MOVEMENTUM PRIVACY NOTICE

I. Basic Provisions

​

The data controller according to Article 4, point 7 of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”) is Simona Porubska, with permanent address at Kovacska 3,  052 01 (hereinafter referred to as the “controller”).

​

Controller contact details:

• Address: Kovacska 3, Spisska Nova Ves 052 01, Slovakia

• Email: simona@movementum.io

• Phone: 00421949480358

Personal data means all information about an identified or identifiable natural person; an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, network identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

​

II. Sources and Categories of Processed Personal Data

The controller processes personal data that you have provided or personal data obtained by the controller in connection with fulfilling your order.

The controller processes your identification and contact information as well as data necessary for performing the contract.

III. Legal Basis and Purpose of Processing Personal Data

The legal basis for processing personal data is:

• The performance of a contract between you and the controller pursuant to Article 6(1)(b) GDPR,

• The legitimate interest of the controller in providing direct marketing (especially sending commercial communications and newsletters) pursuant to Article 6(1)(f) GDPR,

• Your consent for processing for the purpose of direct marketing (especially sending commercial communications and newsletters) pursuant to Article 6(1)(a) GDPR in connection with § 7(2) of Act No. 480/2004 Coll., on certain information society services, in cases where no goods or services were ordered.

​

The purpose of processing personal data is:

• To process your order and exercise the rights and obligations arising from the contractual relationship between you and the controller; personal data required to successfully process the order (name,, contact) must be provided, as it is necessary for concluding and fulfilling the contract—without providing such data, it is not possible to conclude or perform the contract;

• To send commercial communications and conduct other marketing activities.

​

The controller does not perform automated individual decision-making within the meaning of Article 22 GDPR. You have given your explicit consent for such processing.

IV. Data Retention Period

The controller retains personal data:

 

• For the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and to enforce claims from these contractual relationships (for 15 years after the end of the contractual relationship),

• Until consent for processing personal data for marketing purposes is withdrawn, for a maximum of 5 years if personal data are processed based on consent.

​

After the retention period expires, the controller will delete the personal data.

V. Recipients of Personal Data (Controller’s Subcontractors)

Recipients of personal data are persons:

​

• Involved in delivering goods/services or processing payments under a contract,

• Involved in ensuring the operation of services,

• Providing marketing services.

VI. Your Rights

Under the conditions set out in the GDPR, you have:

• The right to access your personal data pursuant to Article 15 GDPR,

• The right to rectify your personal data pursuant to Article 16 GDPR, or to restrict processing pursuant to Article 18 GDPR,

• The right to erase your personal data pursuant to Article 17 GDPR,

• The right to object to processing pursuant to Article 21 GDPR,

• The right to data portability pursuant to Article 20 GDPR,

• The right to withdraw consent to processing in writing or electronically to the address or email of the controller listed in Section III.

​

Furthermore, you have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your personal data protection rights have been violated.

VII. Personal Data Security Conditions

The controller declares that all appropriate technical and organizational measures have been taken to secure personal data.

The controller has implemented technical measures to secure data storage and physical personal data storage.

The controller declares that only persons authorized by the controller have access to personal data.

VIII. Final Provisions

By submitting an order via the online order form, you confirm that you are familiar with the privacy policy and accept it in its entirety.

You agree to these terms by checking the consent box via the online form. By checking the box, you confirm that you are familiar with the privacy policy and accept it in full.

The controller is entitled to amend these terms. The new version of the privacy policy will be published on the controller’s website or sent to you at the email address you provided to the controller.

These terms take effect on 1s Novemember 2025.