Personal data protection

Information on the processing of personal data

pursuant to Article 13 and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation")

1. Identification data of the controller and the person responsible

Controller of personal data

Registered in the Commercial Register of the District Court of Banská Bystrica, Section: Sro, File No.: 45605/S.
E-mail: info@everlady.eu Phone: +421 919 060 751
(hereinafter referred to as the "controller"),
which processes personal data under the conditions set out below.
The controller has appointed a responsible person (data protection officer), who can be contacted at:
E-mail: info@everlady.eu
Phone: +421 919 060 751

2. Processing of personal data for individual purposes:

a) Purchase of goods via e-shop, delivery of goods, handling of complaintsThe operator processes the personal data of consumers (data subjects):
(i) for the purposes of purchasing goods via e-shop and delivering goods, the following personal data of the consumer: name, surname, telephone number, e-mail address, address, data on the purchased goods and data related to payment for the goods (account number, paid amount, date of crediting the payment to the merchant's account),
(ii) for the purposes of handling complaints, in addition to the data specified in point (i), also data on the claimed goods and data provided by the consumer when making a complaint.
The legal basis for processing personal data is:
(i) in the case of purchasing goods via e-shop, delivery of goods to the customer and handling of insurance claims, Article 6(1)(a) b) of the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "GDPR Regulation"), and
(ii) in the case of handling complaints, Article 6(1)(c) of the GDPR Regulation.
The processing of personal data is:
(i) in the case of purchasing goods through an e-shop, the delivery of goods to the customer is necessary for the performance of the contract for the purchase of goods, and
(ii) in the case of handling complaints for the purpose of fulfilling a legal obligation of the trader (operator).

The recipients of personal data are the following persons:
- state and public administration authorities (e.g. the Personal Data Protection Office of the Slovak Republic, the Slovak Trade Inspection, etc.),
- suppliers,
- external legal representation,
- other authorities in consumer proceedings,
- transport companies,
- financial administration authorities,
- tax advisors and auditors, if necessary to fulfill the legal obligation of the trader as the operator.
Personal data is processed during the period of performance of the contract for the purchase of goods and during the warranty period for the delivered goods.

b) Registration and operation of the e-shop
The operator processes the following personal data of consumers registered in the e-shop for the purposes of registration and operation of the e-shop:
name, surname, telephone number, e-mail address, address and order history.
The legal basis for the processing of personal data is Article 6(1)(b) of the GDPR. The processing of the operator's personal data is necessary to ensure registration in the e-shop and the operation of the e-shop.
The following intermediaries are the recipients of personal data:
- state and public administration bodies (e.g. the Personal Data Protection Office of the Slovak Republic, etc.).
Personal data are processed for the duration of registration in the e-shop.

3. Rights of the data subject

The data subject has the following rights pursuant to Art. 7(3) and Art. 15 to 22 of the Regulation and Art. 100 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, as amended (hereinafter referred to as the "Act on the Protection of Personal Data"):

Right to access personal data pursuant to Art. 15 of the GDPR
The data subject has the right to request confirmation as to whether personal data concerning him or her are being processed. Where the controller processes personal data of the data subject, he is obliged to allow the data subject access to these personal data and to provide them with the information referred to in Article 15(1) of the Regulation or a copy of these data, depending on the content of the request.
In certain situations, the controller is entitled to request from the data subject further information that would help him to handle the data subject's request.

Right to rectification pursuant to Article 16 of the GDPR
The data subject has the right to request from the controller the correction of incorrect data or the completion of incomplete data concerning him.

Right to erasure pursuant to Article 17 of the GDPR
The data subject has the right to request from the controller that personal data concerning him be erased without undue delay, if there is no longer a reason for the processing.

Right to restriction of processing pursuant to Article 18 GDPR
The data subject has the right to request restriction of processing of personal data concerning him or her for a period of time necessary depending on the particular situation in cases where:
- he or she has contested the accuracy of the personal data with the controller [the data subject has exercised the right to rectification pursuant to letter b) above],
- the processing carried out by the controller is unlawful and instead of erasure the data subject requests restriction of their use,
- the data subject no longer needs them, but they are needed by the data subject for the establishment, exercise or defence of legal claims,
- he or she has exercised the right to object and the personal data concerning him or her are processed on the legal basis of legitimate interest.

Right to data portability pursuant to Article 20 of the GDPR
The data subject may exercise this right only in the case of processing based on consent or a contract/agreement and if the processing is carried out by automated means.
In the context of this right, the data subject may receive the personal data concerning him or her in a structured, commonly used and machine-readable format and has the right to transmit those personal data to another controller, where technically feasible.
In this context, the controller shall assess the possibility of portability in each case individually, taking into account the subject matter of the data subject's request.
The exercise of the right to data portability must not adversely affect the rights of other persons.

Right to object pursuant to Article 21 of the GDPR
If the controller processes personal data concerning the data subject on the basis of a legitimate interest pursuant to Article 6(1)(f) of the GDPR, the data subject shall have the right to object to such processing.
The controller shall assess each such request on a case-by-case basis and shall, where it is demonstrated that the interests, rights and freedoms of the data subject override those of the controller in a particular case, cease processing such data of the data subject.

Right to withdraw consent to the processing of personal data pursuant to Article 7(3) of the GDPR
This right belongs to the data subject if the controller processes personal data based on their consent.
The data subject may withdraw the consent given by them to the processing of personal data concerning them at any time in the same manner as they gave their consent.

Right to file a complaint for the protection of personal data pursuant to Section 100 of the Personal Data Protection Act
If the data subject believes that the processing of personal data concerning them is in breach of the Regulation, they may file a complaint with the Personal Data Protection Office of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, tel. +421 /2/ 3231 3214, e-mail: statny.dozor@pdp.gov.sk

Request addressed to the responsible person
With the exception of submitting a proposal to initiate proceedings, you can exercise your rights at any time by sending a request to the responsible person of the operator in the following ways:
by e-mail to: info@everlady.eu.
by post to the address: everlady s.r.o., Bakossova 8, Banská Bystrica 974 01

A request to exercise the rights of the data subject is processed free of charge, except in cases where the request of the data subject is manifestly unfounded or disproportionate, in particular due to its repetitive nature, the operator is entitled to request a reasonable fee from the data subject taking into account the administrative costs of providing information or notifying or taking the requested measure, or to refuse to act on the request.