• Introduction
  • Principles of processing and protection of personal data

Principles of processing and protection of personal data

This Policy is drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data within the meaning of Articles 13 and 14 of the Regulation (hereinafter referred to as "GDPR") and Act No. 18/2018 Coll. on the Protection of Personal Data (hereinafter referred to as "Personal Data Protection Act")

Pursuant to Article 6(1) lit. b) of the General Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, the Seller as the controller will process the Buyer's personal data without the consent of the Buyer as a data subject in the process of concluding the Purchase Contract, as the processing of the Buyer's personal data will be carried out by the Seller in pre-contractual relations with the Buyer and the processing of the Buyer's personal data is necessary for the performance of the Purchase Contract, in which the Buyer acts as one of the parties.

Internet commerce (hereinafter referred to as "e-shop") can be defined as the sale of goods or services using information and communication technologies and web applications in the Internet environment, where on one side of this relationship is the operator of the e-shop and on the other side is the customer of the e-shop (hereinafter referred to as "the customer"). When making a purchase in an e-shop, a purchase contract is concluded between the operator and the customer via the Internet (distance contract. Such a contract also includes the collection of information, including personal data of the customer in the following scope: title, name, surname, residential address, or delivery address, email, telephone, content of the order, personal data necessary to make a payment via the Internet.

The Seller undertakes to treat and dispose of the Buyer's personal data in accordance with the applicable laws of the Slovak Republic.

The Seller declares that personal data will be collected solely for the purposes set out in this Privacy Policy

The Seller represents that it will ensure that personal data is processed and used only in a manner that is consistent with the purpose for which it was collected and that it will not combine it with personal data that was collected for other purposes.

1. The controller of the personal data

The controller of the personal data is the operator of the e-shop:

business name: PerBiotiX s. r. o.

registered office: Palárikova 2657, 022 01 Čadca

ICKO: 53 074 980

registration in the Commercial Register of the District Court of Žilina, Section: Sro, Insert No. 74727/L

legal form: Spol. s r. o.

Statutory body of the operator:

  • MVDr. Alojz Bomba , DrSc.- managing director
  • Ing. Norbert Bomba - managing director
  • Martin Haranta - Managing Director

email: [email protected]

Phone number: +421 904 488 822

2. Responsible person

No responsible person has been appointed, as we are not obliged to do so under the GDPR.

3. Automated decision-making and profiling

Your personal data will not be used for automated individual decision-making, including profiling.

4. Transfer of personal data to third countries

The controller does not provide, disclose or transfer personal data to third countries

5. Security of processing of personal data

The controller declares that it has taken appropriate personal, technical and organisational measures to ensure the protection of personal data.

6. Purpose of the processing of personal data:

The data provided by the purchaser is necessary for the processing and processing of the order, the issue of the invoice, the conclusion of the purchase contract and subsequent payment, the delivery of the goods or services and the possible provision of other related services (in particular in connection with consumer protection legislation).

Order processing - We process your personal data for the purpose of concluding a contract between you, as our customer and potential customer, and us, as supplier, when you use our services. In this case, personal data is only processed to the extent that is necessary for the conclusion and performance of the relevant contract. This includes, in particular, the performance of the subject matter of the contract, customer support, contract administration.

For this purpose, the provision of your personal data is completely voluntary, but is necessary for the conclusion of the contract and its subsequent administration. If the buyer does not provide the necessary data, the seller has the right to cancel the order. The buyer undertakes to provide truthful information when making a purchase in the e-shop. Providing false information is in violation of the general terms and conditions of the e-shop.

Communication and customer support. For example, we may contact you for the following reasons:

  • To help you complete your order,
  • providing information about the current status of your request, order or complaint
  • obtaining other necessary information

Customer marketing communication / NEWSLETTER: sending news and information via email - newsletter - to registered subscribers. This involves the processing of the following data.

  • name
  • e-mail address
  • telephone number

Registration form: the customer has the opportunity to register in the e-shop, the registered customer has the opportunity to benefit from the advantages offered by the e-shop. The following data is processed:

  • first name, last name
  • address
  • telephone number
  • e-mail address
  • password

Review: the e-shop visitor has the opportunity to share his/her experience with the product by filling in the review form. This is the processing of the following data:

  • IP address
  • name
  • photo

Contact form: through the contact form, the customer can contact the e-shop operator more quickly and thus speed up the processing of their request. The processing of the following data:

  • name
  • e-mail address
  • phone number

Consultation form: the e-shop visitor has the possibility to consult a specialist about his/her health problems by filling in the consultation form. The following data is processed:

  • e-mail address
  • name, surname
  • phone number

Questionnaire (medical history): As part of the microbiome analysis, the customer has the possibility to fill in a questionnaire that can help in comparing the microbiome and the customer's health... This involves the processing of the following data:

  • e-mail address
  • name, surname
  • telephone number
  • address
  • gender
  • age
  • weight, height
  • details of health problems

Consumer competition: Organising competitions through online shops or social networks. It is the processing of the following data:

  • first name, last name
  • delivery address
  • email address
  • telephone number

when operating a profile on social networks (Facebook, Instagram, YouTube, LinkedIn ), we are interested in raising awareness of the operator in the online environment and communicating with customers.

The personal data you post on our social networking sites such as comments, likes, videos, pictures, etc. will be published via the social networking platform. We do not subsequently process the personal data for any other purpose.

The data subject has the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her. You can send your objections to

by e-mail to the contact address of the controller [email protected]

Social network operators have their own adopted rules, service infrastructure and their own provisions on data protection. We have no influence on the data transfer and use of your data by social network operators We recommend that you familiarize yourself with the privacy policy of the social network platform provider:

In certain processing operations, we act as joint controllers with social network operators within the meaning of Article 26(4) of the GDPR.

There is no automated individual decision-making on the part of the controller within the meaning of Article 22 GDPR .

7. Legal basis for the processing of personal data:

Article 6(1)(a) Your consent to the processing of personal data for the purpose of providing direct marketing

Article 6(1) (b) The processing is necessary for the performance of a contract to which the data subject is a party, or to carry out pre-contractual measures at the request of the data subject, since the ordering of goods (pre-contractual relationship) most often involves the conclusion of a purchase contract carried out via the Internet (concluded remotely between the operator of the online shop and the data subject, and the subsequent payment, delivery of goods or services, handling of complaints, etc.).), the processing of the customer's personal data without the customer's consent is thus carried out.

Article 6(1)(c) The processing is necessary for the fulfilment of the legal obligation of the controller for the purpose of invoicing, record keeping and other necessary related legal obligations of the online shop operator when processing the personal data of the data subject.

Article 6(1)(f) processing is necessary for the purposes of the legitimate interests of the controller or of a third party concerned, except where those interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data

Social network cookies: these cookies collect information about your use of social networks for the purpose of creating your profile (without directly storing your personal data, but based on the unique identification of your browser and the device through which you visited the website).

8. Range of data subjects:

Customers of the e-shop (visitors to the website)

9. Personal data that we process automatically:

The website operator provides the following brief explanation of the function of cookies, scripts and pixels:

Cookies are text files that contain small amounts of information that are downloaded to your device when you visit a website. This file allows the website to store information about your actions and preferences (such as login name, language, font size and other display settings) for a certain period of time so that you do not have to re-enter them the next time you visit the website or browse its individual pages

A script is a piece of program code that is used to make a website function properly and interactively. This code runs on the operator's server or on your device.

Pixels is a small, invisible text or image on a web page that is used to monitor traffic to a website. In order for this to happen, various data is stored via pixels.

Cookies are divided into

Necessary cookies: are cookies without which our website would not function or without which the proper use of this website would not be possible. These cookies are automatically placed on your device and cannot be switched off. Necessary cookies cannot identify you and are only used to guarantee the correct display and functioning of our website.

Analytical cookies: allow us to carry out various statistical analyses of our website. These cookies are used in an anonymised form, which means that they cannot identify you. You can disable the use of these cookies in your web browser.

Marketing cookies: are used to carry out personalised advertising services. They do not directly store personal data, but are based on the unique identification of your browser and internet device. We would like to point out that refusing the use of these cookies will not prevent the display of advertisements on the website, but they may no longer be relevant to your interests.

How to control cookies:

You can control and/or delete cookies at your discretion - see aboutcookies.org for details. You can delete any cookies stored on your computer or other device, and you can set most browsers to prevent them from being stored.

3.3.The Operator's website uses the following cookies,:

All cookies used by the Operator can be found at https://www.cookieserve.com/ by entering the Operator's web address [email protected]

10. How long do we process personal data? Providing information to a third party.

The Controller stores personal data:

For as long as necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and to assert a claim arising from that contractual relationship.

After the expiration of the retention period of personal data resulting from Act No. 395/2002 Coll., the Act on Archives and Registers and on the Amendment of Certain Acts, the controller shall delete the personal data.

11. Recipients of personal data

The recipient is anyone to whom the personal data is disclosed, regardless of whether he or she is a third party. A public authority which processes personal data on the basis of a special regulation shall not be considered a recipient.

They are persons/entities involved in the delivery of goods, services, making payments, analysis and production of probiotics on the basis of a contract: 

  • Direct Parcel Distribution SK s. r. o. (Receipt, processing and delivery of parcels, SMS notification to the recipient of the parcel)
  • Packeta Slovakia s.r.o. (Receipt, processing and delivery of parcels, SMS notification to the recipient of the parcel)
  • Comgate payment gateway – www.comgate.cz/cz/platebni-brana (Online payment security on the Internet– payment methods: card payments and bank transfers) Contact:
    Comgate, a.s., Gočárova třída 1754 / 48b, Hradec Králové, Czech Republic, Email: [email protected], Phone: +420 228 224 267
  • Biovis´ Diagnostik MVZ GmbH, Brüsseler Str. 18, 655 52 Limburg-Eschhofen, Germany - www.biovis.eu/en (Stool analysis company)
  • Microbiome Center BV, located at Bunuelstrook 101, 2726 SB Zoetermeer, Netherlands, KvK 70245304 - microbiome-center.nl (Company providing production of probiotics)
  • grandaliro s.r.o. Kvetná 16, 821 08 Bratislava - Slovakia, ID: 46 335 064 (marketing company setting up campaigns)
  • Blueweb s. r. o., M. R. Štefánika 13, 010 01 Žilina - Slovakia, ID No: 46219765 (provides IT support - i.e. web, back office and databases)

12. What rights do you have in connection with the processing of your personal data?

The proper processing of your personal data is important to us and its protection is a matter of course. You can exercise the following rights when processing your personal data:

Information about the processing of your personal data
The information contains in particular the identity and contact details of the controller, the purposes of the processing, the categories of personal data concerned, the recipient or categories of recipients of the personal data, information on the transfer of personal data to third countries, the retention period of the personal data, the authorised controllers, an enumeration of your rights, the possibility of contacting the Data Protection Authority, the source of the personal data processed, information on whether and how automated decision-making and profiling takes place.

Right of access to personal data
You have the right to confirm whether or not personal data are being processed and, if so, to access information about the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients, the period of retention of the personal data, information about your rights, thethe right to lodge a complaint with the Data Protection Authority, information on the source of the personal data, information on whether automated decision-making and profiling takes place, information and safeguards in the event of a transfer of personal data to a third country or an international organisation. You have the right to be provided with copies of the personal data processed.

Right to rectification
Are we processing your outdated or inaccurate personal data? For example, have you changed your email? Please inform us and we will correct the personal data.

Right to erasure (right to be forgotten)
In certain cases stipulated by law, we are obliged to delete your personal data on your instruction. However, each such request is subject to an individual assessment as to whether the conditions are met, because, for example, the controller may have an obligation or legitimate interest, if it outweighs your interests, to retain the personal data.

Right to restriction of processing
If you wish us to process your personal data solely for the most necessary lawful reasons or to block the personal data.

Right to data portability
If you wish us to provide your personal data to another controller, another company, we will transfer your personal data in the appropriate format, provided that no legal or other significant obstacles prevent us from doing so, to the entity designated by you.

Right to object
If you become aware or believe that we are processing personal data in breach of the protection of your private and personal life or in breach of the law, please contact us and ask us to explain or remedy the non-compliant situation that has arisen.

Right to lodge a complaint with the Data Protection Authority
You may at any time address your complaint or complaint regarding the processing of personal data to the supervisory authority, namely the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, ID No.: 36 064 220, telephone No.: +421/2/3231 3220, website https://dataprotection.gov.sk/uoou/

13. How can you exercise your rights?

You can contact us with your request in any of the following ways:

By email: [email protected]

by post to our registered office at Palárikova 2657, 022 01 Čadca - Slovakia 

electronically by clicking on the following links:
- Data subject's request for exercising rights :
- Objection to the processing of personal data by the data subject:
- withdrawal of consent to the processing of personal data
- the data subject's request concerning his or her personal data

14. How long can you expect a reply from the controller PerBiotiX s.r.o.?

We will provide you with a statement and, where applicable, information about the measures taken as soon as possible and at the latest within one month. We are entitled to extend the time limit by two months if necessary and in view of the complexity and number of requests. We will inform you of the extension, including the reason for it.

15. Where can you contact us?

If you have any questions or comments about this information obligation, please do not hesitate to contact us at any time by email to [email protected] or in writing to the following address: PerBiotiX s.r.o., Palárikova 2657, 022 01 Čadca - Slovakia, ID No.: 53 074 980