We are MAX4BODY s.r.o., Štúrova 3672/15, 08001 Prešov, ID No. 51185938

We operate an e-shop on the website www.max4body.com

We process some personal data when providing our services and selling goods and operating our website.

In particular, the processing of personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 concerning the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR").

I. Processing of personal data

1. Processing of personal data when using the contact form

If you contact us in connection with our products and services, we will work with your contact details that you provide to us, mainly through the contact form. These are personal data in the following range: name, surname, email, delivery address, permanent residence, telephone number or other data associated with you when placing an order.

For what reason?

On the basis of the personal data sent, we will subsequently contact you in connection with our offer of goods and services.

On what legal basis?

This is processing based on Article 6(1)(b) of the GDPR - performance of a contract or the performance of pre-contractual measures at your request.

If you do not provide us with this personal data, we will not be able to communicate with you for the purpose of entering into a contract for the supply of our goods or services.

How long will we process personal data?

Unless we establish further cooperation, we will process your personal data for a maximum of 10 years from our last communication.

B. Processing of personal data in case of purchase

If you make a purchase from us, we will work with the personal data we need from you to ensure that we enter into a contract for the provision of our goods or services. These are mainly billing data: name, surname, address, telephone number, email.

For what reason?

We need to process personal data in order to fulfil our obligations under the contract - delivery of goods or provision of services. By using the contact data, we will also communicate with you regarding the status of your order, or regarding complaints or your questions.

We will further process the personal data for the fulfilment of our obligations under generally binding legal regulations (mainly for accounting and tax purposes, or for the handling of complaints, etc.).

On what legal basis do we process personal data?

This processing is based on Article 6(1)(b) GDPR - performance of a contract and Article 6(1)(c) GDPR - performance of our legal obligation.

If you do not provide us with this personal data, we will not be able to enter into a contract with you for the supply of our goods or services.

How long will we process personal data?

For the duration of the supply of the goods or provision of the services and thereafter for 10 years from the last time we provided such services or supply of the goods.

C. Newsletter (commercial communication)

Unless you have purchased goods or services from us and have also expressly opted out of receiving marketing communications, we will use your email address to send you our marketing communications.

On what legal basis?

This is processing based on Article 6(1)(f) of the GDPR - our legitimate interests, which are marketing communications targeted at our customers.

How long will we process personal data?

10 years from your last purchase. If you do not wish to continue to receive our marketing communications, you can unsubscribe at any time via email or you can contact us at: e-shop@max4body.com

II. Who gets access to the data?

Your personal data will remain with us. However, we do have some companies or other persons working for us who have access to your personal data because they help us to run our e-shop. These are:

• the operator of the Shoptet e-shop platform (Shoptet a.s., with registered office at Dvořeckého 628/8, Břevnov, 169 00, Prague 6, Czech Republic, ID No.: 289 35 675, registered at the Municipal Court in Prague, Section B, Insert 25395
• companies involved in the dispatch of goods GO balík s.r.o., registration number: 21380716)
• companies involved in the dispatch of payments Comgate a.s. registration number: 27924505
• e-mailing service provider Leadhub s.r.o., registration number: 04466683
• providers of advertising space: Meta Platforms Ireland Limited - D04 X2K5, Ireland, Google Ireland Limited for users of
• Google services based in the European Economic Area or Switzerland, located at Gordon House, Barrow Street, Dublin 4, Ireland, Heureka Group a.s. Reg. No.: 07822774,

Your personal data may further be disclosed to the following other entities:

• affiliate websites

We only process personal data within the European Union.

III. What else you should know

We do not have a data protection officer in our company.

Our company does not make decisions based on automated processing or profiling.

If you have any questions about your personal data, please contact us at e-shop@max4body.com or call +421 917 100 800

IV. Use of cookies

Cookies are text files containing small amounts of information that are downloaded to your device when you visit our website. Cookies are then sent back to the website or another website that recognises them on each subsequent visit.

Cookies perform a variety of tasks, such as enabling you to navigate between websites efficiently, remembering your preferences and generally improving the user experience. They can also ensure that advertisements displayed online are better tailored to your personality and interests.

We use the following cookies on the website:

• Strictly necessary cookies: these are necessary for the operation of the website, for example to allow you to log into secure areas of the site and other basic functionality of the site. This category of cookies cannot be disabled.
• Analytical/statistical cookies: for example, they allow us to recognise and track the number of visitors and track how our visitors use the website. They help us to improve the way the site works, for example by enabling users to easily find what they are looking for. We only run these files with your prior consent.
• Advertising cookies: these are used to track preferences and allow you to see advertising and other content that best matches your interests and online behaviour. We only run these cookies with your prior consent.

Please note that third parties (including, for example, external service providers) may also use cookies and/or access the data collected by cookies on the website.

Cookies used:

Further information about cookies and an up-to-date list of cookies can be found via the individual web browsers, most often under Developer Tools.

Consent can be expressed by means of a check box contained in the so-called cookie bar. You can also subsequently refuse cookies in the settings of your internet browser, or you can set to use only some of them.

Further information on the management of cookies in individual browsers can be found at the following links:

• Internet Explorer - https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d
• Google Chrome - https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en
• Firefox - https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
• Safari - https://support.apple.com/en-in/guide/safari/sfri11471/mac
• Opera - https://help.opera.com/en/latest/security-and-privacy/
• Microsoft Edge - https://learn.microsoft.com/en-us/mem/configmgr/compliance/deploy-use/browser-profiles

V. Your rights in relation to the processing of personal data

The GDPR gives you, among other things, the right to contact us and request information about what personal data we process about you, to request access to this data and have it updated or corrected, or to request a restriction on processing, to request a copy of the personal data we process, to request that we delete your personal data in certain situations, and in certain cases you have the right to data portability. You can object to processing on the basis of legitimate interest.

If you believe that we are not treating your data correctly, you have the right to lodge a complaint with the supervisory authority, which in our jurisdiction is the Office for Personal Data Protection of the Slovak Republic, or to take legal action.

This policy is effective from 2.7.2024