The document entitled "Rules for the protection of personal data on the Wish4soul.com portal" (hereinafter referred to as the "Rules") informs about the method of protection of personal data, including the customer's rights in connection with the processing of personal data, and describes the following rules:
a) defining the administrator of personal data (hereinafter referred to as the "administrator")
b) processing of personal data of customers and users of the Wish4soul.com web portal (hereinafter referred to as the "portal")
c) the legal framework for the protection and processing of customers' personal data
d) purpose and period of processing of personal data of customers
e) provision of personal data of customers to other entities
f) use of customer rights in connection with the processing of personal data
g) method of exercising rights
2. Personal data administrator
The operator of the portal (hereinafter referred to as the "operator") and at the same time the administrator of personal data is the company Bridgeway, s.r.o., IČO: 47 737 492, Olivova 31, 900 42 Miloslavov, registered in the Commercial Register of the District Court Bratislava I, section Sro, file 98307/B .
3. Processing of personal data
According to these rules, the operator processes the following personal data:
- for customer data such as first and last name, date of birth, login name and password for the portal
- for contact information such as phone number, e-mail address, billing and delivery address. Data in the portal's customer account such as contact data, order number, product data, form of payment, product shopping cart, product reviews entered by the customer on the portal
- o cookies necessary for the technical security of the transmission of electronic communication of the website via an electronic communication network (it is not possible to grant objection to these files).
- about cookies that analyze data about a natural person. You can opt out of these files. The processing time of this data is 3 years.
4. Legal framework for the protection and processing of personal data
The administrator of personal data in terms of these Rules proceeds with the processing and protection of personal data in accordance with the following legal regulations:
- o Act no. 18/2018 Coll. on the protection of personal data
- o Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as "the Regulation")
5. Purpose and period of processing of personal data of customers
Personal data is processed by the operator for the following purposes:
Providing goods and services and fulfilling the terms of the contract
The provision of goods and services and the performance of the contract based on personal data from the customer are governed by the General Terms and Conditions of Wish4soul.com e-commerce. The data obtained from the customer when creating the order is used in the most proper manner. These data are used in the operator's accounting and invoicing system. Personal data obtained from the customer after logging into the customer's account are processed for the purpose of maintaining current data in the customer's account.
Personal data is processed for the duration of the negotiations on the conclusion of the contract between the Operator and the Participant for the purpose of concluding the contract, and also for the duration of the contractual relationship.
Fulfillment of legal obligations
The operator processes personal data in internal accounting and when making data available to state and other authorities that supervise the operator's activities or resolve disputes or implement decisions.
Communication with the customer
To ensure communication with the customer, to send order notifications for possible complaints, the operator processes contact data.
Marketing business offers
The customer's personal data is used for the record of the purchase history of the goods and for the relevant recommendation of other goods that the customer might be interested in based on previous orders. Information about visits and movement on all pages of the portal is also processed for advertising and marketing purposes. The given information is also used to analyze the use of the portal pages by customers to evaluate other options for modifying the portal pages for a better customer experience. The operator processes personal data in connection with marketing actions and the implementation of the marketing action, its evaluation, where the period of personal data processing is determined by the duration of the marketing action itself.
If customers have been given consent, the operator can send emails with commercial information, news, current offers. This consent can be revoked at any time by sending a request to the email address gdpr@bridgeway.sk.
6. Provision of personal data to other entities
We do not publish, make available or provide personal data of customers to other entities, without the customer's consent, with the exception of the delivery service that the customer chooses when ordering, namely: Slovenská pošta, a.s., Partizánska cesta 9, 975 99 Banská Bystrica, ID number: 36631124. Doručovatelská the following data are provided to the service: first and last name, delivery address. The operator has the right to store and make available personal data to other persons even without the customer's consent, in order to comply with the obligations arising from legal regulations, state and other requirements and regulatory authorities. For these purposes, personal data are used for the period required by the current relevant legal regulation, currently a maximum of 10 years.
7. Customer rights in connection with the processing of personal data
In connection with the processing of personal data, the customer has the rights listed below, which he can exercise by sending a request to the e-mail address gdpr@bridgeway.sk or by sending a written request to the contact details of the operator listed in this document.
Right of access to personal data
The customer has the right to obtain a copy of the processed personal data by the operator.
Right to correct personal data
If the customer discovers that his inaccurate or incomplete personal data is being processed, he has the right to correct inaccurate data directly on the portal in his personal account or to request the operator to correct them.
The right to delete personal data
The customer has the right to delete personal data if he requests it in writing from the operator, and legal exceptions do not apply. However, the deletion will not affect the data, which is necessary to keep according to legal standards. Furthermore, the customer has the right to delete personal data also in the following cases:
- o personal data are no longer needed for the purposes for which the operator processed them
- o consent to the processing of personal data has been revoked, and there is no other legal reason for their processing
- o an objection was raised against the processing of personal data in a specific situation, which are processed based on the interests of the operator and it is clear that such interests are no longer justified, or an objection to the processing of personal data for the purpose of direct marketing
- o the customer's personal data is processed illegally
- o personal data of children under the age of 16 are processed
- o if the customer's account has been cancelled, the data will be deleted where this is possible
The customer has the right to ask the operator for a temporary restriction of processing, in the following cases:
- o if the customer believes that incorrect personal data is being processed, until the verification of the correctness of the personal data
- o the processing of the customer's personal data is illegal, i.e. the processing is without a sufficient legal basis
- o the customer's personal data for processing purposes are no longer necessary for the operator, but are necessary for the determination, performance or defense of the customer's legal claims
- o when the customer raises an objection to the processing of personal data, until the verification period or legitimate reasons for the processing of personal data prevail over the customer's interests
Right to portability of personal data processing
The customer has the right to obtain personal data processed by the operator on the basis of consent to the processing of personal data. Personal data is provided to the customer in a structured, commonly used and machine-readable format and can only be data processed in the operator's databases.
The right to object to the processing of personal data
The customer has the right to object to the processing of personal data if personal data is processed based on the legitimate interest of the operator. An objection can also be filed against the processing of personal data for direct marketing purposes.
Right to File a Complaint
The customer has the right to file a complaint against the processing of personal data by the operator at the Personal Data Protection Office, Hraničná 12, 820 07 Bratislava.
8. Ways of exercising rights
For sending questions, complaints or requests related to the processing of personal data, the email address gdpr@bridgeway.sk is available to customers. Requests, questions, complaints will be dealt with within a maximum of one month after they are sent to the operator. The personal data protection rules on the Wish4soul.com portal are valid and effective from 12/29/2023.