GDPR

Article 1 / Introductory Provisions

1.1 CONEXIÓN s. r. o., with registered office at Hlaváčiková 3120/9, 841 05 Bratislava – Karlova Ves, Company ID (IČO): 52617980, Tax ID (DIČ): 2121094118, e-mail: info.conexion@gmail.com, registered in the Commercial Register of the Bratislava III District Court, section: Sro, insert no. 163999/B (hereinafter also referred to as the “seller” or “operator” or “administrator”), operates the online store www.conexion.sk and processes personal data in accordance with Act No. 18/2018 Coll. on the Protection of Personal Data, as amended, and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter “GDPR”).

1.2 The Personal Data Protection document (hereinafter “PD”) describes the types of personal data collected when using the services of www.cacao-conexion.sk, the purposes of using the collected data, and the manner and conditions of its processing.

1.3 The PD document is an integral part of the seller’s General Terms and Conditions (hereinafter “GTC”), which are also published on the website www.cacao-conexion.sk

Article 2 / Legitimate Interest and Purpose of Data Processing

2.1 The legal basis for processing personal data is:
2.1.1 the preparation and fulfillment of the purchase contract between the buyer and the seller (see section 2.2 of the PD);
2.1.2 the performance of direct marketing by the seller, provided that the data subject has not objected to the processing of their personal data in this way (see section 2.3 of the PD);
2.1.3 any other legal reason (e.g., to demonstrate the correctness and legality of accounting procedures or to allow defense against legal claims) – in such cases, the operator may continue to process certain data even after the data subject has withdrawn their consent.

2.2 The primary purpose of processing personal data is to handle orders for goods. Providing selected personal data is a necessary prerequisite for the following actions:
2.2.1 issuing invoices, managing accounting, handling complaints, etc.;
2.2.2 issuing delivery notes, acceptance protocols, and similar documents;
2.2.3 organizing the delivery of goods to the consumer.

2.3 The secondary purpose of collecting and processing client data is to ensure the operation of the company from a marketing and business perspective:
2.3.1 the functionality and smooth operation of the website, enabling analysis and further development;
2.3.2 sending commercial notifications, newsletters, etc., via e-mail;
2.3.3 building a visual product gallery for the purpose of promoting the seller in the media;
2.3.4 filling the website, social media profiles, and other media channels with visually attractive content based on authentic proprietary records.

Article 3 / Types of Processed Data

3.1 Data collected about the buyer when ordering goods via the order form or upon direct request by the seller’s representative:
3.1.1 title, first name, last name;
3.1.2 postal address, billing address, delivery address;
3.1.3 telephone number, e-mail contact;
3.1.4 history of mutual communication.

3.2 Data collected regarding website traffic through code embedded on the site; information is obtained from the visitor’s browser:
3.2.1 IP address;
3.2.2 type of device;
3.2.3 time and duration of access;
3.2.4 referring page;
3.2.5 enabling/disabling of cookies;
3.2.6 clicks on page elements;
3.2.7 operating system used;
3.2.8 type, version, and language of the browser;
3.2.9 window and screen resolution;
3.2.10 other technical parameters.

3.3 Data collected for the purposes of media promotion of products, always with prior consent of the data subjects and with an emphasis on maintaining their full privacy and anonymity:
3.3.1 photos of products with customers or in their premises;
3.3.2 short video recordings of products in the customer environment;
3.3.3 customer references, interviews, links to interesting projects, etc.

Article 4 / Data Recipients

4.1 Employees of the seller for whom the buyer’s contact details are relevant.

4.2 Subcontractors of the seller who participate in the overall operation of the online store and its continuous improvement:
4.2.1 shipping companies ensuring delivery of ordered goods;
4.2.2 trade intermediaries if they are part of a mutual business agreement between the contracting parties;
4.2.3 the seller’s economic and tax advisors (to the necessary extent of personal data);
4.2.4 operators of servers, web hosting, and other technologies used by the seller to ensure the functionality of online services (only traffic-related data);
4.2.5 providers of programming and other technical support services, services related to measuring site traffic and customizing website content according to user preferences (only traffic-related data);
4.2.6 advertising agencies and social marketing platforms (only visual outputs).

4.3 Representatives of state or EU authorities in the case of lawful requests.

4.4 The online store operator does not provide, and has no intention to provide in the future, buyers’ personal data:
4.4.1 to any other third party whose interest is not related to fulfilling the purchase contract;
4.4.2 to third countries or international organizations.

Article 5 / Data Security Conditions

5.1 The controller declares that it has adopted adequate technical and organizational measures to secure buyers’ personal data against loss, destruction, alteration, theft, or further dissemination by unauthorized persons.
5.1.1 This applies both to securing data storage systems and storage containing personal data in printed documents.

5.2 The controller declares that only persons authorized by it have access to personal data.
5.2.1 All employees of the seller are obliged to maintain confidentiality regarding personal data.

 

Article 6 / Data Retention Period

6.1 The seller retains buyers’ contact details for the period necessary to exercise the rights and obligations arising from their contractual relationship.
6.1.1 For archival purposes, data is retained for 10 years after the termination of the contractual relationship.

6.2 The seller retains buyers’ email contacts until explicit consent for their use for marketing purposes is withdrawn.

6.3 Personal data from the contact form is retained for 12 months to allow for follow-up contact and responses to customer inquiries.

Article 7 / Rights Guaranteed by GDPR

7.1 Right to information about the processing of personal data – this right of the buyer is fulfilled by publishing this document on the seller’s e-shop.

7.2 Right of access to personal data – this right allows the buyer to request information on how and for what purposes their personal data is processed. The buyer may contact the seller’s representative at any time regarding this matter.

7.3 Right to rectification of personal data – this right allows the buyer to correct inaccurate or outdated personal data.

7.4 Right to erasure of personal data – this right may be exercised if the buyer no longer wishes the controller to process their personal data.

7.5 Right to object to the processing of personal data – this right may be exercised if the buyer believes that their personal data has been processed unlawfully.

7.6 Right to data portability – this right allows the direct transfer of personal data from one service provider to another.

7.7 Right to withdraw consent to the processing of personal data – this right may be exercised if the buyer wishes to stop the active use of their personal data for marketing purposes.

7.8 Right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (www.dataprotection.gov.sk) if the buyer believes that the seller has violated their right to personal data protection.

Article 8 / Use of Cookies

8.1 The website www.cacao-conexion.sk uses cookies that help ensure its better functionality. They serve, for example, to save the last viewed products so they can be displayed on the next visit, to allow access to secured areas, and for other purposes to maintain set preferences. Thanks to cookies, visited websites remember visitor actions and settings, so these details do not need to be entered repeatedly, simplifying and improving the use of the website.

8.2 Cookies are small text files that may be sent to the browser when visiting websites and are stored on the visitor’s device.
8.2.1 Cookies cannot be assigned to a specific person and do not contain any personal data of the customer on their own. Cookies do not contain viruses and do not damage the customer’s computer.
8.2.2 Cookies usually contain the name of the website from which they originate, their validity, and their value. This data can be read again by the website on the next visit (only those created by the website itself).
8.2.3 Both temporary and permanent cookies may be used on www.cacao-conexion.sk. Temporary cookies (so-called session cookies) are stored on the visitor’s device until they leave the site and are deleted after the session ends. Permanent cookies (so-called persistent cookies) remain on the visitor’s device until they expire or are manually deleted. Their purpose is to allow the site to recognize the device on a subsequent visit.

8.3 By using www.cacao-conexion.sk, the visitor expresses consent to the use of cookies in accordance with their browser settings. If a customer has visited the seller’s website and their browser generally allows cookies, this is automatically considered acceptance of the website’s cookie usage conditions.
8.3.1 Instructions for changing cookie settings can be found in the customer’s browser documentation. These settings must be adjusted separately on each device from which the customer accesses the seller’s website. By default, browsers are set to accept cookies.
8.3.2 Another way to prevent cookies from being stored on the device while visiting the seller’s website is to use the browser in incognito mode.

8.4 The seller will respect the customer’s decision to change the default cookie settings; however, disabling cookies may affect the functionality of certain parts of the website and the ability to make purchases.
8.4.1 For example, the shopping cart function (i.e., ordering products) is only possible if technical cookies necessary for the e-shop’s functionality are accepted. Data obtained from these cookies will be used solely to ensure the technical functionality of the purchase.
8.4.2 Other examples of technical cookies include login cookies, cookies for recently viewed products, etc.

8.5 If the visitor does not delete or block cookies in their browser, the seller may also use this data for purposes including:
8.5.1 Providing more relevant advertisements based on the visitor’s interests,
8.5.2 Providing aggregated reports of ad activity to advertisers and other websites hosting ads,
8.5.3 Providing websites and app owners with information on how visitors use these websites or apps,
8.5.4 Detecting and defending against fraud and other risks, protecting users and partners,
8.5.5 Improving the provider’s own products.

8.6 The website www.cacao-conexion.sk also contains links and integrated content from other websites. During the use of this website, cookies may therefore be created that are not under the control of the seller.
8.6.1 This includes, for example, the use of third-party analytics and marketing automation tools (e.g., Google Analytics and Adwords) or displaying video sequences loaded from third-party websites (e.g., YouTube). This results in the acceptance of cookies from these third-party services. Conexion s.r.o. cannot control the storage or access to these cookies. To learn how these third parties use cookies, please refer to the privacy and cookie policies of the respective services.

Article 9 / Final Provisions

9.1 By submitting an order through the online order form on www.cacao-conexion.sk, the buyer confirms that they have been informed about the conditions for processing their personal data, have understood them, and fully accept them.

9.2 If the buyer has not expressed disagreement with the processing of their personal data in the online store for the purpose of email marketing, they have thereby consented to receiving the seller’s email messages at their contact email address.
9.2.1 The buyer may withdraw their consent at any time by sending a request to be removed from the mailing list. Subsequently, they will be removed, and the personal data they provided (email) will no longer be used for email marketing purposes.

9.3 These Personal Data Protection Conditions (OOÚ) come into effect on June 24, 2022, and apply exclusively to the online store www.cacao-conexion.sk,

9.4 The data controller is entitled to change and modify these conditions without prior notice to the buyer.
9.4.1 The new version of the personal data protection conditions will be published on the website and sent to the client by email upon request.