PRINCIPLES OF PERSONAL DATA PROTECTION

 

In accordance with Act no. 18/2018 Coll. on the protection of personal data, as amended, with effect from 25 May 2018 (hereinafter the new law).

This Privacy Policy also includes Cookie Rules.


In this case, the person concerned means:

 a) the natural person who carried out the registration using the registration form,

 b) a natural person who has logged in to the online store,

 c) the natural person who made the purchase,

 (d) a natural person who has subscribed to marketing information.


In all the above cases, the person concerned within the meaning of §15, paragraph (1) of the new law is required to be a natural person who has reached the age of 16 by registering, logging in, purchasing or subscribing to marketing information. If the data subject is less than 16 years old, such processing of personal data is lawful only under the conditions and to the extent that such consent has been given or approved by his or her legal representative.


Operator in accordance with the new Act §5, paragraph (o) means:


IMTEC s.r.o. entered in the Commercial Register insert number 82931 / B

Kadnárova 19, 831 52 Bratislava

Slovak republic

ID: 46765719

VAT number: SK2023574179

Tel .: +421 905 616 753

Email: imtec@imtec.sk


(hereinafter as the operator)

 Personal data in accordance with the new Act no. 18/2018 Coll. on the protection of personal data, as amended, and on the amendment of certain laws, personal data are data that directly or indirectly identify a natural person, mainly on the basis of a generally applicable identifier, other identifier or online identifier.


The operator processes the following personal data:

personal data / Order and complaint form / Registration / Login / Newsletter

Name and surname, title / Full address, city and postal code / telephone / E-mail address /

Categories of persons concerned / Customers, employees of customers

purpose of processing - Performance under the contract

Customer registration, registration - login security

Sending marketing information


Legality and legal basis of processing

The processing of personal data in the order form is carried out on the basis of the legal basis § 13, paragraph 1, letter b) of the new law - personal data processing is necessary for the performance of the contract to which the person is a party or to take measures before concluding the contract persons.

The processing of personal data in the complaint form is carried out on the basis of the legal basis of § 13, paragraph 1, letter b) of the new law - personal data processing is necessary for the performance of the contract to which the person is a party persons.

The processing of personal data in the registration form is carried out on the basis of the legal basis of § 13, paragraph 1, letter a) of the new law - the person concerned has consented to the processing of his personal data for at least one specific purpose. The consent of the person concerned is expressed by the registration.

The processing of personal data in the application form and during registration is carried out on the basis of the legal basis of § 13, paragraph 1, letter a) of the new law - the person concerned has consented to the processing of his personal data for at least one specific purpose. The consent of the person concerned is expressed by making a login.

The processing of personal data in the newsletter is carried out on the basis of the legal basis of § 13, paragraph 1, letter a) of the new law - the person concerned has consented to the processing of his personal data for at least one specific purpose. The consent of the person concerned is expressed by inserting an e-mail address into the newsletter.


Other data that we process in connection with you:

registration form

Date and time of registration, encrypted password, Lyoness code (if provided), IBAN and BIC (if provided), delivery address (if provided), IP address (anonymised)

application form

In relation to secure login

Date and time of the last login / activity, login name, login IP address


Rights of the person concerned:

The data subject has the right to withdraw his consent to the processing of personal data concerning him at any time. Withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent before its revocation. The person concerned may withdraw the consent in the same way as he gave the consent.

The data subject also has the right to request from the controller access to personal data concerning the data subject, the right to rectify personal data, the right to delete personal data or the right to restrict the processing of personal data, the right to object to the processing of personal data and the right to portability. personal data.


The processing of personal data by the operator is governed by:

Principle of legality (§ 6 of the new law)

Personal data may be processed only in a lawful manner and in such a way that the fundamental rights of the data subject are not violated.


Purpose limitation principle (§ 7 of the new law)

Personal data may only be collected for a specific, explicit and legitimate purpose and may not be further processed in a way incompatible with that purpose; further processing of personal data for the purpose of archiving, for scientific purposes, for the purpose of historical research or for statistical purposes, if it is in accordance with a special regulation and if adequate guarantees of protection of the rights of the data subject pursuant to § 78 par. 8, shall not be considered incompatible with the original purpose.


Principle of minimization of personal data (§ 8 of the new law)

The personal data processed must be proportionate, relevant and limited to the extent necessary for the purpose for which they are processed.


Principle of correctness (§ 9 of the new law)

The personal data processed must be correct and, where necessary, kept up to date; Appropriate and effective measures must be taken to ensure that personal data which are incorrect for the purposes for which they are processed are erased or rectified without undue delay.


Principle of minimization of retention (§ 10 of the new law)

Personal data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purpose for which the personal data are processed; personal data may be kept longer if they are to be processed exclusively for archiving purposes, for scientific purposes, for historical research purposes or for statistical purposes on the basis of a special regulation and if adequate guarantees of protection of the data subject's rights pursuant to § 78 par. 8.


Principle of integrity and confidentiality (§ 11 of the new law)

Personal data must be processed in a way that, through appropriate technical and organizational measures, guarantees adequate security of personal data, including protection against unauthorized processing of personal data, illegal processing of personal data, accidental loss of personal data, deletion of personal data or damage to personal data.


 Principle of liability (§ 12 of the new law)

The controller is responsible for compliance with the basic principles of personal data processing, for compliance of personal data processing with the principles of personal data processing and is obliged to prove this compliance with the principles of personal data processing at the request of the Office.

Provision of personal data to third parties

The operator provides personal data of the data subject in the range: name, surname, title, address, city, state, telephone contact, e-mail contact to third parties for the purpose of performance of the contract - delivery of goods and services - courier and delivery companies that provide their services to on the basis of a special act (eg Act No. 324/2011 Coll. on Postal Services and on Amendments to Certain Acts, as amended.

List of courier and delivery companies: DPD Courier Service

Responsible person at the operator from 25.05.2018


Imrich Mattoš