1.1. The Operator’s identity and contact information are:
Business name: White Stag Coffee s.r.o.
Registered seat: Stožok 325 962 12 Stožok, Slovak Republic
Registered in the register of the District Court of Banská Bystrica, section: Sro, file no. 40375 / S
Bank account: SK8402000000004405252853
The seller is not a VAT payer / Value added tax /
1.2. The operator hereby complies with Article 13 (2). 1. and 2. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC on the general data protection regulation. (hereinafter referred to as the “Regulation”) provides the Affected Person from whom the Operator obtains personal data concerning him with the following information, instructions and explanations:
2.1. These privacy policies and instructions form part of the General Terms and Conditions published in the Seller’s Online Store.
2.2. In the event of any complaints or suggestions, the consumer may also address them directly to the Seller, advising consumers to address complaints and suggestions to the Seller to the seller’s email address:: firstname.lastname@example.org
Any complaint or suggestion will be assessed and processed by the Seller within 10 working days of its receipt. The Seller informs the consumer about its equipment in the same form as the consumer delivered the complaint or complaint to the Seller.
3.1. In connection with the EU Directive on the protection of privacy in electronic communications, the Operator gives the following brief explanation of the function of cookies:
3.1.1. Cookies are text files that contain a small amount of information that is downloaded to your computer, mobile phone, or other device, electronic device that you use to browse the website when you visit the website.
Cookies are useful because they allow the website not only to recognize the user’s device, but also to allow the user to access the functions on the website.
In principle, we divide cookies into two types.
- Persistent cookies – These cookies remain on the user’s device for the time specified in the cookie file. They are activated whenever a user visits the website that created the cookie.
- Relational cookies – These files allow the website operator to link the user’s activities when the user opens a browser window and exits when the browser window is closed. Relational cookies are created temporarily. All relational cookies will be deleted when you close your browser.
3.2. Explanation of cookies
3.2.1. A cookie is a small text file that a website stores on your computer or mobile device when you browse it. With this file, the website keeps track of your steps and preferences (such as login, language, font size, and other display settings) for a period of time, so you don’t have to re-enter them the next time you visit or browse the site.
3.3. Instructions for using cookies
- Your display preferences, such as color contrast or font size settings.
- The fact that you have already responded to a pop-up survey through which you can express your opinion on the content of the page (it will not be displayed again);
- Whether or not you have agreed to our use of this website’s cookies.
The information stored in cookies will not be used for your personal identification and the data structure is fully under our control. Cookies are not used for purposes other than those specified in this text. Some of our sites or sub-sites may use additional or different cookies than those listed above. In this case, detailed information on their use will be provided on a separate page on cookies on the website in question.
3.4. How to control cookies
3.4.1. You can control and / or delete cookies at your discretion – see aboutcookies.org for details. You can delete all cookies stored on your computer, and you can set most browsers to prevent them from being stored. However, in this case, you may need to manually adjust some settings each time you visit the website.
IV. Personal data processed
4.1. The operator processes the following personal data on its website: name, surname, address, email address, telephone number, data obtained from cookies, IP addresses.
4.2. We determine your satisfaction with your purchase through e-mail questionnaires within the Customer Verified program in which our e-shop is involved. We send them to you every time you buy from us, unless in accordance with § § 62 of Act no. no. 351/2011 Coll. on electronic communications, as amended, you will not refuse to send electronic mail for the purposes of direct marketing. We process personal data for the purpose of sending questionnaires within the Customer Verified program on the basis of our legitimate interest, which consists in ascertaining your satisfaction with your purchase with us. To send questionnaires, evaluate your feedback and analyze our market position, we use a processing intermediary, which is the operator of the Heureka.sk portal. For this purpose, we can pass on information about the purchased goods and your e-mail address. Your personal data is not passed on to any third party for its own purposes when sending e-mail questionnaires. You can object to the sending of e-mail questionnaires within the Customer Verified program at any time by rejecting other questionnaires using the link in the e-mail with the questionnaire. In case of your objection, we will not send you the questionnaire further. 6 par. 1 letter f) The Seller may, after delivery of the ordered goods, resp. services to the Buyer, on the basis of a legitimate interest to process the Buyer’s personal data also for the purposes of direct marketing and send to the Buyer’s e-mail address information about new products, discounts and promotions on the offered goods, resp. services.
V. Contact details of the person responsible for collecting and processing personal data, the operator’s representative
5.1. The operator has not designated a person responsible for the collection and processing of personal data.
5.2. The operator has not appointed a representative.
5.3. The Operator is also the Seller in the sense of the term set out in the General Terms and Conditions of this website.
VI. Purposes of the processing of the data subject of the data subject
6.1. The purposes of processing the Person’s personal data are:
6.1.3. Document archiving in accordance with the law
6.1.4. the Operator’s marketing activities
VII. Legal basis for the processing of the data subject of the data subject
7.1. The legal basis for the processing of the data subject’s personal data will be, depending on the specific personal data and the purpose of their processing, the data subject’s consent to the processing of personal data, fulfillment of the controller’s legal obligation, performance of the contract by the data subject. .
VIII. Recipients or categories of recipients of personal data
8.1. Recipients of the Data subject’s personal data will be, or at least may be:
8.1.1. Statutory bodies or members of the Operator’s statutory bodies
8.1.2. Employees of the Operator
8.1.3. Sales Representatives of the Operator and other persons cooperating with the Operator in the performance of the Operator’s tasks. For the purposes of this document, all natural persons performing dependent work for the Operator on the basis of an employment contract or agreements on work performed outside the employment relationship shall be considered employees of the Operator.
8.1.4. The data subject’s personal data will also be the Operator’s associates, its business partners, suppliers and contractors, in particular: an accounting firm, a company providing services related to the creation and maintenance of software, a company providing the operator legal services, a company providing advice to the operator, companies providing transport and delivery of products to buyers and third parties.
8.1.5. Personal data will also be recipients of courts, law enforcement agencies, the tax office, and other government agencies, as required by law.
IX. Information on the transfer of personal data to a third country and the retention period:
9.1. Not applicable The Operator does not transfer personal data of persons to third countries.
9.2. Personal information will be retained in accordance with the law for as long as is necessary for the performance of the contract and its subsequent archiving.
X. Instruction on the existence of relevant rights of the Data subject:
10.1. The person concerned has, inter alia, the following rights, including:
10.1.1. Section 10.1 is without prejudice to other rights of Affected Persons.
10.1.2. The data subject’s right of access to data pursuant to Article 15 of the Regulation, which contains:
- the right to obtain confirmation from the Operator as to whether personal data relating to the Data subject are being processed.
- where the personal data of the data subject are processed, the right to access and process the right to obtain the personal data processed;
- information on processing purposes;
- Information on the categories of personal data concerned;
- information on the recipients or categories of recipients to whom the personal data have been or will be provided, in particular for recipients in third countries or international organizations;
- if possible, information on the expected retention period of personal data or, if this is not possible, information on the criteria for determining it;
- information on the existence of the right to request from the Operator the correction of personal data concerning the Data subject or their deletion or restriction of processing and on the existence of the right to object to such processing;
- information on the right to complain to the supervisory authority;
- if personal data have not been obtained from the Data subject, any available information as to their source;
- information on the existence of automated decision-making, including the profiling referred to in Article 22 (2). 1. and 4. Regulations and, in such cases, at least meaningful information on the procedure used, as well as the meaning and expected consequences of such processing of personal data for the Data subject;
10.1.3. The right to be informed of the adequate safeguards under Article 46 of the Regulation concerning the transfer of personal data where personal data are transferred to a third country or to an international organization.
10.1.4. the right to provide a copy of the personal data being processed, provided, however, that the right to provide a copy of the personal data processed must not adversely affect the rights and freedoms of others.
10.1.5. The data subject’s right to rectification under Article 16 of the Regulation, which contains:
10.1.6. the right for the Operator to correct incorrect personal data concerning the Affected Person without undue delay
10.1.7. the right to supplement the data subject’s incomplete personal data, including by providing a supplementary statement from the data subject.
10.1.8. the data subject’s right to erase personal data (the so-called “forgetfulness” right) under Article 17 of the Regulation, which contains:
10.1.9. the right to obtain from the Operator without undue delay the deletion of personal data concerning the Affected Person if any of the following reasons is met:
personal data are no longer needed for the purposes for which they were obtained or otherwise processed;
- The data subject shall withdraw the consent on the basis of which the processing is carried out, provided that there is no other legal basis for the processing of personal data;
- The data subject objects to the processing of personal data pursuant to Article 21 (1). 1. Regulations and do not outweigh any legitimate reasons for processing
- personal data or the data subject objects to the processing of personal data pursuant to Article 21 (1). 2. Regulations;
- Personal data was processed illegally;
- personal data must be deleted in order to comply with a legal obligation under European Union law or the law of the Member State to which the Controller is subject;
- Personal data were collected in connection with the offer of information society services pursuant to Article 8 (1). 1. Regulations;
10.1.10. the right of the Operator who disclosed the personal data of the Data subject, taking into account the available technology and the costs of implementing the measures, to take appropriate measures, including technical measures, to inform other controllers performing personal data processing that the data subject requests them to delete all references to such personal data, a copy or replicas thereof, the right to delete personal data containing the rights under Article 17 (1). 1. and 2. Regulations shall not arise where the processing of personal data is necessary:
10.1.11. to exercise the right to freedom of expression and information.
10.1.12. to fulfill a legal obligation requiring processing under European Union law or the law of the Member State to which the Operator is subject, or to fulfill a task performed in the public interest or in the exercise of public authority entrusted to the Operator.
10.1.13. for reasons of public interest in the field of public health in accordance with Article 9 (2). 2. (h) and (i) of the Regulation, as well as Article 9 (1) 3. Regulations.
10.1.14. for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (2). 1. Regulations, in so far as it is probable that the right referred to in Article 17 (1) 1. Regulations shall make it impossible or seriously difficult to achieve the objectives of such processing of personal data; or to prove, assert or defend legal claims;
10.1.15. the right of the Data subject to restrict the processing of personal data pursuant to Article 18 of the Regulation, which contains:
10.1.16. the right for the Operator to restrict the processing of personal data in one of the following cases:
- The data subject will challenge the accuracy of the personal data during the period allowing the Operator to verify the accuracy of the personal data;
- the processing of personal data is illegal and the data subject objects to the deletion of the personal data and calls instead for restrictions on their use;
- The controller no longer needs personal data for processing purposes, but the data subject needs them to prove, assert or defend legal claims;
- The data subject objected to the processing under Article 21 (1). 1. Regulations, pending verification that legitimate reasons on the part of the Operator outweigh the legitimate reasons of the Person concerned;
10.1.17. the right, in the event that the processing of personal data is restricted, such restricted personal data, with the exception of storage, be processed only with the consent of the Data subject or for proving, asserting or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of overriding public interest of the European Union or a Member State;
10.1.18. the right to be informed in advance of the lifting of the restriction on the processing of personal data;
10.1.19. the right of the Data subject to fulfill the notification obligation towards the recipients under Article 19 of the Regulation, which contains:
10.1.20. the right for the Operator to notify each recipient to whom personal data have been provided of any rectification or erasure of personal data or restrictions on processing carried out pursuant to Article 16, Article 17 (2). 1. and Article 18 of the Regulation, unless this proves impossible or involves a disproportionate effort;
10.1.21. the right for the Operator to inform the Affected Person of these recipients if the Affected Person so requests;
10.1.22. The data subject’s right to data portability under Article 20 of the Regulation, which contains:
10.1.23. the right to obtain personal data concerning the Affected Person and provided to the Operator in a structured, commonly used and machine-readable format and the right to transfer such data to another operator without the Operator’s obstruction, if:
- Processing shall be based on the consent of the Data subject pursuant to Article 6 (2). 1. letter (a) Regulation or Article 9 (1) 2. a) Regulations, or on a contract pursuant to Article 6 para. 1. letter b) Regulations, and at the same time
- Processing is performed by automated means, and at the same time:
10.1.1.1. The right to obtain personal data in a structured, commonly used and machine-readable format and the right to transfer such data to another operator without the Operator’s defense shall not adversely affect the rights and freedoms of others;
10.1.1.2. the right to transfer personal data directly from one controller to another, where technically possible;
10.1.24. The right of the Data subject to object under Article 21 of the Regulation, which contains:
10.1.25. the right at any time to object, on grounds relating to the specific situation of the data subject, to the processing of personal data concerning him or her carried out pursuant to Article 6 (1). 1. letter e) or f) Regulations, including objections to profiling based on these provisions of the Regulation;
10.1.26. in the event of the exercise of the right to object at any time on grounds relating to the specific situation of the Data subject against the processing of personal data concerning him or her carried out pursuant to Article 6 para. 1. letter e) or f) Regulations, including objections to profiling based on these provisions of the Regulation, the right for the Operator not to further process the personal data of the Data subject unless he / she proves the necessary legitimate reasons for processing which outweigh the interests, rights and freedoms of the Data subject or reasons for proving, asserting or defending legal claims
10.1.27. the right at any time to object to the processing of personal data concerning the Data subject for the purposes of direct marketing, including profiling to the extent that it relates to direct marketing; in this case, if the Data subject objects to the processing of personal data for the purposes of direct marketing, the personal data may no longer be processed for such purposes;
10.1.28. in connection with the use of information society services, the right to exercise the right to object to the processing of personal data by automated means using technical specifications;
10.1.29. the right to object, on grounds relating to the data subject’s specific situation, to the processing of personal data concerning the data subject if the personal data are processed for the purposes of scientific or historical research or for statistical purposes pursuant to Article 89 par. 1. Regulations, but except where processing is necessary for the performance of a task for reasons of public interest;
10.1.30. The right of the Data subject in relation to automated individual decision-making under Article 22 of the Regulation, which contains:
10.1.31. the right not to be subject to a decision based solely on the automated processing of personal data, including profiling, which has legal effects affecting or similarly affecting him or her, except in cases under Article 22 (2). 2. Regulations [i.e. except where the decision is: (a) necessary for the conclusion or performance of a contract between the Affected Person and the Operator;
10.1.32. permitted by European Union law or by the law of the Member State to which the Operator is subject and which also lays down appropriate measures to ensure the protection of the rights and freedoms and legitimate interests of the Person concerned; or (c) based on the express consent of the Person persons].
XI. Instruction on the right of the Data subject to withdraw the consent to the processing of personal data:
11.1. The data subject is entitled to withdraw his or her consent to the processing of personal data at any time, without prejudice to the lawfulness of the processing of personal data based on the consent given prior to the withdrawal.
The data subject is at any time entitled to withdraw his consent to the processing of personal data – in whole or in part. The partial withdrawal of consent to the processing of personal data may concern a certain type of processing operation (s), while the lawfulness of the processing of personal data to the extent of the remaining processing operations remains unaffected. The partial withdrawal of consent to the processing of personal data may relate to a specific purpose of the processing of personal data / certain specific purposes of the processing of personal data, while the lawfulness of the processing of personal data for other purposes remains unaffected.
The data subject may exercise the right to revoke the consent to the processing of personal data in paper form to the Operator’s address registered as its registered office in the Commercial Register at the time of revoking the consent to the processing of personal data or in electronic form by electronic means (by sending an e-mail to the Operator’s e-mail address stated when identifying the Operator in this document or by filling in the electronic form published on the Operator’s website).
XII. Instruction on the right of the data subject to lodge a complaint with the supervisory authority:
12.1. The data subject has the right to lodge a complaint with the supervisory authority, in particular in his or her Member State of habitual residence, place of work or alleged infringement, if he or she considers that the processing of personal data concerning him or her , is contrary to the Regulation, all without prejudice to any other administrative or judicial remedy.
The person concerned has the right to be informed by the complainant to which the complaint has been lodged, as the complainant, of the progress and outcome of the complaint, including the possibility of bringing a judicial remedy under Article 78 of the Regulation.
The supervisory body in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic.
XIII. Information on the existence / non-existence of the Data subject’s obligation to provide personal data and Information related to automatic decision-making, including profiling:
13.1. The Operator informs the Affected Person that the provision of the Affected Person’s personal data is necessary for the conclusion of the purchase contract and for its fulfillment. The Operator informs the Affected Person that the Affected Person is not obliged to provide personal data nor is he / she obliged to give consent to their processing. Failure to provide personal data and / or failure to give consent to the processing of personal data will result in the Operator not being able to conclude and fulfill the purchase contract.
13.2. Since in the case of the Operator it is not the processing of personal data of the Data subject in the form of automated decision-making, including profiling referred to in Article 22 para. 1. and 4. Regulations, The operator is not obliged to provide information under Article 13 para. 2 letter f) Regulations, t. j. information on automated decision-making, including profiling, and on the procedure used, as well as the meaning and expected consequences of such processing of personal data for the Data subject. Not applicable.
XIV. Final provisions