Declaration on the processing of personal data
Dear Client,
UBfin&style s.r.o., Cintorínska 1839/14, 059 52 Veľká Lomnica, ID No.: 56540574 hereinafter referred to as "the company or the controller" processes your personal data in order to provide you with a high level of service, including the efficient use of our client service, the fulfilment of legal obligations and the provision of information about our news, including various benefits (see "General Terms and Conditions"). We only process your personal data under the lawful conditions set out in the[1] Regulation or the[2] Data Protection Act. We aim to protect your personal data effectively and to be transparent in the way we provide information to you.
1. Privacy Policy
The company as the controller has a legal obligation to provide your personal data for inspection, supervisory activities or at the request of authorised public authorities or institutions, if this results from specific regulations.[3].
Your personal data will be stored securely, in accordance with the security policy of the controller and the processor and only for as long as necessary to fulfil the purpose of the processing. Access to your personal data will only be granted to persons authorised by the controller to process your personal data and who process it on the instructions of the controller, in accordance with the controller's security policy.
Your personal data is backed up, in accordance with the retention policy of the controller. Your personal data will be completely erased from the backup storage as soon as possible in accordance with the backup rules. The personal data stored on backup storage sites is used to prevent security incidents, in particular data availability breaches due to a security incident. The Company is required to ensure that data is backed up in accordance with the security requirements of the Regulation and the Data Protection Act.
When personal data are processed by the controller, you are the data subject, i.e. the person about whom the personal data relating to him or her are processed.
In accordance with the Regulation and the Personal Data Protection Act, the company, as the controller, processes your personal data to the extent and under the conditions set out in the special regulations. We process your personal data on the basis of the legal conditions set out in Article 6 of the Regulation.
What personal data we process about you.
When you use our Services, we collect various types of data, such as your username and password, your contacts, and other settings. We keep track of what products you browse on our site and from what device, what of our offers sent to you via email caught your eye, and derive other data about you from this to show you tailored offers and to further improve our site in the future. If you make a purchase or create an account with us, we also work with your first and last name, your orders and the details you set up in your account.
We process the following personal data:
- identification data, which means in particular first and last name, username and password;
- contact data, which means personal data that enables us to contact you, in particular your email address, telephone number, delivery address, billing address and your contact details on social networks;
- your settings, which means your account information, in particular your saved addresses and profiles, newsletter settings, loyalty program memberships, shopping lists, tracked products, your product and service reviews and completed questionnaires;
- data about your orders, which are in particular data about the goods
- e and the services you have ordered, the method of delivery and payment, including the payment account number and details of complaints;
- data about your behaviour on the website, including when you browse the website via our mobile app, in particular the goods and services you view, the links you click on, how you move around our website and scroll the screen, and also data about the device from which you browse our website, such as the IP address and the location derived from it, the identification of the device, its technical parameters such as the operating system and its version, the screen resolution, the browser used and its version, and also the data obtained from cookies and similar technologies to identify devices;
- data about your behaviour when reading the messages we send you, in particular the times at which messages are opened, and also data about the device on which you read the messages, such as the IP address and the location derived from it, the identification of the device, its technical parameters such as the operating system and its version, the screen resolution, the browser used and its version;
- Derived data, which means personal data derived from your preferences, data about the goods and services you purchase from us, data about your behaviour on the web and data about your reading behaviour in the emails we send you; this includes in particular data about your gender, age, financial situation, purchasing behaviour and relationship to different goods and services;
Purposes of processing your personal data
E-shop
IF YOU REGISTER WITH US
In order to register, you need to visit our website and if you register, then we additionally carry out the following processing:
Processing on the basis of the performance of a contract
If you create an account on our website, we process your identification and contact data, your preferences and your order data (if you later purchase from us), on the basis of the performance of a contract with you (without your consent), in order to maintain your user account. The contract on which our processing is based is created when your account is created. We use personal data for this purpose for the duration of your account, which you can delete at any time.
Processing on the basis of legitimate interest
If you create an account on our website, we process your identification and contact data, your preferences, your order data (if you later purchase from us, even if you purchase without logging in) and data about your web and email reading behaviour also on the basis of our legitimate interest (i.e. without your consent), for the purpose of:
- obtaining information that will enable us to improve our service to you in the future to make your shopping experience with us even better, in particular to determine your satisfaction with our service; our legitimate interest here is to improve our service to you and
- by providing you with tailored offers and targeted advertising, which we may send to you by email, social media or other electronic means, send to you by post or display on our website; our legitimate interest here is the effective promotion of our products and services.
In order to prepare a tailored offer for you, we analyse the above data and extract further derived data from it, which we use for this purpose. In this way, we may also use data about your behaviour on the site that we collected before you registered (if you have not previously turned off site personalisation in your Privacy Settings), and we may collect data about your behaviour on the site even if you do not log in (e.g. when we identify you using a cookie). We also categorise our users into different groups according to this data, where each group receives its own specific offer.
So if you have viewed an offer of goods on our website, or clicked on it in an email we sent you, we may show you these goods on the first page of our website on your next visit, or send you an offer for these goods by email. We may also be able to tell which group of customers you belong to based on the goods you have viewed and, accordingly, offer you other products on the site or by email that we think may be of interest to you.
If you wish to disable this feature, please contact us at the email address below.
Based on our legitimate interest (i.e. without your consent), we will also use your settings to test new features and applications before deployment, as described in the Cookies section.
For these purposes, we use personal data for as long as your account exists, which you can delete at any time. You have the right to object to this processing.
IF YOU BUY FROM US
You must visit our website in order to shop with us, so the processing described in the Cookies section applies to you. If you make a purchase with us, we also carry out the following processing:
Processing on the basis of the performance of a contract
If you make a purchase with us as an individual, we process your personal data in order to process your order, your identification and contact data and data about your orders. If you have a user account with us, we may also use your settings for this purpose.
If you purchase from us as a representative of a legal entity, we process the same data for the same purpose based on our legitimate interest in concluding and performing a contract with the person you represent.
The fact that we use this data for the purpose of processing your order means that we will use it in particular:
- so that you can complete your order on the site, for example, so that you do not delete items placed in your basket or data from a pending order;
- so that we can communicate with you about your order, for example to send you a confirmation or to notify you when the goods have been dispatched;
- for the purposes of payment for goods, including for arranging deferred payment; in this context, we may also transfer your data to our partners operating payment systems or arranging deferred payment, as described in Who processes your personal data and to whom do we transfer it?
- for the purpose of delivery of the goods; in this context, we will transfer your data to postal carriers (UPS, Slovenská pošta) solely for the purpose of delivery of these goods; as described in the section Who processes your personal data and to whom do we transfer it ?;
- in connection with a complaint about ordered goods or services; in this context, we may transfer your data to postal carriers (UPS, Slovenská pošta), as described in the section Who processes your personal data and to whom do we transfer it?;
For this purpose, we use the personal data for the time necessary to process your order or to process a contractual request such as a complaint.
Processing on the basis of legitimate interest
If you make a purchase with us, we will store your identification, contact and order data on the basis of our legitimate interest (without your consent) in order to protect legal claims and our internal records and controls. Our legitimate interests here are the protection of legal claims and the control of the proper provision of our services.
We also process your identification and contact data, your preferences and your order data (if you later purchase from us) on the basis of our legitimate interest (i.e. without your consent) for the purposes of:
- obtaining information that will enable us to improve our service to you in the future to make your shopping experience with us even better, in particular to determine your satisfaction with our service; our legitimate interest here is to improve our service to you and
- by providing you with tailored offers and targeted advertising, which we may send to you by email, text message, social media, communicate to you by telephone or other electronic means or send to you by post; our legitimate interest here is the effective promotion of our products and services. In order to be able to make a tailored offer to you, we analyse the above data (i.e. your identification, contact and order data) and extract further derived data from it, which we use for this purpose. According to this data, we also classify our users into different groups, where each group receives its own specific offer. If you do not register with us, we do not use data about your behaviour on the site to prepare the offers we make to you.
We will also use data about your orders in order to create personalised offers and targeted advertisements that we show you on the site, as described in the Cookies section.
In order to protect legal claims and our internal records and controls, we process data for the duration of the limitation period of 3 years and one year after its expiry with respect to claims made at the end of the limitation period. In the event of the commencement of judicial, administrative or other proceedings, we process your personal data to the extent necessary for the duration of such proceedings and the remainder of the limitation period after its conclusion.
For the other purposes listed above, we use personal data for a maximum period of 6 months. You have the right to object to this processing carried out on the basis of our legitimate interest.
Processing in compliance with legal obligations
We also have to fulfil certain statutory obligations. If we process your personal data for this reason, we do not need to obtain your consent for such processing. On this legal basis, we process your identification, contact and order data in order to comply with the following laws in particular:
- Act No. 40/1964 Coll., Civil Code,
- Act No. 250/2007 Coll., on Consumer Protection,
- Act No. 102/2014 Coll. on consumer protection in the sale of goods at a distance or off-premises
- Act No. 222/2004 Coll., on value added tax,
- Act No. 431/2002 Coll., on Accounting.
For these purposes, we use personal data for a maximum of 10 years from the date of the last receipt for your order.
IF YOU ARE THE RECIPIENT OF GOODS OR SERVICES ORDERED FROM US
If you are the recipient of goods or services ordered from us, we process your identification and contact data:
- on the basis of our legitimate interest in the preparation, conclusion and performance of a contract with our customer. The performance of this contract is our legitimate interest;
- on the basis of our legitimate interest to obtain information on which we can improve our services in the future or information for the creation of our internal statistics and reports; our legitimate interest here is to improve our services to our customers;
- for the purpose of fulfilling legal obligations, in particular according to Act No. 222/2004 Coll., on value added tax and Act No. 431/2002 Coll., on accounting.
- for the purpose of protecting legal claims and our internal records and controls; our legitimate interests here are the protection of legal claims and the control of the proper provision of our services.
For the preparation, conclusion and performance of a contract with our customer, we use personal data for the time necessary to process the order. After this period, we will continue to store the data on the basis of our legitimate interest for the purpose of protecting legal claims and our internal records and control, for the duration of the limitation period of 3 years and one year after its expiry with regard to claims made at the end of the limitation period. In the event of the commencement of judicial, administrative or other proceedings, we process your personal data to the extent necessary for the duration of such proceedings and the remainder of the limitation period after its conclusion. Our legitimate interests here are the protection of legal claims and the control of the proper provision of our services. For the purpose of fulfilling legal obligations, we use personal data for a maximum of 10 years for the relevant order.
You have the right to object to this processing on the basis of a legitimate interest.
IF YOU COMMUNICATE WITH US THROUGH DIFFERENT CHANNELS:
If you communicate with us through various channels, in particular through the call centre, email, chat tools and social networks, we will process your identification and contact data and records of the communications made, including call recordings, on the basis of our legitimate interest (i.e. without your consent) for the purposes of:
- processing your requests; if you have purchased from us and your request relates to an order, we may carry out this processing on the basis of the performance of a contract with you;
- keeping a record of your requests so that we can check that we are fulfilling them properly and on time;
- proving that we have received and dealt with your request, e.g. when you order goods from us or make a claim;
- their analysis to improve the quality of our services.
For these purposes, we store personal data for 3 months. If you place an order with us through one of the channels, we may retain the data for the protection of legal claims for the duration of the limitation period of 3 years and one year after its expiration with respect to claims made at the end of the limitation period. In the event of the commencement of legal, administrative or other proceedings, we will process your personal data to the extent necessary for the duration of such proceedings and for the remainder of the limitation period after its conclusion.
You have the right to object to processing on the basis of our legitimate interest.
Cookies
If you visit a booth that writes cookies, a small text "cookie" will be created on your computer or mobile device (including a tablet) when you browse it. If you visit the same page again, the cookie will make it faster to connect. In addition, such a site will "recognise" you and offer you the information you prefer, ensure that an advertisement you have already seen is not repeated, or allow you to enter without re-entering your password. In the case of filling in identification data, cookies will offer you to complete the data already filled in during previous visits to this web environment and, following this information, you will be shown relevant content and offers for your anticipated activities and services that you could use.
We use cookies to analyse traffic to our websites through services such as Google Analytics, Google AdSense, Facebook, Strossle or Gemius SA, Exponea and others. This is an analytics tool that helps website and app owners understand how their visitors use the site. Cookies can be used to provide statistical data about website usage without personally identifying individual visitors.
Legal basis for processing
If we are able to identify the person of a visitor to our web environment when recording, this will be processing of personal data. We must have a legal basis for such processing. One legal basis may be your consent as a data subject and the other will be the legitimate interest of the controller - that is, our company - in particular in monitoring your activities and evaluating them in order to offer you the best possible service settings or support for your activities in a contractual relationship with our company, including direct advertising.
What cookies we evaluate
Basic cookies - these cookies enable the use of basic functions such as logging in as a registered user or pre-populating forms. If you disable these cookies, we cannot guarantee the full functionality of our site.
Persistent cookies - used to identify your preferred activities that you consciously perform on our site.
Operational cookies - these cookies are used to analyse the visitor's behaviour on the website and subsequently to improve its functionality and appearance. If you disable these cookies, we cannot guarantee the full functionality of our site.
Advertising cookies - used to optimize the displayed content and advertising with respect to the visitor's habits and the effectiveness of the marketing communication of the sponsors. For example, you will not be shown unnecessarily frequent advertising from an area in which you are not interested.
Third party cookies - created and used by service providers such as Google Analytics, Google AdSense, Facebook, Strossle , Gemius SA, Exponea and others. These services are integrated into our site because we find them useful and fully secure. You can find the terms of use on the websites of these companies. For example, they will prevent you from seeing unnecessarily frequent advertisements from an area in which you are not interested.
What data about you we can evaluate
Information about your visit to our website;
Information about the IP address of the connection, the browser you are using;
Information about your activity on our website.
Automated Decision Making and Profiling
If we have your consent to process your personal data for marketing activities and you do not object to automated decision-making or profiling of your person from your activities on our site, we may associate your personal data with information about your activities on our site (for example, when you enter: phone number, email address, discount coupon number, registration number, loyalty club card number, etc.). The aim of this linking is to get to know your preferences and interests better and, on this basis, to better tailor the offer directly to you.
You may object to such processing at any time or, if such automated decision would affect your rights and freedoms, you may request an individual decision on our part (for example, in the form of a better offer).
How to check your cookie settings
You can control or delete cookies at your discretion. Please visit aboutcookies.org for details. You can delete all cookies stored on your computer and you can set most browsers to prevent them from being stored.
Cookies are useful as long as site owners do not misuse them for unauthorised data collection. If you do not trust the functionality of cookies, you can periodically delete them from your disk. In some cases, the information obtained via cookies may not be recorded correctly and therefore you may have problems logging in to, for example, our web applications. You can find instructions on how to delete all cookies, even incorrectly written cookies, below. Instructions for deleting cookies in individual web browsers
Internet Explorer™
https://support.microsoft.com/sk-sk/help/278835/how-to-delete-cookie-files-in-internet-explorer
Safari™
https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Opera™
https://www.opera.com/help/tutorials/security/privacy/
Mozilla Firefox™
https://support.mozilla.com/sk/kb/odstranenie-cookies
Google Chrome™
https://support.google.com/chrome/answer/95647?hl=sk&hlrm=en
Location of your personal data
We do not transfer your data to third countries outside the European Economic Area (EEA) and the European Union (EU).
How long will we keep the browsing data
We store the information we associate with cookie data according to the consent you have given us or the duration of the contractual relationship between us and you. We will retain the combined data from cookies and our systems for a period of one year.
Withdrawal of consent
If we process your data on the basis of your consent, this consent can be withdrawn at any time.
We may also process your personal data for the purposes of providing electronic communication services or payment transactions (on the basis of specific laws governing payment transactions); the exchange of data between operators of electronic communications services that provide access to telecommunications networks (processing is carried out on the basis of the Telecommunications Act), the operation of information systems (for the purpose of taking measures for network security, on the basis of the legitimate interest of the controller).
In very specific cases, the company may process your personal data in order to pursue legal claims.
Your personal data will be processed for the duration of the contractual relationship and for 10 years after its termination, in accordance with the requirements of the specific regulations governing tax obligations. Personal data processed for marketing purposes will be retained for a maximum of 1 month after the end of the processing purpose. We also process your personal data for the purpose of fulfilling the company's obligations under special regulations, in particular under Act No. 395/2002 Coll. on archives and registers and on amendment and supplementation of certain acts.
Who processes your personal data and to whom do we pass it on?
In most cases, we process your data for our own purposes as data controller. In this case, we pass on your data to our partners to arrange payment, shipping and other details of your order. We also pass the data to our processors who process it according to our instructions. With your consent, we may also pass the data to advertising and social networks for displaying tailored advertising on other sites.
All the personal data mentioned above is processed by us as the controller. This means that we determine the purposes for which we collect your personal data, determine the means of processing and are responsible for their proper execution.
Your personal data is processed through an intermediary to whom your personal data is provided for a specific purpose (e.g. bookkeeping). The Company declares that it has duly concluded contracts with its processors, which ensure an adequate level of protection of personal data, in accordance with applicable data protection legislation.
We may also transfer your personal data to other entities that are in the role of controller, namely:
- shipping partners, in particular companies, Slovenská pošta, a.s., UPS, if they deliver your order to you;
- based on your consent to advertising and social networks,
- operators of marketing tools who help us to optimise the site and personalise content and offers for you;
- to fulfil our legal obligation, your personal data is passed on to the Tax Authority.
Failure to provide your personal data
Failure to provide your personal data that we process on the basis of a contract (e.g. sale of goods) could result in our inability to enter into a contractual relationship with you and to provide you with our services.
From what sources do we obtain personal data?
We usually collect personal data directly from you through our website or when communicating with you. We may also receive some additional data from our partners, such as banks or shipping companies.
In most cases, we process personal data that you provide to us in the context of ordering goods or services, creating and using an account, or when communicating. We also collect personal data directly from you by tracking your behaviour on our site and when reading your messages.
If you make a purchase with us, we may receive additional data about your orders from banks, our payment system partners, shipping partners, such as your account number, successful payment or delivery and acceptance of goods, in connection with the performance of the concluded purchase contract.
2. Your rights under the Regulation and the Data Protection Act
Right of access
You have the right to be provided with a copy of the personal data we hold about you, as well as information about how we use your personal data.
In most cases, your personal data will be provided to you in written paper form unless you request otherwise. If you have requested this information by electronic means, it will be provided to you electronically where technically feasible.
Right to repair
We take reasonable steps to ensure that the information we hold about you is accurate, complete and up to date. If you believe that the information we hold is inaccurate, incomplete or out of date, please do not hesitate to ask us to amend, update or supplement this information.
Right to erasure
You have the right to ask us to erase your personal data, for example, if the personal data we have collected about you is no longer necessary for the fulfilment of the original purpose of the processing. However, your right must be considered in the light of all the relevant circumstances. For example, we may have certain legal and regulatory obligations which mean that we may not be able to comply with your request.
Right to restriction of processing
In certain circumstances, you are entitled to ask us to stop using your personal data. These include, for example, where you believe that the personal data we hold about you may be inaccurate or where you believe that we no longer need to use your personal data.
Right to data portability
In certain circumstances, you have the right to ask us to transfer the personal data you have provided to us to another third party of your choice. However, the right of portability only applies to personal data that we have obtained from you on the basis of consent or on the basis of a contract to which you are a party.
Right to object
You have the right to object to processing based on our legitimate interests. If we do not have a compelling legitimate ground for processing and you object, we will no longer process your personal data.
Right to lodge a complaint
If you wish to make a complaint about the way in which your personal data is processed, including the exercise of the rights set out above, you can contact our Responsible Person. We will properly investigate all your suggestions and complaints.
If you are not satisfied with our response, or if you believe that we are processing your personal data unfairly or unlawfully, you may file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, https://dataprotection.gov.sk, Hraničná 12, 820 07 Bratislava 27; telephone number: +421 /2/ 3231 3214; E-mail: [email protected].
If you have any questions regarding the processing of your personal data, you can contact our responsible person via our email address [email protected] .
We may update this Statement if necessary without your knowledge.
