Dear Customer!
In order to be able to purchase goods from our online shop, we need to process your personal data. The lawful processing and security of your personal data is our priority. We would like to inform you about the processing and security of your personal data.
-
Who are we?
Your personal data is being processed by the controller of the webshop. The controller is a natural or legal person, public authority, agency or an other entity which alone or jointly with others determines the purposes and means of processing personal data.
Controller of our webshop: DORIMWEB s.r.o.
located: Vodná ul. 2915/11, Komárno 945 01
Company registration number: 54 556 074
Tax number: SK2121714771
registered in the Commercial Register of the District Court of Nitra, Section: Sro
Insert No.: 57184/N
-
How can you contact us?
Please send your comments, questions and requests to:
phone number: 0911859997
e-mail: vapezone.sk@gmail.com
-
We process the following personal data:
Purchase
Your satisfaction is our first priority. In order to provide information to you, to sell and deliver the goods that you have chosen and to compy with all our legal and contractual obligations, your personal data will be processed as follows:
-
first name, last name, address, perhaps delivery address, phone number, email.
Marketing
We aim to be a reliable partner for you. In order to send you offers and information about products and new arrivals, or perhaps, to contact you for the purpose of market research, we process your personal data to the following extent:
-
email.
Registration
We do everything for your comfort. You can create a personal profile that makes it easier for you to shop in our online store in the future. For the purpose of registering your profile, we will process your personal data to the following extent:
-
first name, last name, address, perhaps delivery address, phone number, email
Defence of legal claims
If our rights are infringed, we will process the following personal data:
-
first name, last name, address, perhaps delivery address, phone number, email.
-
What is the purpose of processing your personal data?
a) E-shop
We process your personal data for the purpose of entering into a contract through our online store and properly performing it for the following purposes, in particular: providing information, receiving, registering and performing your order, delivering goods, issuing an accounting document and accounting, withdrawing from the contract or resolving a complaint. Your data will therefore be processed in accordance with the law for the purposes of performing the contract, i.e. no specific consent is required.
b) Marketing communication
We process your personal data for the following purposes: customer service, providing information about products, services and market research, specifically by sending newsletters to you. If you have not purchased at our store earlier, we will process your personal data for such purposes only if you give us your consent. If you are already our customer, we process your personal data on the basis of legitimate interest.
c) Registration
We process your personal data for the purpose of registration, in order to make the puchase in our store easier. In case of forgetting your password, you can request a new password for the given email address. We will only process your personal data for such purposes if you give us your consent. You can cancel your personal account at any time within the profile that you have created.
d) Defence of legal claims
The controller considers the processing of personal data for defending legal claims to be indispensable for the protection and enforcement of the rights and obligations arising from the legal relationship between the controller and the customer.
-
What is our legitimate interest?
In some cases, we process your personal data on the basis of legitimate interest. If you are already our customer, i.e. you have made at least one purchase from our online store in the past, we will send you newsletters on the basis of legitimate interest. This marketing activity is directly linked to the service and benefits you in a way that makes it easier for you to buy the type of goods that you have been interested about in the past. For this activity, we only process your email address. You have the possibility to unsubscribe at any time, about which you will get information in the newsletter sent. Direct marketing is our legitimate interest on the basis of GDPR. The controller considers the defence of legal claims as a legitimate interest, mainly because of the protection and enforcement of the rights and obligations arising from the legal relationship between the controller and the customer.
-
How can give us your consent?
In some cases mentioned above, we need your contribution for processing your personal data. We only ask for your consent to process your personal data in two cases:
You can consent to the processing of your personal data by selecting one of the following options:
-
Profile registration
-
Subscribing for newsletters regarding people who are not our customers yet
-
By filling in the relevant field
-
By ticking the relevant checkboxes
-
How can you withdraw your consent?
You can withdraw your consent to processing your personal data at any time. You can withdraw your consent:
-
by clicking on the„Unsubscribing from the newsletter”, which is an option available in all our newsletters (direct mails),
-
by deleting your profile registration, or
-
you can send us a notification at any time to the following email address: vapezone.sk@gmail.com
-
How long will we keep your data?
E-shop
-
Sales contracts concluded via our online store are kept until the order is processed or for the period of time strictly necessary for legal enforcement, e.g. for complaints.
-
Accounting documents are kept for 10 years.
-
Complaint documents are kept for 5 years.
-
Registration data is kept for as long as the personal profile exists.
Defence of legal claims
-
Documents concerning court cases must be kept for 10 years.
Marketing
-
We need to keep your email address until the purpose for which you gave consent to processing your data is not terminated.
-
Who we share your data with?
When processing your personal data, we also use the services of verified and external business partners who we are in a contractual relationship with, to help us process and protect your personal data.
For providing our services, we share your personal data with:
-
an external accountant
-
a carrier for delivering the purchased goods
-
Where do we forward your personal data?
The personal data we process for the above mentioned purposes will not generally be transferred to third countries.
-
Who can you contact in case of dissatisfaction?
Your satisfaction is our goal. For this reason, we always try to meet all your needs. However, if you are not satisfied with how we process your personal data, please write an email to the following address: vapezone.sk@gmail.com
You also have the right to lodge a complaint at the Data Protection Office, especially if you feel that your personal data is being processed unlawfully.
-
In what form do we process your personal data?
We process your personal data both in electronic and paper form, and we do not use automated individual decision-making or profiling tools.
-
How do we ensure the protection of your personal data?
As we have already mentioned at the beginning of this document, the security of your personal data is our priority. For this reason, we have arranged the necessary and appropriate technical and organisational measures to protect your personal data against, among other things, loss, misuse or unauthorised access. The technical means used to process personal data are adequately secured with passwords known only by the authorised persons. These technical devices are stored on our premises and are not removed or relocated. Only those authorized people have access to them, who have received the proper training and are familiar with our internal rules and policies regarding the processing of personal data. The measures adopted are regularly reviewed and continuously adapted to the state of the art. If the protection of your personal data is breached, we will inform you without undue delay within 72 hours if such a breach would highly endanger your rights.
-
What are your rights?
a) Right of access to data
First of all, you have the right to know how we process your data. If we process your personal data, you can request an access to these data. At your request, we will provide you with a certificate of processing your personal data by our company.
b) Right to data rectification
You have the right to have correct, complete and up-to-date personal data that we process. If your personal data is incorrect or not up-to-date, you may request it to be corrected or completed.
c) Right to data erasure
In certain circumstances, you have the right to have your personal data deleted. You can ask us to delete your data at any time. We will delete your personal data if
-
we no longer need your personal data for the purposes for which you provided it for us;
-
you withdraw your consent;
-
you object to the processing of your personal data;
-
we process your personal data unlawfully;
-
personal data must be deleted in order to comply with a legal obligation;
-
if you are a child or a parent of a child who has given consent to data processing online.
However, we may not be able to delete your personal data (or part of it) despite your request to do so because of a legal obligation. We will inform you of this fact without delay.
d) Right to restriction of processing
You can also request to restrict the processing of your personal data. If we comply with your request, we will only keep your personal data and will no longer process it. We will restrict the processing of your personal data if
-
you notify us about the fact that your personal data is incorrect, as long as we do not check its correctness;
-
if we process your personal data unlawfully but instead of deleting it you request us only to restrict its processing;
-
we no longer need your personal data but you but you need it to verify, assert or defend your rights or claims;
-
you object to the processing of your personal data until we have verified that our legitimate interests override your grounds.
e) Right to data portability
You have the right to request us to provide your personal data in an electronic format (e.g. XML or CSV file), which allows an easy transfer of the data to another company. We may, upon your written request, transfer your personal data directly to the selected company. We will comply with your request if you have provided personal data directly for us and have given us your consent to process it.
f) Right to object
You have the right to object how we process your personal data. If we use your personal data directly for marketing purposes, you can object its processing at any time. We will delete your personal data based on the objection. If we process your personal data because of:
-
the performance of a task for public interest or in the exercise of official authority,
-
our legitimate interest,
you can object to the processing of data if you have personal reasons for that.
-
How can you enforce these rights?
Requests should be sent to:
phone number: 0911529541
e-mail: vapezone.sk@gmail.com
-
Handling of requests
We will handle all your requests and you will be informed about the outcome in the same way you submitted the request. In processing your request to exercise your rights under the GDPR, we may ask you to verify your identity.
All your requests, concerning exercise of your rights, will be assessed individually and comprehensively, and we will inform you about the outcome no later than one month after we receive the request.
If your request is obviouly baseless or inadequate, in particular if it is repetitive, we are entitled to charge a reasonable fee that takes into account the administrative costs of providing the information requested. In case of a repeated request for a copy of the personal data processed, we reserve the right to charge a reasonable fee to cover the administration costs.
If, in your opinion, your request to exercise your data subject's rights under the GDPR has not been settled in accordance with the GDPR, you have the right to lodge a complaint with the supervisory authority (www.dataprotection.gov.sk) or to seek judicial redress directly with the competent general court.
-
Final provisions
This privacy policy will enter into force on the date of its publication: 10 July 2022.
We reserve the right to modify this policy in case of changes in the way our company handles personal data. Any changes will be communicated to you via email.