PROTECTION OF PERSONAL DATA AND INSTRUCTIONS ON COOKIES
/ Principles and instructions on personal data protection
provided by the operator to the data subject when obtaining personal data from the data subject and information on cookies of the Internet shop glowycats.shop /
I. Operator
Identity and contact details of the
Operator : Gence Group, s.r.o.
Seat: Martina Benku 1685/17, Malacky 901 01, Slovak Republic
Registered in the register of the District Court Bratislava I, Section Sro, File number 156362 / B
IČO: 54168767
DIČ: 2121595883
IČ DPH: SK 2121595883
Bank account: SK59 1100 0000 0029 4511 5770 The
seller is a VAT payer / Value added tax /
1.2. Email contact and telephone contact to the Operator is:
Email: [email protected]
Tel. No .: +421911526776
1.3.Address of the Operator for sending documents:
Gence Group, s.r.o., Martina Benku 1685/17, Malacky 901 01, Slovak Republic
1.4. 1. and 2. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / EC by the General Data Protection Regulation ( hereinafter referred to as the “Regulation”) provides the Affected Person – (Buyer), from whom the Operator (Seller) obtains personal data concerning him, the following information with instructions and explanations:
II. References
2.1. These principles and instructions on personal data protection form part of the General Terms and Conditions published on the Seller’s Website.
2.2. Pursuant to §3, par. 1, letter n), Act no. 102/2014 Coll., The Seller informs the consumer that there are no special codes of conduct to which the Seller has committed itself to complying with them, where the Code of Conduct means an agreement or set of rules defining the conduct of the Seller who has undertaken to comply with this Code of Conduct in relation to to one or more specific commercial practices or industries, unless these are provided for by law or other legislation or public authority measure) which the seller has undertaken to comply with, and the manner in which the consumer may become acquainted with them or obtain them; wording.
III. Privacy and use of cookies. Instruction and explanation of cookies, scripts, and pixels
3.1. The website operator provides the following brief explanation of the function of cookies, scripts and pixels:
3.1.1. Cookies are text files that contain a small amount of information that is downloaded to your device when you visit the website.
the program code that is used for the proper and interactive function of the website. This code will run on the operator’s server or on your device.
Pixels are small, invisible text or images on a website that are used to monitor website traffic. In order for this to happen, various data are stored via pixels.
3.1.2 Cookies are divided
Technical or functional cookies – ensure the proper functioning of the Operator’s website and its use. These cookies are used without consent.
Statistical cookies – The operator obtains statistics regarding the use of its website. These cookies are used only with consent.
Marketing / Advertising cookies – Used to create advertising profiles and similar marketing activities. These cookies are used only with consent.
3.2.How to check cookies:
3.2.1.You can check and / or delete at your discretion – see details aboutcookies.org. You can delete all cookies stored on your computer or other device, and you can set most browsers to prevent them from being stored.
3.3. The Operator’s website uses the following cookies:
All cookies used by the Operator can be found at https://www.cookieserve.com/ by entering the Operator’s web address https: // www. glowycats.shop
IV. Processed personal data
4.1. The operator processes the following personal data on its website: name, surname, address, email address, home phone number, mobile phone number, billing address, delivery address, data obtained from cookies, IP addresses.
V. Contact details of the person responsible for personal data protection supervision
5.1. The controller has appointed a person responsible for personal data protection in accordance with Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. Contact: [email protected]
5.2.The operator is also the Seller in the sense of the term set out in the General Terms and Conditions of this website.
VI. Purposes of the processing of personal data of the data subject and time of processing of personal data
6.1. The purposes of processing personal data of the data subject are in particular:
6.1.1. Registration, creation and processing of contracts and client data for the purpose of concluding contracts with third parties.
6.1.2. Processing of accounting documents and documents related to the business activity of the Operator.
6.1.3.compliance with legal regulations in connection with the archiving of documents and papers e.g. according to law no. 431/2002 Coll., Act on Accounting as amended and other relevant regulations.
6.1.4. Activities of the Operator in connection with the fulfillment of the application, order, contract and similar institutes of the Affected Person.
6.1.5. Newsletter, marketing and similar advertising activities of the Operator. In the case of granting the consent of the Affected Person to the Operator with marketing and similar advertising activities.
6.2.Personal data of the Affected Person The Operator keeps only for the necessary time necessary for the purposes of performance of the contract and their subsequent archiving in accordance with the legal deadlines imposed on the Operator by legal regulations. If the Affected Person has agreed to the sending of advertising emails and similar offers, the personal data of the Affected Person are processed for these purposes until the Affected Person withdraws his / her consent. However, for the longest period of 10 years.
VII. Legal basis for the processing of personal data of the data subject
7.1. The legal basis for the processing of personal data of the data subjects is, depending on the specific personal data processed and the purpose of their processing, the data subjects’ consent to the processing of personal data.
7.2 In the event that the Operator performs the processing of personal data based on the consent of the Affected Person, this processing will start only after the given consent has been given by the Affected Person.
7.3. In the event that the Operator processes the personal data of the Affected Person for the purposes of negotiating pre-contractual relations and concluding and fulfilling the purchase contract, and the related delivery of goods, product or service. The person concerned is obliged to provide personal data for the proper performance of the purchase contract, otherwise it is not possible to ensure performance. Personal data for that purpose shall be processed without the consent of the data subject.
VIII. Recipients or categories of recipients of personal data
8.1.The recipients of personal data of the Data subject will be or at least may be:
8.1.1.statutory bodies or their members of the Operator.
8.1.2.persons performing work activities in an employee or similar relationship for the Operator.
8.1.3. The Operator’s sales representatives and other persons cooperating with the Operator in the performance of the Operator’s tasks. For the purposes of this document, all natural persons performing dependent work for the Operator on the basis of an employment contract or agreements on work performed outside the employment relationship will be considered employees of the Operator.
8.1.4.The recipients of the data subject will also be the operator’s associates, its business partners, suppliers and contractual partners, in particular: accounting company, company providing services related to software creation and maintenance, company providing legal services to the operator, company providing advice to the operator , companies providing transport and delivery of products to buyers and third parties, marketing companies, companies operating social networks, companies providing payment gateways and other payment methods.
8.1.5.The recipients of personal data will also be courts, law enforcement agencies, the tax office and other state authorities, if so provided by law. The personal data will be provided to the Operators by the given authorities and state institutions on the basis of and in accordance with the legal regulations of the Slovak Republic.
8.1.6. List of third parties – intermediaries and recipients who process personal data Affected person:
Slovenská pošta, a.s., Partizánska cesta 9, 975 99 Banská Bystrica, IČO: 36631124 – third entity providing transport services
Packeta Slovakia s.r.o. , with its registered office at Kopčianska 3338 / 82A, 851 01 Bratislava, IČO: 48136999 – third entity providing transport services
STRIPE PAYMENTS EUROPE, LIMITED, C / OA & L Goodbody, Ifsc, North Wall Quay, Dublin, D01 H104, Ireland – third entity providing payment gateway
IX. Information on the transfer of personal data to third countries and their retention period:
9.1.Not applicable. The operator does not transfer personal data of persons to third countries.
X. Instruction on the existence of relevant rights of the Affected Person:
Affected Person has, inter alia, the following rights, whereby:
10.1.1.Section 10.1 does not affect other rights of the Affected Persons.
10.1.2. The right of the data subject to access data according to Art. 15 of the Regulation, the content of which is:
the right to obtain confirmation from the Operator or process the personal data of the Affected Person, and if so to what extent. At the same time, if they are processed, it has the right to find out their content and request from the Operator information on the reason for their processing, especially information on: Reason for their processing, categories of personal data concerned, recipients or categories of recipients recipients in third countries or international organizations, the expected retention period of personal data or, if this is not possible, information on the criteria for determining it, the existence of the right to request the controller to correct or delete or restrict the processing of personal data the right to object to such processing, the right to complain to the supervisory authority if personal data have not been obtained from the data subject, any available information as to their source, the existence of automated decision-making, including profiling referred to in Article 22 (2). 1. and 4. Regulations and in these cases at least meaningful information on the procedure used, as well as the meaning and expected consequences of such processing of personal data for the data subject, on reasonable safeguards under Article 46 of the Regulation concerning the transfer of personal data if personal data are transferred to third country or international organization.
10.1.3.The right to provide a copy of the personal data being processed, but subject to the condition that the right to provide a copy of the personal data processed must not adversely affect the rights and freedoms of others.
10.1.4. The data subject’s right to rectification pursuant to Article 16 of the Regulation, the content of which is the right: that the Operator without undue delay corrects incorrect personal data concerning the data subject. the right to supplement the data subject’s incomplete personal data, including by providing a supplementary declaration of the data subject, the data subject’s right to delete personal data (so-called “forgetting” right) pursuant to Article 17 of the Regulation, the content of which is:
10.1.5. at the Operator, without undue delay, the deletion of personal data concerning the data subject if any of the following reasons is met:
personal data are no longer necessary for the purposes for which they were obtained or otherwise processed, the data subject withdraws the consent on the basis of which the processing provided that there is no other legal basis for the processing of personal data. 1. Regulations and no legitimate reasons prevail for the processing of personal data or the data subject objects to the processing of personal data pursuant to Article 21 (1). 2. Regulations, personal data have been processed illegally, personal data must be deleted in order to comply with a legal obligation under European Union law or the law of the Member State to which the Operator is subject; 1. Regulations;
10.1.6 the right for the Operator who disclosed the data subject of the Data subject, taking into account the available technology and the costs of implementing the measures, to take appropriate measures, including technical measures, to inform other data processing operators that the Data subject requests them, to delete all references to such personal data, a copy or replica thereof, the right to delete personal data containing the rights under Article 17 para. 1st and 2nd Regulations does not arise if the processing of personal data is necessary:
10.1.7.for the exercise of the right to freedom of expression and information.
10.1.8. To fulfill a legal obligation that requires processing under the law of the European Union or the law of the Member State to which the Operator is subject, or to fulfill a task performed in the public interest or in the exercise of public power entrusted to the Operator.
10.1.9.for reasons of public interest in the field of public health in accordance with Article 9 (1). 2. (h) and (ii) of the Regulation as well as 3. Regulations.
10.1.10.for the purposes of archiving in the public interest, for the purposes of scientific or historical research or for statistical purposes pursuant to Article 89 para. 1. Regulations, in so far as it is probable that the right referred to in Article 17 (1) 1. Regulations shall make it impossible or seriously difficult to achieve the objectives of such processing of personal data; or to prove, assert or defend legal claims;
10.1.11.The right of the Data subject to restrict the processing of personal data pursuant to Article 18 of the Regulation, the content of which is:
10.1.12.The right of the Operator to restrict the processing of personal data in one of the following cases: The data subject challenges the accuracy of personal data , during the period enabling the Operator to verify the accuracy of personal data, the processing of personal data is illegal and the Data subject objects to the deletion of personal data and instead requests restrictions on their use. The Data source no longer needs personal data for processing purposes assertion or defense of legal claims, the data subject objected to the processing under Article 21 (1). 1. Regulations, until it is verified whether the justified reasons on the part of the Operator outweigh the justified reasons of the Affected Person;
10.1.13. the right, in the event that the processing of personal data is restricted, such limited personal data, with the exception of storage, shall be processed only with the consent of the Data subject or to prove, assert or defend legal claims, or to protect the rights of another natural or legal person; person, or for reasons of overriding public interest of the European Union or a Member State;
10.1.14. the right to be informed in advance of the lifting of the restriction on the processing of personal data;
10.1.15. the right of the Data subject to fulfill the notification obligation towards the recipients pursuant to Article 19 of the Regulation, which contains: the right for the Operator to notify each recipient to whom personal data have been provided of any correction or deletion of personal data or restrictions on processing carried out pursuant to Article 16; Article 17 (2) 1. and Article 18 of the Regulation, unless it proves impossible or requires a disproportionate effort, the right to have the Operator inform the Affected Person of these recipients, if the Affected Person so requests;
10.1.16.The data subject’s right to data transfer pursuant to Article 20 of the Regulation, the content of which is: the right to obtain personal data concerning the data subject provided by the Operator in a structured, commonly used and machine-readable format and the right to transfer this data to another operator without being prevented by the Operator if:
a / the processing is based on the consent of the Person concerned pursuant to Article 6 para. 1. letter (a) Regulation or Article 9 (1) 2. a) of the Regulation, or in the contract pursuant to Article 6 para. 1. letter b) Regulations, and at the same time
b / the processing is performed by automated means, and at the same time:
10.1.17. the right to obtain personal data in a structured, commonly used and machine-readable format and the right to transfer this data to another operator without obstructing it; will not adversely affect the rights and freedoms of others;
10.1.18.the right to transfer personal data directly from one controller to another, as far as is technically possible;
10.1.19.the right of the data subject to object pursuant to Article 21 of the Regulation, which contains:
10.1.20.The right to object at any time on grounds relating to the specific situation of the data subject against the processing of personal data concerning him or her carried out pursuant to Article 6 . 1. letter (e) or (f) Regulations, including objections to profiling based on these provisions of the Regulation;
10.1.21. in the event of the exercise of the right to object at any time on grounds relating to the specific situation of the Data subject against the processing of personal data concerning him or her which is carried out pursuant to Article 6 para. 1. letter e) or f) Regulations, including objections to profiling based on these provisions of the Regulation, the right not to further process the personal data of the Data subject unless he / she proves the necessary legitimate processing reasons which outweigh the interests, rights and freedoms of the Data subject or reasons for proving , asserting or defending legal claims
10.1.22. the right at any time to object to the processing of personal data concerning the data subject for the purposes of direct marketing, including profiling to the extent that it relates to direct marketing; in this case, if the Data subject objects to the processing of personal data for direct marketing purposes, the personal data may no longer be processed for such purposes;
10.1.23. in connection with the use of information society services, the right to exercise the right to object to the processing of personal data by automated means using technical specifications;
10.1.24. the right to object, on grounds relating to the specific situation of the data subject, to the processing of personal data concerning the data subject if the personal data are processed for the purposes of scientific or historical research or for statistical purposes pursuant to Article 89 (1). 1. Regulations, but except where processing is necessary for the performance of a task for reasons of public interest;
10.1.25. the right of the data subject related to automated individual decision-making pursuant to Article 22 of the Regulation, which contains
: has legal effects affecting or similarly affecting it, except in cases under Article 22 (2). 2. Regulations [ie unless the decision: (a) is necessary for the conclusion or performance of a contract between the Person concerned and the Operator,
10.1.27. permitted by European Union law or by the law of the Member State to which the Operator is subject and which also appropriate measures guaranteeing the protection of the rights and freedoms and legitimate interests of the Person concerned; or (c) based on the express consent of the Person concerned.
XI. Instruction on the right of the Data subject to revoke the consent to the processing of personal data:
11.1. The data subject is entitled to revoke his / her consent to the processing of personal data at any time, without affecting the lawfulness of personal data processing based on the consent given prior to his revocation.
The data subject is entitled to withdraw his or her consent to the processing of personal data at any time – in whole or in part. The partial withdrawal of consent to the processing of personal data may concern a certain type of processing operation (s), while the lawfulness of the processing of personal data to the extent of the remaining processing operations shall remain unaffected. The partial withdrawal of consent to the processing of personal data may relate to a specific purpose of the processing of personal data / certain purposes of the processing of personal data, while the lawfulness of the processing of personal data for other purposes remains unaffected.
The Affected Person may exercise the right to revoke the consent to the processing of personal data in paper form to the Operator’s address registered as its registered office in the Commercial Register at the time of revoking the consent to the processing of personal data or in electronic form by electronic means (by sending an e-mail to the Operator’s e-mail address). stated when identifying the Operator in this document).
XII. Information on the data subject’s right to lodge a complaint with the supervisory authority:
12.1. The data subject has the right to lodge a complaint with the supervisory authority, in particular in his Member State of habitual residence, place of work or alleged infringement. concerns it is contrary to the Regulation, all without prejudice to any other administrative or judicial remedies.
The person concerned shall have the right to be informed by the supervisory authority to which the complaint has been lodged of the progress and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the Regulation.
12.2. The supervisory body in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic.
XIII. Information related to automatic decision-making, including profiling:
13.1. 1. and 4. Regulations, the Operator is not obliged to provide information according to Article 13 par. 2 letter f) Regulations, ie information on automated decision-making, including profiling, and on the procedure used, as well as on the meaning and expected consequences of such processing of personal data for the Data subject. Not applicable.
XIV. Final provisions
14.1. These Principles and instructions on personal data protection and instructions on cookies form an integral part of the General Terms and Conditions and the Complaints Procedure. The documents – General Terms and Conditions and the Complaints Procedure of this Website are published on the domain of the Seller’s Website.
14.2.This Principles of Personal Data Protection come into force and effect by publishing them on the Seller’s Website 24.02.2022
