Data subject information policy (GDPR) - eshop

Website operator – Včelco s.r.o. is responsible for the processing of personal data according to Regulation 2016/679 of the European Parliament and of the Council of the EU on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (hereinafter referred to as GDPR). Our data protection rules are in accordance with the applicable law on the protection of personal data.

  1. The administrator of personal data – the operator is the company that determines the purpose and means of processing personal data:
    Company name: Včelco s.r.o.
    Address: Továrenská 10A, 919 04 Smolenice, Slovakia
    ID: 36783455
    TIN: 2022385035
    VAT number: SK2022385035
  2. Affected person – buyer, requester for sending newsletters/catalogues, requester for tasting/excursion
  3. List of personal data processed by the operator:
    • Basic identification data – name, residence, date of birth (necessary if you want to take advantage of a discount or other benefit on the occasion of your birthday), residential address (street, house number, zip code, city)
    • Contact information – phone number, e-mail address

      We obtain the personal data mentioned in the previous point directly from you. You provide these personal data in the client contract/order, or you have provided them on other documents. Personal data can also come from publicly available sources, registers and records, for example from the commercial register. Your personal data may also come from third parties who are authorized to handle them.

  4. Purposes of processing personal data (personal data must not be further processed in a way that is not compatible with these purposes):
    • fulfillment of the business purpose – issuing a tax document, contacting the customer regarding the order, fulfillment of the contract (the data provided by you is necessary for the fulfillment of the contractual relationship and without their provision, the contractual relationship cannot be concluded)
    • fulfillment of the business purpose (client registration) – client registration on the company’s website
    • marketing purposes – the offer of the company’s products and services (based on your consent, we can provide you with offers in electronic form, in particular in the form of e-mail messages, through the web client zone, in writing or in the form of a telephone call, market surveys and surveys of customer satisfaction with the products and services used ). We do not profile your personal data.
  5. The legal basis for providing this data is according to Art. 6, par. 1, letter a) – the consent of the person concerned and according to Art. 6, par. 1, letter b) – fulfillment of the contract of the aforementioned GDPR Regulation, Art. 6 par. 1 letter f) Regulation GDPR legitimate interest
  6. The company has appointed a person responsible for compliance with the protection of personal data (in case of questions, you can contact him at the e-mail address: zodpovednaosoba@iqideas.sk
  7. Personal data storage period – you have given your consent to the company for the duration of the contractual relationship and for the next 5 years from the termination of such contractual relationship or until you withdraw your consent. If you are not, nor will you become, a client of the company, your consent will be kept valid for 5 years from the date of granting or until you revoke it.
  8. Intermediaries – our business partners, who may have access to your personal data, also comply with the rules of personal data protection and we have concluded a contract with them on the processing of personal data (the list of intermediaries is available on request at the email address info@honeycraftmeadery.com):
    • accounting company
    • web hosting
    • administrative IT services
    • Advertising Agency
    • transport company (courier)
  9. Personal data will be provided to public institutions such as administrative authorities, courts or law enforcement authorities only to the extent permitted by law.
  10. Data protection at the operator: we take technical and organizational security measures to protect your data as widely as possible from unwanted access. In addition to securing the operating environment, for example, we use an encryption method in some areas. The information you enter is then transmitted in encrypted form via the SSL protocol (Secure Socket Layer) to prevent misuse of the data by a third party. You can tell by the lock symbol in your browser’s status bar being closed and the Internet address line starting with “https”. Data protection will always be updated in accordance with the current state of technology and software.
  11. The processing of personal data is carried out within the member states of the European Union and the European Economic Area. Processing of personal data in the territory of a third country can only take place with the consent of the operator and subject to the fulfillment of special conditions set out in the GDPR regulation.
  12. By consenting, the person concerned gives his express and unreserved consent for the operator to process his personal data for the above-mentioned purposes, during the above-mentioned period and to the above-mentioned extent. The person concerned has the right to withdraw his consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal. The person concerned is obliged to provide true and up-to-date personal data.
  13. The services provided by the operator are not primarily intended for persons under the age of 16; however, if a person under the age of 16 is interested in using these services, their consent must be expressed in writing or approved by the legal representative of that person.
  14. Proper processing of your personal data is for Včelco s.r.o. important and their protection is a matter of course. You can exercise the following rights when processing personal data:
    • Right of access to data: You have the right to confirm whether or not personal data is being processed and, if so, you have access to information about the processing, the categories of personal data concerned, the recipients or categories of recipients, the retention period of the personal data, as well as the right to information about your rights, about the right to file a complaint with the Office for Personal Data Protection, information about the source of personal data, information about whether automated decision-making and profiling takes place, information and guarantees in case of transfer of personal data to a third country or international organization. You have the right to provide copies of processed personal data.
    • Right to rectification: you have the right to have your incorrect personal data corrected or supplemented without undue delay, and you can correct the data yourself or ask the operator to do so
    • The right to erasure: you are entitled to request that your personal data be deleted without undue delay, if the conditions set out in the GDPR are met (you have the right to erasure in particular if your personal data are no longer necessary for the purposes for which they were processed, or if the personal data was processed illegally. The right to erasure does not apply in particular if the processing of personal data is necessary to prove, exercise or defend the legal claims of the operator or third parties).
    • The right to restrict processing: in the cases specified in the GDPR (e.g. if you challenge the correctness of personal data or the processing is not in accordance with legal regulations or we no longer need the personal data for the specified purposes, but you need them to prove, exercise or defend legal claims) you have the right to request that we restrict their processing
    • The right to data portability: in the cases specified in the GDPR (i.e. if personal data was processed by automated means based on the performance of a contract), you have the right to obtain the personal data provided, in a structured, commonly used and machine-readable format, and you have the right to demand that this personal data were transferred to another operator, this transfer of personal data directly from us to another operator assumes that this transfer is technically possible
    • The right to object: if the processing of personal data is carried out on a legal basis for a legitimate interest under the GDPR, you have the right to object to such processing. We may not process this data further unless it demonstrates necessary legitimate reasons for processing that outweigh your interests, rights and freedoms, or reasons for proving, exercising or defending our legal claims or those of third parties. You have the right to object at any time to the processing of personal data that is processed for direct marketing purposes; in case of objection to the processing of personal data according to this sentence, personal data may no longer be processed for such purposes
    • The right to withdraw consent: if the processing of personal data is carried out on the legal basis of consent, you can withdraw this consent at any time. The withdrawal of consent does not affect the lawfulness of data processing that was based on consent before its withdrawal. The appeal must contain information about who is filing the appeal (your first and last name, residential address so that we can identify you) and information that you do not want us to process your personal data. If you would like to receive only selected offers, please specify which offers so that we can accommodate you. The withdrawal of consent to the processing of personal data can be sent in writing, so that we have a proper record of your withdrawal. Don’t forget to sign the appeal.
  15. You have the right to file a complaint with the Office for the Protection of Personal Data of the Slovak Republic or with another competent supervisory authority, especially if it assumes that there has been a violation of the processing of personal data.
  16. Contact to exercise the affected rights: if you contact us by e-mail to the address responsible zodpovednaosoba@iqideas.sk
    or by post to the address Včelco s.r.o., Továrenská 10A, 919 04 Smolenice, Slovakia, we will store the data you have provided (your e-mail address , or your name, surname and your phone number) to answer your questions or to process your request. The data will be deleted after they are no longer necessary for the purpose of processing, or we will limit their processing if there are legal obligations to keep them. We will provide you with statements and any information about the measures taken as soon as possible, but within one month at the latest. If necessary and taking into account the complexity and number of requests, we can extend this period to two months. We will inform you about the extension, including the reasons.
     
    Update: 26/04/2024