Personal data processing policies

0

Home Personal data processing policies

Personal data processing policies

pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation" or "GDPR") and Act No. 18/2018 Coll. on the Protection of Personal Data (hereinafter referred to as the "Act").

Introductory information

Dear customers,

We need your personal data to be able to fulfil our contractual and legal obligations. The security of your personal data and its lawful processing are of paramount importance to us. This policy explains how we handle your data.

Operator

The operator is NEFKUS sro, Company ID: 52270548, Tax ID: 2120959203, VAT ID: SK2120959203 (according to §4, registration from 1.12.2020), with its registered office at Coburgova 9206/82C, 917 01 Trnava (hereinafter referred to as the "Operator").

Website: www.poshmack.com – sales of dog chairs and related accessories.

Contact email: haf@poshmack.com.

Basic principles of personal data processing

Personal data is:

(a) processed lawfully, fairly and transparently in relation to the data subject ("lawfulness, fairness and transparency");

b) collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered incompatible with the original purposes in accordance with Article 89(1) of the GDPR ("purpose limitation");

(c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed ("data minimisation");

(d) accurate and, where necessary, kept up to date; steps are taken to correct or delete inaccurate data ("accuracy");

e) kept only for the period necessary for the purposes of processing, with the possibility of longer storage for archival/scientific/statistical purposes pursuant to Article 89(1) GDPR (“storage minimization”);

(f) processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, through appropriate technical and organisational measures ("integrity and confidentiality").

Person concerned

The data subject is any natural person who is interested in purchasing Goods on the Operator's website and/or who concludes a Purchase Agreement with the Operator.

Automated decision-making and profiling

When processing the personal data of data subjects, there is no automated decision-making or profiling.

Processing security

We have taken appropriate technical and organizational measures to ensure the protection of your personal data. We process personal data in both paper and electronic form in order to prevent their misuse.

Purposes of processing and legal bases

1) Performance of the contract (Article 6(1)(b) GDPR): For the purposes of processing the order, delivering the goods, communicating about the order and managing the customer account, we process: name, surname, delivery and billing address, e-mail, telephone number, order and payment data.

Providing this data is a contractual requirement. Without it, it is not possible to conclude and perform the contract.

2) Fulfillment of legal obligations (Article 6(1)(c) GDPR): In particular obligations arising from tax and accounting regulations. To this extent, we process identification, billing and transaction data for the period specified in the legal regulations.

3) Legitimate interest (Article 6(1)(f) GDPR): Protection of legal claims, prevention of fraud and securing IT operations (logs, website security), while preserving your rights and freedoms.

4) Marketing based on consent (Art. 6(1)(a) GDPR): If you give us your consent, we will send you marketing information (newsletter, offers). Scope: name, surname, e-mail, or telephone number. You can withdraw your consent at any time by sending a request to haf@poshmack.com; the withdrawal does not affect the lawfulness of the processing before its withdrawal.

Recipients and intermediaries

For the purpose of fulfilling the contract and legal obligations, we may disclose your data to our contractual partners within the EU, in particular IT service providers (hosting, backup), courier companies, payment service providers and accounting advisors. We do not provide personal data to third countries outside the EU/EEA that do not guarantee an adequate level of protection.

Retention period

We store data processed for the purpose of fulfilling the contract for the duration of the contractual relationship and no longer than necessary to exercise legal claims (usually 3 years from the end of the contract); we store accounting and tax documents for the period specified by law (usually 10 years). We store data for marketing based on consent until the consent is revoked.

Rights of data subjects

You have the right to request access to your personal data, its correction or erasure, restriction of processing, objection to processing based on legitimate interest, as well as the right to data portability. You also have the right to file a complaint with the Slovak Personal Data Protection Authority. All requests should be directed to haf@poshmack.com.

Use of cookies

We use cookies and similar technologies (pixels, tags) to create an offer tailored to your needs. Cookies are small text files that enable us to recognize you again and analyze your use of our website.

Retention period: Most cookies are session cookies and are deleted after the session ends. We also use persistent cookies, which remain on your device for longer so that we can recognize your preferences. You can find specific cookies, their providers, purposes and retention period in the cookie settings on our website (section "Update cookies preferences").

Types of cookies:

a) Necessary (technical) – for the proper functioning of the site; disabling them may cause errors.

b) Marketing – to display relevant advertising, measure reach and frequency; may include third-party cookies (advertising networks, social networks).

c) Analytical – to track and evaluate user behavior in order to improve the website.

d) Functional – to remember choices (language, login).

Cookie consent: We need your consent to use marketing and analytical cookies, which you can grant or change in your cookie settings. You can withdraw your consent at any time; withdrawal does not affect the lawfulness of the processing before withdrawal. Technical cookies do not require consent.

Contact details and application submission

If you have any questions or would like to exercise your rights, please contact us by e-mail: haf@poshmack.com or in writing to the registered office address: NEFKUS sro, Coburgova 9206/82C, 917 01 Trnava.