Privacy policy

The recording of the personal data of a customer of a particular e-shop is, from the point of view of the law, the processing of their personal data. This creates an information system of personal data pursuant to Act No. 18/2018 Coll. on the Protection of Personal Data (hereinafter referred to as the "Personal Data Protection Act") The purpose of this processing of personal data of the customer, a natural person, is most often the conclusion of a purchase contract and the subsequent payment, delivery of goods or services and the possible provision of other related services (complaints and other obligations arising from the e-shop operator, in particular in connection with the legislation governing consumer protection). We use the personal data that we request from you exclusively for internal use in connection with the fulfilment of the obligations arising from the order and do not disclose it to third parties. We handle your personal data only and exclusively to the extent permitted by Act No. 18/2018 Coll. on the protection of personal data.

Your personal data is secured by us against misuse and without third party access and will not be otherwise commercially exploited. When registering, you have the option to opt-in to receive newsletters or other marketing information from the seller. They are used exclusively for acts related to the processing of your order in our company and dispatch via Slovak mail and courier companies.

IDENTIFICATION DATA OF THE ADMINISTRATOR

The controller of personal data is KURA collection s. r. o., registered office Poštová 16, 04001 Košice, ID No.: 51007258, registered in the Commercial Register of the District Court Košice I, Section Sa, File No. 1234/B. Contact details of the operator: kuracollection@kuracollection.sk

PROCESSING OF PERSONAL DATA

 

KURA collection s.r.o. processes the following personal data of the customer for the purposes of registration, purchase through the online shop and for the exercise of rights and obligations arising between you and KURA collection s.r.o.: name, surname, telephone number, e-mail address, customer address, delivery address, customer IP address.

The legal basis for the processing of personal data is the consent hereby given to the controller in the sense of:

- the performance of the contract of Article 6(1)(b) GDPR and the performance of the rights and obligations of the controller under Article 6(1)(c) GDPR,
- Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR") for the purpose of direct marketing, insofar as there is no order for goods,
- the legitimate interest of the controller to carry out direct marketing pursuant to Article 6(1)(f) GDPR

The processing of personal data is, in the case of the purchase of goods via the online shop, necessary for the performance of the contract for the purchase of goods and for the purposes of fulfilling the legal obligation of KURA collection s.r.o.
There is no automatic individual decision-making on the part of the controller within the meaning of Article 22 GDPR.

STORAGE PERIOD OF PERSONAL DATA

Personal data are processed for the period necessary to exercise the rights and obligations arising from the contractual relationship (for a maximum of 3 years from the termination of the contractual relationship) or until the consent to the processing of personal data is withdrawn.

 

RECIPIENTS OF PERSONAL DATA

The recipients of personal data are the following persons:
- the courier or transport company that arranges the delivery of the goods to the customer, as an additional intermediary
- GR ecco, s. r. o., 04001 Košice, ID No:, as an intermediary for bookkeeping

RIGHTS OF THE DATA SUBJECT

Under the conditions set out in the GDPR, you have the right to:
- access to personal data
- to rectification of personal data
- to restrict the processing of personal data
- to erasure of personal data
- the portability of personal data
- object to the processing of personal data

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority.

SECURITY OF PERSONAL DATA

The controller undertakes to take appropriate technical and organisational measures to secure personal data in order to prevent unauthorised access to or loss of such data. The controller declares that personal data will be accessible only to authorised persons who are obliged to maintain the confidentiality of personal data. The controller has taken technical measures to secure data storage and personal data recorded in paper form.

FINAL PROVISIONS

By submitting an order from the online shop, you confirm that you have read and unconditionally accept the terms and conditions for the protection of personal data. The Administrator reserves the right to modify these terms and conditions. The current version of the terms and conditions is published on the controller's website.

We place the utmost importance on the protection of personal data!