/ Principles and instructions on personal data protection provided by the operator to the affected person when obtaining personal data from the affected person and information about cookies of the Internet store www.soslow.sk /
I. Operator
1.1. The identity and contact details of the Operator are:
Business name: SO.SLOW, sro
Registered office: 84101 Bratislava-Dúbravka, Na Vratkách 15
Bratislava District Office
Trade register number: 110-288927
ID: 53089812
VAT number: 2121275145
Bank account: SK98 0900 0000 0051 7464 5987
The seller is not a VAT payer
1.2. Email contact and telephone contact for the Operator is:
Email: hello.soslow@gmail.com
Tel. no.: +421 917 535 777
1.3. Address of the Operator for sending documents:
SO.SLOW, sro, Na Vrátkach 15, 84101 Bratislava, Slovak Republic
1.4. The operator hereby, in accordance with Article 13 par. 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC General Data Protection Regulation. (hereinafter referred to as the "Regulation") provides the following instructional and explanatory information to the Data Subject from whom the Operator obtains personal data concerning him/her:
II. Links
2.1. These principles and instructions on the protection of personal data form part of the General Terms and Conditions published in the Seller's Online Store.
2.2. Pursuant to §3, par. 1, letter n), Act no. 102/2014 Z. The seller informs the consumer that there are no special relevant codes of conduct to which the seller has undertaken to comply, whereby the code of conduct is understood as an agreement or a set of rules that define the behavior of the seller, who has undertaken to comply with this code of conduct in in relation to one or more special business practices, or business sectors, if these are not established by law, or other legal regulation or measure of a public administration body), which the seller has undertaken to comply with, and in the manner in which the consumer can become familiar with them, or obtain their wording.
III. Protection of personal data and the use of cookies. Instruction and explanation of cookies
3.1. The operator provides this brief explanation of the function of cookies:
3.1.1. Cookies are text files that contain a small amount of information that is downloaded to your computer, mobile phone or other electronic device that you use to browse the web domain when you visit a website.
Cookies allow the operator's web domain not only to recognize the user's device, but at the same time allow the user to access functions on the site.
We divide cookies into two basic types, namely:
Permanent cookies - these cookies remain on the user's device for the time specified in the cookie file. They are activated every time the user visits the web domain that created the given cookie file.
Session cookies - these files allow the web domain operator to link the user's activities when the user opens the browser window and ends when the browser window is closed. Session cookies are created temporarily. After closing the browser, all session cookies are deleted.
3.2. Explanation of cookies
3.2.1. A cookie file is a small text file that a website stores on your computer or mobile device when you browse it. Thanks to this file, the website temporarily stores information about your actions and preferences (such as login name, language, font size and other display settings) so that you do not have to enter them again the next time you visit the website or browse its individual pages.
3.3. Instruction on the use of cookies
3.3.1. The operator's internet domain uses cookies to store:
3.3.1.1. the fact that you have already answered the survey displayed in a separate window (pop-up), through which you can express your opinion on the content of the page (it will not be displayed again);
3.3.1.2. whether you have agreed (or not) to us using cookies on this website.
3.3.1.3. Marketing and remarketing
Likewise, some subpages that are part of the Operator's pages use cookies to anonymously collect statistical data about who is the referrer of the source of our internet domain and how you got to our internet domain.
Allowing the use of cookies is not absolutely necessary for the proper functioning of the website, but it will provide you with better user comfort when working with it. You can delete or block cookies.
Information stored in cookie files will not be used to identify you personally and the data structure is fully under our control. Cookies are not used for purposes other than those mentioned in this text. Some of our pages or subsites may use additional or different cookies than those listed above. In this case, detailed information on their use will be provided on the page in question in a special notification about cookies.
3.4. How to control cookies
3.4.1. You can cookies review and/or delete discretionary - see page for details aboutcookies.org. You can delete all cookies stored on your computer and you can set most browsers to prevent them from being stored.
IV. Personal data processed
4.1. The operator processes the following personal data on its website: name, surname, place of residence, email address, phone number, data obtained from cookie files, IP address.
V. Contact details of the person responsible for the collection and processing of personal data, representative of the operator
5.1. The operator has not appointed a person who is responsible for the collection and processing of personal data.
5.2. The operator has not appointed his representative in the matter of collection and processing of personal data.
5.3. The Operator is also the Seller in the sense of the term established in the General Terms and Conditions of this website.
VI. Purposes of processing the Personal Data of the Data Subject
6.1. The purposes of processing the Personal Data of the Affected Person are mainly:
6.1.1. registration, creation and processing of contracts and client data for the purpose of concluding contracts with third parties
6.1.2. processing of accounting documents and documents related to the business activity of the Operator
6.1.3. compliance with legal regulations in connection with the archiving of documents and documents, e.g. according to Act no. 431/2002 Coll., Accounting Act as amended and other relevant copies
6.1.4. marketing and similar advertising activities of the Operator
6.1.5. activities related to the Operator's activity on social networks, for example: Facebook, Instagram, Twitter and others.
6.1.6. the activity of the Operator in connection with Internet activities such as targeting advertising through Facebook Ads, Google Ads and others.
6.1.7. the activity of the Operator in connection with the fulfillment of the request, order, contract and similar institutes of the Affected Person.
VII. Legal basis for processing personal data of the concerned person
7.1. The legal basis for the processing of personal data of the Affected Persons is, depending on the specific personal data processed and the purpose of their processing, the consent of the Affected Persons to the processing of personal data.
VIII. Recipients or categories of recipients of personal data
8.1. The recipients of the Personal Data of the Affected Person will be, or at least can be:
8.1.1. statutory bodies or their members of the Operator
8.1.2. persons performing work in an employment or similar relationship for the Operator.
8.1.3. business representatives of the operator and other persons cooperating with the Operator in the performance of the Operator's tasks. For the purposes of this document, all natural persons performing dependent work for the Operator on the basis of an employment contract or agreements on work performed outside the employment relationship will be considered employees of the Operator.
8.1.4. The recipient of the personal data of the affected person will also be the associates of the operator, its business partners, suppliers and contractual partners, in particular: an accounting company, a company providing services related to the creation and maintenance of software, a company providing legal services to the operator, a company providing advice to the operator, companies providing transportation and delivery of products to buyers and third parties, marketing companies, companies operating social networks.
8.1.5. Recipients of personal data will also be courts, law enforcement agencies, the tax office and other state authorities, if the law so provides. While personal data will be provided by the Operator to the relevant authorities and state institutions based on and in accordance with the legal regulations of the Slovak Republic.
IX. Information on the provision of personal data to third countries and their retention period:
9.1. Not applicable. The operator does not transfer personal data of persons to third countries.
9.2. In accordance with legal regulations, personal data will be stored for the necessary time, for which they will be needed for the purpose of fulfilling the contract and their subsequent archiving.
X. Instruction on the existence of relevant rights of the concerned person:
10.1. The person concerned has, among other things, the following rights, while:
10.1.1. Clause 10.1 does not affect other rights of Affected Persons.
10.1.2. The Data Subject's right to access data pursuant to Art. 15 Regulations, whose content is:
the right to obtain confirmation from the Operator as to whether it processes the Personal Data of the Affected Person, and if so, to what extent. At the same time, if they are processed, I have the right to find out their content and request information from the Operator about the reason for their processing, especially information about: The reason for their processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be provided, especially in the case of recipients in third countries or international organizations, the expected period of storage of personal data or, if this is not possible, information on the criteria for its determination, on the existence of the right to request from the Operator the correction of personal data relating to the Affected Person or their deletion or restriction of processing and on the existence of the right to object to such processing, on the right to file a complaint with the supervisory authority if the personal data were not obtained from the Affected Person, any available information, regarding their source, on the existence of automated decision-making, including the profiling referred to in Article 22 par. 1 and 4 of the Regulation and in these cases at least meaningful information about the procedure used, as well as the meaning and expected consequences of such processing of personal data for the Data Subject, about adequate guarantees according to Article 46 of the Regulation, regarding the transfer of personal data, if personal data are transferred to third country or international organization.
10.1.3. the right to provide a copy of the personal data that is being processed, subject to the condition that the right to provide a copy of the processed personal data must not have adverse consequences on the rights and freedoms of others.
10.1.4. the Data Subject's right to correction according to Article 16 of the Regulation, the content of which is the right: for the Operator to correct incorrect personal data concerning the Data Subject without undue delay. the right to supplement incomplete personal data of the Affected Person, including by providing an additional statement of the Affected Person, the right of the Affected Person to delete personal data (the so-called "right to be forgotten") according to Article 17 of the Regulation, the content of which is:
10.1.5. the right to obtain from the Operator the deletion of personal data concerning the Affected Person without undue delay, if any of the following reasons are met:
personal data are no longer necessary for the purposes for which they were obtained or otherwise processed, the affected person revokes the consent on the basis of which the processing is carried out, subject to the condition that there is no other legal basis for the processing of personal data, the affected person objects to the processing personal data according to article 21 par. 1. Regulations and there are no valid reasons for the processing of personal data or the affected person objects to the processing of personal data according to Article 21, paragraph 2. Regulations, personal data were processed illegally, personal data must be deleted in order to fulfill a legal obligation under the law of the European Union or the law of a member state to which the Operator is subject, personal data were obtained in connection with the offer of information society services according to Article 8, paragraph 1. Regulations;
10.1.6. the right for the Operator who has disclosed the Personal Data of the Data Subject to take appropriate measures, including technical measures, taking into account the available technology and the costs of implementing the measures, to inform other Operators who carry out the processing of personal data that the Data Subject requests them to delete all links to these personal data, their copy or replicas, at the same time, the right to delete personal data with the content of rights according to Article 17 par. 1. and 2. Regulations will not arise if the processing of personal data is necessary:
10.1.7. to exercise the right to freedom of expression and information.
10.1.8. to fulfill a legal obligation that requires processing according to the law of the European Union or the law of a member state to which the Operator is subject, or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the Operator.
10.1.9. for reasons of public interest in the field of public health in accordance with Article 9 par. 2. letter h) ai) Regulations, as well as Article 9 par. 3. Regulations.
10.1.10. for the purposes of archiving in the public interest, for the purposes of scientific or historical research or for statistical purposes pursuant to Article 89, paragraph 1. Regulations, as long as it is likely that the right referred to in Article 17 paragraph 1. Regulations will make it impossible or seriously difficult to achieve the goals of such processing of personal data; or to establish, exercise or defend legal claims;
10.1.11. the right of the affected person to limit the processing of personal data according to Article 18 of the Regulation, the content of which is:
10.1.12. the right for the Operator to limit the processing of personal data in one of the following cases: the Data Subject contests the accuracy of the personal data, during the period allowing the Operator to verify the accuracy of the personal data, the processing of the personal data is unlawful and the Data Subject objects to the deletion of the personal data and asks instead to limit their use, the Operator no longer needs personal data for the purposes of processing, but the Data Subject needs them to prove, exercise or defend legal claims, the Data Subject objected to the processing according to Article 21 par. 1. Regulations, until it is verified whether the legitimate reasons on the part of the Operator prevail over the legitimate reasons of the Affected Person;
10.1.13. the right that, in the event that the processing of personal data is restricted, such restricted personal data, with the exception of storage, shall be processed only with the consent of the Data Subject or to demonstrate, exercise or defend legal claims, or to protect the rights of another natural or legal person, or from reasons of important public interest of the European Union or a member state;
10.1.14. the right to be informed in advance about the cancellation of the limitation of personal data processing;
10.1.15. the right of the Data Subject to fulfill the notification obligation towards recipients according to Article 19 of the Regulation, the content of which is: the right for the Operator to notify each recipient to whom personal data has been provided, of any correction or deletion of personal data or restriction of processing carried out pursuant to Article 16, Article 17 par. 1. and Article 18 of the Regulation, unless it proves to be impossible or requires disproportionate effort, the right for the Operator to inform the Data Subject about these recipients, if the Data Subject requests it;
10.1.16. the Data Subject's right to data portability according to Article 20 of the Regulation, the content of which is: the right to obtain personal data relating to the Data Subject and provided to the Operator in a structured, commonly used and machine-readable format and the right to transfer this data to another operator without The Operator defended her if:
and/ the processing is based on the Data Subject's consent according to Article 6, paragraph 1. letter a) Regulation or Article 9 par. 2. letter a) Regulations, or on the contract according to article 6 par. 1. letter b) Regulations, and at the same time
b/ the processing is carried out by automated means, and at the same time:
10.1.17. the right to obtain personal data in a structured, commonly used and machine-readable format and the right to transfer this data to another operator without the Operator preventing it, it will not have adverse consequences on the rights and freedoms of others;
10.1.18 the right to transfer personal data directly from one operator to another operator, as long as it is technically possible;
10.1.19 the right of the affected person to object according to Article 21 of the Regulation, the content of which is:
10.1.20. the right to object at any time, for reasons related to the Data Subject's specific situation, to the processing of personal data concerning him, which is carried out on the basis of Article 6 par. 1. letter e) or f) of the Regulation, including objecting to profiling based on these provisions of the Regulation;
10.1.21. in case of realization of the right to object at any time for reasons related to the specific situation of the concerned person against the processing of personal data concerning him, which is carried out on the basis of article 6 par. 1. letter e) or f) of the Regulations, including objection to profiling based on these provisions of the Regulations, the right for the Operator not to further process the Personal Data of the Data Subject, unless he proves the necessary legitimate reasons for processing that outweigh the interests, rights and freedoms of the Data Subject, or reasons for proving , exercising or defending legal claims
10.1.22. the right to object at any time to the processing of personal data concerning the Data Subject for the purposes of direct marketing, including profiling to the extent that it is related to direct marketing; it also applies that if the Data Subject objects to the processing of personal data for direct marketing purposes, the personal data may no longer be processed for such purposes;
10.1.23. in connection with the use of information society services, the right to exercise the right to object to the processing of personal data through automated means using technical specifications;
10.1.24. the right to object, for reasons related to the Data Subject's specific situation, to the processing of personal data concerning the Data Subject, if the personal data are processed for the purposes of scientific or historical research or for statistical purposes pursuant to Article 89 paragraph 1. Regulations, but with the exception of cases where the processing is necessary for the performance of the task for reasons of public interest;
10.1.25. the Data Subject's right related to automated individual decision-making according to Article 22 of the Regulation, the content of which is:
10.1.26. the right not to be subject to a decision that is based solely on automated processing of personal data, including profiling, and which has legal effects that concern or similarly significantly affect the Data Subject, except in cases pursuant to Article 22 paragraph 2. Regulations [that is, with the exception of cases where the decision is: (a) necessary for the conclusion or performance of the contract between the Affected Person and the Operator,
10.1.27. permitted by the law of the European Union or the law of a Member State to which the Operator is subject and which also establish appropriate measures guaranteeing the protection of the rights and freedoms and legitimate interests of the Data Subject or (c) based on the express consent of the Data Subject].
XI. Instruction on the Data Subject's right to withdraw consent to the processing of personal data:
11.1. The person concerned is entitled to withdraw his consent to the processing of personal data at any time, without this affecting the legality of the processing of personal data based on the consent granted before its withdrawal.
The affected person is entitled to withdraw his consent to the processing of personal data at any time - in whole or in part. Partial withdrawal of consent to the processing of personal data may relate to a certain type of processing operation / processing operations, while the legality of personal data processing in the scope of the remaining processing operations remains unaffected. Partial revocation of consent to the processing of personal data may relate to a certain specific purpose of personal data processing / certain specific purposes of personal data processing, while the legality of personal data processing for other purposes remains unaffected.
The Data Subject may exercise the right to withdraw consent to the processing of personal data in written form to the Operator's address entered as its registered office in the commercial register at the time of withdrawal of consent to the processing of personal data or in electronic form via electronic means (by sending an e-mail to the Operator's e-mail address specified when identifying the Operator in this document or by filling out the electronic form published on the Operator's website).
XII. Instruction on the right of the affected person to file a complaint with the supervisory authority:
12.1. The person concerned has the right to file a complaint with the supervisory authority, in particular in the Member State of his habitual residence, place of work or in the place of the alleged violation, if he believes that the processing of personal data concerning him is in violation of the Regulation, namely all without prejudice to any other administrative or judicial remedies.
The person concerned has the right to have the supervisory authority to which the complaint was filed inform him, as the complainant, of the progress and outcome of the complaint, including the possibility of filing a judicial remedy pursuant to Article 78 of the Regulation.
12.2. The supervisory authority in the Slovak Republic is the Personal Data Protection Office of the Slovak Republic.
XIII. Information on the existence / non-existence of the Data Subject's obligation to provide personal data and Information related to automatic decision-making, including profiling:
13.1. The Operator informs the Affected Person that the provision of the Affected Person's personal data is necessary for the conclusion of the purchase contract and its fulfillment. The Operator informs the Affected Person that the Affected Person is not obliged to provide personal data nor is he obliged to grant consent to their processing. The consequence of not providing personal data and/or the consequence of not granting consent to the processing of personal data will be that the Operator will not be able to conclude and fulfill the purchase contract.
13.2. Since in the case of the Operator it is not a matter of processing the Personal Data of the Affected Person in the form of automated decision-making, including the profiling referred to in Article 22 par. 1. and 4. Regulations, the Operator is not obliged to provide information according to Article 13, paragraph 2 letters f) Regulations, i.e. information about automated decision-making, including profiling, and the procedure used, as well as about the meaning and expected consequences of such processing of personal data for the Data Subject. Not applicable.
XIV. Final provisions
14.1. These Principles and instructions on the protection of personal data and instructions on cookies form an integral part of the General Terms and Conditions and the Complaints Procedure. Documents - General terms and conditions and Complaints procedure of this online store are published on the domain of the Seller's online store.
14.2. These personal data protection principles become valid and effective upon their publication in the Seller's Online Store 10.10.2020
This eshop is certified http://www.pravoeshopov.sk
