
  • Tax authorities
  • IT support and hosting providers
  • Payment service providers
  • Courts, bailiffs, other public authorities (only where required by law)

5. Requirement to provide personal data and consequences of not doing so

Where the provision of personal data is necessary for the performance of a contract, it is a mandatory part of the contractual relationship. Failure to provide it will prevent the contract from being concluded.

Where the provision is required by law, the data subject is obliged to provide the data.

Where processing is based on consent, provision is voluntary. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. International transfers of your personal data

  • Transfer of personal data to a third country or international organisation: Not carried out.
  • Automated decision-making including profiling: Not carried out.

7. Retention and deletion of personal data

  1. 7.1 We retain data only for as long as necessary for the purpose of processing (see the table in section 3).
  2. 7.2 Accounting and tax documents are retained in accordance with statutory retention periods (generally 10 years).
  3. 7.3 After the retention period expires, data is securely deleted or anonymised.

8. Changes

  1. 8.1 We may update this Policy by publishing a new version on the website.
  2. 8.2 We will notify you of material changes on the website or by email.
  3. 8.3 We recommend checking this page periodically.

9. Your rights

In relation to the processing of your personal data you have in particular the following rights:

  1. Right of access (Art. 15 GDPR) — the right to confirmation of whether we process your personal data and to access it, including a copy.
  2. Right to rectification (Art. 16 GDPR) — the right to correction of inaccurate or completion of incomplete personal data.
  3. Right to erasure (Art. 17 GDPR) — the right to erasure of personal data where one of the statutory grounds applies.
  4. Right to restriction of processing (Art. 18 GDPR) — the right to request that we restrict our use of your data in certain circumstances.
  5. Right to data portability (Art. 20 GDPR) — the right to receive your data in a machine-readable format and to transfer it to another controller.
  6. Right to object (Art. 21 GDPR) — the right to object to processing based on legitimate interest, including direct marketing.
  7. Right not to be subject to automated decision-making (Art. 22 GDPR) — the right not to be subject to a decision based solely on automated processing.
  8. Right to withdraw consent (Art. 7 GDPR) — consent may be withdrawn at any time by email to info@b2b-laces.com or by written request to our registered address.
Complaint to the supervisory authority:
If you believe that your personal data is being processed unlawfully, you may lodge a complaint with the relevant data protection supervisory authority in your country, or with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava, tel.: +421/2/3231 3214, e-mail: statny.dozor@pdp.gov.sk.

10. About cookies

  1. 10.1 A cookie is a small text file that your browser stores on your device when you visit a website.
  2. 10.2 We distinguish between session cookies (which expire when you close your browser) and persistent cookies (which remain for a set period).
  3. 10.3 Some cookies are essential for the website to function; others require your consent.

11. Cookies we use

  • Essential (functional) — ensure the correct functioning of the website and e-shop (cart, login, security). Do not require consent.
  • Analytical — measuring traffic and user behaviour (e.g. Google Analytics). Require consent.
  • Marketing — measuring and optimising advertising campaigns. Require consent.
Show examples of cookie names
  • _ga, _gid — Google Analytics (analytical)
  • woocommerce_cart_hash, woocommerce_session — cart (functional)
  • complianz_consent_status — cookie consent status (functional)

12. Cookies used by our service providers

If you use analytical or marketing tools from third parties, please list the specific providers here based on the actual state of your website (e.g. Google, Meta).

13. Managing cookies

You can manage cookies in several ways:

  • Via the cookie consent banner displayed on your first visit to the website.
  • In your browser settings — you can refuse or delete cookies.
  • By contacting us at sales@b2b-laces.com to change your consent.
Please note that refusing certain cookies may limit website functionality (e.g. cart persistence).

14. Our details

  1. 14.1 The data controller is KMIŤ s.r.o.
  2. 14.2 Registered address: Pri rybníku 1851/11, 091 01 Stropkov, Slovakia • Company ID: 46 235 086 • Tax ID: 2023 316 471 • VAT ID: SK 2023 316 471
  3. 14.3 Registered: Commercial Register, District Court Prešov, section Sro, insert no. 24778/9
  4. 14.4 Contact: sales@b2b-laces.com • +421 54 74 22 111
Stropkov, 27 April 2026