Privacy policy

Privacy policy and data protection

 

In order for us to be able to process your order to your satisfaction, we need your personal data.

The operator of the site - the company Verdot, p. r. about. responsible for the processing of personal data under Regulation 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / EC (hereinafter GDPR) and Act no. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws. Our data protection rules comply with the applicable data protection law.

Personal data controller - the controller is a company that determines the purpose and means of personal data processing:

Registered office: Starohorská 6151/10, 97411 Banská Bystrica, IČO: 36642606, Registration in the ORSR: Commercial Register of the District Court of Banská Bystrica, section: Sro, vložka č. 10946 / S (hereinafter referred to as the “Seller”), email: info@woi.sk.

  1. Affected person - buyer, applicant for sending newletters, participant in the competition, loyalty card holder

List of personal data processed by the controller:

Basic identification data - name, address, date of birth (necessary if you want to take advantage of a discount or other benefit on the occasion of your birthday), address of residence (street, house number, postal code, city)

Contact details - phone number, e-mail address

Socio-demographic data - statistical data on age, gender, education, employment, number of children

Geolocation data - geolocation data from a web browser (this data can usually be used to recommend a contact to the nearest intermediary or branch), IP address

We collect the personal data listed in the previous point directly from you. You state this personal data in the client contract / order, or you have stated it in other documents. Personal data may also come from publicly available sources, registers and records, such as the commercial register. Your personal data may also come from third parties who are authorized to handle it.

 

Purposes of the processing of personal data (personal data may not be further processed in a way incompatible with these purposes):

fulfillment of the business purpose - issuance of a tax document, contacting the customer regarding the order, fulfillment of the contract (the data provided by you are necessary for the fulfillment of the contractual relationship and without their provision it is not possible to conclude a contractual relationship)

marketing purposes - offer of products and services of the company (offers can be provided to you electronically, especially in the form of e-mail messages or messages sent to mobile devices via telephone number, via web client zone, in writing or in the form of telephone call, automated processing personal data in order to adapt the business offer to your individual needs, market surveys and customer satisfaction surveys of the products and services used). We profile your personal data based on your consent. We use automatic information systems, web applications or calculators for this purpose. Accordingly, we send you individualized reports and offers of products and services of our company. Automatic evaluation (profiling) of personal data will help us to better understand you and your needs, estimate future actions and adapt our products and services accordingly.

purpose of consumer competition - organization of consumer competitions, their processing and evaluation of results. As part of sales support (without the need for permission from government authorities), you can participate in an ongoing consumer competition (marketing event), e.g. by buying in our store. If you win, you have the opportunity to win a specified prize, subject to the conditions of the competition. You can find out about the ongoing consumer competition from our information materials. It is always necessary to be acquainted with the conditions of participation in the relevant consumer competitions.

Double-opt-in procedure - if you have provided an e-mail contact, after processing your data, you will receive another special confirmation e-mail from us. You will not receive promotional emails until you click on the link that contains the email. If you have entered a number on your mobile phone, you will receive a special SMS message from us after the processing of your data. You will receive the advertisement via SMS only when you reply to the initial SMS message sent to us. We use this procedure e.g. upon registration - the registration will be completed only if you confirm it by clicking on the link that will be part of the confirmation e-mail sent to you for this purpose. If the relevant confirmation is not received by you immediately, your login will be automatically deleted from our database.

The legal basis for the provision of this data is according to Art. 6, par. 1, letter a) - the consent of the person concerned and pursuant to Art. 6, par. 1, letter b) - performance of the contract of the said GDPR Regulation

The company has entrusted the person responsible for compliance with personal data protection (in case of questions, you can contact him at the e-mail address: info@woi.sk)

Retention period of personal data - you have given your consent to the company for the duration of the contractual relationship and for the next 5 years from the termination of such a contractual relationship or until you revoke your consent. If you are not, or become, a client of the Company, your consent will be retained for 5 years from the date of grant or until you revoke it.

Intermediaries - our business partners who may have access to your personal data also comply with the rules of personal data protection and we have concluded an agreement with them on the processing of personal data (a list of intermediaries is available on request at info@woi.sk):

  • accounting company
  • web hosting
  • administrative IT services
  • Advertising Agency
  • transport companies (courier, post office)

In order to enhance your experience of visiting our site, we process data in accordance with the law in cooperation with the following companies or their tools:

Google Slovakia, p. r. about.,

Facebook Ireland Ltd.

Mailchimp, Ltd.

 

Personal data will be provided to public institutions such as administrative authorities, courts or law enforcement authorities only to the extent permitted by law.

Data protection at the operator: we take technical and organizational security measures to protect your data as much as possible from unwanted access. In addition to securing the operating environment, we use, for example, the encryption method in some areas (cardholder's account, registration form on the website). The information you enter is then transmitted in encrypted form over SSL (Secure Socket Layer) to prevent misuse of data by third parties. You can tell by the lock symbol in your browser's status bar and the Internet address bar starting with "https". Data protection will always be updated according to the current state of technology and software.

The processing of personal data takes place within the Member States of the European Union and the European Economic Area. The processing of personal data in the territory of a third country may only take place with the consent of the controller and subject to the specific conditions set out in the GDPR Regulation.

The data subject consents by his or her explicit and unconditional consent for the controller to process his or her personal data for the above purposes, during the above period and to the extent specified above. The person concerned has the right to withdraw his consent at any time. Withdrawal of consent shall not affect the lawfulness of the processing resulting from the consent prior to its withdrawal. The data subject is obliged to provide true and current personal data.

The services provided by the operator are not primarily intended for persons under 16 years of age; however, if a person under the age of 16 is interested in using these services, his or her consent must be in writing or approved by that person's legal representative.

Proper processing of your personal data is for VERDOT s. r. about. important and their protection is a matter of course. You can exercise the following rights when processing personal data:

Right of access to data: You have the right to confirm whether or not personal data are processed and, if so, you have access to information on the processing, the categories of personal data concerned, the recipients or categories of recipients, the retention period and the right to information about your rights, about the right to complain to the Office for Personal Data Protection, information about the source of personal data, information about whether there is an automated decision and profiling, information and guarantees in case of transfer of personal data to a third country or international organization. You have the right to provide copies of the personal data processed.

Right of rectification: you have the right to have your incorrect personal data corrected or supplemented without undue delay, while correcting the data yourself or asking the controller to do so.

Right of erasure: you are entitled to request that your personal data be erased without undue delay, provided that the conditions set out in the GDPR are met (you have the right to erase, in particular, if your personal data are no longer needed for the purposes for which they were processed, or The right of erasure shall not apply, in particular where the processing of personal data is necessary for proving, asserting or defending the legal claims of the controller or third parties),

Right to restrict processing: in cases provided for in the GDPR (eg if you challenge the accuracy of personal data or the processing is not in accordance with the law or we no longer need personal data for specified purposes, but need it to prove, assert or defend legal claims) you have the right to request that we restrict their processing

Right to data portability: in cases specified in the GDPR (ie if personal data have been processed by automated means on the basis of a contract), you have the right to obtain the personal data provided, in a structured, commonly used and machine-readable format and the right to require this personal data have been transferred to another operator, you have this transfer of personal data directly from us to another operator, provided that this transfer is technically possible.

Right to object: if the processing of personal data carried out on a legal basis is a legitimate interest under the GDPR, you have the right to object to such processing. We may not further process this data unless it demonstrates the necessary legitimate reasons for the processing which outweigh your interests, rights and freedoms, or the reasons for proving, asserting or defending our legal claims or third parties. You also have the right to object at any time to the processing of personal data which are processed for the purposes of direct marketing; where an objection to the processing of personal data under this sentence is raised, the personal data may no longer be processed for such purposes

Right to revoke consent: if the processing of personal data is carried out on the legal basis of consent, you can revoke this consent at any time. Withdrawal of consent shall not affect the lawfulness of the processing of data which was based on the consent prior to its withdrawal. The appeal must include the information of the person filing the appeal (your name and address, so that we can identify you) and information that you do not want us to process your personal data. If you would like to receive only selected offers, please indicate which offers are involved so that we can accommodate you. Withdrawal of consent to the processing of personal data can be sent in writing, so that we have a proper record of your appeal. Don't forget to sign the appeal.

You have the right to file a complaint with the Office for Personal Data Protection of the Slovak Republic or another relevant supervisory authority, especially if it assumes that there has been a breach of personal data processing.

Contact to exercise the rights concerned: in the event that you contact us by e-mail to info@woi.sk or by post to VERDOT s. r. o., Starohorská 6151/10, Banská Bystrica, Slovakia, we will save the data reported by you (your e-mail address, or your name, surname and your telephone number) to answer your questions or. to process your request. The data will be deleted if they are no longer needed for the purpose of processing, or we will limit their processing if there are legal obligations to keep them. We will provide you with comments and any information about the measures taken as soon as possible, but no later than within one month. If necessary, and given the complexity and number of applications, we can extend this period to two months. We will notify you of the extension, including the reasons.