Menu

PRIVACY AND COOKIES NOTICE

 

/ Privacy Policy and Privacy Notice provided by the personal data controler when obtaining personal data from the data subject and cookie notice of the online store www.tinacisar.sk, www.tinacisar.cz, www.tinacisar.com /

 

I. Personal Data Controller

 

1.1. The identity and contact details of the personal data controler are:

Business name: TC CREATIVE LIVING s. r. o.
Registered office: Praha 1, ul: Župné námestie 961/1, Nitra 949 01, Slovak Republic
Registered in the Commercial Register of the District Court in Nitra, Section Sro, Insert No. 62461/N.
ID NO.: 56025807
VAT NUMBER: 2122168752
VAT NUMBER: SK2122168752
Bank account: SK20 1100 0000 0029 4416 5290
The Seller is a payer of value added tax.

 

1.2. The email contact and telephone contact of the personal data controler is:

 

Email: info@tinacisar.sk
Tel: +421 908 789 016

 

1.3. Personal data controler 's address for sending documents:

 

TC CREATIVE LIVING s. r. o., Župné námestie 961/1, 949 01 Nitra, Slovenská republika

 

1.4. The personal data controler hereby complies with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC GDPR (hereinafter referred to as the "Regulation"), in accordance with Act No. No. 452/2021 Coll. on electronic communications, as amended, provides the following information instructions and explanations to the data subject - ( Buyer ) from whom the personal data controler ( Seller ) obtains personal data concerning him/her.

 

II. Links

 

2.1. This Privacy Policy and Privacy Notice are part of the General Terms and Conditions published on the Seller's website.
2.2. In accordance with Section 3(1)(n) of Act No. 102/2014 Coll. on Consumer Protection, as amended, the Seller informs the Consumer that there are no specific relevant codes of conduct that the Seller has undertaken to comply with, whereby a code of conduct means an agreement or a set of rules defining the Seller's conduct, which the Seller has undertaken to comply with, in relation to one or more specific commercial practices or sectors of trade, unless they are laid down by law or regulation or by action of a public authority) which the seller has undertaken to comply with, and the manner in which the consumer may become acquainted with them or obtain their wording.

 

III. Privacy policy and use of cookies. Instructions and explanation of cookies, scripts and pixels

 

3.1. The personal data controller provides the following brief explanation of the function of cookies, scripts and pixels:
Cookies are text files containing small amounts of information that are downloaded to your device when you visit a website. With this file, the website retains information about your actions and preferences (such as login name, language, font size and other display settings) for a certain period of time so that you do not have to re-enter them the next time you visit the website or browse its individual pages.
A script is a piece of program code that is used to make a web page function properly and interactively. This code runs on the host server or on your device.
Pixels are small, invisible text or images on a web page that are used to track website traffic. For this purpose, various data is stored via pixels.
3.1.2. Cookies are divided into
Technical or functional cookies - they ensure the correct functioning of the personal data controller's website and its use. These cookies are used without consent.
Statistical cookies -the personal data controller obtains statistics regarding the use of its website. These cookies are only used with consent.
Marketing/advertising cookies - used to create advertising profiles and similar marketing activities. These cookies are only used with consent.
3.2. How to control cookies:
3.2.1. You can control and/or delete cookies at your own discretion - see aboutcookies.org for details. You can delete all cookies stored on your computer or other device and you can set most browsers to prevent the storage of cookies.
3.3. The personal data controller´s website uses the following cookies:
All cookies used by the personal data controller can be found at https://www.cookieserve.com/ by entering the personal data controller web address https://www.tinacisar.sk, https://www.tinacisar.cz, https://www.tinacisar.com.
Technical or functional cookies - the information is accessed by the website personal data controller. Cookies last for 2 years.
Statistical cookies - the information is accessed by the website personal data controller. Cookies last for 2 years.
Marketing and advertising cookies - information is accessed by the website personal data controller. Cookies last for 2 years.
3.3.1. Cookies made available to third parties:
Google Analytics, Google ADS: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For more information on data protection, please visit https://support.google.com/analytics/topic/2919631?hl=sk&ref_topic=1008008.
Facebook Pixels: Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland. For more information on privacy, please visit https://www.facebook.com/about/privacy/.

 

IV. Personal data processed

 

4.1. The personal data controller processes the following personal data on its website: name, surname, residence, email address, telephone number, mobile phone number, billing address, delivery address, data obtained from cookies, IP addresses.

 

V. Contact details of the Data Protection Officer

 

5.1. The personal data controller has appointed a Data Protection Officer in accordance with Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. Contact: Email: info@tinacisar.sk, Tel. no.: +421 908 789 016.
5.2. The personal data controller is also the Seller as defined in the General Terms and Conditions of this website.

 

VI. Purposes of the processing of personal data of the data subject and duration of the processing of personal data

 

6.1. The purposes of the processing of the data subject's personal data are in particular:

6.1.1. registration, creation and processing of contracts and client data for the purpose of concluding contracts with third parties.

6.1.2. processing of accounting documents and documents related to the business activities of the personal data controller.
6.1.3. compliance with legal regulations in connection with the archiving of documents and documents, e.g. according to Act No. 431/2002 Coll. on Accounting as amended and other relevant regulations.

6.1.4. the activities of the personal data controller in connection with the execution of requests, orders, contracts and similar institutes of the data subject.

6.1.5. the personal data controller 's news, marketing and similar advertising activities. If the data subject consents to the marketing and similar advertising activities of the personal data controller.
6.2. The personal data of the data subject will be stored by the personal data controller only for the necessary period of time required for the purposes of the performance of the contract and their subsequent archiving within the meaning of the statutory time limits imposed on the personal data controller by law. If the data subject has consented to the sending of promotional emails and similar offers, the personal data of the data subject will be processed for these purposes until the data subject withdraws his or her consent. However, for a maximum period of 10 years.

 

VII. Legal basis for the processing of the data subject's personal data

 

7.1. If the personal data controller carries out the processing of personal data on the basis of the data subject's consent, this processing will only be initiated after the data subject has given his or her consent.

7.2. Where the personal data controller processes personal data of the data subject for the purposes of negotiating pre-contractual relations and the conclusion and performance of a purchase contract and the related delivery of goods, products or services. The data subject is obliged to provide personal data for the proper performance of the purchase contract, otherwise the performance cannot be ensured. Personal data for this purpose is processed without the consent of the data subject.

 

VIII. Recipients or categories of recipients of personal data

 

8.1. The recipients of the data subject's personal data will or at least may be:

8.1.1. the statutory bodies or their members of the personal data controller .

8.1.2. persons performing work for the personal data controller in an employment or similar relationship.

8.1.3. business representatives of the personal data controller and other persons cooperating with the personal data controller in the performance of its tasks. For the purposes of this document, all natural persons performing dependent work for the Personal data controller on the basis of an employment contract or agreements on work performed outside the employment relationship shall be deemed to be employees of the Personal data controller .

8.1.4. The recipient of the data subject's personal data will also be the Personal data controller 's collaborators, business partners, suppliers and contractors, in particular: the accounting company, the company providing software development and maintenance services to the Personal data controller , the company providing legal services to the Personal data controller , the company providing consulting services to the Personal data controller , companies providing transport and delivery of products to purchasers and third parties, marketing companies, social networking companies, payment gateway companies and other payment methods.

8.1.5. The recipient of personal data will also be courts, law enforcement authorities, tax authorities and other state authorities, if so provided by law. In doing so, personal data will be provided by the Personal data controller to the aforementioned authorities and state institutions on the basis of and in accordance with the legislation of the Slovak Republic.

8.1.6. List of processors and recipients who are third parties and process personal data of the data subject:

Direct Parcel Distribution SK, s.r.o., with registered office at Technická 7, 82104 Bratislava, ID No.: 35834498 - third party providing transport services.

Packeta Slovakia s.r.o., with registered office at Kopčianska 3338/82A, 851 01 Bratislava, ID No.: 48136999 - third party providing transport services

Trust Pay, a.s. Za kasárňou 1 831 03 Bratislava - third party payment gateway provider

 

IX. Information on the transfer of personal data to third countries and the retention period

 

9.1. Not applicable. The Personal data controller does not transfer personal data of persons to third countries.

 

X. Notification of the existence of relevant data subject rights

 

10.1. The data subject has the following rights, among others:
10.1.1. Clause 10.1 is without prejudice to the other rights of data subjects.
10.1.2. The data subject's right of access to data under Article 15 of the Regulation, which includes:
The right of access to data under Article 15 of the Regulation:
The right to obtain confirmation from the controller as to whether it processes the personal data of the data subject and, if so, to what extent. At the same time, if they are processed, the right to find out their content and to request information from the controller on the reason for their processing, in particular information on the Reason for processing, the category of personal data concerned, the recipient or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations, the envisaged period of retention of the personal data or, if this is not possible, information on the criteria for its determination, 1. and 4. Regulation and, in such cases, at least meaningful information on the procedure used as well as on the relevance and the foreseeable consequences of such processing for the data subject, the appropriate safeguards under Article 46 of the Regulation concerning the transfer of personal data where personal data are transferred to a third country or an international organisation.

10.1.3. the right to be provided with a copy of the personal data processed, provided, however, that the right to be provided with a copy of the personal data processed shall not adversely affect the rights and freedoms of others.

10.1.4. the right of the data subject to rectification under Article 16 of the Regulation, which includes the right: for the personal data controller to rectify inaccurate personal data relating to the data subject without undue delay; the right to have incomplete personal data of the data subject completed, including by providing a supplementary statement from the data subject; the right of the data subject to have personal data erased ("right to be forgotten") under Article 17 of the Regulation, which includes the right:
10.1.5. the right to obtain from the controller, without undue delay, the erasure of personal data relating to the data subject where one of the following grounds is met:
the data subject is no longer necessary for the purposes for which the data was collected or otherwise processed, the data subject withdraws the consent on the basis of which the personal data is processed, unless there is another legal basis for the processing of the personal data, the data subject objects to the processing of the personal data pursuant to Article 21(1). Regulation and there are no overriding legitimate grounds for processing the personal data or the data subject objects to the processing of the personal data pursuant to Article 21(2). Regulation, the personal data have been unlawfully processed, the personal data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State to which the data controller is subject, the personal data have been collected in connection with the offer of information society services pursuant to Article 8(1) of the Regulation;
10.1.6. the right for the controller who has disclosed the personal data of the data subject to take reasonable measures, including technical measures, having regard to the technology available and the cost of implementing the measures, to inform other data controllers who process personal data that the data subject has requested them to erase all references to those personal data or copies or replicas thereof, subject to the right to erasure of personal data containing the rights under Article 17(1) and (2). The Regulation does not arise where the processing of personal data is necessary:
10.1.7. to exercise the right to freedom of expression and information.
10.1.8. the fulfilment of a legal obligation requiring processing under European Union law or the law of a Member State to which the controller is subject or the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

10.1.9. for reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) of the Regulation and Article 9(3). Regulation.
10.1.10. for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1). Regulation where the right referred to in Article 17(1) of the Regulation is likely to render impossible or seriously impede the achievement of the purpose of such processing of personal data; or for the establishment, exercise or defence of legal claims;
10.1.11. the right of the data subject to restriction of the processing of personal data pursuant to Article 18 of the Regulation, which includes:

10.1.12. the right to have the personal data controller restrict the processing of personal data in one of the following cases: the data subject denies the accuracy of the personal data for a period of time that allows the personal data controller to verify the accuracy of the personal data, the processing of the personal data is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of their use, the personal data controller no longer needs the personal data for the purposes of the processing but the data subject needs them for the establishment, exercise or defence of legal claims, the data subject has objected to the processing pursuant to Art. 21(1)(a) of the Regulation. 1. Regulation until it is verified that the legitimate grounds on the part of the controller override those of the data subject;

10.1.13. the right, where the processing of personal data has been restricted, to have such restricted personal data processed only with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State, with the exception of retention;
10.1.14. the right to be informed in advance of the lifting of restrictions on the processing of personal data;

10.1.15. the right of the data subject to comply with the obligation to notify recipients pursuant to Article 19 of the Regulation, which includes: the right of the data controller to notify any recipient to whom the personal data have been disclosed of any rectification or erasure of personal data or restriction of processing made pursuant to Article 16, Article 17(1), (2), (3), (4), (5) or (6)(1) and Article 18 of the Regulation, unless this proves impossible or requires disproportionate effort; the right of the controller to inform the data subject of such recipients if the data subject so requests;
10.1.16. the data subject's right to data portability under Article 20 of the Regulation, which includes: the right to obtain personal data relating to the data subject which he or she has provided to the controller in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from the controller, where:

a/ the processing is based on the consent of the data subject pursuant to Article 6(1)(a) of the Regulation or Article 9(2)(a) of the Regulation or on a contract pursuant to Article 6(1)(b) of the Regulation and at the same time: a/ the processing is based on the consent of the data subject pursuant to Article 6(1)(a) of the Regulation or on a contract pursuant to Article 9(2)(a) of the Regulation and at the same time
b/ the processing is carried out by automated means, at the same time:
10.1.17. the right to obtain personal data in a structured, commonly used and machine-readable format and the right to transmit such data to another personal data controller without hindrance from the personal data controller will not have adverse effects on the rights and freedoms of other persons;

10.1.18. the right to transmit personal data directly from one personal data controller to another personal data controller , where technically feasible;
10.1.19. the right of the data subject to object under Article 21 of the Regulation, which includes:
10.1.20. the right to object at any time, on grounds relating to the particular situation of the data subject, to processing of his or her personal data carried out on the basis of Article 6(1)(e) or (f) of the Regulation, including the right to object to profiling based on those provisions of the Regulation;
10.1.21. where the right to object at any time on grounds relating to the particular situation of the data subject to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(a)(1)(b) of the Regulation, to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(a)(1)(i) of the Regulation. (e) or (f) of the Regulation, including the right to object to profiling based on those provisions of the Regulation, the right not to have personal data of the data subject further processed by the personal data controller , unless the personal data controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the establishment, exercise or defence of legal claims
10.1.22. the right to object at any time to processing of personal data concerning the data subject for direct marketing purposes, including profiling to the extent that it is related to direct marketing; if the data subject objects to the processing of personal data for direct marketing purposes, the personal data may not be further processed for such purposes;
10.1.23. in connection with the use of information society services, the right to object to the processing of personal data by automated means using technical specifications;
10.1.24. the right to object, on grounds relating to the particular situation of the data subject, to the processing of personal data concerning the data subject where the personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1). Regulation, except where the processing is necessary for the performance of a task carried out for reasons of public interest;

10.1.25. the data subject's right concerning automated individual decision-making under Article 22 of the Regulation, which includes:
10.1.26. the right not to be the subject of a decision which is based solely on automated processing of personal data, including profiling, and which has legal effects concerning him or her or similarly significantly affects him or her, except as provided for in Article 22(2). Regulation [i.e. except where the decision is: a) necessary for the conclusion or performance of a contract between the data subject and the controller,
10.1.27. permitted by the law of the European Union or of the Member State to which the data subject is subject, which also provides for appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject; or c) based on the data subject's explicit consent.

 

XI. Information on the right of the data subject to withdraw consent to the processing of personal data

 

11.1. The data subject shall be entitled to withdraw his or her consent to the processing of personal data at any time, without prejudice to the lawfulness of the processing of personal data on the basis of the consent given prior to its withdrawal.
The data subject shall be entitled to withdraw his or her consent to the processing of personal data, in whole or in part, at any time. The partial withdrawal of consent to the processing of personal data may relate to a specific type of processing operation, while the lawfulness of the processing of personal data to the extent of the remaining processing operations remains unaffected. A partial withdrawal of consent to the processing of personal data may relate to a specific processing purpose(s), while the lawfulness of the processing of personal data to the extent of the remaining purposes remains unaffected.
The right to withdraw consent to the processing of personal data may be exercised by the data subject in paper form at the address of the personal data controller registered as its registered office in the commercial register at the time of withdrawal of consent to the processing of personal data or in electronic form by electronic means (by sending an e-mail to the e-mail address of the personal data controller specified in the identification of the personal data controller in this document).

 

XII. Information on the right of the data subject to lodge a complaint with the supervisory authority

 

12.1. Without prejudice to any other administrative or judicial remedy, the data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of employment or place of the alleged infringement, if he or she considers that the processing of personal data concerning him or her is in breach of the Regulation.
The data subject shall have the right to be informed by the supervisory authority to which the complaint has been lodged, as complainant, of the progress and outcome of the complaint, including the possibility to seek judicial redress pursuant to Article 78 of the Regulation.

12.2. The supervisory authority in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovak Republic. Tel. contact: +421 /2 3231 3214, E-mail: statny.dozor@pdp.gov.sk.

 

XIII. Information relating to automated decision-making, including profiling

 

13.1. As the personal data controller does not process the personal data of the data subject by automated decision-making, including profiling pursuant to Article 22(1) and (4), the data subject is not subject to processing of personal data. Not applicable.

 

XIV. Final Provisions


14.1. This Privacy Policy and the Privacy and Cookie Notice form an integral part of the Terms and Conditions and the Complaints Policy. The documents - General Terms and Conditions and Complaints Policy of this website are published on the domain of the Seller's website.
14.2. This Privacy Policy shall come into force and effect upon its publication on the Seller's Website on 01.03.2024.

 

This eshop is certified by http://www.pravoeshopov.sk.