Privacy Policy

I. Introductory provisions

  1. For the purposes of this Policy:
    • The operator of Werbea, Ltd., Company ID: 50 007 343, with its registered office at Jakabova 45, 821 04 Bratislava
    • Personal data, first and last name, email address, telephone number, billing address, shipping address, IP address, cookies, information about the age of 16.
  2. The operator of the e-shop www.werbea.com as the Administrator of Personal Data hereby informs about the manner and extent of processing of Personal Data, including the extent of the Subscriber's rights (such as defined below) related to the processing of his / her Personal Data.
  3. When processing personal data, the administrator proceeds in accordance to the following legal regulations:
    • Act no. 18/2018 Coll. on the protection of personal data;
    • Regulation (EU) of the European Parliament and of the Council 2016/679 (hereinafter referred to as 'the Regulation');
  4. The Subscriber is a natural person who purchases goods and services from the Operator.
  5. Operator is a legal entity that operates this online store for the purpose of selling goods and services to the end customer. In relation to the above, processing of Personal Data is done:
    • to the extent that they were provided in connection with the Product Order and / or services of the Operator, or in the framework of negotiations on the conclusion of a contract with operators, as well as in the context of the contract concluded;
    • for the purpose (s) listed in Article II below.
  6. E-shop is not intended for children under 16 years. A person under the age of 16 can use our eshop use only if his / her legal representative (parent or guardian) gives his / her consent. In case of non-consent, it is necessary to inform us at gdpr@werbea.com.

II. Purposes and processing times of Personal Data

  1. The Operator processes Personal Data for the following purposes:
    1. fulfillment of the contract or other obligation and provision of services:
      1. personal data will be processed during the negotiations on the conclusion of the contract between the Operator and the participants, both for the purpose of concluding the contract and for the duration of the contractual relationship;
      2. Satisfaction questionnaire: Satisfaction questionnaire is sent for improvement customer service following the created order, reservation or direct sales, as well as possible surveys of product satisfaction statistics.
      3. marketing campaign: for the purpose of completing the marketing campaign, evaluation, termination, delivery of any winnings, etc. Processing time: for the duration of the marketing campaign.
    2. Compliance with a legal obligation (in particular accounting, tax and archiving, provision of cooperation by administrative authorities, police, courts, etc.);
      1. the tax document shall be kept for 10 years from the termination of the contract: In order to fulfill the legal obligation of archiving accounting documents pursuant to Act No 563/1991 Coll., On Accounting, as amended, Personal Data will be further processed and kept for 10 years from the year following in which a contract was concluded between the Operator and the Subscriber;
      2. Fulfillment of obligations related to the exercise of rights resulting from defective fulfillment, providing assistance to administrative authorities, police, the court: The Operator is entitled to process the basic personal, identification and contact data of the customer, data on goods and data from communication between the customer for a period of 4 years from the date of expiry warranty period for goods.
    3. legitimate interests of the Operator, protection of rights and rights of the Operator:
      1. effective defense in the event of a dispute. The processing time is set here at 4 years from expiry of the warranty period for the goods and extended by the duration of the dispute;
      2. More Operator’s legitimate interest is the sending of business notifications (area offers and individual offers), if the Operator has obtained the details electronic contact in connection with the sale of goods and services to the Subscriber. The legitimate interest arises in connection with the created customer order on our e-shop.
    4. marketing and business offers of the Operator's services;
      1. general delivery of business offers of products and services: sending general advertising messages without targeting a specific group of recipients. The processing time of personal data in this case is 3 years;
      2. individual offer: sending advertising messages after evaluating some personal aspects related to a natural person. The operator shall not perform profiling in accordance with Article. 22 Regulations, since it is not an automated processing but a manual creation of individual offers. The processing time of personal data in this case is 3 years;
      3. Sending Heureka questionnaires - verified by customers: sending Heureka questionnaires in order to improve the services provided to customers. The operator transmits personal data in the scope of satisfaction evaluation and other surveys to the extent and e-mail address to a third party - another administrator - Heureka Shopping Ltd. The processing time of personal data in this case is 3 years. (The express consent of the Subscriber is required here);
      4. cookies: short text files generated by the web server and stored on your computer via a browser. There are two types. First type, these are the cookies needed to ensure the functioning and analysis of the website (transmission of electronic communication via an electronic communications network, you cannot disagree with the use of these cookies). There is also a cookie that evaluates certain personal aspects related to a specific individual. The Subscriber must agree to the use of the second type of cookies. The processing time in this case is 3 years.
      5. For the purposes of re-marketing, cookies shall be passed to other processors only if they have been given consent for that purpose, with an expiration period of a maximum of 540 days. If consent to the advertising cookies is withdrawn, it is technically not possible to immediately remove the cookies already passed to the processor. The processor will delete cookies automatically after the expiration date. An immediate solution for preventing re-marketing activities by the processor is to delete cookies from the browser according to the instructions for each type of browser.
      6. The controller is the administrator of Personal Data.

III. Privacy and processing information

  1. If the Subscriber does not provide his / her Personal Data, it is not possible to conclude a contract with the Operator and / or to provide him / her with services resulting from it. Personal data in this context are necessary to provide a specific service or product of the Operator.
  2. On expiry of the time limits referred to in Article II. the Operator deletes or anonymises the Personal Data.
  3. The Subscriber is obliged to provide the Operator with only true and accurate Personal Data. The Subscriber is responsible for the accuracy, accuracy and truthfulness of the provided Personal Data. The operator is not responsible for the accuracy of the data provided.
  4. The operator shall use his best endeavors to avoid unauthorized processing.
  5. The Operator is entitled to transfer the Subscriber's personal data to third parties, for the following purposes: completing the ordering process, delivery of goods, sending business announcements, customer satisfaction evaluation, customer support services, complaints handling, new customer registration.
  6. Personal data are and will be processed electronically in a non-automated manner.

IV. Subscriber's rights related to processing

  1. Rights of the Subscriber in relation to the protection of personal data:
    1. request from the Operator access to his / her Personal Data;
    2. to correct the Personal Data provided;
    3. to delete the Personal Data provided;
    4. to limit the processing of Personal Data;
    5. lodge a complaint with the Office for Personal Data Protection;
    6. the right to transfer personal data to another controller;
    7. the right to object to the processing of personal data;
    8. the right to withdraw consent.
  1. A participant may exercise its rights under paragraph 1 of this Article by reference listed in the email footer sent by the Operator or a request to gdpr@werbea.com or, in the case of a registered customer, in the customer section of the e-shop website.
  2. The rights referred to in paragraph 1 (c) and (d) shall not be invoked to the extent and for the purposes referred to in Article II (1) (a), (b) and (c) with the exception of point (ii) (c) of Article II, where all the rights referred to in paragraph 1 may be exercised.
  3. Should the Subscriber believe that the Operator is processing his / her Personal Data, which is contrary to the protection of his private and personal life or to the relevant legislation, especially if Personal Data is inaccurate with respect to the purpose of its processing, it may:
    1. ask the Controller for an explanation, by e-mail to gdpr@werbea.com
    2. object to the processing and request by e-mail sent to gdpr@werbea.com that the Operator shall ensure the removal of the issue (e.g. by blocking, correcting, supplementing or destroying Personal Information). The Operator shall immediately decide on the objection and inform the Subscriber. If the Operator does not comply with the objection, the Subscriber has the right to contact the Office for Personal Data Protection directly. This provision is without prejudice to the Subscriber's right to contact the Office for Personal Data Protection directly.
  4. If the Subscriber exercises the right under this Article, the Operator is obliged to respond within 30 days of receipt of the request by the Operator.
  5. Acceptance of an application for enforcement of the right from Article IV., Item 1 a) and f) is possible only by means of a data message or a letter with an officially verified signature to the address of the registered office of the company. The application must include an email address to which a verification email will then be sent to confirm the identity of the applicant.
  6. If the Subscriber exercises some of the rights from Article IV., Paragraph 1, the Operator has the right to request proof of the Subscriber's identity. The request for access to personal data must therefore be sent from the applicant's e-mail address. If the request is submitted in another form or from a different email address, the Operator has the right to request additional verification in response to the verification e-mail. If the applicant does not prove his / her identity within 14 days of receiving the verification e-mail, his / her application for the exercise of the rights under Article IV., Paragraph 1 will not be accepted.
  7. In the event of a repeated and unjustified request for the provision of a physical copy of the processed Personal Data, the Controller is entitled to charge a reasonable fee for the administrative costs associated with it.

V. Final provisions

  1. All legal relations arising in the processing of Personal Data are governed by the law of the Slovak Republic, regardless of where the access to them was made. The Slovak courts are competent to resolve any disputes arising in connection with the protection of privacy between the Subscriber and the Operator.
  2. 2. Person concerned has the right to contact the Office for Personal Data Protection (https://dataprotection.gov.sk/uoou/sk).
  3. This Policy comes into effect on 08.08.2019.

The operator of this online store is also a physical store operator. This shop will be monitored by a camera system, processed by Werbea, Ltd. The record retention period is set at 30 days. Camera records are made for security reasons in order to increase the protection of the operator's property.