Privacy Policy
Privacy Policy
I.
Introductory provisions
- For the purposes
of these principles means: Kúzelný svet, s.r.o., seat: Čierny chodník 42,
831 07 Bratislava, Slovak Republic, CN: 50 295 098, VAT: 2120 266 654. The
company is registered in the commercial register of the District Court
Bratislava l, section; Ltd., insert No:111047/B (hereinafter referred to
as "Operator") . Personal data first and last name, e-mail
address, telephone number, billing address, delivery address, IP address,
cookies. The Participant is a natural person who purchases goods and
services from the Operator. The purpose of selling goods and services
to the end customer via the Internet or in a brick-and-mortar store. In
connection with the above, personal data are processing:
- to the extent that they were provided in connection with the ordering of products and /or services of the Operator, or in the framework of negotiations for the conclusion of a contract with the Operator, as well as in connection with the concluded contract
- for the purpose / purposes specified in Art. II below
- The e-shop
operator www.kuzelnysvet.sk as the Controller of Personal Data hereby
informs about the manner and extent of the processing of personal data,
including the scope of the Subscriber's rights (as defined below) related
to the processing of his/her Personal Data.
- The controller
shall proceed with the processing of personal data in accordance with the
following legislation:Act No. 18/2018 Z. z. on the protection of personal
data Regulation (EU) 2016/679 of the European Parliament and of the
Council (hereinafter referred to as "the Regulation")
II. Purposes
and times of processing of Personal Data
The Controller
processes personal data for the following purposes:
a) the performance
of the contract and, where applicable, other obligation, and the provision of
services:
- personal data will
be processed during the period of contract negotiations between the
Operator and the Participant, both for the purpose of concluding the
contract and for the duration of the contractual relationship;
- sending satisfaction
questionnaires: sending satisfaction questionnaires to improve the
services provided to customers following an order, reservation or direct
sale
- marketing actions:
for the purpose of fulfilling a marketing action, evaluating, terminating,
delivering any winnings, etc. Processing time: over the duration of the
marketing event.
b) compliance with a
legal obligation (in particular accounting, tax and archiving, provision of
assistance to administrative authorities, police, courts, etc.):
- the tax document
will be kept for 10 years from the end of the contract: In order to fulfil
the legal obligation to archive accounting documents under Act No.
563/1991 Zb., on accounting as amended, personal data will be further
processed and retained for a period of 10 years from the year following
the year in which the contract between the Operator and the Participant
was concluded;
- fulfillment of
obligations in connection with the exercise of rights of defective
performance, provision of assistance to administrative authorities,
police, court: The operator is entitled to process basic personal,
identification and contact details of the customer, data on goods and data
from communication between the customer for 4 years from the date of
expiry of the warranty period for the goods.
c) the legitimate
interests of the Controller, the protection of the rights and legitimate
interests of the Controller:
- effective defence in
the event of a dispute. The processing period here is fixed at 4 years
from the expiry of the warranty period for the goods and is extended by
the period for which the dispute is conducted;
- the legitimate
interest of the Operator is further the sending of commercial notices
(blanket offers and individual offers) in accordance with § 7(3) of Act
No. 480/2004 Zb., about certain information society services and in
accordance with point 47 of the Regulation, if the Operator has obtained
details of electronic contact in connection with the sale of goods and
services to the Subscriber.
(d) marketing and
commercial offers of the Operator's services:
- across-the-board
sending of business offers of products and services: sending general
advertising communications without targeting a specific group of
addressees. The period of processing of personal data in this case is 3
years;
- individual offer:
sending advertising communications after assessing certain personal
aspects relating to a natural person. The operator does not carry out
profiling in accordance with Article 22 of the Regulation as it is not
automated processing but the manual creation of individual offers. The
period of processing of personal data in this case is 3 years;
- cookies: Short text
files generated by a web server and stored on your computer through a
browser. Two types are distinguished. First of all, cookies are necessary
to ensure the functioning and analysis of the site (the transmission of
electronic communications via an electronic communications network, the
use of these cookies cannot be dissented). Furthermore, cookies that
evaluate certain personal aspects related to a particular natural person.
The Subscriber must give its consent using the second type of cookies. The
processing time in this case is 3 years.
- for re-marketing
purposes, cookies are passed on to other processors only if they have been
authorised for this purpose, with an expiry date of up to 540 days. If
consent to advertising cookies is withdrawn, it is technically not
technically possible to delete cookies transferred to the processor
immediately once. To remove cookies from the processor occurs
automatically after the expiry date. An immediate solution to prevent
re-marketing activities by the processor is to delete cookies from the
browser.
III.
Protection of personal data and information on processing
- unless the Subscriber
provides his/her Personal Data, it is not possible to enter into a
contract with the Operator and/ or provide him with the services resulting
therefrom. Personal data are necessary in this context for the provision
of a particular service or product of the Operator.
- after the expiry of the time
limits referred to in Article II.
- the participant is obliged
to provide the Operator only with true and accurate Personal Data. The
Subscriber is responsible for the accuracy, accuracy and veracity of the
Personal Data provided. The controller shall not be liable for the
accuracy of the data provided.
- the operator shall make
every effort to prevent unauthorized processing.
- the operator is entitled to
hand over the Participant's personal data to third parties for the
following purposes: completion of the order process, delivery of goods,
sending of business communications, customer satisfaction assessment,
provision of consumer credit, customer support services, provision of
insurance products, settlement of complaints, registration of new
customer, provision of I. point of service.
- personal data are and will
be processed electronically in a non-automated manner.
IV.
Subscriber rights related to processing
1.
rights of the Subscriber in relation to the
protection of personal data:
o
require the Controller to access his/her
Personal Data;
o
to correct the personal data provided;
o
to delete the personal data provided;
o
to restrict the processing of Personal Data;
o
lodge a complaint with the Data Protection
Authority;
o
the right to transfer personal data to
another controller;
o
the right to object to the processing of
personal data;
o
the right to withdraw consent.
2.
the participant may exercise its rights under
paragraph 1 of this Article by means of the link provided in the footer of the
e-mail sent by the Operator or by the request at info@kuzelnysvet.sk or, in the
case of a registered customer, in the customer section of the e-shop website.
3.
the rights referred to in paragraph 1 of this
Article.c (a), (c) and (d) may not be exercised to the extent and for the
purposes referred to in Article II(1)(a), (b) and (c), with the exception of
point (ii)(.c) of Article II, where all the rights referred to in paragraph 1
can be exercised.
4.
in the event that the Participant considers
that the Data Controller is carrying out the processing of his/her Personal
Data which is contrary to the protection of his or her private and personal
life or in violation of applicable law, in particular if the Personal Data are
inaccurate with regard to the purpose of their processing, he may:
o
ask the Operator for clarification by e-mail
to info@kuzelnysvet.sk
o
object to the processing and request by
e-mail sent to info@kuzelnysvet.sk that the Operator ensure the removal of the
status thus originally incurred (e.g. by blocking, repairing, supplementing or
disposing of Personal Data). The Operator shall take a decision on the
objection without delay and inform the Participant. If the Controller does not
comply with the objection, the Participant has the right to contact the Data
Protection Authority directly. This provision is without prejudice to the
Participant's right to apply directly to the Data Protection Authority.
5.
if the Participant exercises the right under
this Article, the Operator is obliged to respond within 30 days of receipt of
the request by the Operator.
6.
acceptance of a request for the exercise of
the right under Article IV., Point 1 (a) and (f) shall be possible only by
means of a data message or by a letter with an officially certified signature
to the address of the registered office of the company. The application shall
include an e-mail address to which a verification e-mail will then be sent to
confirm the identity of the applicant.
7.
if the Participant exercises any of the
rights under Article IV., paragraph 1, the Operator shall have the right to
request proof of the Participant's identity. The request for access to personal
data must therefore be sent from the applicant's e-mail address. If the request
is made in a different form or from another e-mail address, the Operator has
the right to request additional verification by replying to the verification
e-mail. In the event that the applicant does not prove his identity within 14
days of sending the verification e-mail, his application for the exercise of
the rights under Article IV., paragraph 1 shall not be accepted.
8.
the controller is entitled, in the event of a
repeated and unjustified request to provide a physical copy of the Personal
Data processed, to charge a reasonable fee for the administrative costs
involved.
V. Final
provisions
1.
all legal relations arising from the
processing of Personal Data are governed by the law of the Slovak Republic,
regardless of where access to them was made. Slovak courts have jurisdiction to
resolve any disputes arising in connection with the protection of privacy
between the Participant and the Operator.
2.
the data subject has the right to contact the
Data Protection Authority (https://dataprotection.gov.sk/uoou/sk).
3.
this Policy is valid from 25.05.2018