PERSONAL DATA PROCESSING POLICY

BASIC INFORMATION

1.1 Content of the document. This privacy policy describes how we process the personal data of visitors, customers of the online shop and other persons. In particular, you will find out what personal data we process, why and on what basis we do so, to whom we transfer it and what rights you have in connection with its processing. All processing of personal data is carried out in accordance with the European Union's General Data Protection Regulation 2016/679, commonly referred to as GDPR.

1.2 Our position. All described activities of personal data processing are carried out in the capacity of controller by FIZIGO - Sparo s.r.o., with registered office at  Ľubochnianska 4, 83104 Bratislava, ID No. 46835181, Slovak Republic (for greater clarity, hereinafter referred to as "we"). This means that we determine the purposes described below for which we collect your personal data, determine the means of processing and are responsible for its proper execution.

1.3 Scope of Processing of Personal Data. The personal data we process are:

1.3.1. identification data (in particular name and surname or identification number and tax identification number in the case of entrepreneurs),

1.3.2. contact data (in particular address, e-mail address and telephone number),

1.3.3. order and transaction data (in particular the goods and services ordered, the payment and shipping method chosen and other information related to the order),

1.3.4. communication data (in particular the content and other data associated with communications between us and you),

1.3.5. registration and setup data (in particular, data associated with your user account if you register with us and data relating to the setup of our services),

1.3.6. data about your use of our website (in particular, your IP address, data about your device, data collected using cookies or data about what you do on our website).
WHY AND HOW DO WE PROCESS YOUR PERSONAL DATA?

2.1 Functioning of the website. If you visit our website, we process your personal data to ensure its proper functioning based on our legitimate interest in providing our services via the internet.

2.2 User Account. We process your personal data on a contractual basis when you maintain user accounts on our online shop.

2.3 Improving and developing our services. We also process your personal data for the purpose of measuring website traffic and creating statistics and records to evaluate and develop our services, based on our legitimate interest in monitoring website traffic and developing and optimising our services.

2.4 Determining your satisfaction. To determine your satisfaction with our services, we process your personal data based on our legitimate interest in obtaining your feedback. To send you questionnaires, evaluate your feedback and analyse our market position, we pass on information about the goods you have purchased and your email address to the programme operator. In doing so, your personal data is not passed on to any third party for its own purposes. Against sending questionnaires.

2.5 Security and testing. To protect our website and all other services from cyber-attacks and fraud, as well as to test new functionality and changes to the website, we process your personal data based on our legitimate interest in securing and improving our services.

2.6 Protection of legal claims and internal controls. We process your personal data on the basis of our legitimate interests to protect legal claims and our internal records and controls.

2.7 Sending commercial communications to customers. Where we receive electronic contact details from you in connection with an order or our services, we may also process your personal data for the purpose of further offering our goods and services to you by means of commercial communications based on our legitimate interest in promoting us, unless you have opted out of such communications.

2.8 Sending commercial communications on the basis of consent. We process your personal data on the basis of your consent for the purpose of sending you commercial communications.

2.9 Online Advertising. We may process personal data on the basis of our legitimate interest in promoting ourselves to you in order to display personalised advertisements on our website and third party websites.

2.10. To comply with our legal obligations. We also process your personal data for the purposes of and in compliance with our legal obligations, in particular to provide information to public authorities.

2.11. Performance and conclusion of contracts. We process your personal data on the basis of and for the performance of our obligations under contracts concluded between us and you and for the conclusion of those contracts. For this purpose, we may also process personal data of addressees and other recipients of goods and other services, if any.

2.12 Customer Support. In order to deal with your requests related to orders, we process your personal data on the basis of the obligation to perform the contracts concluded between us and you and for the conclusion of these contracts. For handling other requests, if any, we process your personal data on the basis of our legitimate interest in providing our services to ensure adequate support.

2.13 Storage Period. We only store personal data for as long as is necessary to achieve the stated purposes of processing personal data. After the purpose of processing has passed, we will immediately destroy the personal data. As a general rule, we retain personal data for the duration of the limitation period (normally 3 years) and one year after the expiry of the limitation period to take account of possible claims made at the end of the limitation period. Beyond this, the following special storage periods apply:

2.13.1 We retain the data associated with a user account for the lifetime of the account until it is deleted.

2.13.2 In the event of legal or other proceedings, we process your personal data to the extent necessary for the duration of such proceedings and the remainder of the limitation period after the end of the proceedings.

2.13.3 For sending commercial communications to customers, we process your personal data until you refuse to receive commercial communications.

2.13.4. 5 years

2.13.5. To comply with legal obligations, we process personal data for the period necessary to comply with those obligations.

 

TO WHOM IS THE PERSONAL DATA TRANSFERRED?

3.1 Processors. We also use the services of other entities as processors for the processing of personal data, who only process personal data on our instructions. These are in particular:

3.1.1. IT service providers and other technology suppliers,

3.1.2. operators of analytical and marketing tools,

3.1.3. providers of communication tools,

3.1.4. operators of customer satisfaction programmes.

3.2 Administrators. You may disclose your personal data to other entities as controllers:

3.2.1. our suppliers involved in the performance of the contract, in particular carriers and payment system operators,

3.2.2. operators of advertising systems and social networks.

3.3 Transfers outside the EU. In some cases, your personal data may be transferred outside the European Economic Area, either pursuant to an adequacy decision under Article 45 of the GDPR, appropriate safeguards under Article 46 of the GDPR, or an exemption under Article 49 of the GDPR.

 

YOUR RIGHTS

4.1 Data Subject Rights. You have the right to:

4.1.1. to request the rectification of inaccurate or outdated personal data, so that if you discover that the personal data we process about you is inaccurate or incomplete, you have the right to have it rectified or completed without undue delay,

4.1.2. to request confirmation as to whether processing is taking place and, if so, information relating to that processing to the extent provided for in Article 15 of the GDPR, as well as a copy of the data processed (we are entitled to charge a fee for additional copies to cover the necessary costs),

4.1.3. in some cases you have the right to have your personal data erased by us. We will delete your personal data without undue delay if we no longer need it for the purposes for which we processed it, or if you exercise your right to object to the processing and we find that we no longer have such legitimate interests justifying the processing, or if it becomes apparent that the processing of your personal data by us is no longer in accordance with generally binding regulations. However, this right does not apply if the processing of your personal data is still necessary for compliance with our legal obligation, for archiving purposes, for scientific or historical research or statistical purposes, or for the establishment, exercise or defence of legal claims.

4.1.4. exercise the right to restrict the processing of personal data. This right allows you to request, in certain cases, that your personal data be marked and not be subject to any further processing operations - in this case, however, not forever (as in the case of the right to erasure), but for a limited period of time. We have to restrict the processing of personal data where you dispute the accuracy of the personal data before we agree what data is correct, or where we process your personal data without sufficient legal basis (e.g. beyond what we have to process) but you would prefer only to restrict the processing of such data before erasing it (e.g. If you expect that you would provide us with such data in the future anyway), or we no longer need the personal data for the above processing purposes but you require it for the establishment, exercise or defence of your legal claims, or you object to the processing and we are obliged to restrict the processing of your personal data for the period we are investigating whether your objection is justified.

4.1.5. to request the transfer of personal data in cases of processing based on your consent or on the basis of a contract,

4.1.6. object to processing of personal data that is based on our legitimate interest. We will stop processing your personal data unless we have compelling legitimate grounds for continuing to do so. If we object to marketing activities, we will cease these activities in any event,

4.1.7. you may object to the processing of your personal data for the purpose of sending you commercial communications at any time, just as you may withdraw your prior consent to the processing of your personal data for any other purpose at any time, unless the processing is for the performance of our contractual obligations, for the performance of our legal obligations or for any other purpose that arises from our legitimate interests.

4.2 Method of exercising rights. You may exercise your rights in one of the following ways:

4.2.1. by email to our email address.

4.3 The right to lodge a complaint with a supervisory authority. If you become convinced that we have violated the GDPR in processing your personal data, you have the right to file a complaint with the Office for Personal Data Protection, which is located at Hraničná 12, 82007 Bratislavia, Slovak Republic (https://dataprotection.gov.sk).

COOKIES

5.1 Files stored on your device for later access (temporary files). Our website may use cookie technology (and possibly other technologies on a similar principle, such as Web Storage). This means that we store small data files in a dedicated location in your device's memory that allow us to provide you with a service and to further improve it. For simplicity, we will refer to all of these technologies as "cookies".

5.2 Cookies necessary to provide the Service. Some cookies are technologically necessary to provide the Service. This means that their storage cannot be avoided while maintaining the functionality of the Service. These are in particular cookies to:

5.2.1. storing your choices in connection with your order,

5.2.2. storing your website settings,

5.2.3. logging in to your user account,

5.2.4. ensuring IT security.

5.3 Other types of cookies. We use some cookies we store in order to provide you with a better quality and more personalised service. As part of this, we may place cookies on your device:

5.3.1. to provide traffic analysis and website usage, including third party cookies,

5.3.2. for advertising purposes to display tailored advertising on our and other websites, including third party cookies,

5.3.3. to connect to social networks, including third party cookies,

5.3.4. to tailor our website to you,

5.3.5. to identify your geographical location.

5.4. cookie storage settings. You can set the use of cookies on our website within the relevant options on your device, for example by blocking cookies if you do not agree to their use on our website. If you use this option, you acknowledge that some parts of the Service may not function correctly.