This Privacy Policy explains what personal data we process in connection with the
website fonsena.com (the "Site"), for what purpose, on what legal
basis, and what rights you have. We take privacy seriously and have designed the Site
to process as little data as possible.
1. Who we are (the controller)
Dosť Dobré s. r. o.
Sklenárova 1360/10, 821 09 Bratislava – Ružinov, Slovak Republic
Company ID (IČO): 55 854 532
Tax ID (DIČ): 2122112388
Registered in the Commercial Register of the Municipal Court Bratislava III,
Section: Sro, Insert No. 173678/B
Contact e-mail: wish@fonsena.com
2. What data we process
The Site is designed to be anonymous. We do not operate user accounts and we do not
store names, e-mail addresses, or the content of your wishes. Specifically, we process:
Payment data. Payments are handled by our payment provider, Stripe.
You enter your card details directly on Stripe's secure page; those details never reach
us and we do not store them. From Stripe we receive only confirmation that a payment was
made, its amount, currency, and a payment session identifier.
Server technical data. Our hosting server may automatically record,
in its operational logs, your IP address, the date and time of access, and basic technical
information about your browser. This data is used to keep the Site secure and functioning.
Anonymous usage statistics. We record that a wish occurred, when it
occurred, and whether a promo code was used. These records contain no information that
could identify you.
3. Purpose and legal basis
Processing payment and providing the service — legal basis:
performance of a contract (Art. 6(1)(b) GDPR).
Security and operation of the Site (server logs) — legal basis:
our legitimate interest in a secure and functioning service (Art. 6(1)(f) GDPR).
Accounting and tax records — legal basis: compliance with a legal
obligation (Art. 6(1)(c) GDPR).
4. Service providers and recipients
To operate the Site we rely on trusted providers who process data for us as processors
or as independent controllers:
Stripe (payment processing). Stripe processes payment data under its
own terms and privacy policy. See
stripe.com/privacy.
Hosting provider webhouse.sk, which operates the server the Site runs
on.
5. International data transfers
Because the service is available worldwide and payments are handled by Stripe, data may
be transferred to countries outside the European Economic Area (for example, the United
States). Such transfers take place under appropriate safeguards required by the GDPR, in
particular the Standard Contractual Clauses approved by the European Commission. Details of
Stripe's transfer safeguards are set out in its privacy policy.
6. How long we keep data
Server logs — for as long as necessary to keep the Site secure, generally short-term.
Payment records and related accounting documents — for the period required by Slovak
tax and accounting law (generally 10 years).
Anonymous usage statistics — indefinitely, as they contain no personal data.
7. Cookies
The visitor-facing part of the Site does not use tracking or marketing cookies. Stripe's
payment page may use its own cookies that are strictly necessary to process the payment and
prevent fraud; these are governed by Stripe's terms.
8. Your rights
To the extent we process your personal data, under the GDPR you have the right to:
access your data and information about how it is processed,
rectification of inaccurate data,
erasure ("right to be forgotten") and restriction of processing,
object to processing based on legitimate interest,
data portability,
lodge a complaint with a supervisory authority.
You can exercise your rights via the contact e-mail above. The supervisory authority in
Slovakia is the Office for Personal Data Protection of the Slovak Republic
(dataprotection.gov.sk).
If you are located elsewhere, you may also have the right to contact your local data
protection authority.
9. Changes to this Policy
We may update this Policy from time to time. The current version is always available on
this page, with its effective date shown.