Processing of personal data in accordance with EU regulation

In connection with the General European Privacy Policy (General Data Protection Regulation), we ask that you agree to the processing of your personal data in the www.soaphoria.sk. The purpose of GDPR is to provide a higher level of protection of your personal data and a review of your processing and your rights.

Your personal data is processed solely in accordance with valid legislation. We process personal data only with the consent of the client. It is only on his or her free choice whether or not to grant his or her consent to the proposed scope. Grant of consent is entirely voluntary and consent can be withdrawn at any time. We are bound by the scope of the consent we give, and we fully respect it.

1. Purpose of processing

We will process your personal information in order to execute your orders, ordered services, invoicing or order delivery to your contact address.

2. Scope of processing

We process the following customer data that is required for order execution and which you provide us with:

• name
• surname
• street name and number
• postal code
• city
• state
• country
• phone number
• company name
• company ID
• TAX ID
• e-mail address

The information you give us unknowingly:

• IP address

3. Processing time

Your personal data will be safely stored, collected, processed and archived for the purpose of keeping records and documents for 10 years (pursuant to Article 431/2002 of the Accounting Act as amended) from the last order made.

4. Cookies

We use cookies to adapt your content to our preferences. Cookies are small data files that our e-shop stores in your web browser when you visit it. If you do not agree to use Cookies, set your own cookie policy in your web browser on your device. If you disable the use of cookies, the functionality of the e-shop may be limited.

5. Web metrics and analytics

These are conversion or pixel tags, or small graphic images that can be included in our e-shop code, which allow us to identify the user for the purpose of capturing his behavior and measuring his / her traffic.

We use the following systems:

• Google Anylitics

6. Advertising and promotional services

At e-shope, we use your contacts to send advertising or business announcements outside of ordering. This is the processing of the following data:

• name
• surname
• e-mail address

The data of users who subscribe to Newsletter are sent and processed by a non-EU third party - The Rocket Science Group, which operates Mailchimp and which complies with the principles of the European Privacy Policy. They are available at the web address https://mailchimp.com/legal/privacy/

7. Right of access to data

The user of the e-shop has the right to obtain information about the purpose and scope of processing of his or her personal data.

8. Right to data portability

It is the administrator's responsibility to provide to the data holder all information processed in a structured, commonly used, machine-readable format. By exercising this right, the user gains control of his or her personal data and also has the ability to sell it to another manager in that form.

The data download tool is available to the user in the "Account" section > Protection of Personal Data (GDPR) "of your customer account.

9. Right to fix data

The user has the right to request a correction data manager in the event of a suspicion of incorrect data being stored. You can edit your data in the "Account" section of your customer account.

10. Right to limited data processing

The user has the right to limit the processing of his or her personal data or to disable the selected personal data, or to temporarily remove the published data.

11. Right to delete data

The user has the right to delete his or her personal data without undue delay unless they are no longer necessary for the purpose for which they were collected or processed and the legitimate reason for their possible archiving ceases. When requested to delete data, all irrevocably deleted and related orders (if any) will be anonymized.

12. The right to forget

The user has the right to take reasonable steps, including technical measures, to delete all references to his or her personal data and their copies if the legitimate reason for their possible archiving ceases.

13. Right to raise objections

The user has the right to object to the processing of personal data, or if he has no right to exercise the right of cancellation.

14. Right to file a complaint

The user has the right to lodge a complaint with the supervisor if he considers that processing his or her personal data is contrary to the GDPR Regulation.

15. Recording user requests

The e-shop operator is required to record all user requirements for downloading, repairing, and deleting his or her data.

16. Data security

We have up-to-date technical and security mechanisms to protect the data being processed against unauthorized access or transmission, loss or destruction or other possible misuse.

In the absence of consent and personal data, we will not be able to provide you with any services under the European Privacy Statement.

in Veľké Kapušany, May 21st, 2018