Privacy Policy
PROTECTION OF PERSONAL DATA AND INSTRUCTION ON COOKIES
Principles and instructions regarding the protection of personal data provided to the data subject by the operator when collecting personal data from the data subject, and instructions regarding cookies on the www.nexxusbio.com online store
I. Operator
1.1.Identity and contact details of the Operator are:
Business name: Nexxus s. r. o.
Address: Nám. SNP 465, Skačany 958 53, Slovak Republic
Registered in the Commercial Register of the District Court of Žilina, Section Sro, Insert No. 90559/L
ID No.: 57 511 101
VAT number: 2122784741
Bank account: SK91 0900 0000 0052 4615 4416
The seller is not a payer of value added tax
1.2. The email and telephone contact of the Controller is:
Email: info@nexxusbio.com
Phone number: 0914 555 001
1.3. Address of the Controller for sending documents:
Nexxus s.r.o., Záhradnícka 1744, 958 01 Partizánske, Slovakia
1.4. The operator hereby provides, in accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter referred to as the „Regulation“), and in accordance with Act No. 18/2018 Z. z. Act on the Protection of Personal Data and on Amendments to Certain Acts in the Current Version and in accordance with Act No. 452/2021 Z. z. Act on Electronic Communications in the Current Version, the Data Subject – (the Buyer), from whom the Operator (the Seller) obtains personal data concerning him/her, is provided with the following information and explanations:
II. References
2.1.These principles and instructions regarding the protection of personal data form part of the General Terms and Conditions published on the Seller’s Website.
2.2. The trader informs consumers that there are no special relevant codes of conduct to which the Seller has committed to comply, whereby a code of conduct is understood to be an agreement or set of rules that define the Seller’s conduct that has committed to comply with this code of conduct in relation to one or more specific business practices, or business sectors, if these are not stipulated by law, or other legislation or measure of a public authority that the Seller has committed to comply with, and the manner in which the consumer can become acquainted with them or obtain their text.
III. Duration period
3.1. Personal data of the Data Subject is kept by the Operator only for the period necessary for the fulfillment of the contract and its subsequent archiving in accordance with the statutory deadlines imposed on the Operator by law. In the event that the Data Subject has consented to the sending of promotional emails and similar offers, the Data Subject’s personal data shall be processed for these purposes until the Data Subject revokes their consent. However, for a maximum period of 5 years.
IV.Personal data processed
4.1. The operator processes the following personal data on its website: name, surname, place of residence, email address, home phone number, mobile phone number, billing address, delivery address; data obtained from cookies files, IP addresses.
V.Contact details of the responsible person for the supervision of the protection of personal data
5.1.The operator has not appointed a responsible person for the protection of personal data in accordance with Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
5.2.The Operator is also the Seller within the meaning of the term stipulated in the General Terms and Conditions of this website.
VI. Purposes of processing the Personal Data of the Data Subject and the period of processing of the Personal Data
6.1. The purposes of processing the Personal Data of the Data Subject are mainly:
6.1.1. recording, creation and processing of contracts and client data for the purpose of concluding contracts with third parties.
6.1.2. processing of accounting documents and documents related to the Operator’s business activities.
6.1.3. compliance with legal regulations regarding the archiving of documents and records, e.g. pursuant to Act No. 431/2002 Coll., the Accounting Act as amended, and other relevant regulations.
6.1.4. activity of the Controller in connection with the fulfillment of the request, order, contract and similar institutions of the Data Subject.
6.1.5. Newsletter, marketing and similar advertising activities of the Controller. In the event of the consent of the Data Subject to the Controller regarding marketing and similar advertising activities.
VII. Legal basis for the processing of the Personal Data of the Data Subject
7.1. In the event that the Controller processes personal data based on the consent of the Data Subject, this processing will only be initiated after the consent of the Data Subject has been granted.
7.2. In the event that the Controller processes the Personal Data of the Data Subject for the purposes of negotiating pre-contractual relations and concluding and fulfilling a purchase contract, and the related delivery of goods, products or services, the Data Subject is obliged to provide the Personal Data for the proper execution of the purchase contract; otherwise, the execution of the contract cannot be ensured. Personal Data for this purpose are processed without the consent of the Data Subject.
VIII. Recipients or categories of recipients of personal data
8.1. The recipients of the Personal Data of the Data Subject will be or at least may be:
8.1.1. statutory authorities or their members of the Operator.
8.1.2. persons performing work in an employment or similar relationship for the Operator.
8.1.3. business representatives of the operator and other persons cooperating with the Operator in fulfilling the Operator’s tasks. For the purposes of this document, all natural persons performing dependent work for the Operator on the basis of an employment contract or agreements on work performed outside the employment relationship shall be considered employees of the Operator.
8.1.4. Recipients of the Personal Data of the Data Subject will also be the employees of the operator, its business partners, suppliers and contractual partners, namely: an accounting company, a company providing services related to the creation and maintenance of software, a company providing legal services to the operator, a company providing advice to the operator, companies providing transportation and delivery of products to buyers and third parties, marketing companies, companies operating social networks, companies providing payment gateways and other payment methods.
8.1.5. The recipients of personal data will also be courts, law enforcement authorities, the tax office and other state authorities, if so provided by law. The personal data will be provided by the Operator to those authorities and state institutions on the basis and in accordance with the laws of the Slovak Republic.
8.1.6. List of third parties – intermediaries and recipients who process the Personal Data of the Data Subject:
Slovenská pošta, a.s., Partizánska cesta 9, 975 99 Banská Bystrica, ID: 36631124 – the third entity providing transport services
Direct Parcel Distribution SK, s.r.o., with registered office at Technická 7, 82104 Bratislava, ID No.: 35834498 – a third entity providing transport services
General Logistics Systems Slovakia s.r.o., Budča 1039, 962 33 Budča, Slovak Republic – the third entity providing transport services
Packeta Slovakia s. r. o., with its registered office at Sliačska 1E 831 02 Bratislava – New Town municipal district, company ID: 48136999 – the third entity providing transport services
Slovak Parcel Service s.r.o., with its registered office at Senecká cesta 1, 900 28 Ivanka pri Dunaji
ID No.: 31329217 – the third entity providing transport services
MA-LA Účtovníctvo, s.r.o., Eugena Salzbergera 2353/2 95801 Partizánske – the third entity providing accounting services
IX. Information on the provision of personal data to third countries and the period of their retention:
9.1. Applies. The operator transfers personal data of individuals in the form of cookies to third countries to entities:
GOOGLE Pixels: Google HQ. 1600 Amphitheatre Parkway. Mountain View, CA 94043, USA. For more information about privacy, please see:
X. Instruction regarding the existence of the Relevant Rights of the Data Subject:
10.1. The data subject has, among other things, the following rights, namely:
10.1.1. Clause 10.1 does not affect the other rights of the Data Subjects.
10.1.2. Right of the Data Subject to Access to Data under Article 15 of the Regulation, whose content is:
the right to obtain from the Operator confirmation of whether personal data concerning the Data Subject are being processed, and if so, to what extent; at the same time, if they are being processed, I have the right to ascertain their content and request information from the Operator regarding the reason for their processing;, especially information aboutThe reasons for their processing, categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations, the estimated period of retention of personal data, or, if this is not possible, information on the criteria for determining it, the existence of a right to request from the Controller rectification of personal data concerning the Data Subject or their deletion or restriction of processing, and the existence of a right to object to such processing, the right to lodge a complaint with a supervisory authority if the personal data were not obtained from the Data Subject, any available information regarding their source, the existence of automated decision-making, including profiling referred to in Article 22(1) and (4). Regulations and, in these cases, at least meaningful information about the procedure used, as well as the significance and the expected consequences of such processing of personal data for the Data Subject, regarding the appropriate safeguards under Article 46 of the Regulation concerning personal data if personal data are transferred to a third country or an international organization.
10.1.3. the right to be provided with a copy of the personal data that is being processed, subject to the condition that the right to be provided with a copy of the processed personal data must not have adverse consequences on the rights and freedoms of others.
10.1.4.The right of the Data Subject to rectification pursuant to Article 16 of the Regulation, the content of which is the right: for the Controller to rectify without undue delay any inaccurate personal data concerning the Data Subject. The right to supplement incomplete personal data of the Data Subject, including by providing an additional declaration by the Data Subject; the right of the Data Subject to erasure of personal data (so-called „right to be forgotten“) pursuant to Article 17 of the Regulation, the content of which is:
10.1.5. the right to obtain from the Controller without undue delay the erasure of personal data concerning the Data Subject if one of the following reasons applies:
personal data are no longer necessary for the purposes for which they were collected or otherwise processed; the data subject withdraws consent on the basis of which the processing is carried out, subject to the condition that there is no other legal basis for the processing of personal data; the data subject objects to the processing of personal data pursuant to Article 21(1) of the Regulation and there are no overriding legitimate grounds for the processing of personal data, or the data subject objects to the processing of personal data pursuant to Article 21(2) of the Regulation; the personal data were processed unlawfully; the personal data must be erased in order to comply with a legal obligation under European Union law or the law of the Member State to which the Controller is subject; the personal data were collected in connection with the provision of information society services pursuant to Article 8(1) of the Regulation;
10.1.6. the right for the Controller who disclosed the personal data of the Data Subject to take appropriate measures, taking into account available technology and the cost of implementing measures, to inform other controllers who process personal data that the Data Subject requests that they delete all references to such personal data, their copies or replicas;, it is nevertheless the case that the right to delete personal data containing rights under Article 17(1) and (2) of the Regulation applies it will not be created unless the processing of personal data is necessary:
10.1.7. to exercise the right to freedom of expression and information.
10.1.8. for compliance with a legal obligation requiring processing under the law of the European Union or the law of the Member State to which the Controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.
10.1.9. for reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) of the Regulation, as well as Article 9(3) of the Regulation.
10.1.10. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the Regulation, provided that the right referred to in Article 17(1) of the Regulation is likely to render impossible or seriously impair the achievement of the objectives of such processing of personal data; or for the establishment, exercise or defense of legal claims;
10.1.11.the right of the Data Subject to restrict the processing of personal data pursuant to Article 18 of the Regulation, the content of which is:
10.1.12. the right to have the Controller restrict the processing of personal data in one of the following cases: The data subject challenges the accuracy of the personal data, for a period allowing the Controller to verify the accuracy of the personal data; the processing of the personal data is unlawful and the data subject objects to the deletion of the personal data and requests instead the restriction of their use; the Controller no longer needs the personal data for the purposes of processing, but the data subject needs them to establish, exercise or defend legal claims; the data subject has objected to the processing pursuant to Article 21(1) of the Regulation, until the verification of whether the legitimate reasons of the Controller outweigh the legitimate reasons of the data subject;
10.1.13. the right to, in the event that the processing of personal data has been restricted, such restricted personal data shall be processed only with the consent of the Data Subject or for the purpose of establishing, exercising or defending legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State;
10.1.14. the right to be informed in advance about the cancellation of the restriction on the processing of personal data;
10.1.15. the right of the Data Subject to fulfill the reporting obligation towards recipients pursuant to Article 19 of the Regulation, the content of which is: the right for the Controller to notify each recipient to whom personal data have been provided of any rectification or deletion of personal data or restriction of processing carried out pursuant to Article 16, Article 17(1) and Article 18 of the Regulation, unless this proves impossible or requires disproportionate effort; the right for the Controller to inform the Data Subject about these recipients if the Data Subject so requests;
10.1.16.the right of the Data Subject to data portability under Article 20 of the Regulation, which is: the right to obtain personal data concerning the Data Subject and provided to the Controller in a structured, commonly used and machine-readable format and the right to transfer these data to another controller without the Controller’s hindrance, if:
a/ the processing is based on the consent of the Data Subject pursuant to Article 6(1)(a) of the Regulation or Article 9(2)(a) of the Regulation, or on a contract pursuant to Article 6(1)(b) of the Regulation, and simultaneously
b/ the processing is carried out using automated means, and at the same time:
10.1.17. the right to obtain personal data in a structured, commonly used and machine-readable format and the right to transfer these data to another controller without the Controller being prevented from doing so shall not have adverse consequences on the rights and freedoms of others;
10.1.18. the right to transfer personal data directly from one controller to another controller, insofar as it is technically possible;
10.1.19.the right of the Data Subject to object pursuant to Article 21 of the Regulation, the content of which is:
10.1.20. the right to object at any time, for reasons related to the specific situation of the Data Subject, to the processing of personal data concerning them that is carried out on the basis of Article 6(1)(e) or (f) of the Regulation, including objecting to profiling based on those provisions of the Regulation;
10.1.21. In the event of exercising the right, the Data Subject may at any time object on grounds related to the specific situation of the Data Subject to the processing of personal data concerning them, which is carried out on the basis of Article 6(1)(e) or (f) of the Regulation, including objecting to profiling based on these provisions of the Regulation. The Data Subject has the right to require the Controller not to further process the Data of the Data Subject unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights and freedoms of the Data Subject, or reasons for establishing, exercising or defending legal claims.
10.1.22. the right to object at any time to the processing of personal data concerning the Data Subject for direct marketing purposes, including profiling to the extent that it relates to direct marketing; however, if the Data Subject objects to the processing of personal data for direct marketing purposes, the personal data may no longer be processed for such purposes;
10.1.23. in connection with the use of information society services, the right to exercise the right to object to the processing of personal data by automated means using technical specifications;
10.1.24. the right to object, on grounds relating to the specific situation of the Data Subject, to the processing of personal data concerning the Data Subject, if the personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the Regulation, except in cases where processing is necessary for the performance of a task carried out in the public interest;
10.1.25.the right of the Data Subject related to automated individual decision-making pursuant to Article 22 of the Regulation, the content of which is:
10.1.26. the right not to be subject to a decision that is based solely on automated processing of personal data, including profiling, and that has legal effects that affect or similarly significantly affect the data subject, except in cases under Article 22(2) of the Regulation [i.e., except in cases where the decision is: (a) necessary for the conclusion, or performance of a contract between the data subject and the Controller,
10.1.27. authorized by the law of the European Union or the law of the Member State to which the Controller is subject, and which also sets out appropriate measures guaranteeing the protection of the rights and freedoms and legitimate interests of the Data Subject, or (c) based on the explicit consent of the Data Subject.
XI. Instruction regarding the Right of the Data Subject to Revoke Consent to the Processing of Personal Data:
11.1. The data subject is entitled at any time to withdraw their consent to the processing of personal data, without this affecting the lawfulness of the processing of personal data based on the consent granted before its withdrawal.
The data subject is at any time entitled to revoke their consent to the processing of personal data – in full or only in part. Partial revocation of consent to the processing of personal data may apply to a specific type of processing operation/processing operations, while the legality of the processing of personal data in the scope of the remaining processing operations remains unaffected. Partial revocation of consent to the processing of personal data may apply to a specific specific purpose of the processing of personal data/specific specific purposes of the processing of personal data, while the legality of the processing of personal data for other purposes remains unaffected.
The Data Subject may exercise the right to withdraw consent to the processing of personal data in writing at the address of the Controller registered as its registered office in the Commercial Register at the time of withdrawing consent to the processing of personal data, or in electronic form via electronic means (by sending an email to the Controller’s email address provided for identifying the Controller in this document).
XII. Instruction on the Right of the Data Subject to File a Complaint with the Supervisory Authority:
12.1. The data subject has the right to lodge a complaint with the supervisory authority, in particular in the Member State of his/her habitual residence, place of work or the place of the alleged infringement, if he/she considers that the processing of personal data concerning him/her is contrary to the Regulation, without prejudice to any other administrative or judicial remedy.
The data subject has the right to be informed by the supervisory authority to which the complaint was submitted about the progress and outcome of the complaint, including the possibility of submitting a judicial remedy in accordance with Article 78 of the Regulation.
12.2.The supervisory authority in the Slovak Republic is the Office for the Protection of Personal Data of the Slovak Republic, Galvani Business Center II; Galvaniho 7/B; 821 04 Bratislava, Slovakia.
Phone contact: + 421 2 32 31 32 14, Email: statny.dozor@pdp.gov.sk,
XIII. Information related to automated decision-making, including profiling:
13.1. Since in the case of the Controller, the processing of the Data Subject’s personal data in the form of automated decision-making, including profiling referred to in Article 22(1) and (4) of the Regulation, the Controller is not obliged to provide the information pursuant to Article 13(2)(f) of the Regulation, i.e. information about automated decision-making, including profiling, and about the procedure used, as well as about the purpose and anticipated consequences of such processing of Personal Data for the Data Subject. It does not apply.
XIV. Protection of personal data and use of cookies. Information and explanation of cookies, scripts, and pixels
14.1. The operator of the website provides this brief explanation of the functions of cookies, scripts and pixels:
14.1.1. Cookies are text files that contain a small amount of information that is downloaded to your device when you visit a website. Thanks to this file, the website stores information about your actions and preferences for a certain period of time (such as login name, language, font size, and other display settings), so you do not have to re-enter them when you visit the website again or browse its individual pages.
A script is a portion of the program code that is used to properly and interactively function the website. This code is executed on the operator's server or on your device.
Pixels are small, invisible text or image on a website that is used to monitor website traffic. In order for this to happen, various data is stored through pixels.
14.1.2. Cookies are divided
Necessary cookies – they ensure the proper functioning of the Operator’s website and its use. These cookies are used without consent.
Functional cookies – relate to user choices regarding the use of cookies on the website, including the ability to accept, reject, or customize cookie settings based on their privacy preferences.
Statistical cookies – The operator collects statistics regarding the use of its websites. These cookies are used only with consent.
Advertising cookies – Used to create advertising profiles and similar marketing activities. These cookies are used only with consent.
14.2. How to control cookies:
14.2.1. You can manage cookies to control and/or delete at discretion – see details on the page aboutcookies.org. You can delete all cookies stored on your computer or other device, and you can set most browsers to prevent them from being stored.
14.3.1. Used cookies
Necessary cookies
wp_woocommerce_session_[abcdef0123456789]{32}
First page 2 days Used to identify the user on the website.
woocommerce_items_in_cart
First page of the Relácia Pomáha WooCommerce to determine when the content/basket data changes.
woocommerce_cart_hash
First page of the Relácia Pomáha WooCommerce to determine when the content/basket data changes.
woocommerce_recently_viewed
First page Live Stream Drive widget Last viewed products
Functional cookies
wishlist_cleared_time
More information nexxusbio.com / First-party 1 week This cookie records when the user last removed items from their wish list, thereby improving the user experience by managing the wish list features.
woodmart_recently_viewed_products
More information nexxusbio.com / First-party 1 week This cookie is used to store the list of products last viewed, thereby improving the browsing experience by allowing users to easily return to the products they were interested in.
woodmart_wishlist_count
More information nexxusbio.com / First-party 1 week This cookie is used to track the number of items in the user's wish list on the website.
Statistical cookies
sbjs_migrations
First-party tracking This cookie is used to track user interactions and migrations between different pages or sections of a website in order to improve the user experience and analyze the performance of the website.
sbjs_first_add
First-party tracking This cookie is used to store details about a user's first visit to the website, including the timestamp, referring page, and traffic source, in order to assess the effectiveness of marketing campaigns and the website's resources.
sbjs_current
First-party tracking This cookie is used to track the activities and interactions of users on the website in order to facilitate a better analysis and understanding of the sources of traffic and user behavior.
sbjs_first
First-party tracking This cookie is used to store information about the user's first session on the website. It tracks details such as the source from which the user came, the path they chose, which search engine and keyword were used, and their position at the time of the first visit. This information is used to analyze and improve the performance of the website by understanding user behavior.
sbjs_session
First-party 29 minutes 53 seconds This cookie is used to track user activity and sessions in order to improve the performance and usability of the website, which helps to understand how visitors interact with the website.
sbjs_current_add
First-party Session This cookie is used to store information about the current visit in order to distinguish between users and sessions. It usually contains details such as the source of traffic, campaign data, and user behavior that help track and analyze the effectiveness of marketing campaigns.
sbjs_udata
First-party tracking This cookie is used to store user-specific data that helps monitor and analyze the effectiveness of advertising campaigns and optimize the user experience on the website.
14.3.2 Cookies made available to third parties:
Google HQ. 1600 Amphitheatre Parkway. Mountain View, CA 94043, USA. For more information about privacy, please see:
XV. Final provisions
15.1.These Privacy and Cookie Policy and the Cookie Policy form an integral part of the General Terms and Conditions and the Complaints Procedure. Documents – The General Terms and Conditions and the Complaints Procedure of this Website are published on the Website domain of the Seller.
15.2.These Privacy Policy come into force and effect upon their publication on the Seller’s Website. on 09.04.2026
This e-shop is certified https://www.pravoeshopov.sk