Privacy Policy

The controller of personal data processed in the ebook.aesa.sk shop is AESA Group, SE, Haanova 2601/46, 851 04 Bratislava, Slovakia, company ID (IČO) 55361731, registered in the Commercial Register of the Bratislava III Municipal Court, section Po, file 9084/B (“we” or “us”).

For any data protection matter, contact us by e-mail at support@aesa.sk or by phone at +421 948 665 355.

We process data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Act No. 18/2018 Coll. on Personal Data Protection.

• Buying an eBook: e-mail, name, billing address and country, and where applicable company name and VAT ID, amount, payment status and order number. You enter these on the Stripe payment page; Stripe passes them to us after payment. We never receive your card number. Purpose: concluding and performing the contract, delivering the eBook, creating the licence line with your e-mail in the PDF, proof of purchase, handling complaints and withdrawals.

• Downloading the eBook: number and time of downloads via your link. Purpose: enforcing the download limit and protecting the link against misuse.

• Free sample chapter: e-mail, language and time of request. Purpose: sending you the sample you requested.

• News by e-mail: e-mail, language and a record of when you gave and, if applicable, withdrew consent. Purpose: sending you information about new eBooks and editions, only if you ticked the separate optional box.

• Waiting list: e-mail, language and the book you are interested in. Purpose: notifying you when sales start.

• Communication with us: the content of e-mails you send to support@aesa.sk. Purpose: replying to you and handling your request.

• Technical data: IP address and server logs when you visit the site or submit a form. Purpose: security and operation of the shop, limiting the number of requests from one address and protecting forms against automated abuse.

• Performance of a contract and steps taken at your request before entering into it (Article 6(1)(b) GDPR): the order, delivery of the eBook and the licence line, the download record, complaints and withdrawals, sending the sample you requested, the launch notification for the waiting list and replies to your questions.

• Compliance with legal obligations (Article 6(1)(c) GDPR): accounting and tax records under Act No. 431/2002 Coll. on Accounting and Act No. 222/2004 Coll. on VAT, handling complaints under the Civil Code and keeping proof of consent to direct marketing under Act No. 452/2021 Coll. on Electronic Communications.

• Legitimate interests (Article 6(1)(f) GDPR): security of the shop, protection of links and forms against misuse, and establishing, exercising or defending legal claims.

• Consent (Article 6(1)(a) GDPR and Section 116(3) of Act No. 452/2021 Coll.): news by e-mail. Consent is voluntary and is not a condition for receiving the sample or making a purchase. You can withdraw it at any time via the link in any news e-mail or by writing to support@aesa.sk; withdrawal does not affect the lawfulness of processing before it. We will confirm the withdrawal within 30 days (Section 116(6) of Act No. 452/2021 Coll.).

• We may send Buyers offers of our own similar eBooks to the e-mail address obtained at purchase without separate consent, unless you have objected to this use. You can object at any time free of charge via the link in every such message or by writing to support@aesa.sk (Section 116(15) of Act No. 452/2021 Coll.).

Providing your e-mail is necessary to conclude the contract and to deliver the eBook or sample; without it we cannot deliver them. Billing details are required by law for issuing the proof of purchase.

We do not sell personal data. We share it only with the following recipients, to the extent needed for the relevant purpose:

• Stripe Payments Europe, Limited, Dublin, Ireland: payment processing and issuing the proof of purchase on our behalf. When processing the payment, Stripe acts as our processor; for its own purposes, in particular fraud prevention and its own legal obligations, it processes data as an independent controller under its privacy policy (stripe.com/privacy).

• A Google group company established in Ireland that provides the Google Cloud and Firebase services: website hosting, server functions, database and file storage. The database, functions and file storage are located in data centres in the European Union. Google acts as our processor.

• WebSupport s.r.o., Karadžičova 7608/12, 821 08 Bratislava, Slovakia: sending e-mails from service@aesa.sk and hosting the support@aesa.sk mailbox. It acts as our processor.

• Public authorities, for example the tax authority, a court or the Slovak Trade Inspection, where required by law.

We have contracts with our processors under Article 28 GDPR, usually in the form of their standard data processing terms.

Our databases and files are stored in the European Union. Stripe and Google may make data available to their group companies or subcontractors in the United States. For such transfers Stripe relies on the certification of Stripe, LLC under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision, and on standard contractual clauses approved by the European Commission.

Any transfer to a third country takes place only with safeguards under Chapter V GDPR, i.e. on the basis of an adequacy decision or standard contractual clauses. We will provide a copy or description of the safeguards on request.

• Orders and proofs of purchase: 10 years from the end of the year in which payment was made (Act No. 431/2002 Coll. on Accounting and Act No. 222/2004 Coll. on VAT).

• Download link, licensed PDF copy and download record: 1 year from payment.

• Sample, waiting list and news: until you withdraw consent or leave the list, and no longer than 3 years after your last activity, for example your last request or purchase.

• Record of giving and withdrawing consent to news: 4 years after withdrawal of consent (Section 116(5) and (6) of Act No. 452/2021 Coll.).

• Communication with us: as long as needed to handle your request; communication about complaints or withdrawals is kept for the period of liability for defects and the limitation period.

• Server logs and data used to limit the number of requests: short term, usually no longer than 30 days, unless needed to investigate a specific security incident.

After these periods we delete or anonymise the data.

You have the right of access to your data (Article 15 GDPR), to rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You have the right to object to processing based on legitimate interests (Article 21); you may object to processing for direct marketing at any time, and we will then stop it. You may withdraw consent at any time (Article 7(3)).

Send your request to support@aesa.sk. We will reply without undue delay and within one month at the latest (Article 12(3) GDPR). To verify your identity we may ask you to send the request from the e-mail address you used for your order or request.

If you believe we handle your data unlawfully, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk (Act No. 18/2018 Coll.), or with the supervisory authority in the country of your habitual residence (Article 77 GDPR).

The shop does not use cookies, analytics tools, advertising pixels or any other tracking technologies.

The only thing the site stores in your browser is your choice of light or dark theme (localStorage). This information never leaves your device, is not sent to us and can be deleted at any time in your browser settings.

The Stripe payment page is a separate page operated by Stripe at checkout.stripe.com. Stripe’s use of cookies there is described in its own policies.

We do not make automated decisions or carry out profiling that produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR). The price of the eBook is the same for everyone and is not set on the basis of profiling.

Protection against form abuse, such as limiting the number of requests from one IP address, is a technical measure and not a decision about you.

We update this policy when the way we process data changes. The current version is always available at ebook.aesa.sk/en/privacy/. In the event of any discrepancy between the language versions, the Slovak version prevails.