Privacy Policy
Privacy Policy
Personal data controller
The controller of your personal data is: Orechini s.r.o, Registered office: Stará Klenová 28 831 01 Bratislava - Nové Mesto, ID No.: 52884775, VAT No.: SK2121343433, Registered in the Commercial Register of the District Court Bratislava I, Section: Sro, Insert No. 162910/B
What personal data we process
Personal data you provide to us
We process personal data that you provide to us.
Personal data we collect other than directly from you
We do not obtain personal data from third parties or provide your personal data to third parties. Exceptions are information necessary for the proper execution of the order /carrier, etc./
Personal data of third parties that you provide to us
If you provide us with personal data of third parties, it is your responsibility to inform the person concerned and to secure their consent to this privacy policy.
Personal data that we process automatically
When you visit our website, we may collect certain information about you, such as your IP address, the date and time you accessed our website, information about your internet browser, operating system or language settings. We may also process information about your behaviour on our website, i.e. for example, what links you visit on our website and which goods are displayed to you. However, information about your behaviour on the website is anonymised for reasons of maximum privacy and therefore we are not able to attribute it to a specific user, i.e. a specific person.
If you access our website from a mobile phone or similar device, we may also process information about your mobile device (data about your mobile phone, any records of application crashes, etc.).
Cookies
We also process cookies automatically. Please refer to the cookie processing terms and conditions here.
Why we collect and process your personal data
We process your personal data for the following reasons:
Purchase of goods and services: we primarily process your personal data in order to properly process and deliver your order. If there are any problems, your personal data lets us know who to contact.
Customer care: if you contact us with a query/problem, we need to process your data to answer/resolve it. In some cases, personal data may also be passed on to third parties (e.g. the carrier of the goods).
User account: thanks to the personal data you provide us in your user profile, a number of useful functions will be made available to you (e.g. if you provide your phone number, we can easily inform you when your order will be delivered). You can change the information you provide at any time, with the exception of your email address, which is used to access your user account.
Marketing activity:
Email marketing: we send you email marketing communications based on your consent. You can easily unsubscribe from receiving marketing communications by editing your user profile settings or by calling our helpline at +421 917 882 508. If you create multiple user profiles with the same contact details (e.g. you have several accounts for different email addresses, but the phone number will be the same on all accounts), it is not possible to perform unsubscribe from commercial messages for all user profiles based on automated processes for technical reasons. In this case, you need to contact us by phone or via the contact form to unsubscribe from receiving commercial messages for all user profiles.
Marketing competitions: in some cases, the winner of the competition may be photographed or filmed, mainly to increase the transparency of our marketing competitions. We carry out this processing of personal data on the basis of our legitimate interest, which is to increase the credibility of our marketing competitions in the eyes of other competitors and to increase the attractiveness of these competitions. You can object to this processing.
Improving our services: Using your order history and web behaviour, we can offer you more relevant offers for additional goods, e.g. accessories for purchased products. We therefore display products in certain places that are directly relevant to you and match your needs and interests. We may also use tools for testing different variants (so-called A/B testing), Google Analytics, Facebook Analytics, etc. to optimize elements on the site.
Customer reviews of goods and services: after you purchase goods or services from us, you may be asked to rate them. It is also possible to insert a rating on your own initiative.
Exercise of rights and legal claims and control by public authorities: we may also process your personal data on the grounds that we need it to exercise our rights and legal claims (e.g. in the event that you have an outstanding claim against us). Furthermore, we may also process your personal data because we need it for the purposes of inspections by public authorities and for other similarly compelling reasons.
We process personal data on the following legal bases
Execution and conclusion of the contract
We need a large part of your personal data in order to be able to enter into a purchase or other contract with you in relation to the goods or services you wish to purchase from us. Once the contract is concluded, we process your personal data in order to properly deliver the purchased goods to you or to properly provide you with the purchased services. Based on this legal basis, we therefore primarily process billing and delivery data.
Legitimate interests
We also use your personal data to provide you with relevant content, i.e. content that is interesting to you. Based on legitimate interest, we mainly process personal data that we process automatically and cookies in this way. For the same legal reason, we may send you as our customer email and SMS messages.
Consent
For the purposes of sending commercial communications (email marketing) and telemarketing, we process your personal data on the basis of your consent. If you give us your consent to the processing of your personal data, you can withdraw it at any time via our contact form.
Transfer of personal data to third parties
In these cases, we transfer your personal data to third parties:
Delivery: your chosen carrier would never be able to deliver the ordered goods to you if we had not given them the details of where and to whom they should deliver the goods. We will pass these details to the carrier as you fill them in on the order form. The data thus transmitted includes in particular your name and surname, the delivery address, a telephone number at which the carrier can contact you and, if the goods have not been prepaid, the amount to be paid on receipt of the goods, if applicable. The carrier is entitled to process the personal data we transmit to it only for the purpose of delivery of the goods and to delete the personal data without delay thereafter.
Payment cards: our company does not hold details of the payment cards you use to pay with us. Only the secure payment gateway and the respective banking institution have your payment card details.
Business Announcements: in the case of sending commercial communications (e.g. by email or SMS), we may use a third party to forward or make telephone calls. This entity is bound by a duty of confidentiality and may not use your personal data for any other purpose.
State authorities: in case of enforcement of our rights, your personal data may be transferred to a third party (e.g. a lawyer). If the law or a public authority (e.g. the Police of the Slovak Republic) obliges us to hand over your personal data to it, we must do so, and you can object to this via our contact form.
How long do we process your personal data?
In the first instance, we will process your data for the duration of the contractual relationship between us.
In the case of processing of personal data for which consent has been given, your personal data will generally be processed for a period of 7 years or until such consent is withdrawn.
In case you subscribe to receive commercial messages, we will process your personal data for a period of 7 years, or until you object to receiving them again. You can easily express your disagreement by editing your user profile settings or by calling our helpline at +421 917 882 508.
Please also note that we must process those personal data which are necessary for the proper provision of services or for the fulfilment of all our obligations, whether these obligations arise from a contract between us or from generally binding legislation, regardless of the consent you have given us, for the period of time specified by or in accordance with the relevant legislation (e.g. for tax documents, this period is at least 10 years).
We process the data collected through the user account or other similar means for the duration of the use of our services and then usually for 5 years after cancellation. Thereafter, only basic identification data and information on the reason for which the user account was cancelled or data forming part of operational backups are usually stored for a reasonable period of time.
Security of personal data
Your personal data is safe with us. To prevent unauthorised access and misuse of your personal data, we have put in place appropriate measures, both technical and organisational.
All communication between your device and our web servers is encrypted. Login credentials are obfuscated and all your data is stored only on servers in secure data centers with limited, carefully controlled and audited access.
We strive to use security measures that provide sufficient security given the current state of technology. The security measures taken are then regularly updated.
What rights you have in relation to the protection of your personal data
In relation to your personal data, you have in particular the right to withdraw your consent to the processing of your personal data at any time, the right to rectify or supplement your personal data, the right to request the restriction of its processing, the right to object to or complain about the processing of your personal data, the right of access to your personal data, the right to request the transfer of your personal data, the right to be informed of a breach of security of your personal data, and, under certain conditions, the right to erasure of some of the personal data that we process in relation to you (the so-called "right to be forgotten").
Amendment
You are in control of your personal data primarily through your user account. Here you can delete or change basic information about your person and change your settings regarding the sending of commercial notifications (or unsubscribe from commercial notifications), etc.
Correction
If you believe that the personal data we process about you is incorrect, you can contact us. However, in order to speed up the correction of your personal data and for your convenience, we recommend that you edit your personal data in your user profile.
Access (portability)
You can ask us to send you an overview of your personal data. At the same time, you have the right to access this information regarding your personal data:
- What are the purposes of processing your personal data
- What are the categories of personal data concerned
- Who, apart from us, are the recipients of your personal data
- Planned period for which your personal data will be stored
- Whether you have the right to request us to rectify or erase your personal data or to restrict or object to the processing of your personal data
- Information about the source of the personal data if we did not obtain it from you
Delete
You can also request that we delete your data (however, the deletion will not affect data on documents that we are required by law to keep (e.g. invoices or credit notes). If we need your personal data to establish, exercise or defend our legal claims, your request may be refused (e.g. where we hold an outstanding debt against you or in the case of a pending claim).
Please note that the main information about your payment card is not stored in our company, but with our payment gateway. Therefore, this data cannot be deleted from our side and you need to contact the payment gateway or the bank through which you made the payment.
Except as stated, you have the right to erasure in the following cases:
- The personal data are no longer necessary for the purposes for which they were processed
- You have withdrawn your consent on the basis of which the data was processed and there is no further legal basis for processing it
- You have objected to the processing of your personal data. data and you consider that, when considering the objection, it becomes apparent that, in the particular situation, your interest outweighs our interest in processing the data. of these data. data
- Personal data are processed unlawfully
- The obligation to erase shall be laid down by a specific legal provision
Lodging an objection
We process some of your personal data on the basis of our legitimate interest. If there are specific reasons on your side, you can object to the processing of this personal data about you.
Restriction of processing
If (a) you contest the accuracy of your personal data, (b) your personal data is being processed unlawfully, (c) we no longer need your personal data for the purposes of the processing but you need it for the establishment, exercise or defence of your legal claims, or if you have (d) raised an objection under the previous clause, then you have the right to have us restrict the processing of your personal data.
In this case, we can only process your personal data with your consent (except for the storage or backup of the personal data in question).
Filing a complaint
If you believe that we are processing your personal data unlawfully, you also have the right to lodge a complaint with the Data Protection Authority. However, we will be happy for you to resolve the offence with us first. You can always contact us easily through our contact form or via our helpline on +421 917 882 508.
This Privacy Policy, including its components, is valid and effective as of
- XX. 20XX.
