GDPR
INFORMATION ON THE PROCESSING OF PERSONAL DATA BY THE OPERATOR
provided pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter also the “GDPR”) and pursuant to the provisions of Section 19 of Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts (hereinafter also the “Act”) .
1) INTRODUCTION
Iryna Domina, registered seat at Michalská 372/9, 811 03 Bratislava-Staré Mesto, Slovak Republic, ID number (IČO): 54847800, registered in the Trade Register maintained by the District Office Bratislava under the number of reg. No.: 110-317866 (hereinafter also the "Operator") is responsible as the operator for compliance with generally binding regulations on the protection of personal data, in particular the GDPR and the Act.
The operator provides various products as part of its business activities, all under the conditions and in accordance with the general terms and conditions available on the website. www.intellectwoodtoys.eu (hereinafter referred to as the "website").
The Operator reserves the right to change or modify the information in this document, in particular for the purpose of harmonizing it in the event of changes in relevant legislation or incorporating changes in the purposes, legal bases or means of processing personal data. Any changes related to the processing of your personal data will be ensured by updating this document, which you will find available in electronic form on the Operator's website .
2) SCOPE OF PROCESSED PERSONAL DATA
Personal data is any information relating to you that can be used to identify you, directly or indirectly.
The operator processes personal data relating to you to the maximum extent possible:
(i) first and last name;
(ii) email address;
(iii) permanent residence address or delivery address (if different from permanent residence address);
(iv) telephone number; and
(v) payment details.
(hereinafter collectively referred to as "Personal Data"), in accordance with the GDPR and the Act.
3) PURPOSES OF PROCESSING PERSONAL DATA
The Operator never processes your personal data without reason. Based on a certain legal basis, the data is processed only for individual purposes. This data will be stored by the Operator for the period necessary for the purposes for which the data is processed and after its expiration, your data will be deleted.
The said purpose includes in particular:
• placing an order for products;
• delivery of products according to orders from the Operator's customers;
• contacting the Operator via the contact form;
• recording payments for the product;
• sending newsletter;
• receiving and handling customer suggestions, complaints and claims;
• protection of rights and enforcement of the Operator's rights against customers;
• fulfillment of the Operator's tasks and obligations arising from applicable legal regulations;
• entering into contractual relationships with customers, including pre-contractual relationships;
• management of contractual relationships, including implementation of changes and their termination;
• activities related to fulfilling archiving obligations.
If the scope of personal data set out in the above-mentioned legal regulations is insufficient to achieve the defined purpose of processing, the Operator may also process your personal data in the following cases:
• if you have consented to the processing of your personal data,
• if the processing of personal data is necessary for the performance of contractual obligations,
• if the processing of personal data is necessary to protect the legitimate interests of the Operator,
• if processing is necessary for the establishment, exercise or defense of legal claims of the Operator.
4) CATEGORIES OF DATA SUBJECTS AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
The Operator processes the Personal Data of data subjects (customers) who: (i) are interested in ordering any of the products offered by the Operator on its website and for that purpose place an order, (ii) pay for the order placed pursuant to point (i), (iii) contact the Operator via the contact form, (iv) are interested in receiving the newsletter .
The Operator processes the Personal Data of the data subjects pursuant to points (i) to ( ii) on the legal basis of the performance of a contract to which the data subject is a party, or to take measures prior to entering into a contract at the request of the data subject.
The operator processes personal data pursuant to points (iii) and (iv) based on the consent of the data subject.
5) RECIPIENTS OF PERSONAL DATA
Your Personal Data is accessible to the Controller, its authorized employees and contractual intermediaries who are regularly trained on the procedures for the lawful and secure processing of your Personal Data. All recipients are legally obliged to maintain the confidentiality of your Personal Data.
In the case of recipients to whom the personal data of the data subjects are or may be provided, the Controller has ensured increased legal guarantees for the protection of the personal data of the data subjects by concluding a contract in accordance with Article 28(3) of the GDPR.
Our main beneficiary groups may include:
(i) personal data processors, i.e. external companies and/or external service providers of the Operator, who provide mainly services in the administration, development and support of internal systems and hardware equipment, accounting, etc.,
(ii) personal data processors, i.e. external companies and/or external service providers ensuring the delivery of products offered by the Operator on its website and delivered to customers based on an order.
We are also obliged to provide your Personal Data to authorized public authorities (authorities active in criminal proceedings, the Office for Personal Data Protection of the Slovak Republic and others) in the event of exercising their legal powers under relevant special laws (e.g. police investigation, etc.), which, however, do not have the status of recipients within the meaning of the GDPR and the Act.
6) TRANSFER TO A THIRD COUNTRY
Personal data processed by the Operator will not be transferred outside the EU/EEA, i.e. will not be transferred to any third country.
7) PERIOD OF PERSONAL DATA RETENTION
The retention period for Personal Data varies depending on the purpose for which the personal data is processed. In general, the Controller retains personal data for the following period:
(i) if the Operator processes Personal Data to comply with a legal obligation – for the period required by the applicable law;
(ii) if the Operator processes Personal Data for the purpose of performing a contract – for the duration of the contract (including pre-contractual negotiations) and after the termination of the contract for the duration of the period for exercising claims arising from the contract;
(iii) if the Operator processes Personal Data for the purposes of its legitimate interests or those of third parties – for the period necessary to achieve the purpose for which the personal data were obtained and for the duration of the period for exercising legal claims;
(iv) if the Operator processes personal data based on consent - for the period specified in the consent or for the duration of the consent until its withdrawal and for the duration of the period for exercising legal claims.
After the expiry of the above periods, the Operator is entitled to continue to process personal data for compatible purposes or for specific purposes (e.g. archiving, statistics).
8) INFORMATION RELATING TO AUTOMATED DECISION-MAKING
The Operator does not use any automated individual decision-making or profiling procedures when processing Personal Data.
9) RIGHTS OF THE DATA SUBJECT
Right to withdraw consent to processing
If your Personal Data is processed on the basis of your consent, you have the right to withdraw this consent at any time. Withdrawal of consent will not affect the lawfulness of the processing of your Personal Data before the withdrawal of this consent.
Right to access data
You have the right to request information about your data processed by the Controller at any time, including information about its origin, recipients of the data and the purpose of the processing. You are also entitled to request information about the expected storage period of your data.
Right to rectification of data
You have the right to request that the Operator correct your incorrect personal data without undue delay and/or that the personal data be completed.
Right to erasure and restriction of data processing
You have the right to request that the Controller erase your Personal Data without undue delay if any of the following reasons are met: a) the data are no longer necessary for the purposes for which they were collected or otherwise processed, b) the consent granted to the processing of personal data has been withdrawn and there is no other legal basis for the processing, c) you exercise your right to object to the processing of personal data and no legitimate interests for the processing prevail, d) the data have been processed unlawfully, e) the data must be erased in order to comply with a legal obligation, f) the data were collected in connection with the offer of information society services addressed directly to a child.
You also have the right to request restriction of the processing of your data in cases where: a) you contest the accuracy of the data, b) the processing of the data would be unlawful, c) the Controller no longer needs the personal data for the purposes of processing, but you need them to establish, exercise or defend legal claims, d) you have objected to the processing of your personal data.
Right to object to processing
You have the right to object at any time to the processing of your Personal Data for reasons relating to your particular situation, to the processing of your personal data which is carried out in the public interest or on the basis of the legitimate interest of the Controller. You also have the right to object to profiling which is based on the provisions of Article 6(1)(e) or (f) of the GDPR. You also have the right to object to the processing of your Personal Data for direct marketing purposes, including profiling to the extent that it is related to such direct marketing.
Right to data transfer
You have the right to receive from the Controller the Personal Data you have provided to it, in a structured, commonly used and machine-readable format. You have the right to transfer the personal data thus obtained to another controller without the Controller preventing you from doing so. Such data portability is possible if your Personal Data were processed on the basis of consent or on the basis of a contract and if the processing was carried out by automated means. If technically feasible, you have the right to direct transmission from one controller to another controller.
Automated individual decision-making and profiling
If you have not given your explicit consent to the application of automated individual decision-making and profiling through automated processing carried out on the basis of the Personal Data provided by you, you have the right not to be subject to a decision of the Operator that is based solely on automated processing, including profiling.
Right to lodge a complaint with a supervisory authority
You have the right to file a complaint with the supervisory authority responsible for supervising the processing of personal data. In the Slovak Republic, this authority is the Personal Data Protection Authority of the Slovak Republic, with its registered office at Hraničná 4826/12, 820 07 Bratislava.
Right to notify a personal data breach
You have the right to have the Controller notify you without undue delay of a personal data breach that is likely to result in a high risk to your rights and freedoms.
Exercising your rights
If you decide to exercise any of your above-mentioned rights in connection with the processing of your personal data, you can do so in writing at the address of the Operator's place of business or electronically by e-mail at: info@intellectwoodtoys.eu or by telephone at the following number: +421 947 968 884.
10) COOKIE FILES PROCESSING
Cookies are small text files stored on your computer that enable an analysis of your use of the website. The information stored in the cookies can be retrieved by the website when you visit it again later. Cookies are also necessary to ensure that all processes on the website run smoothly. In addition, cookies make it easier for the user to reuse the website: information stored in the cookies on the first visit, e.g. language settings, does not have to be entered again. This allows the website to adapt to your individual needs to a certain extent (if you use the same device to access it).
cookies to provide social networking features and to analyze traffic. The user can give their consent to the use of cookies to a limited extent or not to give their consent at all. The website is fully functional even without granting this consent or granting it only to a limited extent. You can change or revoke your consent to cookies at any time on our website.
We use the following cookies :
Technical cookies - are essential for operation and help make websites usable by enabling basic functions such as site navigation and access to secure areas of the website. Without these cookies, the website cannot function properly and therefore cannot be disabled. These cookies run on the operator's website even without consent.
Analytical cookies - help the website operator understand how visitors use the website so that it can optimize the website and offer them a better experience. All data is collected anonymously and cannot be linked to a specific person.
More about the use of cookies on the Operator's website.
11) DATA SOURCES
The Operator obtains personal data primarily from data subjects (directly or through intermediaries who process personal data on behalf of and on the instructions of the Operator for the purposes specified by the Operator). The Operator may also obtain Personal Data from other sources, such as publicly available sources and registers, in particular in connection with the conclusion or performance of a contract or in connection with the exercise of its rights, authorizations or obligations arising from relevant legal regulations, court decisions or contractual relationships.