What is personal data?
Personal data means any information relating to an identified or identifiable data subject. A data subject shall be considered to be identified or identifiable if the data subject can be identified, directly or indirectly, in particular by number, code or one or more elements specific to his physical, physiological, mental, economic, cultural or social identity.
Thus, personal data includes in particular the name, surname, address of a natural person, e-mail, IP address, they may be information about the use of services or about the activities and preferences of a natural person. The protection of personal data is regulated by Act no. 18/2018 Coll. on Personal Data Protection and on Amendments to Certain Acts, as amended (the “Personal Data Protection Act”).
What is personal data processing?
Processing of personal data means any operation or set of operations which a controller or processor systematically carries out with personal data, either automatically or by other means, in particular the collection, storage, disclosure, modification or modification, retrieval, use, transmission, dissemination, disclosure, storage, exchange, sorting or combination, blocking and disposal.
Who is the administrator or. personal data processor?
We are the company Gurmáni s.r.o., ID: 50022814, with its registered office at Dlhá 9, 90028 Ivanka pri Dunaji, registered on 30.10.2015 in the Commercial Register of the District Court Bratislava I, section: Sro, file no. 107137 / B, which operates the e-shop www.gbroasters.com.
We process your personal data as an administrator, ie. we determine how personal data will be processed and for what purpose, for how long, and we may select other processors who will assist us with the processing.
If you would like to contact us with any questions during data processing, you can contact us at tel. number 0948 773 000 or by e-mail to email@example.com.
Scope of personal data and purposes of processing.
We process personal data that you entrust to us yourself, for the following reasons (to fulfill these purposes):
- provision of services, performance of the contract: Your personal data in the range: e-mail, name, address, tel. we urgently need to fulfill the contract – delivery of goods.
- bookkeeping: If you are a customer, we urgently need your personal data (invoicing data) to comply with the legal obligation to issue and record tax documents.
- marketing – sending newsletters: We use your personal data (e-mail and name) for the purpose of direct marketing – sending business announcements. If you are our customer, we do so out of a legitimate interest, because we reasonably assume that you are interested in our news, for a period of 1 year from the last order.
If you are not our customer, we send you newsletters only with your consent, for a period of 1 year from the granting of consent. In either case, you can revoke this consent by using the opt-out link in each email you send
- advanced marketing on the basis of consent: Only with your consent we can also send you inspiring offers from third parties or use an e-mail address, e.g. for remarketing and ad targeting on Facebook, for a period of 1 year from the approval. It is, of course, possible to revoke it at any time via our contact details or by using the voting link in each sent e-mail message.
Security and protection of personal data.
We will handle your personal data responsibly and in accordance with applicable legislation. We use automated and non-automated means for processing personal data. All data is stored on secure servers stored exclusively in the European Union. We protect personal data as much as possible using modern technologies that correspond to the level of technical development.
We have adopted and maintain all possible (currently known) technical and organizational measures that prevent the misuse, damage or destruction of your personal data.
Provision of personal data to third parties.
Our employees and co-workers have access to your personal data. To ensure specific processing operations that we cannot provide on our own, we use the services and applications of processors who know how to protect data and specialize in the data processing.
These processors are:
Accounting firm Atom Group s.r.o., carriers Slovak Parcel Service, s. r. o. and Zásielkovňa s.r.o ..
It is possible that in the future we will decide to use other applications or processors, to facilitate and improve processing. However, we promise you that in such a case, when selecting, we will place at least the requirements required by law on the security and quality of processing.
Provision of personal data outside the EU.
Any processing of personal data will take place exclusively within the EU. We process data exclusively in the European Union or in countries that provide an adequate level of protection based on a decision of the European Commission.
Your rights regarding the processing and protection of personal data.
You have your rights regarding the protection of personal data. If you want to use some of these rights, please contact us via e-mail: firstname.lastname@example.org.
You have the right to information that is already filled in this information page with the principles of personal data processing.
Thanks to the right of access, you can call us at any time and we will prove to you within 14 days what your personal data is being processed and why. If something changes for you or you consider any of your personal data to be out of date or incomplete, you have the right to supplement and change your personal data.
You can exercise the right to restrict processing if you believe that we are processing your inaccurate data, that you think we are processing illegally, but that you do not want to delete all data, or that you have objected to the processing. You can limit the scope of personal data or processing purposes. (For example, unsubscribing from a newsletter restricts the purpose of processing to sending business announcements.)
Right of portability
If you would like to take your personal data and transfer it to someone else, we will proceed in the same way as when exercising the right of access – except that we will supply / send the information to you in machine-readable form. We wear at least 14 days here.
Right to delete (be forgotten)
Your next right is the right to delete (be forgotten). In this case, we will delete all your personal data from our systems as well as from the systems of all sub-processors and also from backups. We need 14 days to secure the right to delete.
In some cases, we are bound by a legal obligation, and e.g. we must register the issued tax documents for the period stipulated by law. In this case, we will delete all such personal data that are not bound by other law. We will inform you by e-mail about the completion of the deletion.
Complaint to the Office for Personal Data Protection
If you feel that we are not handling your data in accordance with the law, you have the right to contact your Personal Data Protection Office at any time with your complaint. We will be very happy if you inform us of this suspicion first so that we can do something about it and correct any mistakes.
Unsubscribe from newsletters and business announcements
We send you emails with inspiration, articles or product information and services if you are our customer based on our legitimate interest. If you are not a customer yet, we only send you emails with your consent. In either case, you can unsubscribe from our emails by clicking on the unsubscribe link in each email you send.
We would like to assure you that our employees and co-workers who will process your personal data are obliged to maintain the confidentiality of personal data and security measures, the disclosure of which would jeopardize the security of your personal data. At the same time, this secrecy continues even after the end of our contractual relations with us. Your personal data will not be disclosed to any other third party without your consent.
These principles of personal data processing apply from 30.10.2015