Processing of personal data | Orava.eu

Processing of personal data in accordance with EU regulation

In connection with the General European Privacy Policy (General Data Protection Regulation), we ask that you agree to the processing of your personal data in the shop.orava.eu. The purpose of GDPR is to provide a higher level of protection of your personal data and a review of your processing and your rights.

Your personal data is processed solely in accordance with valid legislation. We process personal data only with the consent of the client. It is only on his or her free choice whether or not to grant his or her consent to the proposed scope. Grant of consent is entirely voluntary and consent can be withdrawn at any time. We are bound by the scope of the consent we give, and we fully respect it.

1. Purpose of processing

We will process your personal information in order to execute your orders, ordered services, invoicing or order delivery to your contact address.

2. Scope of processing

We process the following customer data that is required for order execution and which you provide us with:

  • name
  • surname
  • birth date
  • street name and number
  • postal code
  • city
  • state
  • country
  • phone number
  • company name
  • company ID
  • TAX ID
  • e-mail address

The information you give us unknowingly:

  • IP address

3. Processing time

Your personal data will be safely stored, collected, processed and archived for the purpose of keeping records and documents for 10 years (pursuant to Article 431/2002 of the Accounting Act as amended) from the last order made.

4. Cookies

We use cookies to adapt your content to our preferences. Cookies are small data files that our e-shop stores in your web browser when you visit it. If you do not agree to use Cookies, set your own cookie policy in your web browser on your device. If you disable the use of cookies, the functionality of the e-shop may be limited.

5. Web metrics and analytics

These are conversion or pixel tags, or small graphic images that can be included in our e-shop code, which allow us to identify the user for the purpose of capturing his behavior and measuring his / her traffic.

We use the following systems:

6. Advertising and promotional services

At e-shope, we use your contacts to send advertising or business announcements outside of ordering. This is the processing of the following data:

  • name
  • surname
  • e-mail address

The data of users who subscribe to Newsletter are sent and processed by a non-EU third party - The Rocket Science Group, which operates Mailchimp and which complies with the principles of the European Privacy Policy. They are available at the web address https://mailchimp.com/legal/privacy/

7. Right of access to data

The user of the e-shop has the right to obtain information about the purpose and scope of processing of his or her personal data.

8. Right to data portability

It is the administrator's responsibility to provide to the data holder all information processed in a structured, commonly used, machine-readable format. By exercising this right, the user gains control of his or her personal data and also has the ability to sell it to another manager in that form.

The data download tool is available to the user in the "Account" section > Protection of Personal Data (GDPR) "of your customer account.

9. Right to fix data

The user has the right to request a correction data manager in the event of a suspicion of incorrect data being stored. You can edit your data in the "Account" section of your customer account.

10. Right to limited data processing

The user has the right to limit the processing of his or her personal data or to disable the selected personal data, or to temporarily remove the published data.

11. Right to delete data

The user has the right to delete his or her personal data without undue delay unless they are no longer necessary for the purpose for which they were collected or processed and the legitimate reason for their possible archiving ceases. When requested to delete data, all irrevocably deleted and related orders (if any) will be anonymized.

12. The right to forget

The user has the right to take reasonable steps, including technical measures, to delete all references to his or her personal data and their copies if the legitimate reason for their possible archiving ceases.

13. Right to raise objections

The user has the right to object to the processing of personal data, or if he has no right to exercise the right of cancellation.

14. Right to file a complaint

The user has the right to lodge a complaint with the supervisor if he considers that processing his or her personal data is contrary to the GDPR Regulation.

15. Recording user requests

The e-shop operator is required to record all user requirements for downloading, repairing, and deleting his or her data.

16. Data security

We have up-to-date technical and security mechanisms to protect the data being processed against unauthorized access or transmission, loss or destruction or other possible misuse.

In the absence of consent and personal data, we will not be able to provide you with any services under the European Privacy Statement.

17. Transfer of personal data to third parties

In these cases, we pass your personal data to third parties:

  • Delivery of goods: the carrier of your choice would never be able to deliver the ordered goods to you if we did not submit data where and to whom the goods are to be delivered. We will pass this information to the carrier according to how you fill it in the order. The data transmitted in this way mainly include your name and surname, delivery address, tel. the number at which the carrier can contact you and, if the goods have not been paid in advance, the amount to be paid when taking over the goods. In relation to the personal data we provide to carrier, the carrier is entitled to process them only for the purpose of delivery of goods and then delete the personal data without delay.
  • Business announcements: in the case of sending business announcements (for example by e-mail or via SMS message) or telemarketing, we may use a third party for distribution or telephone calls. This entity is bound by a duty of confidentiality and may not use your personal data for any other purpose.
  • Companies in the group: your personal data may be shared with contractors of Orava distribution, a.s., Bobrova 20, 851 01 Bratislava on the basis of a legal title of legitimate interest
  • *ORAVA distribution CZ, s.r.o, Elgartova 497/12, 614 00 Brno
  • you can object to this

in BRATISLAVA, May 21st, 2018