Privacy Policy

This Privacy Policy (hereinafter referred to as the “Policy”) describes how GURUPU GASTRO, s. r. o., with its registered office at Súľovská 5806/9 040 11 Košice – mestská časť Západ, ID No.: 52293301 (hereinafter referred to as the “Operator” or “we”), acquires, processes, and protects the personal data of visitors (hereinafter referred to as the “Data Subject” or “you”) to our website www.tutopasta.sk (hereinafter referred to as the “Website”).

The processing of personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”) and Act No. 18/2018 Coll. on Personal Data Protection (hereinafter referred to as the “Act”).

I. Basic Provisions

  1. Operator:
    • Name: GURUPU GASTRO, s. r. o.
    • Registered office: Súľovská 5806/9 040 11 Košice – mestská časť Západ
    • ID No.: 52293301
    • Contact email: info@tutopasta.sk
    • Phone: +421 948 730 605
  2. Personal data means any information relating to an identified or identifiable natural person (Data Subject).

II. Purposes, Legal Bases, and Scope of Processing

We process your personal data based on the following legal bases and for these purposes:

A. Contact Form (Inquiry Handling)

  • Purpose: To contact you and respond to your message, question, or inquiry sent via the contact form.
  • Legal basis: Art. 6 (1) (f) GDPR – Legitimate interest (our need to communicate with website visitors).
  • Processed data: Name, email, phone number, message content.
  • Retention period: For the period necessary to fully process your inquiry and any subsequent communication or archiving.

B. Newsletter Subscription (Marketing)

  • Purpose: Sending promotional and marketing information about our activities and offers (newsletter).
  • Legal basis: Art. 6 (1) (a) GDPR – Consent of the data subject. This consent is voluntary and can be withdrawn at any time.
  • Processed data: Email address.
  • Retention period: Until you withdraw your consent. You can withdraw consent by clicking the unsubscribe link in each email sent.

C. Website Traffic Analysis and Functionality (Cookies)

  • Purpose: Ensuring Website functionality, traffic analysis, and measuring user activity on the website.
  • Legal basis:
    1. Technically essential cookies: Art. 6 (1) (f) GDPR – Legitimate interest (ensuring proper website functionality).
    2. Analytical and marketing cookies: Art. 6 (1) (a) GDPR – Consent of the data subject, granted via the cookie bar (banner).
  • Processed data: Device data, (anonymized) IP address, website behavior data.
  • Retention period: The period varies depending on the cookie type. Detailed information about individual cookies, their purposes, and validity periods can be found in a separate document “Cookie Policy” or in the cookie bar settings.

III. Recipients and Processors

We protect your personal data and do not provide it to third parties unless necessary. To ensure our operations, we use verified partners (processors) who provide us with services and are contractually obliged to protect your data in accordance with GDPR.

These mainly include the following categories of recipients:

  1. Providers of technical infrastructure and web hosting services.
  2. Providers of services for email communication and newsletter distribution.
  3. Providers of analytical and statistical tools.
  4. Public authorities (e.g., courts, police) in the case of fulfilling our legal obligations.

When using certain processors (especially for analysis and marketing), data may be transferred to third countries outside the European Economic Area (e.g., to the USA). Such transfers are always carried out in accordance with Chapter V of the GDPR, particularly based on standard contractual clauses approved by the European Commission or other appropriate safeguards.

IV. Rights of the Data Subject

As a data subject, you have the following rights regarding the processing of your personal data:

  1. Right of access (Art. 15 GDPR): The right to obtain confirmation as to whether and what data concerning you we are processing.
  2. Right to rectification (Art. 16 GDPR): The right to rectify inaccurate or complete incomplete data.
  3. Right to erasure (“right to be forgotten”) (Art. 17 GDPR): The right to have data erased under specified conditions (e.g., if you withdraw consent or the data is no longer necessary).
  4. Right to restriction of processing (Art. 18 GDPR): The right to request restriction of processing under specified conditions.
  5. Right to data portability (Art. 20 GDPR): The right to receive the data you have provided to us in a machine-readable format (applies to data processed based on consent or a contract).
  6. Right to withdraw consent at any time (Art. 7 (3) GDPR): If processing is based on consent, you have the right to withdraw it at any time.
  7. Right to object to processing (Art. 21 GDPR): If we process data based on legitimate interest, you have the right to object to it.

You can exercise your rights by sending a request to our email: info@tutopasta.sk.

Right to Lodge a Complaint

If you believe that the processing of your personal data is in violation of legislation, you have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection of the Slovak Republic Hraničná 12 820 07 Bratislava 27 Web: www.dataprotection.gov.sk

V. Data Security

We have implemented appropriate technical and organizational measures to ensure the protection of personal data against loss, misuse, or unauthorized access, including the use of an SSL certificate on the Website, access management, and other security procedures.

VI. Final Provisions

  1. This Policy is valid and effective from the date of its publication on the Website.
  2. The Operator is entitled to unilaterally change or supplement this Policy at any time. The current version is always available on the Website.
  3. By using the Website, submitting a form, or subscribing to the newsletter, you confirm that you have read and understood this Policy.