Personal data protection

Privacy Policy

 

I.

Basic Provisions

1. The operator of personal data, as per § 5 letter o) of Act no. 18/2018 Coll. on Personal Data Protection as amended (hereinafter referred to as the "Act"), is YARO TRADE, s.r.o., Company ID 53187059, with its registered office at Platanová 18, 010 07 Žilina (hereinafter referred to as the "operator").
2. The operator's contact details are: Ing. Zuzana Michulková, PhD, address: Platanová 18, 010 07 Žilina, phone: +421 917 846 480.

3. Personal data refers to all information about an identified or identifiable natural person; an identifiable natural person is one who can be directly or indirectly identified, in particular by reference to a specific identifier such as a name, identification number, location data, network identifier, or by reference to one or more specific elements of the physical, physiological, genetic, psychological, economic, cultural, or social identity of that natural person.
4. The operator has not appointed a data protection officer.

 

II.

 Sources and Categories of Processed Personal Data

1. The operator processes personal data that you have provided to them or personal data that the operator has obtained based on the fulfillment of your order.
2. The operator processes your identification and contact details, and data necessary for the fulfillment of the contract.

 

III.

Legal Basis and Purpose of Personal Data Processing

1. The legal basis for personal data processing is:

• The fulfillment of a contract between you and the operator in accordance with § 13 par. 1 letter b) of the Act.
• The legitimate interest of the operator in providing direct marketing (especially for sending commercial communications and newsletters) in accordance with § 13 par. 1 letter f) of the Act.
• Your consent to processing for direct marketing purposes (especially for sending commercial communications and newsletters) in accordance with § 13 par. 1 letter a) of the Act, in cases where no goods or services were ordered.

2. The purpose of personal data processing is:

• To process your order and to exercise the rights and obligations arising from the contractual relationship between you and the operator; when placing an order, personal data necessary for successful order processing (name and address, contact) are required; providing personal data is a necessary requirement for concluding and fulfilling the contract; without providing personal data, it is not possible to conclude or fulfill the contract on the part of the operator.
• Sending commercial communications and carrying out other marketing activities.

3. The operator does not engage in automated individual decision-making in the sense of § 28 of the Act.

IV.

Personal Data Retention Period

1. The operator retains personal data:

• For the period necessary for the exercise of rights and obligations arising from the contractual relationship between you and the operator, and for the assertion of claims from these contractual relationships (for a period of 15 years from the termination of the contractual relationship).
• Until consent to personal data processing for marketing purposes is withdrawn, for a maximum of 5 years, if personal data are processed based on consent.

2. After the expiration of the personal data retention period, the operator will delete the personal data.

 

V.

Recipients of Personal Data (Operator's Subcontractors)

1. The recipients of personal data are individuals:

• Involved in the delivery of goods/services/payment processing based on the contract.
• Providing e-shop operation services (Shoptet) and other services related to e-shop operation.
• Providing marketing services.

2. The operator does not intend to transfer personal data to a third country (outside the EU) or an international organization.

 

VI.

 Your Rights

1. Under the conditions stipulated in the Act, you have the:

• Right to access your personal data according to § 21 of the Act
• Right to rectification of personal data according to § 22 of the Act, or restriction of processing according to § 24 of the Act.
• Right to erasure of personal data according to § 23 of the Act
• Right to object to processing according to § 27 of the Act.
• Right to data portability according to § 26 of the Act.
• Right to withdraw consent to processing in writing or electronically to the operator's address or email provided in Article III of these terms.

2. Furthermore, you have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.

                                                             

VII.

Personal Data Security Conditions

1. The operator declares that it has adopted all appropriate technical and organizational measures to secure personal data.
2. The operator has adopted technical measures to secure data storage and personal data storage in paper form, in particular an antivirus program and passwords for backups.
3. The operator declares that only persons authorized by them have access to personal data.

 

VIII.

Final Provisions

1. By submitting an order from the online order form, you confirm that you have read and fully accept these personal data protection conditions.
2. You agree to these conditions by checking the consent box through the online form. By checking the consent box, you confirm that you have read and fully accept these personal data protection conditions.
3. The operator is entitled to change these conditions. The operator will publish the new version of the personal data protection conditions on its website and simultaneously send you the new version of these conditions to the email address you provided to the operator.

 

These conditions become effective on September 1, 2020.