Privacy protection

Detailed information on the processing and protection of personal data.

In accordance with the Personal Data Protection Act, we do everything to make you feel safe with us. In this document you will find all the information you need about how we protect your privacy. Here you will find information about what data we obtain from you, how we use it, with whom we share it, how you can control the processing, about the measures by which we protect your data and also about the rights you have in connection with the processing.

The operator of the online store www.salonevamaria.com is:

EvaMária s.r.o.
Dvorníky 20
920 56 Dvorníky
Slovensko

IČO: 48038857

The operator obtains personal data using the registration form located on the website www.salonevamaria.com.

2. Why do we process personal data and what authorizes us to do so?

First of all, we process your personal data in order to properly handle and deliver your order. If any problems arise, thanks to your personal data we know how to contact you.

If you contact us with a question/problem, we have to process your data to answer/solve it. In some cases, personal data may also be transferred to third parties (e.g. goods carrier).

Thanks to the personal data you provide us in the user profile, a number of useful functions (e.g. order history) will be available to you. You can change the data you entered at any time, with the exception of the e-mail address that is used to access your user account.

We send you e-mail commercial communications based on your consent. You can easily unsubscribe from business notifications by adjusting your user profile settings. By doing so, you will also provide us with their personal data.

We make marketing calls for the purpose of offering our goods and services and related marketing communication. The legal title for the processing of your phone. numbers is either your consent or our legitimate interest in conventional direct marketing. You can object to this processing.

In some cases, the winner of the competition may be photographed, or filmed, mainly due to the increased transparency of our marketing competitions. We carry out this processing of personal data on the basis of our legitimate interest, which consists in increasing the credibility of marketing competitions in the eyes of other competitors and in increasing the attractiveness of these competitions. You can object to this processing.

With the help of your order history and behavior on the web, we can offer more relevant offers for other goods, e.g. accessories for purchased products. So, in certain places, we display products that are directly for you and correspond to your needs and interests. To optimize elements on the website, we can also use tools for testing different variants (so-called A / B testing), Google Analytics, Facebook Analytics, etc.

After you purchase goods or services from us, you may be asked to rate them. The evaluation can also be carried out on one's own initiative.

We may also process your personal data because we need them to exercise our rights and legal claims. We can also process your personal data for the reason that we need it for the purposes of checks carried out by public authorities and for other similar reasons.

We process personal data on legal basis - Fulfillment and conclusion of contract, Legitimate interests and Consent.

Purpose of personal data processing:

 - Issuance of a tax document - invoice, in accordance with Act 222/2004 Coll. on value added tax, § 71 par. 2 letters. b).

- Delivery of goods and identification of the customer before handing over the prepaid goods.

- Confirmation of the order, payment for the goods, delivery of the ordered goods - by phone and e-mail.

- Records of customers for the purpose of maintaining their user accounts on the website www.salonevamaria.com

- Records of customer orders for the resolution of possible complaints.

- Sending informative electronic messages.

3. What personal data do we process?

We process personal data that you provide to us yourself. When you use our services, we collect different types of data. We monitor which products you browse on our website and from which device, which of our offers interested you, and we derive additional data about you from this in order to show you tailored offers and to further improve our website in the future. If you order goods or services from us, we need data from you that are marked as mandatory in the ordering process (this is primarily your first and last name, delivery address and mobile phone). We need that data so that we can deliver the goods to you correctly. For the purpose of selling goods or services, we also need your e-mail address, to which we will send you an order confirmation, which also serves as a confirmation of the concluded purchase contract and any change in the status of the order.

When ordering goods or services, you can also fill in optional data. They help us to fulfill the concluded contract better and more efficiently. You provide us with optional data voluntarily. If you provide us with personal data of third parties, it is your duty to inform the person concerned about this and to ensure their consent to these terms of personal data protection. It can, for example, happen that you buy the goods from us, but you don't want to pick them up. In your user profile, you can define authorized persons who are authorized on your behalf, e.g. take over the goods.

If you contact our customer line or write us a message, we will also process your personal data mentioned in this communication.

When you visit our website, we may collect certain information about you, such as IP address, date and time of access to our website, information about your internet browser, operating system or language settings. We may also process information about your behavior on our website, i.e. e.g. which links on our website you visit and which goods are shown to you. However, information about your behavior on the website is anonymized for the sake of your maximum privacy, and therefore we cannot even assign it to a specific user, i.e. a specific person. If you access our website from a mobile phone or similar device or through one of our mobile applications, we may also process information about your mobile device (data about your mobile phone, possible records of application failures, etc.). We also automatically process cookies.

List of processed personal data:

• - Billing information
  • - Name and surname / Business name*
  • - Address of permanent residence / registered office*
  • - ID number*, VAT number*
• - Data for delivery
  • - Name and surname of the recipient
  • - Delivery address
  • - Recipient's phone number
• - Contact information
  • - Name of contact person*
  • - Telephone number - for order confirmation, payment acceptance, customer communication.
  • - E-mail address - for sending order confirmation, emergency means of communication if the customer is not available on the indicated phone number.
• - Data about your orders - for the needs of their equipment and the solution of possible complaints.

*) Only for company registrations

4. Necessity of providing personal data

• - The operator obtains only those personal data that are necessary to fulfill the obligations that the customer expects from him by ordering goods. Without this data, it will not be possible to process the received order. For this reason, the customer is obliged to fill in all the required data when placing the order.

5. Third parties to whom the data will be provided

We do not provide personal data to any companies managing personal data databases, or to any other third parties, except to the extent necessary for the delivery of goods:

• - Scope of provided data: Name and address of the recipient, delivery address, phone number of the recipient, total price of the order in case of cash on delivery payment.

We will transfer this data to the carrier according to how you fill it in the order. In relation to the personal data that we transfer to him, the carrier is entitled to process them only for the purpose of delivering the goods and then to delete the personal data immediately.

In the case of sending business announcements (e.g. by e-mail or via SMS message) or telemarketing, we can use a third party for the distribution or telephone calls. This entity is bound by the obligation of confidentiality and may not use your personal data for any other purpose. In case of enforcement of our rights, your personal data may be transferred to a third party (e.g. a lawyer). If the legal order or a state authority (e.g. PZ SR) imposes an obligation on us to hand over your personal data, we must do so.

6. Disclosure of data

We do not publish the obtained data under any circumstances.

7. Rights and obligations of the person concerned

• - The customer is obliged to provide only complete and true data.
• - The customer undertakes to update his data in the event of a change, at the latest before the first order following the change is made.
• - The customer undertakes that if he provides personal data of a third party as data for delivery (name, surname, telephone number), he does so only with his consent and that the person concerned is familiar with the procedures, rights and obligations listed on this page.
• - The affected person has the right, based on a written request (letter, e-mail), to demand from the operator:
  • - Information on the processing status of your personal data.
  • - Information about the source from which he obtained her personal data.
  • - Write-off of her personal data, which are the subject of processing.
  • - Correcting her incorrect, incomplete or out-of-date personal data that is the subject of processing.
  • - Disposal of her personal data.
  • - Personal data can be edited manually by the affected person in the Login menu, which is located on the left side of the store after the customer has logged in.
  • - All legitimate requests of the affected person will be met and the affected person will be informed about it within 30 days of receiving them.

8. How long do we process your personal data?

We will process your data for the entire duration of the contractual relationship between us. In the case of the processing of personal data for which consent has been granted, your personal data will generally be processed for a period of 7 years, or until such consent is revoked. If you sign up to receive business news, we will process your personal data for a period of 7 years, or until you express your disagreement with their further sending. You can easily express this disagreement by adjusting your user profile settings. Personal data that are necessary for the proper provision of services, or in order to fulfill all our obligations, whether these obligations result from a contract between us or from generally binding legal regulations, we must process, regardless of your consent, for the period established by the relevant legal regulations or in accordance with them (e.g. for tax documents, this period is period of at least 10 years).

We process data obtained through a user account or in another similar way for the duration of the use of our services and usually for 5 years after their cancellation. Subsequently, only basic identification data and information on the reason for which the user account was canceled or data forming part of operational backups are usually stored for a reasonable period of time.

By default, we store camera recordings for 14 days. However, when an illegal act occurs in the monitored area, we can contact the police and hand over the relevant records to the relevant authority (police, court, etc.). In this case, the records are not deleted after 14 days, but for evidentiary reasons we keep them until the legal end of the case.

9. Security of personal data

Your personal data is safe with us. In order to prevent unauthorized access and misuse of your personal data, we have implemented adequate technical and organizational measures. The protection of your personal data is very important to us. That's why we not only check their security, but also continuously improve their protection. All communication between your device and our web servers is encrypted. Login data is hashed and all your data is stored only on servers in secure data centers with limited, carefully controlled and audited access.

10. Personal data of persons under 16 years of age

Our online store is not intended for children under the age of 16. A person under the age of 16 can only use our online store if his legal representative (parent or guardian) gives his consent.

11. What rights do you have in the processing of personal data?

You have several rights in relation to your personal data. These are the right to access, correction, erasure, processing restrictions, portability, raising an objection and filing a complaint.

Just as we have our rights and obligations when processing your personal data, you also have certain rights when processing your personal data. These rights include:

Right of access

Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we pass it on, who processes it besides us, and what other rights you have related to the processing of your personal data. You can learn all this in this document "Customer Personal Data Protection". However, if you are not sure which personal data we are processing about you, you can ask us to confirm whether or not personal data relating to you is being processed by us and, if so, you have the right to access these personal data. As part of the right of access, you can ask us for a copy of the processed personal data, while we will provide you with the first copy free of charge and additional copies with a fee.

Right to rectification

To err is human. If you find that the personal data we process about you is inaccurate or incomplete, you have the right to have it corrected or supplemented without undue delay.

Right to erasure

n some cases, you have the right to have your personal data deleted. We will delete your personal data without undue delay if any of the following reasons are met:

- We no longer need your personal data for the purposes for which we processed them
- you withdraw your consent to the processing of personal data, while this is data for which your consent is necessary for processing and at the same time we have no other reason why we need to continue processing this data
- you will use your right to object to processing (see the Right to object to processing section below) for personal data that we process on the basis of our legitimate interests and we find that we no longer have any such legitimate interests that would justify this processing, or
- you believe that the processing of personal data carried out by us is no longer in accordance with generally binding regulations.

But please keep in mind that even if it's one of these reasons, it doesn't mean we'll delete all your personal data right away. This right is not permitted if the processing of your personal data is still necessary for the fulfillment of our legal obligation or the determination, exercise or defense of our legal claims (see the section Why do we process personal data and what authorizes us to do so?).

Right to restriction of processing

In some cases, in addition to the right to deletion, you can use the right to restrict the processing of personal data. This right enables you in certain cases to request that your personal data be marked and that these data are not the subject of any further processing operations - in this case, not forever (as in the case of the right to erasure), but for a limited time. We must limit the processing of personal data when:

- you deny the accuracy of personal data until we agree on what data is correct
- We process your personal data without a sufficient legal basis (e.g. beyond the scope of what we have to process), but you will only prefer to limit such data before deleting it (e.g. if you expect that you would still provide us with such data in the future)
- we no longer need your personal data for the stated processing purposes, but you require them for the determination, exercise or defense of your legal claims, or you object to the processing. The right to object is described in more detail below in the Right to object to processing chapter. We are obliged to limit the processing of your personal data for the period during which we determine whether your objection is justified.

Right to portability

You have the right to receive from us all your personal data, which you have provided us yourself, and which we process on the basis of your consent and on the basis of the performance of the contract. We will provide your personal data in a structured, commonly used and machine-readable format. In order for us to be able to transfer the data easily at your request, it can only be data that we process automatically in our electronic databases.

The right to object to processing

You have the right to object to the processing of personal data based on our legitimate interest (see Why do we process personal data and what entitles us to do so?). If it is marketing activities, we will stop processing your personal data without further ado; in other cases, we will do so if we do not have serious legitimate reasons for continuing such processing.

The right to file a complaint

Exercising your rights in the above manner does not in any way affect your right to file a complaint with the relevant supervisory authority. You can exercise this right especially if you believe that we are processing your personal data unlawfully or in violation of generally binding legal regulations. You can submit a complaint against our processing of personal data to the Office for the Protection of Personal Data, which is located at Hraničná 12, 820 07 Bratislava 27. However, we will be happy if you resolve the missteps with us first. You can always contact us at any time.

Our email address: reklamacie@salonevamaria.com

These Terms of Personal Data Protection, including their parts, are valid and effective from 1/1/2023, while they are available electronically at www.salonevamaria.com