Privacy Policy

This English text is an informative translation. The binding version is the current Slovak version published at korunakrasy.sk.

Protection of personal data
General information on the processing of personal data

 

Data subject – the buyer / visitor of the website,
2. Controller – the operator of the online store: VYSNIVANE COPIKY s.r.o., Company ID 53165446, Muškátová 702/2B, Vinosady, 90201

Given the scope and subject of its activity, the controller is not obliged under Section 44 of Act No. 18/2018 Coll., on the Protection of Personal Data, to appoint a data protection officer. However, if you have any questions regarding your personal data, write to us at info@korunakrasy.sk, call us on +911988883, or visit us in person at the controller's address stated above.
The operator of the website is responsible for the processing of personal data under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR"). On the basis of a written request, the data subject has the right to obtain from the controller information about their personal data that is the subject of processing, or to have their personal data erased or corrected by the controller.
The data subject is obliged to provide true and up to date personal data. The rights of the data subject are governed by Chapter 3 of the GDPR. The data subject has the right to: lodge a complaint with a supervisory authority, object to the processing, request from the controller access to the personal data relating to the data subject, request the rectification or erasure or restriction of the processing of personal data, and the right to data portability.
 

Information on the rights of the data subject

On the basis of a written request, the data subject has the right to require the controller to provide:

a, confirmation as to whether or not personal data concerning them is being processed,

b, in a generally comprehensible form, information about the processing of personal data in the information system, to the extent of: the identification details of the controller and of the processor (if appointed); the purpose of the processing of the personal data; the list or scope of the personal data processed; information about whether providing the requested personal data is voluntary or obligatory, the period of validity of the consent, or a statement of which legal regulation imposes the obligation to provide the personal data; third parties, if the personal data is to be provided to them; the range of recipients, if the personal data is to be made available to them; the form of publication of the personal data, if the personal data is to be published; third countries, if a transfer of the personal data to those countries is to take place,

c, in a generally comprehensible form, precise information about the source from which the controller obtained their personal data for processing,

d, in a generally comprehensible form, a list of their personal data that is the subject of processing,

e, the rectification or erasure of their incorrect, incomplete or out of date personal data that is the subject of processing,

f, the erasure of their personal data whose purpose of processing has ended; if official documents containing personal data are the subject of processing, you may request their return,

g, the erasure of their personal data that is the subject of processing, if the law has been breached,

h, the blocking of their personal data due to withdrawal of consent before the expiry of its period of validity, if the controller processes the personal data on the basis of their consent. The above request, or information about a personal data breach or other serious facts concerning the processing of personal data by the controller, may be addressed to the controller at the address stated above, on tel. no.: +421 911988883, or at the electronic address: info@korunakrasy.sk

 

Right of access to personal data

As a data subject you have the right to have the controller confirm whether it processes personal data concerning you. If the controller processes your personal data, you have the right to obtain access to it and further information about the purpose of the processing of your personal data, the category of personal data processed, to whom your personal data has been or is to be provided, in particular about a recipient in a third country or an international organisation, if possible; if the personal data is transferred to a third country or an international organisation, you have the right to be informed about the appropriate safeguards required by law, about the retention period of the personal data; if that is not possible, information about the criteria for determining it, about the right to request the rectification of your personal data, its erasure or the restriction of its processing, or about the right to object to the processing of personal data, about the right to lodge a request to initiate proceedings on the protection of personal data, about the source of the personal data if it was not obtained from you, and about the existence of automated individual decision making.

Right to rectification of personal data

As a data subject you have the right to have the controller rectify, without undue delay, incorrect personal data concerning you. Depending on the purpose of the processing of the personal data, you have the right to have your incomplete personal data completed.

Right to object to the processing of personal data

You have the right to object to the processing of your personal data on grounds relating to your particular situation, if the controller carries out profiling or processes your personal data on the following legal bases:

- the processing of the personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,

- the processing of the personal data is necessary for the purposes of the legitimate interests of the controller or of a third party. The controller may not process your personal data further unless it demonstrates compelling legitimate grounds for the processing of the personal data which override your rights or interests, or grounds for the establishment of a legal claim. You have the right to object to the processing of personal data concerning you for the purposes of direct marketing, including profiling to the extent that it relates to direct marketing. If you object to the processing of personal data for the purposes of direct marketing, the controller may no longer process the personal data for the purposes of direct marketing. You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you where your personal data is processed for scientific purposes, for the purposes of historical research or for statistical purposes, except where the processing of the personal data is necessary for the performance of a task carried out for reasons of public interest.

Right to erasure of personal data

As a data subject you have the right to have the controller erase, without undue delay, personal data concerning you. If you ask the controller to erase your personal data, the controller is obliged to erase it in the following cases:

a, the personal data is no longer necessary for the purpose for which it was obtained or otherwise processed,

b, you withdraw the consent on the basis of which the controller processes your personal data and there is no other legal basis for the processing of the personal data,

c, you object to the processing of the personal data and there are no overriding legitimate grounds for the processing of the personal data, or you object to the processing of the personal data for the purposes of direct marketing, including profiling to the extent that it relates to direct marketing,

d, the personal data is processed unlawfully,

e, the reason for erasure is compliance with an obligation laid down by law,

f, the personal data was obtained in connection with the offer of information society services under Section 15(1) of the Act. If the controller has published your personal data and is obliged to erase it under the conditions above, it is at the same time obliged, taking account of available technology and the cost, to inform other controllers that process your personal data so that those controllers erase links to your personal data and copies or reproductions of it. The controller is not obliged to erase your personal data if it is necessary

a, for the exercise of the right to freedom of expression or the right to information,

b, for compliance with an obligation under a law or an international treaty, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,

c, for reasons of public interest in the area of public health,

d, for archiving purposes, for scientific purposes, for the purposes of historical research or for statistical purposes, where erasure is likely to render impossible or seriously impair the achievement of the objectives of such processing, or

e, for the establishment of a legal claim.

 

Right to restriction of the processing of personal data

You have the right to have the controller restrict the processing of your personal data if

a, you contest the accuracy of your personal data; the controller will restrict the processing of your personal data for the period needed to verify its accuracy,

b, the processing of your personal data is unlawful and instead of erasure you request the restriction of its use,

c, the controller no longer needs the personal data for the purpose of the processing, but you need it for the establishment of a legal claim, or

d, you object to the processing of the personal data;

e, the controller will restrict the processing of your personal data until it is verified whether the legitimate grounds on the controller's side override your legitimate grounds. Where the processing of personal data has been restricted, apart from storage the controller may process the personal data only with the data subject's consent, or for the establishment of a legal claim, for the protection of persons, or for reasons of public interest. The controller is obliged to inform you before the restriction of the processing of the personal data is lifted.

Notification obligation in connection with the rectification, erasure or restriction of the processing of personal data

The controller is obliged to notify each recipient (everyone to whom your personal data has been provided) of the rectification of your personal data, the erasure of the personal data or the restriction of the processing of the personal data, unless this proves impossible or involves disproportionate effort. If you request it, the controller will inform you about those recipients.

Right to portability of personal data

You have the right to receive the personal data concerning you which you have provided to the controller, in a structured, commonly used and machine readable format. At the same time you have the right to transmit that personal data to another controller, where this is technically feasible and where the processing of your personal data is carried out by automated means (that is, electronically), and where the personal data is processed either

a, on the basis of your consent,

b, or is necessary for the performance of a contract to which you are a party, or in order to take steps prior to entering into a contract at your request. This right must not adversely affect the rights of others. The exercise of the right to portability is without prejudice to the right to erasure of personal data. The right to portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to lodge a request to initiate proceedings on the protection of personal data

If you are directly affected in your rights laid down by the Personal Data Protection Act, you have the right under Section 100 of that Act to lodge a request with the Office for Personal Data Protection of the Slovak Republic to initiate proceedings on the protection of personal data. The purpose of the proceedings is to establish whether the rights of natural persons were breached in the processing of their personal data or whether the law was breached, and, if shortcomings are found and it is justified and expedient, to impose remedial measures or a fine for the breach of the law. The Office publishes a model request on its website. The request to initiate proceedings must contain evidence supporting the assertions made in the request and a copy of a document or other evidence proving that the right was exercised with the controller (right of access to personal data, right to request the rectification of personal data, right to erasure or restriction of the processing of personal data, right to object to the processing of personal data, right to portability of personal data), if the data subject exercised such a right, or a statement of reasons worthy of special consideration for not exercising that right.

The above rights (except the right to lodge a request to initiate proceedings on the protection of personal data) may be exercised by email or in writing by post with the controller, which supervises the processing of the personal data. A personal data breach or other serious facts concerning the processing of personal data by the controller may also be reported to the controller.

If a data subject suspects that their personal data is being processed unlawfully, they may lodge a request to initiate proceedings on the protection of personal data with the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, or contact the Office via its website http://www.dataprotection.gov.sk.

 

If a data subject does not have full legal capacity, their rights may be exercised by their legal representative. If a data subject is deceased, the rights they had under this Act may be exercised by a close person.

The controller shall handle a data subject's request under the Personal Data Protection Act free of charge, apart from a payment in an amount that may not exceed the purposefully incurred material costs associated with making copies, obtaining technical media and sending the information to the data subject, unless a special law provides otherwise. The controller is obliged to handle the data subject's request in writing no later than 30 days from the day the request is delivered. The controller shall notify the data subject and the Office for Personal Data Protection of the Slovak Republic in writing, without undue delay, of any restriction of the data subject's rights under the Personal Data Protection Act.

 

The controller has hereby informed you, as a data subject, about the protection of your personal data and has advised you of your rights in relation to the protection of personal data to the extent of this written information obligation.

 

Processing of personal data for the purposes of fulfilling an order and complaint proceedings

 

Purposes of the processing of personal data: issuing a tax document, contacting the customer about the order, performance of the contract, handling the exercise of liability for defects in the products sold, arising from the performance of the contract.
Legal basis for the processing of personal data: a) The processing of personal data (first name, surname, title, street and number, postcode, city) is necessary under a special regulation or an international treaty by which the Slovak Republic is bound, in particular under Act No. 222/2004 Coll., on Value Added Tax. b) The processing of personal data (email, telephone contact) is necessary for the performance of the contract.
3. Retention period of the personal data: ten years.
4. The provision of the personal data is a contractual obligation.
 

 

Processing of personal data for the purposes of sending marketing information

 

For the processing of personal data for the purposes of sending marketing information, the general information on the processing of personal data stated above applies, and in addition:

Purposes of the processing of personal data: sending marketing information
Legal basis for the processing of personal data: Article 6(1)(a) of the GDPR, the data subject has given consent to the processing of their personal data for one or more specific purposes
Retention period of the personal data: ten years.
Where processing is based on a legitimate interest, the provision of the personal data is necessary in order to achieve that legitimate interest. Where processing is based on consent, the provision of the personal data is voluntary.
 

Automated individual decision making, including profiling

 

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

 

 

 

Processing of personal data for the purposes of cookie processing

 

 

For the processing of personal data for the purposes of cookie processing, the general information on the processing of personal data stated above applies, and in addition:

Purposes of the processing of personal data: provision of services, personalisation of ads, analysis of traffic and sales. Cookies: adwords, google analytics, heureka, facebook pixel.
Cookies are small amounts of data that servers send to the browser. The browser stores them on the user's computer. On each subsequent visit to the site, the browser then sends this data back to the server.

Legal basis for the processing of personal data: Article 6(1)(a) of the GDPR, the data subject has given consent to the processing of their personal data for one or more specific purposes
Retention period of the personal data: In terms of their lifetime, the cookies used on our site can be divided into two basic types. Short term, so called "session cookies", which are only temporary and remain stored in your browser only until you close the browser, and long term, so called "persistent cookies", which remain stored on your device for a longer period or until you delete them manually, whereby the period for which the cookies remain on your device depends on the settings of the cookie itself and on your browser settings.
The provision of the personal data is necessary in order to achieve the purpose.

 

 

Conditions and method of processing the personal data of data subjects

The controller processes the personal data of data subjects in its information systems by both automated and non automated means of processing. The controller does not publish the personal data it processes, except where required by a special legal regulation or by a decision of a court or another state authority. The controller will not process your personal data without your express consent or another lawful legal basis for a different purpose, nor to a greater extent than stated in this information and in the registration sheets of the controller's individual information systems.

 

The recipients of the personal data are in particular:
 

Packeta Slovakia s. r. o., Sliačska 1E, 831 02 Bratislava – mestská časť Nové Mesto, IČO: 48136999

Balíkobot, s.r.o., Revoluční 1200/16, 110 00 Praha - Nové Město, IČO: 06283799
GOPAY s. r. o., registered office Planá 67, 370 01 České Budějovice, Company ID: 260 467 68; Shoptet, a.s., Dvořeckého 628/8, 169 00 Praha 6, Company ID 28935675; Slovenská pošta, a.s., Partizánska cesta 9, 975 99 Banská Bystrica, Company ID 36631124; and the companies handling the controller's accounting.

 

Automated individual decision making, including profiling. Cookies

The controller uses an analytics tool to monitor its websites, which prepares a data string and tracks how visitors use the pages on the internet. When someone views a page, the system generates cookies to record information related to the visit (pages visited, time spent on our site, data viewed, exit from the site, and so on), but this data must not be linked to the visitor's identity. This tool is a tool for improving the ergonomic design of the website, for creating a user friendly website and for enhancing the online experience of visitors. Most internet browsers accept cookies, but visitors have the option to delete them or to reject them automatically. Because every browser is different, visitors can set their cookie preferences individually using the browser toolbar. If you decide not to accept cookies, you will not be able to use some functions on our website.

 

Cookie type
Use
Cookie lifetime
Strictly necessary / essential
for the most important functions of the website, enabling the website to work correctly

- remembers the username, which gives you a quick login on your next visit to the site

- these cookies do not collect any information about you that could be used for marketing purposes
1 year
Functional
- used to improve the service for the user, they adapt the user interface

- information about preferences is recorded based on the content you choose

- cookies can remember the items you have placed in the e-shop shopping cart, or errors you have encountered
After leaving the site
Performance and targeting cookies - analytics cookies
third party analytics tools (google analytics) are used to improve the quality of the content for site visitors - analytics cookies collect statistical data such as the number of page views on the site, links to our site and the number of visits

- they help to understand how site visitors behave

- cookies are used to improve the performance of the website

- these cookies do not collect any

information that would identify you, they are anonymous
Deleted automatically 2 years after the last visit to the website

 

 

Sharing on - use of social

social networks
- use of third party social media that make it possible to share content from our site to social media, using buttons

"like" and "share"

- cookies are required for easier use of their services

- they record data about your activity on the internet and on the websites you use
Deleted automatically 2 years after the last visit to the website
Quality display
built in cookies that improve performance for faster loading of content and help with compatibility
Deleted after

closing

the browser
Site owner
according to the given site settings

- can be "read" only by the given website (number of visitors to the site, where they come from and which parts of the site they visited)
1 year
 

The controller uses the Google AdWords advertising programme, through which it can create online ads and reach people at the very moment they are interested in the products and services the controller provides. The Remarketing and Similar audiences features in AdWords allow us to reach people who have visited the website in the past. It allows ads to be displayed in search, on YouTube and in emails. Dynamic remarketing allows users to be shown ads for products or services they have viewed in the past. Website visitors can disable the cookies that enable remarketing codes by setting their browser accordingly.

 

The controller can also be contacted via Facebook. The purpose of managing the data is to share the content of the controller's website and to present the controller. Through the Facebook page, guests can learn about news and current special offers from the controller and also view photos from selected jobs carried out by the controller. By clicking "like" on the controller's Facebook page, data subjects agree that the controller may post its news and offers to their Facebook wall. On its Facebook page the controller also publishes photos and videos from various events.

 

The controller publishes such data of natural persons only if their written consent has been obtained beforehand. Further information about the management of data from the Facebook page can be found in the guide and privacy rules at www.facebook.com. For presentation purposes, the controller also has a profile on the Instagram social network, where it presents photos from selected jobs together with a description. By clicking "follow" you agree to be shown the photographs published by the controller.