Data protection rules

 

I. Introduction

 

Your privacy and the protection of your personal data is one of our priorities. This Privacy Policy (the "Policy") contains information about what personal information we collect in the course of our business, how we use it and how we protect it.

 

Our Policy apply to all goods offered by our company and contain information on how personal data is processed for our customers. Your personal data is processed in accordance with all generally binding legal regulations in force in the Slovak Republic, in particular, but not exclusively in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / EC (General Data Protection Regulation) (hereinafter "the Regulation") and Law no. 18/2018 Coll. on Personal Data Protection (hereinafter referred to as “the Personal Data Protection Act”).

 

We use the personal data you provide to us to sell quality goods under the Truefala brand and to improve the offer of goods intended for you on the truefala.com e-shop. Please read this Policy in detail to familiarize yourself with all your rights before entering into a legal relationship with our company. By entering into a legal relationship with our company and / or providing it with some of your personal information, you express that you understand how your personal information is processed under this Policy. Otherwise, you will immediately cease in any way to participate in the business activities performed by our company, or cooperate with us in any way, and you will not provide us or cease to provide us with your personal data. However, please be aware that in some cases, the non-disclosure of your personal data may partially or completely prevent us from selling our goods.

 

II. Controller

 

D&P Essentials

Official seat: Lednica 322, 02063 Lednica

Business ID: 54 166 209

the company is registered in the Commercial Register of the Trenčín District Court, Section Sro, file no. 42873 / R

 

(hereinafter also referred to as "our company", "we")

 

III. CONTACT PERSON

 

Petra Žárská

Lednica 322, 02063 Lednica

+421948 040 018

petra.zarska@gmail.com

 

IV. DATA SUBJECT

• any natural person who uses the goods offered by our company,
• any natural person who is the authorized representative of a customer of our company who uses the goods offered by our company (in any legal relationship with the customer),
• any natural person who visits our company's website.

 

V. PERSONAL DATA WE COLLECT ARE THE FOLLOWING:

 

 

 

Method of obtaining personal data	Categories of personal data collected
Registration for Truefala e-shop Purchase through Truefala e-shop	Your name, surname, residential address, delivery address (if different from the residential address), Business ID number, VAT number, telephone number, e-mail address, Information about your online purchases (for example, what you bought and how you paid for it), Your login details (password)
Browsing our company's website	Information about your online behaviour while browsing our company's website Information about the devices through which you used our company's services (including manufacturer, model and operating system, IP address, browser type and mobile device identifiers, date and time of your access, address of the website from which you were redirected to our website, other data transmitted via standard HTTP (s) protocols, data used for online session after login)

 

 VI. PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

 

The following information will acquaint you with the purposes for which, how and why we use your personal data, as well as the legal basis for the processing of your personal data by our company.

 

• The processing of personal data is primarily based on your legal relationship as a data subject to our company, meaning the processing of personal data is necessary for the performance of a contract to which the data subject is a party or for measures to be taken before the conclusion of the contract at the request of the data subject (Article 6 (1) (b) of the Regulation).

 

• The processing of certain personal data may be based on the legitimate interest of our company or a third party (Article 6 (1) (f) of the Regulation).

 

• In some cases, we may ask you to give your consent to the processing of your personal data, in which case we will only process your personal data if you have given us your express consent (Article 6 (1) (a) of the Regulation).

 

Purpose of personal data processing	Legal basis for the processing of personal data
We use your personal data primarily to make our goods available to you on the e-shop. We need your personal data so that we can process your orders, including possible refunds, manage your user accounts, deliver goods to you, or provide the services you order, or provide various discounts.	Performance of the contract to which you are a party (Article 6 (1) (b) of the Regulation)
We also use your personal data to inform you in connection with your registration or your purchases through the e-shop, about the offer of our goods, news, discounts, and advantageous offers via our company's newsletter sent by e-mail.	Legitimate interest (Article 6 (1) (f) of the Regulation)
We use your personal information to manage our website and to improve our services and operations. We use cookies and other similar technologies on our website to enable you to make the best use of the functions of our website. Detailed information about cookies and the possibility of disabling them can be found in the Cookies Policy at https://www.shoptet.sk/zasady-pouzivania-suborov-cookies/.   We also use your personal data to improve the offer of our goods online, our know-how and also the way we communicate with customers. Your personal information also helps us to develop and improve our information technology systems (including security). All these activities allow us to provide better services to our customers.	Legitimate interest (Article 6 (1) (f) of the Regulation)
We use your personal information to keep in touch with you. Without registering for any services of our company or buying any goods offered by our company, you have the opportunity to subscribe to the newsletter, through which we will inform you only with your express consent about the offer of our goods and services, consultations, trainings, news, discounts.	Consent of data subject (Article 6 (1) (a) of the Regulation)
We also use your personal data so that you can be in contact with us in case of your interest (contact form).	Consent of data subject (Article 6 (1) (a) of the Regulation)
We use your personal data to resolve your complaints, fulfill our obligations to you, and exercise rights and legal claims that apply to you or our company, for example, if you are not satisfied with our goods.	Legitimate interest (Article 6 (1) (f) of the Regulation)

 

Some of the above ways of using your personal data are based on the legitimate interests of our company, which include:

 

• take care of the needs of our customers, including the delivery of our products.
• promotion and sale of our products.
• taking care of your user account (Truefala e-shop), resolving complaints and disputes, enforcing rights and legal claims.
• protection and support of our business, colleagues, customers.
• preventing and facilitating the detection of anti-social behaviour, crime.
• testing and development of new products and services, as well as improving existing ones.

 

 VII.CONSENT TO THE PROCESSING OF PERSONAL DATA

 

If you are not interested in registering for any services of our company or buying any goods offered by our company, but at the same time subscribe to the newsletter, through which we inform you about the offer of our goods and services, consultations, trainings, news, discounts and advantageous offers, or you contact us via the contact or information form, we process your personal data exclusively on the basis of your express consent to such processing.

 

Before you subscribe to the newsletter or contact us, we will ask you if you agree to the processing of your personal data for this purpose. You have the right to change your decision to send a newsletter at any time and revoke your consent to the processing of personal data, online through our company's website or by clicking on the "Unsubscribe" link in each newsletter email. Withdrawal of consent shall not affect the lawfulness of the processing resulting from the consent prior to its withdrawal.

 

VIII. RECIPIENTS OF PERSONAL DATA

 

We may provide or share your personal information with the following recipients.

 

We may provide some of your personal information to entities that provide services to our company. We strictly require all service providers to pay close attention to the protection of personal data and not to use your personal data for their own marketing purposes, unless you give them your consent. We only share the personal information that our service providers need to provide the services. These are, for example, entities that provide the following services to our company:

 

• technological services (for example management of IT terminal equipment, management of computer technology, management of server infrastructure, web hosting)
• processing of payments within the Truefal e - shop,
• delivery and courier services
• bookkeeping services

 

Some of the service providers we work with operate online media channels (websites, social networking sites), providing relevant online advertisements for our goods on our behalf through these online media channels. Advertising for our goods you can e.g., see if you visit a particular page on social networks. Such service providers include e.g., Facebook, Google, Instagram.

 

Some of your personal data may be provided to state authorities and other public authorities and administrations, in cases where such an obligation arises from us by law, or is necessary to determine, exercise or defend the rights and legitimate interests of our company or third parties.

 

IX. PROVISION OF PERSONAL DATA

 

You are not obliged to provide us with your personal data, but some of your personal data is necessary for carrying out a business or other activity (for example, concluding a purchase contract via the Truefala e-shop). If you do not provide us with some of your personal data, it will not be possible for us to deliver the goods or provide the services offered by our company. The provision of some of your personal data is therefore a requirement that is necessary for the conclusion of a contract or for the performance of a contract.

 

X. PERIOD OF STORAGE OF PERSONAL DATA

 

We store your personal data to the extent permitted by the relevant generally binding legal regulations for a maximum period of 10 (ten) years. In exceptional cases, if circumstances so require, the retention period of personal data may be extended for reasons of exercising, proving, defending and / or exercising the rights, claims and legitimate interests of the data subject or our company or conducting our internal investigation. The length of such a retention period is conditioned primarily by the duration of obligations related to e.g. with the guarantee provided for the products of our company, as well as the necessity of storing this personal data in case of the need to prove, assert or defend legal claims.

 

XI. RIGHTS OF DATA SUBJECT

 

In connection with the processing of your personal data, you have the following rights to the extent provided by generally binding legal regulations:

 

1.       The right to object to the processing of personal data   You have a right:   a.       to object at any time, for reasons relating to your specific situation, to the processing of personal data concerning you, where the processing is carried out to fulfil a task carried out in the public interest or necessary for the purposes of legitimate interests pursued by our company. b.       if personal data is processed for the purposes of direct marketing, object at any time to the processing of personal data concerning you for the purposes of such marketing, including profiling to the extent that it relates to such direct marketing. c.       if personal data are processed for the purposes of scientific or historical research or for statistical purposes, to object, for reasons relating to your specific situation, to the processing of personal data concerning you, except where the processing is necessary for reasons of public interest.

 

2. Right of access to personal data

 

Based on your request addressed to the contact person specified in this Policy, we will provide you with a copy of the personal data we process about you via e-mail, unless you request another way of providing personal data.

 

3. Right to correct personal data

 

You have the right to have incorrect personal data concerning you corrected without undue delay. With regard to the purposes of processing personal data, you also have the right to supplement incomplete personal data.

 

4. Right of erasure (right to be forgotten)

 

You have the right to delete your personal data without undue delay if:

 

1. personal data are no longer needed for the purposes for which they were obtained or otherwise processed.
2. you withdraw the consent based on which the processing is carried out and if there is no other legal basis for the processing.
3. you object to the processing of your personal data for the reasons stated in point XI. 1. a. of this Policy and any legitimate reasons does not outweigh the processing of your personal data, or you object to the processing of your personal data for the reasons stated in point XI. 1. b. of this Policy.
4. your personal data has been processed illegally.
5. your personal data must be deleted in order to fulfill a legal obligation under the law of the European Union or the law of the Slovak Republic.

 

5. Right to restrict the processing of personal data

 

You have the right to restrict the processing of your personal data if:

 

1. you have challenged the accuracy of your personal information during a period that allows us to verify the accuracy of your personal information.
2. the processing is illegal, and you object to the deletion of personal data and request instead that their use be restricted.
3. we no longer need your personal data for processing purposes, but you need it to prove, assert or defend legal claims.
4. you objected to the processing of your personal data for the reasons set out in point XI. 1. a. of this Policy, until it is verified that the legitimate reasons on the part of the controller outweigh the legitimate reasons of the data subject.

 

6. Right to data portability

 

You have the right to obtain personal data concerning you and which you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another controller without preventing you from doing so if:

 

1. the processing of personal data is based on your consent or on a contract;
2. if the processing is performed by automated means.

 

7. Right to lodge a complaint to the supervisory authority

 

If you believe that your rights have been violated in the processing of personal data or a violation of generally binding legal regulations in the field of personal data protection, you have the right to contact the Office for Personal Data Protection of the Slovak Republic with a proposal to initiate proceedings on personal data protection according to § 99 of the Personal Data Protection Act.

 

XII. EXERCISE OF THE RIGHTS OF THE DATA SUBJECT

 

The data subject is entitled to exercise all his rights by contacting the authorized representative of our company specified in this Policy, in writing, including e-mail, as well as by a procedure established by law addressed to the supervisory authority, which is the Office for Personal Data Protection, Hraničná 12, 820 07 Bratislava, tel.: + 421 2 32 31 32 14, e-mail: statny.dozor@pdp.gov.sk, website: http://www.dataprotection.gov.sk/.

The application of the data subkect may be rejected in cases provided for by law.

 

XIII. CHANGE OF POLICY

 

We may change this Policy as necessary. This change will not in any way affect your rights under the relevant generally binding legal regulations on personal data protection without your express consent. We recommend that you regularly visit our website and get acquainted with the current version of this Policy, we can notify you of significant changes, or by email.