Privacy policy (GDPR)

 

1. Data controller The controller of your personal data is Busta.sk s.r.o., owned by Mgr. art. Slavomír Gibej. If you have any questions about data processing, contact us at gibon@gibon.sk.

2. Types of data processed and purpose of processing We only process data that is necessary to provide our services and perform the contract. This mainly includes:

  • Identification and contact data: First name, surname, e-mail address, phone number and billing address. We use this data to communicate with you, process orders and issue invoices.
  • Photographs and visual materials: If you have consented, we process photos and videos of the process of making the work and of the finished work. These materials are used for documentation, promotional and marketing purposes.
  • Sensitive data: In the case of body casting, we also process data about physical appearance, which is considered a special category of personal data. We process this data solely for the purpose of artistic creation and only with your explicit consent, which you give when signing the contract.

3. Legal basis for processing We process your personal data on the basis of:

  • Performance of a contract: We process data so that we can fulfil our agreement, process your order and deliver the work to you.
  • Legitimate interest: We may use your contact details to inform you about our services unless you have asked us not to.
  • Consent: Data such as photographs and visual materials, as well as sensitive data about physical appearance, are processed only with your explicit consent. You can withdraw this consent at any time. Withdrawing consent does not affect the lawfulness of processing before its withdrawal.

4. Data retention period We keep personal data only for as long as necessary to fulfil the purpose for which it was obtained. We keep billing data for the period required by law (usually 10 years). Photographic and visual materials used for promotional purposes are kept for as long as your consent is valid.

5. Your rights Under the GDPR you have the right to:

  • Request access to your personal data.
  • Request correction of inaccurate or incomplete data.
  • Request erasure of your data if it is no longer needed for the purpose.
  • Restrict processing of your data.
  • Object to processing of your data.
  • Transfer your data to another controller.
  • Lodge a complaint with the Office for Personal Data Protection of the Slovak Republic if you believe your rights have been violated.