Personal Data Protection Terms and Conditions
I.
Primary Provisions
The operator holding personal data under Section 5 (o) of the Act No. 18/2018 on Personal Data Protection as amended (hereinafter the “Act”) is Oxy Addict s. r. o., Company Registration No. 52345301, with its registered address at Záhradnícka 46, 821 08 Bratislava (hereinafter the “Operator”).
The Operator may be contacted at:
address: Záhradnícka 46
email: info@oxyaddict.eu
Personal data shall be taken to mean all information held about an identified or identifiable individual; an identifiable individual is a person who may be directly or indirectly identified, especially through the reference to a particular identifier, such as their name, identification number, localisation data, network identifier or a reference to one or several special features of a physical, physiological, genetic, psychological, economic, cultural or social nature.
The Operator has not appointed a person who is responsible for personal data protection.
II.
Sources and Categories of the Personal Data Processed
The Operator processes the personal data that has been provided in the process of the fulfilment of orders.
The Operator processes identification numbers and contact data and the data necessary for contract fulfilment.
III.
The Legal Justification and Purpose of Personal Data Processing
The legal justification for the processing of personal data processing is
the fulfilment of the contract between yourself and the Operator under Section 13 (1) (b) of the Act;
the Operator’s justified interest in the provision of direct marketing (especially with the aim of sending out commercial notices and newsletters) under Section 13 (1) (f) of the Act;
your consent for your data to be processed for the purpose of providing direct marketing (especially with the aim of sending out commercial notices and newsletters) under Section 13 (1) (a) of the Act if there has been no order of goods or service.
The purpose of personal data processing is
tto allow the realisation of your order and the performance of rights and obligations that arise from the contractual relationship between you and the Operator; personal data is required when placing an order that are necessary for the successful realisation of the order (name and address, contact), provision of personal data is a necessary requirement for the conclusion and fulfilment of the contract; without the provision of personal data it is not possible for the Operator to conclude the contract or to fulfil it; sending out commercial notices and the performance of further marketing activities.
On the part of the Operator there does is no automatic individual decision-making under Section 28 of the Act. You have provided your express consent to such processing.
IV.
Period of Personal Data Storing
The Operator shall store the personal data
for the period necessary for the performance of rights and duties arising from the contractual relationship between yourself and the Operator and the application of the rights arising from such contractual relationships (for a period of 15 years after the termination of the contractual relationship)
for the period before the consent for the processing of personal data processing marketing purposes be rescinded, 5 years at most, if the personal data is processed on the basis of a consent.
After the lapse of this period storage of personal data, the Operator will delete the personal data.
V.
Receivers of Personal Data (Sub-suppliers of the Operator)
The receivers of the personal data are those who:
contribute to the supply of goods/services/realisation of payments on the basis of a contract,
provide e-shop operation services and other services in relation to the e-shop operation,
providing marketing services.
The Operator has no intention to transfer the personal data to a third country (a country outside the EU) or to an international organisation. The receivers of personal data in third countries are providers of mailing services/cloud services.
VI.
Your Rights
Under the conditions stipulated by the Act you have:
the right to access your personal data under Section 21 of the Act,
the right to correct your personal data under Section 22 of the Act or restrict the processing of your data under Section 24 of the Act,
the right to delete personal data under Section 23 of the Act,
the right to object to the processing of your data under Section 27 of the Act,
the right to transfer your data under Section 26 of the Act,
the right to rescind consent to allow processing, such rescindment to be sent in writing or electronically to the Operator’s address or email as stated in Clause III hereof.
You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your rights relating to personal data protection have been violated.
VII.
Conditions for Personal Data Security
The Operator declares that it has adopted all suitable technical and organisational measures to ensure personal data is secure.
The Operator has adopted technical measures to secure electronic data stores and personal data stores in paper form.
The Operator declares that only those who are authorised by them will have access to personal data.
VIII.
Final Provisions
By sending an order using the internet order form you confirm that you have familiarised yourself with the conditions of personal data protection and that you accept them to their full scope and extent.
You express your consent with these conditions by ticking the “I Agree” box on the internet form. By ticking consent, you confirm that you have familiarised yourself with the conditions of personal data protection and that you accept them to their full scope and extent.
The Operator is entitled to change these conditions. It shall publish the new version of the conditions for personal data protection on its internet websites and at the same time it shall send you a new version to the email address you provided to the Operator.
These Terms and Conditions came into effect on 1 July 2018.
