Processing of personal data in accordance with the EU regulation and Act No. 18/2018
In connection with the General European Regulation on Personal Data Protection (abbreviation GDPR - General Data Protection Regulation), we ask you to express your consent to the processing of your personal data in the e-shop www.nettoholding.sk. The purpose of the GDPR Regulation is a higher level of protection of your personal data and an overview of their processing and your rights.
Your personal data is processed exclusively in accordance with applicable legislation. We process personal data only with the client's consent. It is solely up to him to decide whether or not to give his consent to the extent proposed by us. The provision of consent is completely voluntary and once given consent can be revoked at any time. We are bound by the scope of the consent provided and we fully respect it.
1. Purpose of processing
We will process your personal data for the purpose of executing your orders, ordered services, invoicing or for the purpose of delivering orders to your contact address.
2. Scope of processing
We process the following customer data, which is necessary for the execution of orders and which you provide us knowingly:
name
last name
street and census number
Postal Code
the city
state
country
telephone number
company name
IČO
VAT number
VAT
E-mail adress
Information you unknowingly provide to us:
IP address
3. Processing time
Your personal data will be securely stored, collected, processed and archived for the purpose of keeping accounting records and documents for a period of 10 years (based on Article No. 431/2002 Coll. On accounting, as amended) since the last order.
4. Cookies
We use cookies to adapt the content of our e-shop to your preferences. Cookies are small data files that our e-shop stores in your web browser when you visit it. If you do not agree to the use of cookies, set your own rules for the use of cookies in a web browser on your device. If you disable the use of cookies, the functionality of the e-shop may be limited.
5. Web metrics and analytics
These are conversion or pixel tags, or small graphic images, which can be included in the code of our e-shop and on the basis of which it is possible to identify the user for the purpose of recording his behavior and measuring traffic.
We use the following systems:
Google Anylitics
Facebook Pixel
Smartsupp
6. Advertising and promotional services
In the e-shop, in addition to order processing, we use your contacts to send advertising or business announcements. This involves the processing of the following data:
name
last name
E-mail adress
Data of users who have subscribed to news from the e-shop (so-called Newsletter) are sent and processed by a third party outside the EU - he Rocket Science Group, which operates the Mailchimp service and which complies with the principles of the European regulation on personal data protection. They are available at mailchimp.com
7. Right of access to data
The user of the e-shop has the right to obtain information about the purpose and scope of processing his personal data.
8. Right to data portability
It is the controller's responsibility to sell to the data carrier all information about him processed in a structured, commonly used, machine-readable format. By exercising this right, the user gains control over his personal data and also has the possibility to sell it in another form to another administrator.
The data download tool is available to the user in the "Account> Privacy (GDPR)" section of his customer account.
9. Right to correct data
The user has the right to ask the data controller for correction if the stored data is suspected to be incorrect. You can edit your information in the "Account" section of your customer account.
10. Right to limited data processing
The user has the right to have the administrator restrict the processing of his personal data, or make selected personal data inaccessible, or temporarily delete published data.
11. Right to delete data
The user has the right to delete his personal data without undue delay, unless they are no longer necessary for the purpose for which they were collected or processed, and the legal reason for their possible archiving has passed. Upon request to delete data, all irreversibly deleted and related orders (if any) will be anonymized.
12. Right to forget
The user has the right to take appropriate steps, including technical measures, to delete all references to his personal data and copies thereof, if the legal reason for their possible archiving has ceased to exist.
13. Right to object
The user has the right to object to the processing of personal data or if he does not have the opportunity to exercise the right to delete.
14. Right to file a complaint
The user has the right to lodge a complaint with the supervisory authority if he considers that the processing of his personal data is in breach of the GDPR Regulation.
