GDPR – Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation)
Information according to sec. § 15 of Act no. 122/2013 Coll. on the protection of personal data in the current version
Consent is granted as part of the user account registration, with the appropriate description, this field is not preset and active action by the person concerned is required to grant consent. At the same time, the concerned person grants within the meaning of § 62 of the Act no. 351/2011 Z.Z on electronic communications as amended, consent to be contacted by e-mail, electronically for the purpose of sending news.
The personal data of the affected persons will be processed in the information system of Z&K company s.r.o.. The operator of this information system is Z&K company s.r.o. with headquarters at Ľ.Fullu 2, 900 26 in Slovensky Grob. IČO: 53711203, VAT number: 2121471528 registered in the Commercial Register of the Bratislava District Court in the department Sro, Insert number: 151946/B (hereinafter referred to as the “operator”).
When processing personal data, the operator complies with the provisions of Act no. 122/2013 Coll. on the protection of personal data and on the amendment and supplementation of certain regulations (hereinafter referred to as “ZOÚ”), Act no. 351/2011 Coll. on electronic communications, Act no. 22/2004 Coll. on electronic commerce and on amendments to Act no. 128/2002 Coll. on state control of the internal market in matters of consumer protection and on amendments to certain laws as amended by Act no. 284/2002 Coll., all as amended and other legal regulations.
The legal basis for the processing of personal data of users is the consent of the person concerned granted in accordance with sec. § 11 ZÚ in the manner above.
The purpose of processing personal data is to send information about the offer of goods and current actions of the operator.
By submitting the registration form and ticking the appropriate box “I agree with the terms and conditions”, the user agrees that his personal data will be processed by the Company in the scope of title, first and last name, email address.
Personal data is provided to the information system voluntarily, based on the consent of the person concerned, while the validity period of the consent is 5 years from the date of its granting. Consent to the processing of personal data can be revoked at any time by sending an e-mail message to the address: zkcompany@zkcompany.sk. The affected person acknowledges that by revoking his consent, he also revokes his consent to the sending of news.
The personal data of the persons concerned will not be transferred to EU countries or published. Personal data may be made available or provided exclusively to persons belonging to the Z&K company group and will not be provided for further processing to other persons.
The rights of the data subject according to the law are mainly as follows:
The affected person has the right, based on a written request from the operator – the Company, to demand:
- a) confirmation of whether or not personal data about her are being processed,
- b) in a generally comprehensible form, information about the processing of personal data in the information system to the extent according to § 15 par. 1 letter a) up to
- e) second to sixth point; when issuing a decision according to paragraph 5, the person concerned is entitled to become familiar with the procedure for processing and evaluating operations;
- c) in a generally comprehensible form, precise information about the source from which he obtained her personal data for processing,
- d) in a generally comprehensible form, a list of her personal data that is the subject of processing,
- e) correction or liquidation of your incorrect, incomplete or out-of-date personal data, which are the subject of processing,
- f) liquidation of her personal data, the purpose of which has ended; if the subject of processing is official documents containing personal data, he can request their return,
- g) liquidation of her personal data, which are the subject of processing, if there has been a violation of the law,
- h) blocking of her personal data due to withdrawal of consent before the expiration of its validity period, if the operator processes personal data based on the consent of the person concerned.
The right of the affected person according to § 28 par. 1 letter e) and f) can be limited only if such a limitation results from a special law or its application would violate the protection of the person concerned, or the rights and freedoms of other persons would be violated. Based on a written request, the affected person has the right to object to the operator
- a) processing her personal data, which she assumes are or will be processed for direct marketing purposes without her consent, and to request their liquidation,
- b) use of personal data referred to in § 10 par. 3 letters d) for the purposes of direct marketing in postal communication, or
- c) provision of personal data referred to in § 10 par. 3 letters d) for direct marketing purposes.
The affected person, on the basis of a written request or in person, if the matter cannot be delayed, has the right to object to the processing of personal data at any time with the operator in cases according to § 10 par. 3 letters a), e), f) or g) by stating legitimate reasons or presenting evidence of unauthorized interference with its rights and interests protected by law, which are or may be damaged in a specific case by such processing of personal data; if this is not prevented by legal reasons and it is proven that the objection of the person concerned is justified, the operator is obliged to block and dispose of the personal data, the processing of which the person concerned has objected, without undue delay and dispose of them immediately, as circumstances allow. The affected person, based on a written request or in person, if the matter cannot be delayed, further has the right to object to the operator at any time and not to submit to a decision of the operator that would have legal effects or a significant impact for him, if such a decision is issued solely on the basis of actions of automated processing of his personal data.
The affected person has the right to ask the operator to review the issued decision by a method different from the automated form of processing, while the operator is obliged to comply with the affected person’s request, in such a way that the authorized person will have a decisive role in reviewing the decision; about the method of examination and the result of the finding, the operator informs the affected person within the deadline according to § 29 par. 3. The affected person does not have this right only if it is provided for by a special law, which regulates measures to ensure the legitimate interests of the affected person, or if, within the framework of pre-contractual relations or during the existence of contractual relations, the operator issued a decision by which he complied with the request of the affected person, or if, on the basis of the contract, the operator has taken other appropriate measures to ensure the legitimate interests of the person concerned. If the person concerned exercises his right a) in writing and the content of his request shows that he is exercising his right, the request is considered to have been submitted in accordance with this Act; a request submitted by e-mail or fax shall be delivered by the person concerned in writing no later than three days from the date of its sending, b) in person orally in the minutes, which must clearly state who has exercised the right, what is claimed and when and who made the minutes, his signature and signature of the person concerned; the operator is obliged to give a copy of the minutes to the person concerned, c) in the case of an intermediary according to letter a) or letter b), the latter is obliged to hand over this request or minutes to the operator without unnecessary delay. If the person concerned suspects that his/her personal data is being processed without authorization, he/she can submit a proposal to the office to start a procedure for the protection of personal data. If the person concerned does not have full legal capacity, his rights can be exercised by a legal representative. If the person concerned is not alive, his/her rights, which he/she had under this Act, can be exercised by a close person.
The request of the person concerned pursuant to § 28 par. 1 letter a) to c), e) to h) and par. 3 to 5 will be provided by the operator free of charge. The request of the person concerned pursuant to § 28 par. 1 letter d) provided by the operator free of charge, except for payment in an amount that cannot exceed the amount of material costs incurred for the purpose of making copies, importing technical media and sending the information to the person concerned, unless a special law provides otherwise.
The operator is obliged to process the request of the affected person in writing according to paragraphs 1 and 2 no later than 30 days from the date of delivery of the request. Limitation of the rights of the affected person according to § 28 par. 2 the operator shall notify the affected person and the authority in writing without undue delay.
At the same time, I declare that I was timely and properly informed about the processing of my personal data in accordance with paragraph § 15 ZÓÚ. For the avoidance of doubt, it is established that by checking the box marked “I agree with the terms and conditions and with the processing of personal data” for the purpose of sending news, I, as the person concerned, grant the operator consent to the above extent.
The operator of the information system is the company:
Z&K company s.r.o. Ľ.Fullu 2 900 26, Slovenský Grob IČO: 53711203 DIČ: 2121471528
(hereinafter referred to as the “operator”)
The operator processes personal data for the purpose of concluding a purchase contract with the buyer via the online store www.edenpharma.sk or in another suitable way, fulfilling the obligations arising from this contract and for marketing purposes. The contracting parties have agreed that the buyer, if he is a natural person, will notify the seller of his title, first and last name, address for delivery of the goods (street, house number, village and zip code), telephone number and email address. If the seller also processes other personal data of the buyer, it processes them to the extent necessary to fulfill the obligations arising from the purchase contract. The buyer provides personal data to the seller voluntarily for the purpose of fulfilling his obligations arising from the purchase contract and further communication with him. Without their provision, the seller cannot properly fulfill the contract with the buyer and therefore it will not be possible to conclude it with the buyer. The purpose of the processing of this personal data by the operator is: – registration on the website www.edenpharma.sk
- order of goods by the buyer
- identification of the buyer
- pre-contractual relations
- order confirmation
- concluding a purchase contract
- issuance of a tax document
- delivery of goods
- records of orders for eventual solutions to complaints
- informing about promotions, news and discounts.
By sending the order to the seller, the buyer declares that he gives his consent in accordance with para. § 11 par. 1 of Act No. 122/2013 Coll. on the protection of personal data, as amended (hereinafter referred to as the “Act on the Protection of Personal Data”), for the seller to process and store his personal data, especially those listed above and/or which are necessary for the seller’s activities.
The seller undertakes to handle and dispose of the buyer’s personal data in accordance with the applicable legal regulations of the Slovak Republic. The seller processes the buyer’s personal data only for the time necessary to fulfill its obligations arising from the contract and from generally binding legal regulations. The buyer can withdraw consent to the processing of personal data at any time in writing. The seller does not make personal data available to any third party except when it is necessary to fulfill the obligations arising from the purchase contract. The buyer acknowledges that his personal data will be made available or provided to a third party (e.g. carrier) for the purpose of fulfilling his obligations arising from the purchase contract.
The seller declares that in accordance with section § 6 par. 2 letters c) of the Personal Data Protection Act, personal data will be obtained exclusively for the purposes specified in the previous point of these Terms and Conditions. The seller declares that in accordance with section § 6 par. 2 letters e) of the Personal Data Protection Act will ensure that personal data is processed and used exclusively in a manner that corresponds to the purpose for which it was collected. The seller declares that in accordance with § 6 par. 2 letters i) of the Personal Data Protection Act will process personal data in accordance with good morals and will act in a manner that does not contradict the Personal Data Protection Act or other generally binding legal regulations and will not circumvent them.
Based on a free written request, the buyer has the right to object to the seller:
- a) the processing of his personal data, which he assumes are or will be processed for direct marketing purposes without his consent and to request their liquidation,
- b) use of personal data referred to in § 10 par. 3 letters d) for the purposes of direct marketing in postal communication, or
- c) provision of personal data referred to in § 10 par. 3 letters d) for direct marketing purposes.
Based on a free written request, the buyer has the right to object to the processing of personal data by the seller in cases according to § 10 par. 3 letters a), e), f) or g) ZnOOÚ by stating legitimate reasons or presenting evidence of unauthorized interference with its rights and interests protected by law, which are or may be damaged in a specific case by such processing of personal data; if this is not prevented by legal reasons and it is proven that the buyer’s objection is justified, the seller is obliged to block and dispose of the personal data, the processing of which the buyer objected to, without undue delay, as soon as the circumstances allow.
If the buyer suspects that his personal data is being processed without authorization, he can report this to the Office for the Protection of Personal Data. If the buyer does not have full legal capacity, his rights can be exercised by a legal representative.
Consent to the processing of personal data
Our company is intensively dedicated to permanently ensuring the protection of processed personal data and other data also in connection with the effectiveness of:
- Act no. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws
- Regulations of the European Parliament and the Council (EU) No. 2016/679 on the protection of natural persons in the processing of personal data and on the free movement of such data – GDPR Pursuant to Act no. 351/2011 Coll. on electronic communications as amended and Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain laws, we process personal data in the smallest possible volume that can be provided to us in accordance with the above legal standards.
Hereby, as a buyer, I voluntarily grant consent pursuant to § 11 of Act no. 122/2013 Coll. on the protection of personal data as amended by later legislation with the processing of my personal data to the extent pursuant to Article VI. point 1. Business conditions by the seller. As a buyer, I am aware of the fact that I am entitled to revoke the above consents in writing at any time.
As a buyer, I declare that I have complied with § 15 par. 1 of the Act on the Protection of Personal Data informed about the conditions of personal data processing by the operator, which are published on the website www.zkeshop.sk.