PRIVACY POLICY
in accordance with Article 13 and the relevant recitals of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”) and Act of the National Council of the Slovak Republic No. 18/2018 Coll. on the protection of personal data and on the amendment of certain acts (hereinafter referred to as the “Act on the Protection of Personal Data”).
We process customers' personal data to the extent of: title, first name, last name, billing address (street and number, city and postal code), delivery address (if different from the billing address), telephone number, e-mail address.
The purposes of processing personal data are the reasons for which the personal data of the data subjects (customers, subscribers) are processed in our information systems on precisely defined legal grounds. The purposes are specific, explicit and legitimate, and when processing the personal data of the data subjects, we comply with the principle of lawfulness pursuant to Articles 6 and 9 of the aforementioned Regulation.
- customers of the online store - the operator operates an online store for the purpose of providing services for the sale of goods/products/services to the final consumer (retail). The basic prerequisite for concluding a purchase contract is, in accordance with the General Terms and Conditions, sending an order for goods/products/services via an electronic form filled in correctly and completely. By sending an order, the data subject confirms that he/she has familiarized himself/herself with the General Terms and Conditions and agrees to them in full. After receiving the electronic form, the operator will deliver the requested goods/products/services to the customer. Categories of data subjects: natural persons - customers. Deadlines for deleting personal data: 10 years after the end of the contractual relationship due to registration within the accounting agenda
- Self-employed - the purpose of processing personal data within the framework of the agenda in question is the preparation and management of supplier-customer relations with self-employed persons. Within the framework of the agenda in question, contractual relations, invoices and orders, records of supplies and purchases of goods and services are maintained. Categories of data subjects: customer/supplier - self-employed person. Deadlines for deleting personal data: 10 years after the end of the contractual relationship due to records within the accounting agenda
- Representatives of suppliers and customers - the purpose of processing personal data within the agenda in question is to maintain a database of representatives, or employees of suppliers and customers, for the purpose of fulfilling their work, service and functional obligations and ensuring smooth supplier-customer relations. Categories of data subjects: natural person - representative (employee) of the supplier, customer. Deadlines for deleting personal data: within 30 days from the date of termination of supplier-customer relations
- Exercise of the rights of data subjects - the purpose of processing personal data within the agenda in question is to handle requests from natural persons aimed at exercising their rights as data subjects within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. Categories of data subjects: a natural person who, as a data subject, within the scope of the purposes defined by the controller, contacts the controller with a request to exercise his or her rights. Deadlines for erasure of personal data: 1 year from the date of processing the request.
Your personal data may be provided to the extent necessary for processing, e.g. to our employees, courier and transport companies, IT service providers, accounting consultants, auditors and tax consultants, law and legal offices, etc., always while maintaining the confidentiality of the recipient
The buyer's personal data is not disclosed.
In order to ensure the proper functioning of the online store, the seller may store small data files - cookies on the buyer's device, thanks to which the online store can store data on activities and settings for a certain period of time (e.g. login name, language, font size, etc.). The seller's online store uses cookies to remember the buyer's user settings and for the necessary functionality of the online store. The buyer can delete all cookies stored on his device and, if necessary, set the internet browser on his device to prevent their storage. In such a case, the buyer will likely have to manually adjust some settings when visiting the online store again, and some services or features of the online store may not be functional.
Data subjects whose personal data are processed in our information systems for specifically defined purposes may exercise the following rights in writing or electronically:
a) Right to access personal data – this is the right to obtain confirmation as to whether your personal data are being processed and the right to access these data, including the purposes and duration of the processing, the categories of personal data concerned, the recipients, the procedure for any automated processing, and the consequences of such processing. As a controller, we have the right to use all reasonable measures to verify the identity of the data subject requesting access to the data, in particular in relation to online services and identifiers (Article 15, recitals 63, 64 of the Regulation).
b) Right to rectification of incorrect and completion of incomplete personal data (Article 16, recital 65 of the Regulation).
c) Right to erasure – “forgetting” personal data that are no longer necessary for the purposes for which they were collected and processed; upon withdrawal of consent on the basis of which the processing is carried out; upon unlawful processing; if the personal data were collected in connection with an information society offer (in the case of children), provided that the conditions set out in Article 17, recitals 65, 66 of the Regulation are met.
d) The right to restriction of processing can be exercised if, as a data subject, you contest the accuracy of personal data and other requirements within the meaning of Article 18, Recital 67 of the Regulation, in the form of temporary transfer of selected personal data to another processing system, prevention of user access to selected personal data or temporary removal of processing.
e) The right to data portability is the right to transfer the personal data provided by you to our information systems to another controller, based on consent or performance of a contract, in a structured, commonly used and machine-readable format, if technically feasible and subject to the conditions of Article 20, Recital 68 of the Regulation, if the processing is carried out by automated means. The exercise of this right is without prejudice to Article 17 of the Regulation. The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in us as the controller.
f) Without prejudice to any other administrative or judicial remedy, you as a data subject have the right to lodge a complaint with the Personal Data Protection Office of the Slovak Republic pursuant to Article 77 of the Regulation if you consider that the processing of personal data concerning you infringes the Regulation or the Personal Data Protection Act.
As a data subject, you also have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data, including where the processing is necessary for the purposes of the legitimate interests pursued by us as a controller or by a third party (except for processing carried out by public authorities in the performance of their tasks), except where such interests are overridden by your interests or fundamental rights and freedoms as a data subject which require the protection of personal data (in particular where the data subject is a child).
PERFORA spol. s r.o., Company ID: 34 136 576, with its registered office at Trstínska cesta 19, 917 01 Trnava, has taken all appropriate personnel, organizational and technical measures as the information system operator for the purpose of maximum protection of your personal data in order to reduce the risk of their misuse, leakage, etc. to the greatest extent possible. In accordance with our obligation arising from Article 34 of the Regulation, we inform you as data subjects that if a situation arises where we, as the operator, violate the protection of your personal data in a way that is likely to lead to a high risk to the rights and freedoms of natural persons, we will notify you of this fact without undue delay.
NOTE: In order to comply with the principle of minimization, all personal data provided by you is a necessary legal or contractual requirement for fulfilling the purpose of their processing. Failure to provide mandatory data necessary for concluding a contract may result in the non-conclusion of the contractual relationship.
In case of any questions related to the protection of your personal data, including the exercise of your rights under the Regulation and the Act on the Protection of Personal Data, please contact us at tel. no.: +421 (0) 33 590 37 11 or at the e-mail address: vomet@vomet.sk.