...

PRINCIPLES FOR PROTECTING PERSONAL DATA AND USING COOKIES

1. General information regarding the website www.inahlina.com

1.1.The Operator’s name and contact information are as follows:

Kristina Lashkay – K Lashkay Ceramics
Kostolná 301,

052 01 Spišské Tomášovce
IN: 55197825
TIN: 1128544934

The vendor does not pay value-added tax (VAT).

 

1.2. The Operator can be reached by phone or email at:

Email address: info@inahlina.com
Phone: (421) 940-919-970

You share your personal information with us as a customer or site visitor at www.inahlinapottery.com. We take responsibility for ensuring their safety and security, deciding how, why, and how long they are processed, as well as choosing any additional processors who assist us.

The operator hereby notifies the Affected Person from whom the operator obtains personal data about them in accordance with Article 13 (2), 1. and 2. Regulation (EU) 2016/679 of the European Parliament and of the Council of May 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC by the General Data Protection Regulation (hereinafter referred to as the “Regulation”).

2. Links

2.1 The general terms and conditions listed in the seller’s online store include these privacy guidelines and instructions.

2.2 In accordance with Section 3 of Act No. 102/2014 Z, Letter N. The seller informs the customer that there are no specific codes of conduct (a code of conduct is an agreement or set of rules defining the behaviour of the seller who has undertaken to comply with this code of conduct in relation to one or more specific commercial practices or industries, if these are not provided for by law or other legislation or measure of a public authority) to which the seller has undertaken to comply.

​3. Use of cookies and the protection of personal information. Descriptions and instructions for cookies.

3.1 Definition of cookies:

When you explore a website, it puts a little text file called a cookie on your computer or mobile device. The website uses this file to remember your actions and preferences for a while, saving you from having to enter them again the next time you visit or explore the site (such as login, language, font size, and other display options).

To enhance your experience, monitor traffic, personalize and measure your adverts, our site and our partners gather data and employ cookies. Using the settings of your browser, you can limit or block cookies.

3.2 The following cookie categories are used in our online store:

  • Essential cookies – while they do not gather information and data from which a website user can be specifically identified, they are crucial to the website’s functionality. For instance, cookies that enable account login are an example of this. The site cannot be made to function properly without certain cookies. Change your browser’s settings if you don’t want these cookies to be saved.
  • Statistical cookies – by collecting and reporting information anonymously, they allow us to better understand how users use the website and make necessary site improvements.
  • Marketing cookies – are used to deliver and show advertisements tailored to website visitors’ interests or to gather personal information about them in preparation for potential future marketing campaigns. We may focus direct marketing communication in a more relevant and successful manner using these files, while simultaneously limiting the quantity of ad impressions.
  • Analytical cookies – are used to gather information about website traffic, locate the source of visitors, learn more about how visitors interact with the site, and enhance and simplify the user experience.

Only if you grant us permission to use them will we gather data using analytical, marketing, and statistical cookies.

3.3 Guidelines for using cookies

3.3.1 The operator’s internet domain stores the following information in cookies:

a) the fact that you previously participated to a survey that appeared in a separate window (pop-up), allowing you to share your thoughts on the website’s content (it won’t be shown again);

b) Your acceptance (or disapproval) of our usage of cookies on this website.

3.3.2 Advertisement and remarketing

Additionally, some of the Operator’s website’s affiliate sites employ cookies to collect anonymous statistics on how visitors arrive at our internet domain and who their referrer is.

Although enabling the use of cookies is not necessary for the website to operate properly, it will improve your user experience. You may delete or block cookies. The data structure is entirely under our control, and the information contained in cookies won’t be used to identify you personally. Cookies are only used for the purposes specified in this section. There is a chance that some of our websites or sub-sites utilize cookies beyond those mentioned above. In this instance, a second cookie notice will be posted on the site in question with full details on their use.

3.4. Cookie management

3.4.1. You have the option to manage and/or delete cookies; more information can be found at aboutcookies.org. All cookies that are currently on your computer can be deleted, and most browsers can be configured to stop new cookies from being saved.

The following links include additional information on cookie management in specific browsers:

4. Processing of personal data

4.1 The Operator collects and processes the following personal data on its website: first and last name, address, email address, telephone number, information from cookies, and IP addresses.

 

 

5. Contact information for the operator's representative, the person in charge of gathering and processing personal data.

5.1 The Operator does not have a designated individual in charge of gathering and handling personal data.

5.2 The Operator does not yet have a representative in place for the purpose of gathering and handling personal data.

5.3 In accordance with the General Terms and Conditions of this website, the Operator also qualifies as the Seller.

6. Reasons for processing the subject's personal data

6.1 The following are some of the specific reasons for which the subject’s personal data is processed:

  • 6.1.2 Contract registration, development, and processing for the purpose of entering into agreements with third parties
  • 6.1.3 Processing of accounting records and documents relating to the Operator’s commercial activities
  • 6.1.4 Adherence to legal requirements on the preservation of documents and records, such as those set forth in Law No. 431/2002 Coll., the Act on Accounting as amended, and other relevant laws
  • 6.1.5 The Operator’s marketing and various other advertising initiatives
  • 6.1.6 Activities associated with the Operator’s social media usage, such as on Facebook, Instagram, and other platforms.
  • 6.1.7 The Operator’s online actions, such as advertising targeting through Facebook Ads, Google Ads, and other channels.
  • 6.1.8 The actions taken by the Operator in connection with the Affected Person’s application, order, contract, and similar institutes.

7. Legal justification for processing the data subject's personal information

7.1 Depending on the individual personal data processed and the aim of their processing, the data subjects’ permission to the processing of their personal data serves as the legal basis for processing the personal data of the data subjects. 

8. Recipients or groups receiving personal information

8.1 The individuals or groups obtaining the personal data of the Data subject will, at least, include:

8.1.1 Officials or members of the Operator’s statutory bodies.

8.1.2 Individuals engaged in employment or similar relationships with the Operator.

8.1.3 Sales representatives of the Operator and other individuals collaborating with the Operator in the execution of its tasks. For the purposes of this document, all individuals engaged in dependent work for the Operator under an employment contract or agreements for work performed outside the employment relationship will be considered Operator’s employees.

8.1.4 The recipients of the data subject will also encompass the Operator’s employees, business partners, suppliers, and contractual partners, specifically: accounting firms, companies providing software creation and maintenance services, legal services providers to the operator, advisory services providers to the operator, companies facilitating transport and product delivery to customers and third parties, marketing firms, and social network operating companies.

8.1.5 Personal data recipients will include courts, law enforcement agencies, the tax office, and other government authorities as stipulated by law. This provision applies when authorities and state institutions in the Slovak Republic provide personal data to the Operators in accordance with legal regulations.

9. Information regarding the transfer of personal data to third countries and the duration of retention:

9.1 N/A – The Operator does not transmit individuals’ personal data to third countries.

9.2 Personal data will be retained in compliance with legal requirements for the required duration to fulfill the contract’s purposes and subsequent archival needs.

10. Instruction on the Awareness of Relevant Rights of the Concerned Individual:

10.1 The concerned individual possesses various rights, including:

10.1.1 Section 10.1 does not impact other rights of the concerned individuals.

10.1.2 The data subject’s right to access information, as per Article 15 of the Regulation, includes:

– The entitlement to receive confirmation from the Operator regarding the processing of the personal data and the extent to which it is processed. Simultaneously, if processed, the data subject has the right to know the content of their data and can request the Operator to provide information on the purpose of processing. This encompasses details such as the reason for processing, categories of personal data involved, recipients or categories of recipients (including those in third countries or international organizations), the anticipated retention period of personal data, or, if not feasible, information on the criteria used for determining it.

– The right extends to requesting the controller to correct, delete, or restrict the processing of personal data, as well as the right to object to such processing. Additionally, the data subject has the right to file a complaint with the supervisory authority if personal data has not been obtained directly from them.

– The data subject is entitled to information about the source of their personal data, the existence of automated decision-making (including profiling) as specified in Article 22 (2)(1) and (4) of the Regulation. In such cases, the data subject should receive meaningful information about the procedure used, along with the significance and expected consequences of the processing of personal data for them.

– Furthermore, the data subject has the right to be informed about reasonable safeguards under Article 46 of the Regulation, particularly regarding the transfer of personal data to other countries or international organizations.

10.1.3 The right to receive a copy of the processed personal data, with the condition that exercising this right must not adversely affect the rights and freedoms of others.

10.1.4 The data subject’s right to rectification, as outlined in Article 16 of the Regulation, includes:

– The right for the Operator to promptly correct any inaccurate personal data related to the data subject.

Furthermore, the data subject has the right to erasure of personal data, commonly known as the “right to be forgotten,” in accordance with Article 17 of the Regulation. This right encompasses:

10.1.5 The right to promptly request the deletion of personal data concerning the Data Subject from the Operator is applicable when any of the following conditions are met:

-The personal data is no longer necessary for the purposes for which it was initially obtained or processed.

-The data subject withdraws consent, the basis for the ongoing processing, provided there is no other legal basis for the processing of personal data.

-Personal data, as per Article 21(2)(1) of the Regulation, is objected to by the data subject, and there are no prevailing legitimate reasons for the processing of personal data or the data subject opposes the processing of personal data under Article 21(1)(2) of the Regulation.

-The personal data has been processed unlawfully.

-Deletion of personal data is required to comply with a legal obligation under European Union law or the law of the Member State to which the Operator is subject, as per Article 17(1) of the Regulation.

10.1.6 The right for the disclosing Controller to undertake appropriate measures, including technological steps, to notify other Controllers processing the data subject’s personal data, upon the Data subject’s request. These measures should consider available technology and the associated implementation costs. The right to erase all mentions of such personal data, copies, or replicas, as outlined in the rights under Article 17(1) and (2) of the Regulation, does not apply if the processing of personal data is deemed necessary:

10.1.7 To uphold the right to freedom of expression and information.

10.1.8 To meet a legal obligation mandating processing under European Union law or the law of the Member State to which the Operator is subject, or to fulfill a task carried out in the public interest or in the exercise of public power entrusted to the Operator.

10.1.9 For reasons of public interest in the realm of public health in accordance with Article 9(2)(h) and (ii) of the Regulation, as well as Article 3 of the Regulations.

10.1.10 For the purposes of archiving in the public interest, scientific or historical research, or statistical purposes, as outlined in Article 89(1) of the Regulation. This applies as long as it is likely that the right specified in Article 17(1)(1) of the Regulation would render the achievement of the objectives of such personal data processing impossible or seriously challenging; or for the purpose of demonstrating, asserting, or defending legal claims.

10.1.11 The Data subject’s right to restrict the processing of personal data in accordance with Article 18 of the Regulation, which entails:

10.1.12 The right for the Operator to limit the processing of personal data in one of the following scenarios: the data subject disputes the accuracy of the personal data during the period allowing the Operator to verify its accuracy; the processing of personal data is unlawful, and the data subject opposes it; the controller no longer requires the personal data for processing purposes but needs them for verifying, asserting, or defending legal claims. In such cases, processing is restricted until it is determined whether the Operator’s justifiable reasons outweigh those of the affected person as per Article 18(1) of the Regulation.

10.1.13 The right that in the event of restricted processing of personal data, for such restricted personal data to be processed only with the consent of the data subject or for the purpose of verifying, asserting, or defending legal claims, protecting the rights of another natural or legal person, or due to overriding public interest of the European Union or a Member State. Storage is an exception to this limitation.

10.1.14 The right to be informed in advance of the removal of restrictions on the processing of personal data.

10.1.15 The data subject’s right to fulfill the obligation of notifying recipients, as per Article 19 of the Regulation. This involves the right for the Operator to inform each recipient to whom personal data has been disclosed of any correction, deletion, or processing restrictions carried out according to Article 16, 17(1), and Article 18 of the Regulation, unless such notification proves impossible or requires disproportionate effort. Furthermore, the right for the Operator to inform the affected person about these recipients, if requested by the data subject.

10.1.16 The data subject’s entitlement to data portability under Article 20 of the Regulation includes the right to receive their personal data from the Operator in a structured, commonly used, and machine-readable format. Additionally, they have the right to transfer this data to another operator without hindrance from the Operator if:

a) The processing is based on the data subject’s consent, as specified in Article 6(1)(a) of the Regulation, or Article 9(1)(2)(a) of the Regulation, or is part of a contractual agreement as per Article 6(1)(b) of the Regulation, and simultaneously

b) The processing is conducted through automated means.

10.1.17 The right also extends to obtaining personal data in a structured, commonly used, and machine-readable format and transferring such data to another operator without impeding the rights and freedoms of others.

10.1.18 Furthermore, the data subject has the right to directly transfer personal data from one controller to another, to the extent that it is technically feasible.

10.1.19 The right of the concerned individual to raise objections in accordance with Article 21 of the Regulation includes:

10.1.20 The right to object at any time, based on circumstances specific to the data subject, to the processing of personal data concerning them. This processing is conducted under Article 6(1)(e) or (f) of the Regulations, encompassing objections to profiling under these provisions.

10.1.21 In the event of exercising the right to object, based on circumstances specific to the data subject, against the processing of personal data under Article 6(1)(e) or (f) of the Regulations, including objections to profiling under these provisions, the right not to proceed with the processing of the data subject’s personal data unless the controller can demonstrate compelling legitimate grounds that outweigh the interests, rights, and freedoms of the data subject or grounds for establishing, exercising, or defending legal claims.

10.1.22 The right to object at any time to the processing of personal data concerning the data subject for direct marketing purposes, including profiling related to such direct marketing. In this scenario, if the data subject opposes the processing of personal data for direct marketing, their personal data may no longer be processed for such purposes.

10.1.23 Concerning the utilization of information society services, the right to object to the automated processing of personal data using technical specifications.

10.1.24 The right to raise objections, based on circumstances specific to the data subject, against the processing of personal data for scientific, historical research, or statistical purposes as per Article 89(1) of the Regulation. However, this right does not apply when processing is essential for the performance of a task for reasons of public interest.

10.1.25 The data subject’s entitlement concerning automated individual decision-making, as per Article 22 of the Regulation, encompasses:

10.1.26 The right not to be subjected to a decision solely based on automated processing of personal data, including profiling, that has legal effects on, or similarly significantly affects, the individual. This right applies except in cases specified under Article 22(2) of the Regulation. In other words, the decision is allowed if: (a) it is necessary for the conclusion or performance of a contract between the affected person and the Operator;

10.1.27 Permitted by the law of the European Union or the law of the Member State to which the Operator is subject, provided that appropriate measures are in place to ensure the protection of the rights, freedoms, and legitimate interests of the person; or (c) based on the explicit consent of the individual.

11. Instruction on the Data subject's right to retract consent for personal data processing:

11.1 The data subject has the right to withdraw their consent for the processing of personal data at any time. This withdrawal does not affect the lawfulness of the data processing based on consent given prior to the withdrawal.

The data subject can withdraw consent either entirely or partially. Partial withdrawal may pertain to specific types or purposes of data processing, while the legality of remaining processing operations remains unaffected. For instance, withdrawal might be directed at a particular processing purpose, leaving other processing purposes unaffected.

To exercise the right to revoke consent, the data subject can do so in written form, sent to the Operator’s registered address as listed in the Commercial Register at the time of revocation, or electronically through means like email (using the Operator’s specified email address as indicated in this document) or by completing an electronic form available on the Operator’s website.

12. Instruction regarding the Data subject's right to file a complaint with the regulatory authority:

12.1 The data subject possesses the right to submit a complaint to the regulatory authority, particularly in their Member State of habitual residence, workplace, or the location of the alleged infringement. This right is exercised when the data subject believes that the processing of their personal data violates the Regulation. Importantly, this right does not preclude the pursuit of other administrative or judicial remedies.

The concerned individual has the entitlement to receive information from the supervisory authority where the complaint is lodged, keeping them informed about the progress and resolution of the complaint, including the option of seeking a judicial remedy as per Article 78 of the Regulation.

12.2. In Slovakia, the supervisory body is the Office for Personal Data Protection of the Slovak Republic.

13. Details concerning the Data subject's responsibility for providing personal data and information regarding automated decision-making, including profiling:

13.1 The Operator communicates to the Data subject that furnishing their personal data is essential for initiating and completing the purchase contract. The Data subject is also informed that providing personal data or consenting to its processing is voluntary. However, failure to provide personal data and/or consent to its processing will result in the Operator being unable to finalize and fulfill the purchase contract.

13.2 Since the Operator does not engage in the processing of the Data subject’s personal data through automated decision-making, including profiling, as outlined in Article 22(1) and (4) of the Regulations, the Operator is not obligated to furnish information under Article 13(2)(f) of the Regulations. This includes details about automated decision-making, including profiling, the procedures involved, and the significance and anticipated consequences of such processing of personal data for the Data subject. This section is not applicable.

14. Final provisions

14.1 These Principles, along with guidelines on personal data protection and instructions regarding cookies, are an integral component of both the General Terms and Conditions and the Complaints Procedure. The documentation, encompassing the General Terms and Conditions and the Complaints Procedure for this online store, is available on the Seller’s online store domain.

14.2 These principles governing personal data protection become effective upon their publication on the seller’s online store on March 1, 2024.

Nákupný košík
Návrat hore