How do we protect your privacy?We make every effort to ensure you feel secure. This document contains all the pertinent details as to how we protect your privacy: the data we collect, how we use data, with whom we share data, how you can control its processing, the measures we use to protect your data and your processing-related rights. During processing, we adhere to all regulations applicable to the protection of your personal data.Who we are and how to contact usWe are the company that operates the boratree.organic e-shop. We are the controller with respect to the processing of your personal data:
BRM SK s. r. o., Vodná 27, 949 01 Nitra, Slovakia, registered in the Commercial Register at Nitra District Court, section: Sro, file no. 51059/N, Org. ID: 53040520, phone: +421 917 551 466, email: firstname.lastname@example.org
We do not have a designated data protection officer. If you have any questions regarding this document or the processing of your personal data, or if you want to exercise any of your rights as specified herein, please contact us via email at email@example.com or by mail addressed to the company’s registered office.
Data we collect
We obtain the following data from you during the sale of merchandise via our e-shop, boratree.organic:
Data when making a purchase
When making a purchase, we require the data necessary to fulfil the order. Mandatory data in this case is only order-critical data, which means data we need to fulfil and ship your order, specifically your name, email address, mailing address, phone number and the actual ordered item(s).
Data when creating an account
If you decide to create a user account with us, we collect all the pertinent data for this process. This includes mandatory data, a login name and password, your first and last name, email address, mailing address, and phone number. We use this data to communicate with you.
If you check the box during registration or when logging in to subscribe to our newsletter, we will store your email address and name for the purposes of sending you the latest information about products, special offers and news. You may withdraw your consent at any time using the unsubscribe link contained in every such email communication.
Data obtained when visiting our e-shop
When you access our site, we obtain data about how you use the site. This information includes your interactions with our services, for instance when you access our site, what you look for, when you create an account and when you log in to your account.
We gather data on the devices and computers you use to access our services, including browser type, information about operating systems, or information about your mobile device, information from the website from which you navigate to our site, the pages you visit and information from cookies and similar tools.
How we process data
We process the data we collect for the following purposes:
Providing our services
Based on the data we obtain from you, we are able to deliver our products in accordance with our Terms and Conditions. The data we obtain from you when placing an order is used to fulfil your order. We also need this data for our accounting and to properly issue an invoice in accordance with the Accounting Act.
Data and information we gather from you when providing our services and after you log in to your account is used to ensure that your account and the data you have available in it are updated.
Communicating with you
We use your contact details to send notification regarding the fulfilment of your order and to provide services, or when we need to respond to a message when you request a status update regarding your order, when you want to change your mailing address, or when you request any other change to your data contained in your order or user account. Your contact data and other purchasing data is also processed if you return delivered merchandise.
Security and the protection of your rights
We use your data to ensure the security of all provided services, to allow us to respond to claims made against us in proceedings involving state and other authorities who regulate our activity, and to enforce claims as they arise.
Cookies are files containing small bits of data that are stored in your browser or mobile devices as you browse websites.
Each cookie has a different "shelf life", or different storage time on your device. Some cookies are deleted from your device once you close the browser window (session cookie), while others remain on the device after you leave our website (permanent cookie).
Cookies allow us to remember your actions and preferences (such as your login data, other data regarding an order in your shopping cart, etc.) over a specific period of time so that you don’t have to enter them repeatedly when you return to the website or move from one website to another.
Cookies help us understand your interests on our website, and if the website is sufficiently clear and if you are able to find what you are looking for. Cookies are used to improve the user experience.
Cookies may also record other information, including the number of visitors to our website and the sub-pages on our website you visit most frequently. They are used to better target relevant advertising and site content that best reflect your interests and needs.
What cookies do we use?
We use the following third-party solutions when using these cookies:
Address: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
How can yo change your cookies settings (disable/enable)?
Settings for the cookies used on the boratree.organic website may be configured in your web browser. Most web browsers have a default setting to automatically accept cookies. You can change these settings to block cookies or to notify you if cookies are sent to your browser.
Instructions for changing your cookies settings are available in the help feature in every browser. If you use different devices to access our website (e.g. a computer, smartphone, tablet), we recommend adjusting the settings in the browser on each device to match your cookies preferences.
We will respect your decision to change the default cookies settings. Disabling some cookies may impact the use of some functions on our website.
While we don’t necessarily want to burden you with all the legal terminology, we must inform you of the legal basis for the processing of your personal data under the requirements of personal data protection legislation, specifically:
To whom we make data available
The personal data we process as controller and as processor may only be disclosed to our collaborators who provide administrative and technical support for the operation of our e-shop site, or other entities but only on the grounds of fulfilling statutory obligations.
We will not disclose, disseminate, or provide your personal data to any other entity, excepting those instances specified below:
Disclosure of data to third parties
We disclose data to third parties for the delivery service. We currently cooperate with the following company:
Swiss Point, s. r. o.
Registered ofice: Reding Tower 2, Račianska 153, 831 54 Bratislava, Slovakia
Org. ID: 35 843 390
Registered in the Commercial Register of the District Court Bratislava I, section: Sro, file number: 27312/B
Analytical and advertising services
For legal reasons and to avoid damages
We may also store your personal data or disclose it to other parties to comply with our obligations under legislation, upon request from state and other authorities, to enforce our claims or to defend ourselves from claims raised by others against us in various proceedings.
Among the categories of third parties to whom we disclose personal data on these grounds include the courts, state and other authorities responsible for regulating our activity, to resolve disputes, or to enforce decisions, and our legal and accounting advisers and auditors.
Transmission to third countries
We do not currently transmit your personal data to third countries outside the EU. Any processing of your personal data is performed exclusively in the EU.
How we protect your data
We want to assure you that your personal data is safe with us. Under the requirements of valid legislation, we have implemented all the necessary security, technical and organisational precautions to protect your personal data. Electronic data is stored on a secure database on our own secure server located in a data centre inside the European Union. We protect the database containing personal data from damage, destruction, loss or misuse.
How long we store data
We store personal data related to your user account for as long as you have this account given their necessity in allowing us to operate an account for you. If you do not have an account (you did not create a password when placing an order), we will store your personal data regarding the fulfilment of your order for the period necessary, which is typically five years from delivery.
What are your rights
You have numerous rights based on the fact that we process your personal data. If you exercise any of the following rights, we will respond to your request within 30 days from our receipt of such request. In justifiable instances, we may extend this term to 60 days and we will inform you if this becomes necessary.
How to exercise your rights
You may exercise your rights by sending an email or request in writing using our contact details.
Please provide your first name, last name, email address or address of permanent residence in your request. We will be unable to comply with your request if you fail to provide these details. We require this data to verify your identity and to ensure we do not provide your personal data to an authorised party.
Right to access data
You have the right to gain confirmation from us as to if we process your personal data, and if we do, we will provide you with information as to the data about you we process, for what purpose, to whom your personal data was provided, if the data was transmitted to a third country and how long we will store your personal data.
Right to correction
To err is human. If you believe that our company is processing your personal data that is incorrect, you may exercise this right in the settings contained in the “My account” section of your account or request that we make such correction. We want to process the correct personal data, and therefore kindly request that you exercise this right if you move or there is any other change to the personal data that is important for our arrangement.
Right to deletion (right to be forgotten)
You have the right to deletion of the your personal data we process, if the following conditions are met and statutory exemptions are not applied:
If your personal data was published and you exercise the right to deletion, we will also delete such published personal data. We will also inform other recipients of your personal data that you have exercised the right to be forgotten and that they should therefore delete all references to your personal data if technically feasible with respect to available technology and the cost of implementing such measures.
If you delete your account, we will then delete the data where feasible, and then delete the account within 10 days. For technical reasons (e.g. to back up data), some data may only be deleted after an extended period of time, which should not exceed 60 days.
Right to restrict processing
Right to data transmission
You have the right to obtain the personal data that we process based on consent and/or a contract and that we process using automated means, in a structured, commonly-used and machine-readable format. Such data may be transmitted to another party if technically feasible and we will transmit your personal data directly to the controller of your choosing upon your request.
Right to object
You have the right to object to the processing of your personal based on our legitimate interest for reasons concerning your specific situation, including the right to object to profiling based on our legitimate interest.
You always have the right to object to the processing of your personal data if processing is for direct marketing purposes.
If you believe that our company’s processing of your personal data is in violation of valid personal data protection legislation, you have the right to file a complaint with the supervising authority, specifically the Office for Personal Data Protection of the Slovak Republic. We would be pleased if you first contacted us with any such information to give us the opportunity to take corrective action and resolve any problem that may occur.
Please allow us to assure you that our employees and cooperating parties who process your personal data are obliged to maintain the confidentiality of personal data and relevant security measures, the disclosure of which could put the security of your personal data at risk. Such confidentiality endures after termination of the legal arrangement with us. Your personal data will not be provided to any other third party without your consent.
In Nitra on 18.06.2020