Terms of personal data protection
PROTECTION OF PERSONAL DATA AND COOKIES NOTICE
/ Principles and instructions on personal data protection
provided by the operator to the affected person when obtaining personal data from the affected person and instructions on cookies of the Internet store luxory.sk /
I. Operator
1.1. The identity and contact details of the Operator are:
Trade name: LUXORY - time for flowers with. r. o.
Registered office: Záhradná 1804/68, Most pri Bratislava 900 46, Slovak Republic
Registered in the Commercial Register of the Municipal Court Bratislava III, Division Sro, Insert number 176848/BIČO: 56110651
VAT number: 2122226579 Bank account: SK54 1100 0000 0029 4316 9652
The seller is not a VAT payer
1.2. Email contact and telephone contact for the Operator is:
Email: kvyty@luxory.sk
Tel. no.: + 421918899963
1.3. Address of the Operator for sending documents:
LUXORY - time for flowers with. r. o., Záhradná 1804/68, Most pri Bratislava 900 46, Slovak Republic
1.4. The operator hereby, in accordance with Article 13 par. 1. and 2. Regulations of the European Parliament and of the Council (EU) 2016/679 of 27/04/2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC General Data Protection Regulation (hereinafter referred to as the "Regulation"), further in accordance with Act No. 18/2018 Coll. The Act on Personal Data Protection and Amendments to Certain Acts as amended and in accordance with Act No. 452/2021 Coll. The Act on Electronic Communications in its current version provides the following instructional and explanatory information to the Affected Person - (Buyer), from whom the Operator (Seller) obtains personal data relating to him/her:
II. Links
2.1. These principles and instructions on the protection of personal data form part of the General Terms and Conditions published on the Seller's website.
2.2. Pursuant to §3, par. 1, letter n), Act no. 102/2014 Coll. The seller informs the consumer that there are no special relevant codes of conduct to which the seller has undertaken to comply, whereby the code of conduct is understood as an agreement or a set of rules that define the behavior of the seller who has undertaken to comply with this code of conduct in relation to one or more special business practices, or business sectors, if these are not established by law, or another legal regulation or measure of a public administration body), which the seller has undertaken to comply with, and about the way in which the consumer can become familiar with them, or obtain their wording.
III. Protection of personal data and the use of cookies. Instruction and explanation of cookies, scripts, and pixel files
3.1. The operator of the website provides this brief explanation of the function of cookies, scripts, and pixels:
3.1.1. Cookies are text files that contain a small amount of information that is downloaded to your device when you visit the website. Thanks to this file, the website temporarily stores information about your actions and preferences (such as login name, language, font size, and other display settings) so that you do not have to enter them again the next time you visit the website or browse its individual pages
A script is a piece of programming code that is used to make websites work properly and interactively. This code is executed on the operator's server or on your device.
Pixels are small, invisible text or images on a website that are used to monitor website traffic. In order for this to happen, various data are stored through pixels.
3.1.2.Cookies are shared
Technical or functional cookies - they ensure the correct functioning of the Operator's website and its use. These cookies are used without consent.
Statistical cookies – The operator obtains statistics regarding the use of its website. These cookies are used only with consent.
Marketing / Advertising Cookies - Used to create advertising profiles and similar marketing activities. These cookies are used only with consent.
Performance cookies - collect information about the way the site is used - which pages the visitor opens the most and whether he receives error messages from any page. These cookies do not store any information that enables user identification.
3.2. How to check cookies:
3.2.1. You can control and/or delete cookies at your discretion - see aboutcookies.org for details. You can delete all cookies stored on your computer or other device, and you can set most browsers to prevent them from being stored.
3.3. The website of the Operator uses the following cookies:
All cookies used by the Operator can be found on the website https://www.cookieserve.com/ by entering the Operator's web address https://www.luxory.sk
Technical or functional cookies - the website operator accesses the information. Duration of cookies 2 years.
Statistical cookies - the website operator accesses the information. Duration of cookies 2 years.
Marketing and advertising cookies - the website operator accesses the information. Duration of cookies 2 years.
3.3.1.Cookies made available to third parties:
Google Analytics, Google ADS: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information on privacy protection can be found at https://support.google.com/analytics/topic/2919631?hl=sk&ref_topic=1008008
IV. Personal data processed
4.1. The operator processes the following personal data on its website: name, surname, residence, email address, home phone number, mobile phone number, billing address, delivery address, data obtained from cookie files, and IP addresses.
V. Contact details of the person responsible for the supervision of personal data protection
5.1. The operator has appointed a responsible person for the protection of personal data in accordance with Regulation 2016/679 on the protection of natural persons in the processing of personal data and on the free movement of such data. Contact: Email: kvyty@luxory.sk, Tel. no.: + 421918899963
5.2. The Operator is also a Seller in the sense of the term established in the General Terms and Conditions of this website.
VI. Purposes of personal data processing of the Data Subject and period of personal data processing
6.1. The purposes of processing the personal data of the concerned person are mainly:
6.1.1. recordkeeping, creation, and processing of contracts and client data for the purpose of concluding contracts with third parties.
6.1.2. processing of accounting documents and documents related to the business activity of the Operator.
6.1.3. compliance with legal regulations in connection with the archiving of documents and documents, e.g. according to Act no. 431/2002 Coll., Accounting Act as amended and other relevant regulations.
6.1.4. the activity of the Operator in connection with the fulfillment of the request, order, contract, and similar institutes of the Affected Person.
6.1.5. Newsletter, marketing, and similar advertising activities of the Operator. In the case of granting the Data Subject's consent to the Operator with marketing and similar advertising activities.
6.2. The Operator only stores the personal data of the Affected Person for the absolutely necessary time required for the purpose of fulfilling the contract and their subsequent archiving in accordance with the legal deadlines imposed on the Operator by legal regulations. In the event that the Affected Person has agreed to the sending of advertising emails and similar offers, the Personal Data of the Affected Person are processed for these purposes until such time as the Affected Person withdraws their consent. However, the longest period is 10 years.
VII. Legal basis for processing personal data of the concerned person
7.1 In the event that the Operator processes personal data based on the consent of the Affected Person, this processing will only begin after the consent has been granted by the Affected Person.
7.2. In the event that the Operator processes the personal data of the Affected Person for the purposes of negotiating pre-contractual relations and concluding and fulfilling the purchase contract, and the related delivery of goods, products, or services. The person concerned has the obligation to provide personal data for the proper performance of the purchase contract, otherwise performance cannot be ensured. Personal data for the given purpose are processed without the consent of the person concerned.
VIII. Recipients or categories of recipients of personal data
8.1. The recipients of the personal data of the affected person will be, or at least can be:
8.1.1. statutory bodies or their members of the Operator.
8.1.2.persons performing work in an employee or similar capacity for the Operator.
8.1.3. business representatives of the operator and other persons cooperating with the Operator in the performance of the Operator's tasks. For the purposes of this document, all natural persons performing dependent work for the Operator based on an employment contract or agreements on work performed outside the employment relationship will be considered employees of the Operator.
8.1.4. The recipient of the personal data of the affected person will also be the associates of the operator, its business partners, suppliers, and contractual partners, in particular: an accounting company, a company providing services related to the creation and maintenance of software, a company providing legal services to the operator, a company providing consultancy to the operator, companies providing transportation and delivery of products to buyers and third parties, marketing companies, companies operating social networks, companies providing payment gateways and other payment methods.
8.1.5. Recipients of personal data will also be courts, authorities active in criminal proceedings, the tax office, and other state authorities if so provided by law. Personal data will be provided by the Operator to the relevant authorities and state institutions based on and in accordance with the legal regulations of the Slovak Republic.
8.1.6. List of third parties - intermediaries and recipients who process the Personal Data of the Affected Person:
Direct Parcel Distribution SK, s.r.o., with registered office at Technická 7, 82104 Bratislava, ID: 35834498 – third party providing transport services
Slovak Parcel Service s.r.o., with registered office Senecká cesta 1, 900 28 Ivanka pri Dunaji
IČO: 31329217 - third party providing transport services
Shoptet, a.s., Dvořeckého 628/8, 169 00 Prague 6, Czech Republic, IČ: 28935675, DIČ: CZ28935675 - third party providing the payment gateway
IX. Information on the provision of personal data to third countries and their retention period:
9.1. Not applicable. The operator does not transfer the personal data of persons to third countries.
X. Instruction on the existence of relevant rights of the Data Subject:
10.1. The affected person has, among other things, the following rights, while:
10.1.1. Clause 10.1 does not affect other rights of the Affected Persons.
10.1.2. The Data Subject's right to access data pursuant to Art. 15 Regulations, the content of which is:
the right to obtain confirmation from the Operator as to whether it processes the Personal Data of the Affected Person, and if so, to what extent. At the same time, if they are processed, I have the right to find out their content and request information from the Operator about the reason for their processing, in particular information about: Reason for their processing, categories of personal data affected, about recipients or categories of recipients to whom personal data have been or will be provided, especially in the case recipients in third countries or international organizations, about the expected period of storage of personal data or, if this is not possible, information about the criteria for its determination, about the existence of the right to request from the Operator the correction of personal data concerning the Affected Person or their deletion or restriction of processing, and about the existence of the right to object to such processing, the right to file a complaint with the supervisory authority if the personal data were not obtained from the Data Subject, any available information regarding their source, the existence of automated decision-making, including the profiling referred to in Article 22 par. 1 and 4 of the Regulation and, in these cases, at least meaningful information about the procedure used, as well as the meaning and expected consequences of such processing of personal data for the Data Subject, about adequate guarantees according to Article 46 of the Regulation, regarding the transfer of personal data, if personal data are transferred to a third country or international organization.
10.1.3. the right to provide a copy of the personal data that is being processed, subject to the condition that the right to provide a copy of the processed personal data must not have adverse consequences on the rights and freedoms of others.
10.1.4. the right of the Affected Person to correction according to Article 16 of the Regulation, the content of which is the right: for the Operator to correct incorrect personal data concerning the Affected Person without undue delay. the right to supplement incomplete personal data of the Affected Person, including by providing an additional statement of the Affected Person, the right of the Affected Person to delete personal data (the so-called "right to be forgotten") according to Article 17 of the Regulation, the content of which is:
10.1.5. the right to obtain from the Operator without undue delay the deletion of personal data concerning the Affected Person, if any of the following reasons are met:
personal data are no longer necessary for the purposes for which they were obtained or otherwise processed, the affected person revokes the consent on the basis of which the processing is carried out, subject to the condition that there is no other legal basis for the processing of personal data, the affected person objects to the processing personal data according to article 21 par. 1. Regulations and there are no valid reasons for the processing of personal data or the person concerned objects to the processing of personal data according to Article 21, paragraph 2. Regulations, personal data were processed illegally, personal data must be deleted in order to comply with a legal obligation under the law of the European Union or the law of a member state to which the Operator is subject, personal data were obtained in connection with the offer of information society services according to Article 8 par. 1. Regulations;
10.1.6. the right for the Operator who has published the Personal Data of the Affected Person to take appropriate measures, including technical measures, taking into account the available technology and the costs of implementing the measures, to inform other operators who process personal data that the Affected Person requests them, to delete all references to this personal data, their copy or replicas, while the right to delete personal data with the content of rights according to Article 17 par. 1 and 2 of the Regulation will not arise if the processing of personal data is necessary:
10.1.7. to exercise the right to freedom of expression and information.
10.1.8. to fulfill a legal obligation that requires processing according to the law of the European Union or the law of a member state to which the Operator is subject, or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the Operator.
10.1.9. for reasons of public interest in the field of public health in accordance with Article 9 par. 2. letter h) and i) of the Regulation, as well as Article 9 par. 3. Regulations.
10.1.10. for the purposes of archiving in the public interest, for the purposes of scientific or historical research or for statistical purposes according to Article 89, paragraph 1. Regulations, as long as it is likely that the right referred to in Article 17 paragraph 1. Regulations will make it impossible or seriously difficult to achieve the goals of such processing of personal data; or to establish, exercise or defend legal claims;
10.1.11. the right of the affected person to limit the processing of personal data according to Article 18 of the Regulation, the content of which is:
10.1.12. the right for the Operator to restrict the processing of personal data in one of the following cases: the Data Subject challenges the correctness of the personal data, during the period allowing the Operator to verify the accuracy of the personal data, the processing of personal data is illegal and the Data Subject objects against the deletion of personal data and requests instead to limit their use, the Operator no longer needs personal data for processing purposes, but the Data Subject needs them to prove, exercise or defend legal claims, the Data Subject objected to the processing according to Article 21 par. 1. Regulations, until it is verified whether the legitimate reasons on the part of the Operator prevail over the legitimate reasons of the Affected Person;
10.1.13. the right that, in the event that the processing of personal data is restricted, such restricted personal data, with the exception of storage, are processed only with the consent of the Affected Person or for proving, exercising, or defending legal claims, or for the protection of the rights of another natural or legal entity persons, or for reasons of important public interest of the European Union or a member state;
10.1.14. the right to be informed in advance about the cancellation of personal data processing;
10.1.15. the right of the affected person to fulfill the notification obligation towards the recipients according to Article 19 of the Regulation, the content of which is: the right to provide everyone to the recipient to whom personal data has been provided, any correction or deletion of personal data, restriction of processing carried out according to Article 16, Article 17 par. 1. and Article 18 of the Regulation, unless it proves to be impossible or requires a disproportionate effort, the right to inform the Data Subject about these recipients if the Data Subject requests it;
10.1.16. the Data Subject's right to transfer data according to Article 20 of the Regulation, the content of which is: the right to obtain personal data relating to the Data Subject and provided to the user in a structured, commonly used, and machine-readable format, and the right to transfer this data to another operator without to prevent her if:
and/or the processing is based on the Data Subject's consent according to Article 6, paragraph 1. letter a) Regulation or Article 9 par. 2. letter a) Regulations, or to the contract according to Article 6 par. 1. letter b) Regulations, and at the same time
b/ processing carried out by automated means, and simultaneous:
10.1.17. the right to obtain personal data in a structured, commonly used, and machine-readable format and the right to transfer this data to another operator without preventing it, will not have adverse consequences on the rights and freedom of others;
10.1.18. the right to transfer personal data directly from one operator to the operator, as regards the second technically possible;
10.1.19. the right of the affected person to object according to Article 21 of the Regulation, the content of which is:
10.1.20. the right to often object, for reasons of the specific situation of the concerned person, to the processing of personal data concerning him, which is carried out on the basis of Article 6 par. 1. letter e) or f) of the Regulation, including objecting to profiling based on these provisions of the Regulation;
10.1.21. in case of realization of the right to always object for reasons related to the specific situation of the Affected Person against the processing of personal data concerning him, which is carried out on the basis of Article 6 paragraph 1. letter e) or f) Regulations, including objections to profiling based on these provisions Regulation of the right not to further process the personal data of the Data Subject, if he does not prove the necessary legitimate reasons for processing, prevail over the interests, rights and freedoms of the Data Subject, or the reasons for proving, applying or defending legal claims
10.1.22. the right of various extents to object to the processing of personal data relating to the Data Subject for the purposes of direct marketing, including profiling in relation to primary marketing; at the same time, if the Data Subject objects to the processing of personal data for the purposes of direct marketing, the personal data shall no longer be processed for such purposes;
10.1.23. in connection with the use of information society services, the right to exercise the right to object to the processing of personal data through automated means using technical specifications;
10.1.24. the right to object, due to the specific situation of the Affected Person, to the processing of personal data relating to the Affected Person, if the personal data is processed for the purposes of scientific or historical research or for statistical purposes according to Article 89 paragraph 1. Regulations, but with the exception of cases where it is necessary to solve tasks for reasons of public interest;
10.1.25. the right of the affected person related to automated individual decision-making according to Article 22 of the Regulation, the content of which is:
10.1.26. the right not to be subject to a decision that is based on automated processing of personal data, including profiling, and that has legal effects that concern or similarly affect the Data Subject, with the exception of cases under Article 22, paragraph. 2. Regulations [i.e. with the exception of cases where the decision: (a) is not necessary for the conclusion or performance of the contract between the Affected Person and the Operator,
10.1.27. permitted by the law of the European Union or the law of a Member State which complies with it and which also stipulates appropriate measures guaranteeing the protection of the rights and freedoms and legitimate interests of the Affected Person or c) based on the express consent of the Affected Person.
XI. Instruction on the Data Subject's right to withdraw consent to the processing of personal data:
11.1. The affected person is entitled to revoke his consent to the processing of personal data at any time, without this affecting the legality of the processing of personal data based on the consent granted before its revocation.
The person concerned is entitled to withdraw his consent to the processing of personal data at any time - in whole or in part. Partial revocation of consent to the processing of personal data may relate to a certain type of processing operation/processing operations, while the legality of personal data processing in the scope of the remaining processing operations remains unaffected. Partial revocation of consent to the processing of personal data may relate to a certain specific purpose of personal data processing / certain specific purposes of personal data processing, while the legality of personal data processing for other purposes remains unaffected.
The Data Subject may exercise the right to withdraw consent to the processing of personal data in paper form to the address of the Operator entered as its registered office in the commercial register at the time of withdrawal of consent to the processing of personal data or in electronic form by means of electronic means (by sending an e-mail to the e-mail address of the Operator mentioned when identifying the Operator in this document).
XII. Instruction on the right of the affected person to file a complaint with the supervisory authority:
12.1. The affected person has the right to file a complaint with the supervisory authority, particularly in the Member State of his/her habitual residence, place of work, or the place of the alleged violation, if he/she believes that the processing of personal data concerning him/her is contrary to the Regulation, and all without prejudice to any other administrative or judicial remedies.
The person concerned has the right to have the supervisory authority to which the complaint was filed inform him, as the complainant, of the progress and outcome of the complaint, including the possibility of filing a judicial remedy pursuant to Article 78 of the Regulation.
12.2. The supervisory authority in the Slovak Republic is the Personal Data Protection Office of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovak Republic. Tel. contact: +421 /2 3231 3214, Email: statny.dozor@pdp.gov.sk,
XIII. Information related to automated decision-making, including profiling:
13.1. Since in the case of the Operator it is not a matter of processing the Personal Data of the Affected Person in the form of automated decision-making, including the profiling referred to in Article 22 paragraphs 1 and 4 of the Regulations, the Operator is not obliged to provide information according to Article 13, paragraph 2 letters f) Regulations, i.e. j. information about automated decision-making, including profiling, and about the procedure used, as well as about the meaning and expected consequences of such processing of personal data for the Data Subject. Not applicable.
XIV. Final Provisions
14.1. These Principles and instructions on the protection of personal data and instructions on cookies form an integral part of the General Terms and Conditions and the Complaints Procedure. Documents - General terms and conditions and Complaints procedure of this Website are published on the domain of the Seller's Website.
14.2. These Personal Data Protection Principles become valid and effective upon their publication on the Seller's Website on 10/01/2024
This e-shop is certified https://www.pravoeshopov.sk