PERSONAL DATA PROTECTION POLICY 

This policy applies to personal data collected by e-shop Kakaový Svet via websites www.kakaovysvet.sk and www.kakaovysvet.eu

The owner and operator of the online shop Kakaový Svet located at the above mentioned URLs is a self employed entrepreneur:

Alexandra Fričová

street: Za kláštorom 21

town: Ružomberok 

ZIP: 034 01 

Slovakia

Business ID: 50 534 670

Tax ID: 1033820260

Registered at: OU-RK-OZP-2016/008405-2 

a self-employed register No. 570-14623

telephone: +421 903 240 301

e-mail: fricovaalexandra@gmail.com

On May 25th 2018, the General Data Protection Regulation (“GDPR") will come into effect. 2018. The operator of these websites collects and process personal data of the visitors and customers in accordance with the GDPR and is therefore required to notify:

The scope of collected personal data:

The extent of the processed personal data is determined to be sufficient to meet the services provided and legal obligations. In the e-shop Kakaový Svet  the following customer personal data are processed:

  • Basic contact details: name, surname, business name, company name and company ID, email address, phone number, contact address, billing address
  • Optional data: social title, title, date of birth
  • Information about the use of our products and services, about the products purchased by customers or considering purchasing them
  • Records of communication in electronic or written form
  • Transaction data - Customer payment information
  • Data from a web browser or from mobile applications through cookies automatically generated by the e-shop program

Click here to read more about using cookies

Purpose of the personal data processing:

  • Pre-contractual and contractual relationships e.g. the conclusion of purchase contracts for the supply of goods and services
  • Receiving and processing of orders, issuing of invoices /tax documents/, registration of payments, delivery of purchased goods
  • Customer identification for order confirmation and communication with them, as well as complaints handling and return policy in the online store Kakaový Svet
  • Compliance with legal obligations relating to business activity, legal actions or extrajudicial debt recovery
  • Informing the customers about the products of the internet store Kakaový Svet, advertising and marketing by means of sending the internet store newsletters to their customer’s email address. This concerns only the customers who have confirmed their will to receive such information by checking the box while filling in their personal data, so they are enlisted in the e-shop mailing list

Legal bases of the personal data processing:

The personal data of the e-shop Kakaový Svet customers are processed solely on the basis of legal provisions in accordance with statutory regulations and only in cases when:

  • the processing of personal data is necessary to meet the obligations expected from the operator, i.e. the fulfilment of the purchase contract or to implement the measures before the purchase contract is concluded, i.e. the provision of the data within the e-shop registration 
  • the processing of customer's personal data is necessary in order to promote the goods and services offered

For all purposes of processing the personal data, the customers grant the e-shop Kakaový Svet their consent by voluntarily filling in their personal details, ticking the boxes and by submitting an order in this shop.

This consent can be canceled by the customer at any time by sending an e-mail to the e-shop requesting the deletion of the personal data.

The operator declares that the customer's personal data will only be used for the above mentioned purposes within the business activities.

Publishing of the data and recipient categories

The operator of the e-shop Kakaový Svet does not publish the obtained personal data of the customers, but the personal data can be provided to third parties and intermediaries, cooperating with the operator, such as shipping and delivery companies.

Personal data may be provided to the following categories of recipients:

  • Delivering courier and shipping companies
  • IT services providers and telecommunication operators
  • Lawyers and law firms
  • Experts and court experts
  • Collection companies and bailiffs
  • Courts and authorities involved in criminal proceedings
  • Accounting offices, auditors and tax advisers

The duration of the personal data storage 

  • The operator has taken reasonable technical and personnel measures appropriate to the processing of personal data, taking into account, in particular, the technical means at hand, the confidentiality and relevance of the processed personal data, and the range of potential risks that may impair the security or functionality of the information systems
  • The operator undertakes to treat and manipulate the personal data of the person concerned in accordance with applicable Slovak and EU legislation
  • Personal data are processed in the case of legitimate interest unless the consent to processing is revoked, for as long as it is justified with regard to the nature of the purchased product or service
  • Personal data is processed for the duration of the contractual relationship, including warranty and claim conditions
  • In the case of a statutory obligation, personal data is processed for a period specified by law
  • Upon withdrawal of the consent of the person concerned, the operator undertakes to ensure that the personal data of the data subject are immediately erased

Rights and obligations of the persons concerned 

As a person concerned the customer has these rights and obligations:

  • The right of access to their personal data, the right to know for what purpose they are processed, who are the recipients of the personal data and the duration of the processing
  • The right to correct and update the personal data
  • The right to delete the personal data
  • If the personal data are processed under the consent of the data subject, that right shall be withdrawn at any time
  • The right to express the wish to restrict the personal data processing
  • The right to raise objections in the case of a finding or suspicion that the processing of personal data is contrary to the rights of the customer or contrary to the law
  • The right to transfer the personal data to another operator
  • The right to file a complaint with the Supervisory Authority, the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, ID: 36 064 220, tel. No .: +421 2 3231 3220, https://dataprotection.gov.sk/uoou/
  • The obligation to provide full and truthful personal data to the extent necessary by means of a registration form or direct order
  • The obligation to inform the e-shop operator immediately of a change in the personal data that could affect the performance of the purchase contract

How to apply the rights

  • By contacting the operator of the e-shop Kakaový Svet via the above mentioned contact details or the contact form on the e-shop page

  • Upon written request, the customer may also require from the operator:

a) a confirmation whether the personal data about his or her person are processed or not,

b) the purpose of the personal data processing,

c) in a generally understandable form, information on the processing of his or her personal data in the information system and on its state 

d) in a generally understandable form, accurate information about the source from which the personal data for processing were obtained,

e) in a generally understandable form, the list of his or her personal data subject of processing,

f) supplementary information necessary for the customer in view of all the circumstances and conditions of the processing of personal data in order to guarantee its rights and the rights of the protected interests,

g) the correction the incorrect, incomplete or outdated personal data being processed,

h) the erasure of his or her personal data if the purpose of the processing has been met

If you do not agree, please do not provide us with any of your personal data and please do not use our websites. 

It is your responsibility to ensure any data provided to us is complete, correct and up to date.