These Data Protection Principles according to the GDPR (hereafter “Principles”) issued by Aenea s.r.o., Zelená 273/36, 079 01 Veľké Kapušany, Slovakia, are aimed at provision of basic principles of personal data protection, i.e. what type of information Aenea s.r.o. as a data controller processes about individuals with regard to the sale of goods at branded shops, in the online shop of Aenea s.r.o., when visiting websites operated by enea s.r.o. and in terms of contact with potential customers. The Principles include also the purpose and the length of a retention period of the processing of personal data in accordance with applicable law as well as information about the rights of the natural persons with regard to the processing of personal data.
These Principles are in force since 1.7.2019 and they are issued in accordance with Regulation (EU) 2016/679 on the protection of individuals (hereafter “Regulation” or “GDPR”) in order to ensure information obligation of Aenea s.r.o. as a data controller under Article 13 of the GDPR.
These Principles concern protection of personal data of Aenea s.r.o. customers, users of Aenea s.r.o. services, potential buyers of Aenea s.r.o. goods and visitors of websites operated by Aenea s.r.o. always in the extent of the protection of personal data keeping with the GDPR in relation to Aenea s.r.o..
1. What type of personal data do we process?
We process only the personal data you provide us with regard to your interest in our products and their purchase (e.g. within registration, order or granting consent with the processing of personal data and sending information about news, special offers and others), or conclusion of a contract for sale of goods.
This is usually the data you provide us with regard to registration and/or purchase of goods.
A. Basic personal identification data and address
This data is necessary for conclusion and performance of a contract. This is usually:
a) Email address
b) Encrypted password
c) First name and surname
d) Telephone number
e) Contact and/or delivery address
f) Payment data (payment card number) to be/not to be saved with your account (only in case of paid services, e.g. online shopping on our websites, etc.)
g) Other personal data you voluntarily provide in the note section when filling out an order form.
B. Other data obtained from you in relation to use of our services and processed on the basis of your consent
a) IP address
b) cookie files (in case of online services)
c) (Records on behaviour on websites administered by Aenea s.r.o. gathered by cookies if cookies enabled in the web browser. The records are processed in order to improve operation of the websites run by Aenea s.r.o. and online advertising).
d) Another online identifier, if appropriate.
C. Data on the purchased goods and payment behaviour
a) The Aenea s.r.o. online shop includes a list of your orders and your favourite products.
2. Why do we process your personal data?
a) Compliance with legal tax obligation (fulfilling legal obligations)
b) Operation of surveillance and monitoring systems in Aenea s.r.o. branded shops and Aenea s.r.o. premises in order to prevent damage and to ensure safety of Aenea s.r.o. customers and protection of the interests and the property Aenea s.r.o. (legitimate interest of Aenea s.r.o.)
c) Recording and monitoring of telephone conversation with customer service (performance of the contract)
d) Recovery of claims on behalf of customers as buyers and other customer disputes (legitimate interest of Aenea s.r.o.)
e) Recording of debtors (legitimate interest of Aenea s.r.o.)
f) Marketing purposes (consents of customers)
By creating an order on the website www.soaphoria.com, the individual agrees with providing the personal data to the transport company. The personal data will be provided to delivery company solely for the purpose of processing and delivering the order.
3. Processing of personal data for marketing purposes
Aenea s.r.o. processes personal data of persons that have granted consent to be approached for marketing purposes by means of electronic contact for the period stated in the consent that the person makes available for marketing purposes, and to be sent information on products, news and special offers of Aenea s.r.o.. If this consent is granted by means of the websites operated by Aenea s.r.o., also the data gathered by cookies placed on the websites, where consent was granted, is processed together with these contacts provided that cookies are enabled in the web browser of the person. You can unsubscribe from receiving information on news and special offers in the setting of the service for which the users registered themselves in order to receive such information, or by means of email: email@example.com
4. Processing of personal data through cookies from websites operated by Aenea s.r.o.
If cookies are enabled in a person´s web browser, we process records of their behaviour through cookies placed on the websites run by Aenea s.r.o. in order to improve operation of the websites of Aenea s.r.o., to perform analyses and measurements with the aim to find out how our services are used and for the purpose of online advertising of Aenea s.r.o..
5. What is the length of a retention period of the processing of your personal data?
You personal data will be processed throughout the whole period you use our services (i.e. duration of our contractual relationship) and subsequently on the basis of your granted consent for the period of further 24 months unless you withdraw your consent to the processing of personal data.
However, please note that we must process this personal data necessary for proper provision of your ordered products, or in order to fulfil all our obligations, whether obligations under our agreement or general binding provisions, regardless of your granted consent for the period laid down by the relevant legislation or in compliance with it, even if you withdraw your consent.
6. What are your rights regarding personal data protection?
You have mainly the following rights in relation to your personal data:
a) The right to information;
b) The right to access personal data;
c) The right to rectify or complete inaccurate personal data;
d) The right to have personal data deleted (the right to be forgotten) in certain cases;
e) The right to restrict the processing;
f) The right to notification of correction, deletion or restriction of the processing;
g) The right to transfer personal data;
h) The right to object to or complain about the processing in certain cases;
i) The right to withdraw your consent at any time;
j) The right to be informed about personal data breach in certain cases;
k) Other rights laid down in the act on personal data protection and the GDPR after the entry into force.
7. What does the Right to Object Mean?
If you do not want to receive any more commercial communication or information on news in our product portfolio from our party, you have the right to object to further processing of your personal data for the purpose of direct marketing. If you do so, we will not process your personal data for this purpose and send you further commercial communication or newsletters.
You find more information about this right in Article 21 of the GDPR.
8. How Can You Contact Us?
If you have any questions concerning personal data protection or withdrawal of consent to further processing please use this email: firstname.lastname@example.org or contact form at www.soaphoria.com.
In this context please note that we may ask you to prove your identity in an appropriate manner in order to check your identity. This is a preventive security measure aimed at preventing unauthorized persons from accessing your personal data. In order to improve the quality of services and to maintain the records of performance of our obligations resulting from legislation every communication with you is monitored.
Since July 1, 2019 this contact of the data protection officer according to the GDPR is available.
Aenea s.r.o.,data protection officer, address: Zelená 273/39, 079 01 Veľké Kapušany, Slovakia, or email: email@example.com