How do we protect your privacy?We make every effort to ensure you feel secure. This document contains all the pertinent details as to how we protect your privacy: the data we collect, how we use data, with whom we share data, how you can control its processing, the measures we use to protect your data and your processing-related rights. During processing, we adhere to all regulations applicable to the protection of your personal data.Who we are and how to contact usWe are the company that operates the boratree.organic e-shop. We are the controller with respect to the processing of your personal data: BRM SK s. r. o., Vodná 27, 949 01 Nitra, Slovakia, registered in the Commercial Register at Nitra District Court, section: Sro, file no. 51059/N, Org. ID: 53040520, phone: +421 917 551 466, email: info@boratree.organic We do not have a designated data protection officer. If you have any questions regarding this document or the processing of your personal data, or if you want to exercise any of your rights as specified herein, please contact us via email at info@boratree.organic or by mail addressed to the company’s registered office. Data we collect We obtain the following data from you during the sale of merchandise via our e-shop, boratree.organic: Data when making a purchase When making a purchase, we require the data necessary to fulfil the order. Mandatory data in this case is only order-critical data, which means data we need to fulfil and ship your order, specifically your name, email address, mailing address, phone number and the actual ordered item(s). Data when creating an account If you decide to create a user account with us, we collect all the pertinent data for this process. This includes mandatory data, a login name and password, your first and last name, email address, mailing address, and phone number. We use this data to communicate with you. Email newsletter If you check the box during registration or when logging in to subscribe to our newsletter, we will store your email address and name for the purposes of sending you the latest information about products, special offers and news. You may withdraw your consent at any time using the unsubscribe link contained in every such email communication. Data obtained when visiting our e-shop When you access our site, we obtain data about how you use the site. This information includes your interactions with our services, for instance when you access our site, what you look for, when you create an account and when you log in to your account. We gather data on the devices and computers you use to access our services, including browser type, information about operating systems, or information about your mobile device, information from the website from which you navigate to our site, the pages you visit and information from cookies and similar tools. How we process data We process the data we collect for the following purposes: Providing our services Based on the data we obtain from you, we are able to deliver our products in accordance with our Terms and Conditions. The data we obtain from you when placing an order is used to fulfil your order. We also need this data for our accounting and to properly issue an invoice in accordance with the Accounting Act. Data and information we gather from you when providing our services and after you log in to your account is used to ensure that your account and the data you have available in it are updated. Communicating with you We use your contact details to send notification regarding the fulfilment of your order and to provide services, or when we need to respond to a message when you request a status update regarding your order, when you want to change your mailing address, or when you request any other change to your data contained in your order or user account. Your contact data and other purchasing data is also processed if you return delivered merchandise. Security and the protection of your rights We use your data to ensure the security of all provided services, to allow us to respond to claims made against us in proceedings involving state and other authorities who regulate our activity, and to enforce claims as they arise. Cookies Like many other companies providing their services on the Internet, we also use cookies. Cookies are files containing small bits of data that are stored in your browser or mobile devices as you browse websites. Each cookie has a different "shelf life", or different storage time on your device. Some cookies are deleted from your device once you close the browser window (session cookie), while others remain on the device after you leave our website (permanent cookie). Why do we use cookies? Cookies allow us to remember your actions and preferences (such as your login data, other data regarding an order in your shopping cart, etc.) over a specific period of time so that you don’t have to enter them repeatedly when you return to the website or move from one website to another. Cookies help us understand your interests on our website, and if the website is sufficiently clear and if you are able to find what you are looking for. Cookies are used to improve the user experience. Cookies may also record other information, including the number of visitors to our website and the sub-pages on our website you visit most frequently. They are used to better target relevant advertising and site content that best reflect your interests and needs. What cookies do we use? Functional and technical cookies – these cookies ensure the proper functioning of our website, for example, they secure the login function for user accounts on the site, save merchandise in the shopping cart, or detect unauthorised attempts to log in to an account. Without these cookies, our website would not work properly, their use is necessary and therefore we do not ask your consent for their storage and access to them. We also include cookies in this category that allow us to store the contents of your shopping cart without the need for you to be logged in. Analytical cookies – these cookies are used to obtain data about traffic to our website, information about searches performed on our website and also to find out how you navigate our website so we can make it as easy as possible for you to use. We do not ask for your consent for their use as we have taken measures to prevent their misuse (anonymization on the part of our vendors) and measures are implemented to easily control and restrict the use of these cookies. We use the following third-party solutions when using these cookies: Google Analytics Address: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland More information on privacy protection is available here, while you can also refuse cookies by installing the software add-on available here. How can yo change your cookies settings (disable/enable)? Settings for the cookies used on the boratree.organic website may be configured in your web browser. Most web browsers have a default setting to automatically accept cookies. You can change these settings to block cookies or to notify you if cookies are sent to your browser. Instructions for changing your cookies settings are available in the help feature in every browser. If you use different devices to access our website (e.g. a computer, smartphone, tablet), we recommend adjusting the settings in the browser on each device to match your cookies preferences. We will respect your decision to change the default cookies settings. Disabling some cookies may impact the use of some functions on our website. Legal basis While we don’t necessarily want to burden you with all the legal terminology, we must inform you of the legal basis for the processing of your personal data under the requirements of personal data protection legislation, specifically: Contract fulfilment – when ordering merchandise and creating a user account, and to participate in consumer contests. Fulfilment of our statutory obligations – when saving data about you and your order in our accounting or when providing data to state and other authorities who regulate our activities or otherwise resolve disputes or enforce decisions. Our legitimate interest – when improving and personalising our services, certain marketing activities or in connection with security and the protection of the rights specified above. In such instances, we give careful consideration as to if processing constitutes disproportionate interference into your rights. To whom we make data available The personal data we process as controller and as processor may only be disclosed to our collaborators who provide administrative and technical support for the operation of our e-shop site, or other entities but only on the grounds of fulfilling statutory obligations. We will not disclose, disseminate, or provide your personal data to any other entity, excepting those instances specified below: Disclosure of data to third parties We disclose data to third parties for the delivery service. We currently cooperate with the following company: For shipments: Swiss Point, s. r. o. Registered ofice: Reding Tower 2, Račianska 153, 831 54 Bratislava, Slovakia Org. ID: 35 843 390 Registered in the Commercial Register of the District Court Bratislava I, section: Sro, file number: 27312/B Analytical and advertising services We also work with partners who provide us with analytical and advertising services. They allow us to better understand how users use our website, to better target our advertising on the Internet, and to quantify its performance. These companies may use cookies and similar technologies to gather data on your interactions with our services and other websites. More information about these services and options for protecting your privacy are provided in the Cookies section. For legal reasons and to avoid damages We may also store your personal data or disclose it to other parties to comply with our obligations under legislation, upon request from state and other authorities, to enforce our claims or to defend ourselves from claims raised by others against us in various proceedings. Among the categories of third parties to whom we disclose personal data on these grounds include the courts, state and other authorities responsible for regulating our activity, to resolve disputes, or to enforce decisions, and our legal and accounting advisers and auditors. Transmission to third countries We do not currently transmit your personal data to third countries outside the EU. Any processing of your personal data is performed exclusively in the EU. How we protect your data We want to assure you that your personal data is safe with us. Under the requirements of valid legislation, we have implemented all the necessary security, technical and organisational precautions to protect your personal data. Electronic data is stored on a secure database on our own secure server located in a data centre inside the European Union. We protect the database containing personal data from damage, destruction, loss or misuse. How long we store data We store personal data related to your user account for as long as you have this account given their necessity in allowing us to operate an account for you. If you do not have an account (you did not create a password when placing an order), we will store your personal data regarding the fulfilment of your order for the period necessary, which is typically five years from delivery. What are your rights You have numerous rights based on the fact that we process your personal data. If you exercise any of the following rights, we will respond to your request within 30 days from our receipt of such request. In justifiable instances, we may extend this term to 60 days and we will inform you if this becomes necessary. How to exercise your rights You may exercise your rights by sending an email or request in writing using our contact details. Please provide your first name, last name, email address or address of permanent residence in your request. We will be unable to comply with your request if you fail to provide these details. We require this data to verify your identity and to ensure we do not provide your personal data to an authorised party. Right to access data You have the right to gain confirmation from us as to if we process your personal data, and if we do, we will provide you with information as to the data about you we process, for what purpose, to whom your personal data was provided, if the data was transmitted to a third country and how long we will store your personal data. Right to correction To err is human. If you believe that our company is processing your personal data that is incorrect, you may exercise this right in the settings contained in the “My account” section of your account or request that we make such correction. We want to process the correct personal data, and therefore kindly request that you exercise this right if you move or there is any other change to the personal data that is important for our arrangement. Right to deletion (right to be forgotten) You have the right to deletion of the your personal data we process, if the following conditions are met and statutory exemptions are not applied: data is no longer necessary for the purposes for which it was obtained you withdraw your consent to the processing of your personal data and there is no legal basis for its processing you object on the basis of a specific situation to the processing of your personal data, processed based on a legitimate interest, and the legitimate reasons for processing do not outweigh such request or if you object to processing for direct marketing purposes personal data is processed in an unlawful manner. If your personal data was published and you exercise the right to deletion, we will also delete such published personal data. We will also inform other recipients of your personal data that you have exercised the right to be forgotten and that they should therefore delete all references to your personal data if technically feasible with respect to available technology and the cost of implementing such measures. If you delete your account, we will then delete the data where feasible, and then delete the account within 10 days. For technical reasons (e.g. to back up data), some data may only be deleted after an extended period of time, which should not exceed 60 days. Right to restrict processing You also have the right to request temporary restriction of processing in the following cases: if you believe that we are processing incorrect personal data, then for the duration of the period until the accuracy of such personal data is verified the processing of your personal data is unlawful and you decide to restrict processing rather than deleting such personal data we no longer need your personal data for the purpose of processing, but such data is necessary for your own purposes to demonstrate, exercise or otherwise defend your legal entitlements if you object to the processing of your personal data, until such time that it can be verified that the legitimate reasons for processing personal data outweigh your legitimate interests Right to data transmission You have the right to obtain the personal data that we process based on consent and/or a contract and that we process using automated means, in a structured, commonly-used and machine-readable format. Such data may be transmitted to another party if technically feasible and we will transmit your personal data directly to the controller of your choosing upon your request. Right to object You have the right to object to the processing of your personal based on our legitimate interest for reasons concerning your specific situation, including the right to object to profiling based on our legitimate interest. You always have the right to object to the processing of your personal data if processing is for direct marketing purposes. Filing complaints If you believe that our company’s processing of your personal data is in violation of valid personal data protection legislation, you have the right to file a complaint with the supervising authority, specifically the Office for Personal Data Protection of the Slovak Republic. We would be pleased if you first contacted us with any such information to give us the opportunity to take corrective action and resolve any problem that may occur. Confidentiality Please allow us to assure you that our employees and cooperating parties who process your personal data are obliged to maintain the confidentiality of personal data and relevant security measures, the disclosure of which could put the security of your personal data at risk. Such confidentiality endures after termination of the legal arrangement with us. Your personal data will not be provided to any other third party without your consent. In Nitra on 18.06.2020