PROTECTION OF PERSONAL DATA AND ADVICE ON COOKIES

PROTECTION OF PERSONAL DATA AND ADVICE ON COOKIES

/ Privacy Policy and Guidance

provided by the controller to the data subject when collecting personal data from the data subject and a cookie instruction on the Online Store www.soslow.sk /

I. Operator

1.1.The identity and contact details of the Controller are:

Business name: SO. SLOW, s.r.o.
Registered office: 84101 Bratislava-Dúbravka, Na Vratky 15

District Office Bratislava

Trade register number: 110-288927

ID: 53089812

TAX ID: 2121275145
Bank account: SK19 1100 0000 0029 4108 6722

The seller is not a VAT payer /Value added tax/

1.2. The e-mail contact and telephone contact to the Operator is:

Email: hello@soslow.sk

Tel. No.: +421 917535777

1.3.Address of the Operator for the transmission of documents:

WITH. SLOW, s.r.o. , Na Vrátkach 15, 84101 Bratislava, Slovak Republic

1.4.The operator hereby hereby, in accordance with Article 13(1) and 2(2) of Directive 2001/18/EC, is hereby appointed by the Operator. Regulations (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC of the General Data Protection Regulation. (hereinafter referred to as the "Regulation") provides the Data Subject from whom the Controller collects personal data concerning him/her with the following information and explanations:

II. References

2.1.These privacy policy and guidelines form part of the General Terms and Conditions published in the Seller's Online Store.

2.2.Pursuant to §3, paragraph 1, point (n), Act No. 102/2014 Coll. The Seller informs the consumer that there are no special relevant codes of conduct to which the seller has undertaken to comply with them, the code of conduct being an agreement, or a set of rules defining the conduct of the seller who has undertaken to comply with this Code of Conduct in relation to one or more specific commercial practices, or business sectors, where these are not provided for by law or by any other law or measure of a public authority) which the seller has undertaken to comply with, and the manner in which the consumer may become acquainted with them or obtain the wording thereof.

III. Protection of personal data and use of cookies. Instruction and explanation of cookies

3.1. The Operator provides the following short clarification of the cookie function: 

3.1.1.Cookies are text files that contain a small amount of information that is downloaded when you visit a website to your computer, mobile phone or other electronic device that you use to browse your web domain.

Cookies allow the operator's web domain not only to recognize the user's device, but also allow the user access to the functions on the site.

We divide cookies into two basic types, namely:

Persistent cookies – these cookies remain on the user's device for the period specified in the cookie. They are activated whenever a user visits the web domain that created the cookie.

Relational cookies – These files allow the web domain operator to link user activities when the user opens a browser window and ends up closing the browser window. Relational cookies are created temporarily. When you close your browser, all relational cookies are deleted.

3.2.Explanation of cookies

3.2.1.A cookie is a small text file that a website stores on your computer or mobile device when you browse it. With this file, the website keeps information about your steps and preferences (such as sign-in name, language, font size, and other display settings) for a certain period of time, so you don't have to reintroduce it the next time you visit a website or browse its individual pages.

3.3.Instruction on the use of cookies

3.3.1.The operator's internet domain uses cookies in order to store:

3.3.1.1.the fact that you have already responded to a survey displayed in a separate window (pop-up) through which you can express your opinion on the content of the page (it will not be displayed again);

3.3.1.2.whether or not you have consented to the use of cookies on this website.

3.3.1.3.Marketing and remarketing

Likewise, some subpages that are part of the Operator's website use cookies to anonymously collect statistics about who is the legatee of the source of our Internet domain and what form you have accessed our Internet domain.

Enabling the use of cookies is not necessarily necessary for the proper functioning of the website, but it will give you better user experience when working with it. You can delete or block cookies. 

The information stored in cookies will not be used to personally identify you and the data structure is fully under our control. Cookies are not used for purposes other than those described in this text. Some of our sites or subsites may use additional or different cookies than those described above. In this case, details of their use will be provided on the site in the specific cookie notice. 

3.4.How to check cookies

3.4.1.You can control and/or delete cookies at your discretion – see the aboutcookies.org for details. You can delete all cookies stored on your computer, and you can set most browsers to prevent them from being stored. 

IV. Personal data processed

4.1.The Operator processes on his/her site the following personal data: name, surname, residence, email address, home telephone number, mobile phone number, billing address, delivery address of data obtained from cookies, IP address.

V. Contact details of the person responsible for the collection and processing of personal data, the representative of the controller

5.1.The Controller has not appointed a person who is responsible for the collection and processing of personal data.

5.2.The Controller has not appointed its representative regarding the collection and processing of personal data.

5.3.The Operator is also the Seller in terms of the concept set out in the General Terms and Conditions of this website.

VI. Purposes of the processing of personal data of the Data Subject

6.1.The purposes of the processing of personal data of the Data Subject are mainly:

6.1.2.registration, creation and processing of contracts and data of clients for the purpose of concluding contracts with third parties

6.1.3.processing of accounting documents and documents related to the commercial activities of the Operator

6.1.4.compliance with legislation in connection with archiving of documents and documents, e.g. pursuant to Act No. 431/2002 Coll., Act on Accounting as amended and other relevant transcripts

6.1.4.marketing and similar advertising activities of the Operator

6.1.5.activities related to the Operator's activities on social networks, for example: Facebook, Instagram, Twitter and others.

6.1.6.The Operator's activities in connection with internet activities such as targeting advertising through Facebook Ads, Google Ads and others.

6.1.7. activities of the Operator in connection with the fulfilment of the application, order, contract and similar institutes of the Data Subject.

VII. Legal basis for the processing of personal data of the Data Subject

7.1.The legal basis for the processing of personal data of the Data Subjects is, depending on the specific personal data processed and the purpose of their processing, the consent of the Data Subjects to the processing of personal data. 

VIII. Recipients or categories of recipients of personal data

8.1.The recipient of the Personal Data of the Data Subject shall be, or at least may be: 

8.1.1.statutory bodies or their members of the Operator

8.1.2.persons engaged in employment or similar employment for the Operator. 

8.1.3.Sales representatives of the Operator and other persons cooperating with the Operator in the performance of the Tasks of the Operator. For the purposes of this document, all natural persons performing dependent work for the Operator on the basis of an employment contract or agreements on works performed outside the employment relationship will be considered as employees of the Operator.

8.1.4.The recipient of the personal data of the Data Subject will also be the controller's associates, business partners, suppliers and contractors, in particular: the accounting company, the company providing services related to the creation and maintenance of the software, the company providing legal services to the controller, the company providing advice to the controller, companies providing transport and delivery of products to buyers and third parties, marketing companies, companies operating social networks.

8.1.5.The recipient of personal data will also be the courts, law enforcement authorities, tax office and other state authorities, if provided for by law. While personal data will be provided by the Controllers to the given authorities and state institutions on the basis of and in accordance with the legislation of the Slovak Republic

IX. Information on the provision of personal data to third countries and the duration of their storage: 

9.1.The Controller does not apply not to transfer personal data of persons to third countries. 

9.2.Personal data will be lawfully stored for the necessary time for which they will be necessary for the purpose of performing the contract and then archiving them.

X. Instruction on the existence of the relevant rights of the Data Subject:

10.1.The data subject shall have, inter alia, the following rights, where:

10.1.1.Point 10.1 shall be without prejudice to the other rights of data subjects.

10.1.2.Right of the Data Subject to access the data pursuant to Art. 15 of the Regulation, the content of which is:

the right to obtain from the Controller confirmation or processes the personal data of the Data Subject and, if so, to what extent. At the same time, if they are processed, it has the right to find out their content and to request information from the Controller about the reason for their processing, in particular information on: The reason for their processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be provided, in particular in the case of recipients in third countries or international organisations, the expected retention period of the personal data or, if this is not possible, information on the criteria for its determination, on the existence of the right to request from the Controller the rectification or erasure or restriction of personal data relating to the Data Subject, and on the existence of the right to object to such processing, the right to lodge a complaint with the supervisory authority, if the personal data have not been obtained from the Data Subject, any available information as to their source, the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4); Regulations and, in these cases, at least meaningful information on the procedure used, as well as the significance and expected consequences of such processing of personal data for the Data Subject, on appropriate safeguards under Article 46 of the Regulation concerning the transfer of personal data when personal data are transferred to a third country or to an international organisation.

10.1.3.the right to provide a copy of the personal data being processed, subject, however, to the condition that the right to provide a copy of the personal data processed must not adversely affect the rights and freedoms of others.

10.1.4.the right of the Data Subject to rectification pursuant to Article 16 of the Regulation, the content of which is the right: that the Controller corrects incorrect personal data concerning the Data Subject without undue delay. the right to complete incomplete personal data of the Data Subject, including through the provision of a supplementary declaration of the Data Subject, the right of the Data Subject to erasure of personal data (the so-called 'right to be forgotten') pursuant to Article 17 of the Regulation, the content of which is:

10.1.5.the right to obtain from the Controller the erasure of personal data affecting the Data Subject without undue delay if any of the following reasons is fulfilled:

the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, the Data Subject shall withdraw the consent on the basis of which the processing is carried out, subject to the condition that there is no other legal basis for the processing of personal data, the data subject objects to the processing of personal data pursuant to Article 21(1). Regulations and there are no legitimate reasons for the processing of personal data or the Data Subject objects to the processing of personal data pursuant to Article 21(2). Regulations, personal data have been processed unlawfully, personal data must be erased in order to comply with a legal obligation under European Union law or the law of the Member State to which the Controller is subject, the personal data were collected in connection with the offer of information society services pursuant to Article 8(1). Regulations;

10.1.6.the right for the Controller who has disclosed the personal data of the Data Subject, having regard to the available technology and the cost of implementing the measures, to take appropriate measures, including technical measures, to inform other controllers who process personal data that the Data Subject is asking them to delete all references to such personal data, their copy or replicas, the right to erasure of personal data containing rights pursuant to Articles 17(1) and 2(1) and 2(1) and (2) shall be exercised in accordance with the procedure referred to in Article 17(1) and (2). Regulationsshall not arise where the processing of personal data is necessary:

10.1.7.na exercise the right to freedom of expression and information.

10.1.8.na fulfilment of a legal obligation that requires processing under European Union law or the law of the Member State to which the Controller is subject, or for the performance of a task carried out in the public interest or in the exercise of public authority vested in the Controller.

10.1.9.for reasons of public interest in the field of public health, in accordance with Article 9(2)(h) and (i) of the Regulation, as well as Article 9(3)(b) of the Regulation. Regulation.

10.1.10.na for archiving purposes in the public interest, for the purposes of scientific or historical research or for statistical purposes pursuant to Article 89(1) of regulation (EC) No 1782/2003, Regulations, in so far as it is probable that the right referred to in Article 17(1) is not applicable. The Regulations will make it impossible or seriously difficult to achieve the objectives of such processing of personal data; or for the establishment, exercise or defence of legal claims;

10.1.11.the right of the Data Subject to restrict the processing of personal data pursuant to Article 18 of the Regulation, the content of which is:

10.1.12.the right for the Controller to restrict the processing of personal data in respect of one of the following cases: The data subject challenges the accuracy of the personal data during the period allowing the Controller to verify the accuracy of the personal data, the processing of personal data is unlawful and the Data Subject objects to the erasure of the personal data and requests the restriction of their use instead, the Controller no longer needs personal data for the purposes of processing, but needed by the Data Subject to establish, exercise or defend legal claims, the data subject objected to the processing pursuant to Article 21(1). Regulations, pending verification of whether legitimate reasons on the part of the Controller outweigh the legitimate reasons of the Data Subject;

10.1.13.the right that, where the processing of personal data has been restricted, such limitedly processed personal data, with the exception of storage, are processed only with the consent of the Data Subject or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State;

10.1.14.the right to be informed in advance of the lifting of the restriction on the processing of personal data;

10.1.15.the right of the Data Subject to fulfil the notification obligation towards recipients pursuant to Article 19 of the Regulation, the content of which is: the right for the Controller to notify any recipient to whom the personal data have been disclosed of any rectification or erasure of personal data or restriction of processing carried out pursuant to Article 16, Article 17(1) and Article 18 of the Regulation, unless this proves impossible or requires a disproportionate effort, the right for the Controller to inform the Data Subject about these recipients if the Data Subject so requests;

10.1.16.the right of the Data Subject to the portability of data pursuant to Article 20 of the Regulation, the content of which is: the right to obtain personal data concerning the Data Subject and which he/she has provided to the Controller in a structured, commonly used and machine-readable format and the right to transfer these data to another controller without being prevented by the Controller, if:

a/ the processing is based on the consent of the Data Subject pursuant to Article 6(1)(a) of the Regulation or Article 9(2)(a) of the Regulation, or on a contract pursuant to Article 6(1).b(a) of the Regulation, and at the same time on a contract

b/ the processing is carried out by automated means, and at the same time:

10.1.17.the right to obtain personal data in a structured, commonly used and machine-readable format and the right to transfer such data to another controller without being prevented by the Controller will not have adverse consequences on the rights and freedoms of others;

10.1.18 Right to transfer personal data directly from one controller to another controller, as far as technically feasible;

10.1.19 right of the Data Subject to object pursuant to Article 21 of the Regulation, the content of which is:

10.1.20.the right to object at any time, for reasons relating to the particular situation of the Data Subject, to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(e) or (f) of the Regulation, including objecting to profiling based on these provisions of the Regulation;

10.1.21.in the case of the exercise of the right to object at any time, for reasons relating to the particular situation of the Data Subject, to the processing of personal data concerning him or her, which is carried out on the basis of Article 6(1)(e) or (f) of the Regulation, including objecting to profiling based on these provisions of the Regulation, the right that the Controller does not further process the personal data of the Data Subject unless he proves the necessary legitimate reasons for the processing, outweigh the interests, rights and freedoms of the Data Subject, or the reasons for proving, exercising or defending legal claims

10.1.22.the right to object at any time to the processing of personal data concerning the Data Subject for the purposes of direct marketing, including profiling to the extent that it is related to direct marketing; if the Data Subject objects to the processing of personal data for direct marketing purposes, the personal data may no longer be processed for such purposes;

10.1.23.in connection with the use of information society services, the right to exercise the right to object to the processing of personal data by automated means using technical specifications;

10.1.24.the right to object, for reasons relating to the particular situation of the Data Subject, to the processing of personal data concerning the Data Subject, if the personal data are processed for the purposes of scientific or historical research or for statistical purposes pursuant to Article 89(1) of the Regulation. Regulations, except, however, where processing is necessary for the performance of a task for reasons of public interest;

10.1.25.the right of the Data Subject related to automated individual decision-making pursuant to Article 22 of the Regulation, the content of which is:

10.1.26.the right not to be subject to a decision based solely on automated processing of personal data, including profiling, and which has legal effects concerning him or her or similarly significantly affects him or her, except in cases pursuant to Article 22(2) of the Directive. Regulations (i.e. except where the decision is: (a) necessary for the conclusion or performance of a contract between the Data Subject and the Controller, 

10.1.27.permitted by European Union law or by the law of the Member State to which the Controller is subject, and which also provides for appropriate measures guaranteeing the protection of the rights and freedoms and legitimate interests of the Data Subject or (c) based on the express consent of the Data Subject].

XI. Instruction on the right of the Data Subject to withdraw consent to the processing of personal data:

11.1.The data subject is entitled to withdraw his/her consent to the processing of personal data at any time, without prejudice to the lawfulness of the processing of personal data based on the consent granted prior to his or her withdrawal.

At any time, the data subject is entitled to withdraw his/her consent to the processing of personal data – in whole or in part. Partial withdrawal of consent to the processing of personal data may relate to a certain type of processing operation/ processing operations, while the lawfulness of the processing of personal data within the scope of the remaining processing operations will remain unaffected. Partial withdrawal of consent to the processing of personal data may relate to a specific purpose of personal data processing / certain specific purposes of the processing of personal data, while the lawfulness of the processing of personal data for other purposes will remain unaffected.

The right to withdraw consent to the processing of personal data may be exercised by the Data Subject in paper form to the Address of the Controller registered as its registered office in the Commercial Register at the time of withdrawal of consent to the processing of personal data or in electronic form by electronic means (by sending an e-mail to the e-mail address of the Controller specified in the identification of the Controller in this document or by filling in the electronic form published on the Website operator).

XII. Instruction on the right of the data subject to lodge a complaint with the supervisory authority:

12.1.The data subject shall have the right to lodge a complaint with the supervisory authority, in particular in the Member State of his/her habitual residence, place of work or place of the alleged breach, if he/she considers that the processing of personal data concerning him or her is contrary to the Regulation, all without prejudice to any other administrative or judicial remedies.

The data subject has the right to have the supervisory authority to which the complaint has been lodged inform him or her, as a complainant, of the progress and outcome of the complaint, including the possibility of bringing a judicial remedy pursuant to Article 78 of the Regulation.

12.2.The supervisory authority in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic.

XIII. Information on the existence / absence of an obligation of the Data Subject to provide personal data and information related to automatic decision-making, including profiling:

13.1.The Controller informs the Data Subject that the provision of personal data of the Data Subject is necessary for the conclusion of the purchase contract and for its fulfilment. The Controller informs the Data Subject that the Data Subject is not obliged to provide personal data or is obliged to give consent to their processing. The consequence of the failure to provide personal data and/or the consequence of not granting consent to the processing of personal data will be that the Controller will not be able to conclude and fulfill the purchase contract.

13.2.Since the Controller does not involve the processing of personal data of the Data Subject in the form of automated decision-making, including profiling referred to in Articles 22(1) and 4. The Controller is not obliged to provide information pursuant to Article 13(2)(f) of the Regulation, i.e. information on automated decision-making, including profiling and the procedure used, as well as on the significance and expected consequences of such processing of personal data for the Data Subject. It shall not apply.

XIV. Final provisions

14.1.This Privacy Policy and Cookie Guidance form an integral part of the General Terms and Conditions and the Complaints Policy. Documents – General Terms and Conditions and The Complaints Policy of this online store are published on the domain of the Seller's Online Store.

14.2.This Privacy Policy enters into force and takes effect by publishing it in the Seller's Online Store on 10.10.2020

This eshop is certified http://www.pravoeshopov.sk