PROTECTION OF PERSONAL DATA AND COOKIES NOTICE
- Operator
1.1. The identity and contact details of the Operator are:
Business name: TolTech s. r. o.
Registered office: Tolstého 5, Bratislava - mestská časť Staré Mesto 811 06, Slovak Republic
Registered in the Commercial Register of the City Court Bratislava III, Section Sro, Entry No. 174556/B
ID: 55909248
VAT ID: 2122133519
Bank account: SK17 1100 0000 0029 4716 1965
The Seller is a value added tax payer
1.2. The Operator's email and phone contact is:
Email: info@belinkabeauty.com
Tel. no.: +421910617138
1.3. Operator's address for sending correspondence:
TolTech s. r. o., Obchodná ulica 1718/4, 93041 Hviezdoslavov, Slovak Republic
1.4. In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation"), as well as in accordance with Act No. 18/2018 Coll. on Personal Data Protection and on Amendments and Supplements to Certain Acts as amended, and in accordance with Act No. 452/2021 Coll. on Electronic Communications as amended, the Operator hereby provides the Data Subject - (Buyer), from whom the Operator (Seller) obtains personal data concerning them, with the following information, instructions and explanations:
- References
2.1. These personal data protection policies and instructions form an integral part of the General Terms and Conditions published on the Seller's Website.
2.2. Pursuant to Section 3, Subsection 1, Letter n) of Act No. 102/2014 Coll., the Seller informs the consumer that there are no special relevant codes of conduct to which the seller has committed to comply, whereby a code of conduct is understood as an agreement or a set of rules that define the behavior of the seller who has committed to comply with this code of conduct in relation to one or more specific commercial practices or business sectors, unless these are laid down by law, or other legal regulation or measure of a public authority), which the seller has undertaken to observe, and on how the consumer can get acquainted with them or obtain their wording.
III. Personal data protection and cookie usage. Instructions and explanation of cookies, scripts, and pixels
3.1. The website operator provides this brief explanation of the function of cookies, scripts, and pixels:
3.1.1. Cookies are text files that contain a small amount of information that is downloaded to your device when you visit a website. Thanks to this file, the website stores information about your actions and preferences (such as login name, language, font size, and other display settings) for a certain period, so you do not have to re-enter them on your next visit to the website or when browsing its individual pages.
A script is a piece of program code used for the correct and interactive function of websites. This code runs on the operator's server or on your device.
Pixels is a small, invisible text or image on a website used to monitor website traffic. To do this, various data are stored via pixels.
3.1.2. Cookies are divided into:
Technical or functional cookies – ensure the proper functioning of the Operator's website and its use. These cookies are used without consent.
Statistical cookies – The Operator collects statistics regarding the use of its websites. These cookies are used only with consent.
Marketing / Advertising cookies – Used to create advertising profiles and similar marketing activities. These cookies are used only with consent.
3.2. How to control cookies:
3.2.1. You can control and/or delete cookies as you wish – for details, see aboutcookies.org. You can delete all cookies stored on your computer or other device, and most browsers can be set to prevent them from being stored.
3.3. The Operator's website uses the following cookies:
All cookies used by the Operator can be found at https://www.cookieserve.com/ by entering the Operator's web address https://www.belinkabeauty.com
Technical or functional cookies – information is accessed by the website Operator. Cookie duration is 2 years.
Statistical cookies – information is accessed by the website Operator. Cookie duration is 2 years.
Marketing and advertising cookies – information is accessed by the website Operator. Cookie duration is 2 years.
3.3.1. Cookies made available to third parties:
Google Analytics, Google Ads: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information on privacy can be found at https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008
META Pixels: Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland. More information on privacy can be found at https://www.facebook.com/about/privacy/
- Processed personal data
4.1. The Operator processes the following personal data on its website: name, surname, address, email address, home phone number, mobile phone number, billing address, delivery address, data obtained from cookies, IP addresses.
- Contact details of the Data Protection Officer
5.1. The Operator has appointed a data protection officer in accordance with Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. Contact: Email: info@belinkabeauty.com, Phone no.: +421910617138
5.2. The Operator is also the Seller in the sense of the term established in the General Terms and Conditions of this website.
- Purposes of processing the Data Subject's personal data and duration of personal data processing
6.1. The purposes of processing the Data Subject's personal data are mainly:
6.1.1. keeping records, drafting and processing contracts and client data for the purpose of concluding contracts with third parties.
6.1.2. processing accounting documents and documents related to the Operator's commercial activities.
6.1.3. compliance with legal regulations regarding the archiving of documents and records, e.g., according to Act No. 431/2002 Coll., on Accounting as amended, and other relevant regulations.
6.1.4. the Operator's activity in connection with fulfilling the Data Subject's request, order, contract and similar instruments.
6.1.5. Newsletter, marketing and similar advertising activities of the Operator. In case the Data Subject grants consent to the Operator for marketing and similar advertising activities.
6.2. The Operator retains the Data Subject's personal data only for the strictly necessary period required for contract fulfillment purposes and their subsequent archiving in accordance with the legal deadlines imposed on the Operator by legal regulations. If the Data Subject has consented to receiving advertising emails and similar offers, the Data Subject's personal data will be processed for these purposes until the Data Subject withdraws their consent. However, for a maximum period of 10 years.
VII. Legal basis for processing the Data Subject's personal data
7.1 In cases where the Operator processes personal data based on the Data Subject's consent, such processing will only commence after the Data Subject has given their consent.
7.2. In the event that the Operator processes the personal data of the Data Subject for the purposes of negotiating pre-contractual relations and concluding and fulfilling a purchase agreement, and the related delivery of goods, products or services. The Data Subject is obliged to provide personal data for the proper fulfillment of the purchase agreement, otherwise fulfillment cannot be ensured. Personal data for the given purpose are processed without the consent of the data subject.
VIII. Recipients or categories of recipients of personal data
8.1. The recipients of the Data Subject's personal data will be or may at least be:
8.1.1. statutory bodies or their members of the Operator.
8.1.2. persons performing work activities under an employment or similar relationship for the Operator.
8.1.3. commercial representatives of the operator and other persons cooperating with the Operator in fulfilling the Operator's tasks. For the purposes of this document, all natural persons performing dependent work for the Operator based on an employment contract or agreements on work performed outside employment will be considered employees of the Operator.
8.1.4. Recipients of the Data Subject's personal data will also include the Operator's collaborators, business partners, suppliers, and contractual partners, specifically: accounting company, company providing services related to software development and maintenance, company providing legal services to the Operator, company providing consultancy services to the Operator, companies ensuring transport and delivery of products to buyers and third parties, marketing companies, social media companies, companies providing payment gateways and other payment methods.
8.1.5. Recipients of personal data will also include courts, law enforcement authorities, tax authorities and other state authorities, if required by law. Personal data will be provided by the Operator to these authorities and state institutions on the basis and in accordance with the legal regulations of the Slovak Republic.
8.1.6. List of third-party processors and recipients who process the Data Subject's personal data:
Packeta Slovakia s. r. o., with registered office at Kopčianska 3338/82A, 851 01 Bratislava, ID: 48136999 - third party providing transport services
Comgate a.s., Aupark, Gočárova třída 1754 / 48b, 500 02 Hradec Králové, ID: 279 24 505, VAT ID CZ27924505 - third party providing transport services
CountOnUs consulting s. r. o., Miletičova 21 821 08 Bratislava - mestská časť Ružinov – third party providing accounting services
Heureka Shopping s.r.o, Karolinská 650/1, 186 00 Prague 8 – Karlín, Czech Republic, ID: 02387727 – third party ensuring satisfaction monitoring with the website's functioning and providing the "Verified by Customers" service.
8.2. The e-shop operator ascertains customer satisfaction through email questionnaires within the "Verified by Customers" program, in which the Operator's e-shop is involved. The Operator sends these questionnaires to the Data Subject - Buyer every time the Data Subject - Buyer makes a purchase from the Operator's e-shop, unless the Data Subject - Buyer declines sending electronic mail for direct marketing purposes in accordance with Act No. 452/2021 Coll., as amended. The Operator processes personal data for the purpose of sending questionnaires within the "Verified by Customers" program based on the Operator's legitimate interest, which consists of ascertaining the Data Subject's - Buyer's satisfaction with a purchase through the Seller's e-shop. For sending questionnaires, evaluating the Data Subject's - Buyer's feedback, and analyzing market position, the Operator uses a processing intermediary, which is the operator of the Heureka.sk portal. For these purposes, the Operator may provide information about the purchased goods and the Data Subject's - Buyer's email address to this intermediary. The Data Subject's - Buyer's personal data is not provided to any third party for their own purposes when sending email questionnaires. The Data Subject - Buyer may object to receiving email questionnaires within the "Verified by Customers" program at any time by declining further questionnaires using the link in the email with the questionnaire. In case of an objection from the Data Subject - Buyer, the Operator will no longer send questionnaires to the Data Subject - Buyer.
- Information on the provision of personal data to third countries and their retention period:
9.1. Not applicable. The Operator does not transfer personal data of individuals to third countries.
- Instruction on the existence of relevant Data Subject rights:
10.1. The Data Subject has, among other things, the following rights, whereby:
10.1.1.Point 10.1 does not affect other rights of Data Subjects.
10.1.2.The Data Subject's right to access data under Article 15 of the Regulation, the content of which is:
the right to obtain from the Operator confirmation as to whether or not personal data concerning the Data Subject are being processed, and, where that is the case, to what extent. If personal data are being processed, the Data Subject has the right to access them and request information from the Operator about the reason for their processing, in particular information about: The reason for their processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, the existence of the right to request from the Operator rectification or erasure of personal data or restriction of processing concerning the Data Subject or to object to such processing, the right to lodge a complaint with a supervisory authority, where the personal data are not collected from the Data Subject, any available information as to their source, the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the Data Subject, appropriate safeguards pursuant to Article 46 of the Regulation relating to the transfer of personal data if personal data are transferred to a third country or an international organization.
10.1.3.the right to obtain a copy of the personal data being processed, provided that the right to obtain a copy of the processed personal data does not adversely affect the rights and freedoms of others.
10.1.4.the Data Subject's right to rectification according to Article 16 of the Regulation, which includes the right: for the Operator to rectify inaccurate personal data concerning the Data Subject without undue delay; the right to have incomplete personal data of the Data Subject completed, including by means of providing a supplementary statement by the Data Subject; the Data Subject's right to erasure of personal data (the so-called "right to be forgotten") according to Article 17 of the Regulation, which includes:
10.1.5.the right to obtain from the Operator the erasure of personal data concerning the Data Subject without undue delay, if one of the following grounds applies:
the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; the Data Subject withdraws consent on which the processing is based, provided that there is no other legal ground for the processing of personal data; the Data Subject objects to the processing of personal data pursuant to Article 21(1) of the Regulation and there are no overriding legitimate grounds for the processing of personal data or the Data Subject objects to the processing of personal data pursuant to Article 21(2) of the Regulation; the personal data have been unlawfully processed; the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the Operator is subject; the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the Regulation;
10.1.6.the right for the Operator, who has made the Data Subject's personal data public, to take reasonable steps, including technical measures, taking into account available technology and the cost of implementation, to inform other operators who are processing the personal data that the Data Subject has requested the erasure by such operators of any links to, or copy or replication of, those personal data, provided that the right to erasure of personal data with the rights under Article 17(1) and (2) of the Regulation will not arise if the processing of personal data is necessary:
10.1.7.for exercising the right of freedom of expression and information.
10.1.8.for compliance with a legal obligation which requires processing by Union or Member State law to which the Operator is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Operator.
10.1.9.for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) of the Regulation, as well as Article 9(3) of the Regulation.
10.1.10.for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) of the Regulation in so far as the right referred to in Article 17(1) of the Regulation is likely to render impossible or seriously impair the achievement of the objectives of that processing; or for the establishment, exercise or defence of legal claims;
10.1.11.the Data Subject's right to restriction of processing of personal data pursuant to Article 18 of the Regulation, which includes:
10.1.12.the right for the Operator to restrict the processing of personal data in one of the following cases: the accuracy of the personal data is contested by the Data Subject, for a period enabling the Operator to verify the accuracy of the personal data; the processing is unlawful and the Data Subject opposes the erasure of the personal data and requests the restriction of their use instead; the Operator no longer needs the personal data for the purposes of the processing, but they are required by the Data Subject for the establishment, exercise or defence of legal claims; the Data Subject has objected to processing pursuant to Article 21(1) of the Regulation pending the verification whether the legitimate grounds of the Operator override those of the Data Subject;
10.1.13.the right that, where processing of personal data has been restricted, such restricted processed personal data shall, with the exception of storage, only be processed with the Data Subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State;
10.1.14.the right to be informed in advance about the lifting of the restriction of processing of personal data;
10.1.15.the Data Subject's right to notification obligation towards recipients according to Article 19 of the Regulation, which includes: the right for the Operator to communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 of the Regulation to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort; the right for the Operator to inform the Data Subject about those recipients if the Data Subject requests it;
10.1.16.the Data Subject's right to data portability pursuant to Article 20 of the Regulation, which includes: the right to receive the personal data concerning them, which they have provided to the Operator, in a structured, commonly used and machine-readable format and have the right to transmit those data to another operator without hindrance from the Operator, if:
a/ the processing is based on the Data Subject's consent pursuant to Article 6(1)(a) of the Regulation or Article 9(2)(a) of the Regulation, or on a contract pursuant to Article 6(1)(b) of the Regulation, and concurrently
b/ the processing is carried out by automated means, and concurrently:
10.1.17.the right to receive the personal data in a structured, commonly used and machine-readable format and the right to transmit those data to another operator without hindrance from the Operator, will not adversely affect the rights and freedoms of others;
10.1.18.the right to have the personal data transmitted directly from one operator to another, where technically feasible;
10.1.19.the Data Subject's right to object pursuant to Article 21 of the Regulation, which includes:
10.1.20.the right to object, on grounds relating to the Data Subject's particular situation, at any time to processing of personal data concerning them which is based on Article 6(1)(e) or (f) of the Regulation, including profiling based on those provisions of the Regulation;
10.1.21.in the event of exercising the right to object, on grounds relating to the Data Subject's particular situation, at any time to processing of personal data concerning them which is based on Article 6(1)(e) or (f) of the Regulation, including profiling based on those provisions of the Regulation, the right for the Operator to no longer process the personal data of the Data Subject unless the Operator demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defence of legal claims;
10.1.22.the right to object at any time to processing of personal data concerning the Data Subject for direct marketing purposes, including profiling to the extent that it is related to such direct marketing; it applies that if the Data Subject objects to processing of personal data for direct marketing purposes, the personal data shall no longer be processed for such purposes;
10.1.23.in the context of the use of information society services, the right to exercise the right to object to processing of personal data by automated means using technical specifications;
10.1.24.the right to object, on grounds relating to the Data Subject's particular situation, to processing of personal data concerning the Data Subject if the personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the Regulation, except where the processing is necessary for the performance of a task carried out for reasons of public interest;
10.1.25.the Data Subject's rights related to automated individual decision-making according to Article 22 of the Regulation, which include:
10.1.26.the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, except in cases according to Article 22(2) of the Regulation [i.e., except in cases where the decision is: (a) necessary for entering into, or performance of, a contract between the Data Subject and the Operator,
10.1.27.authorised by Union or Member State law to which the Operator is subject and which also lays down suitable measures to safeguard the Data Subject's rights and freedoms and legitimate interests or (c) based on the Data Subject's explicit consent.
- Instruction on the Data Subject's right to withdraw consent to the processing of personal data:
11.1.The Data Subject is entitled to withdraw their consent to the processing of personal data at any time, without affecting the lawfulness of processing of personal data based on consent given before its withdrawal.
The Data Subject is entitled to withdraw their consent to the processing of personal data at any time – fully or partially. Partial withdrawal of consent to the processing of personal data may relate to a specific type of processing operation(s), while the lawfulness of processing of personal data in the scope of the remaining processing operations remains unaffected. Partial withdrawal of consent to the processing of personal data may relate to a specific purpose of personal data processing / specific purposes of personal data processing, while the lawfulness of personal data processing for other purposes remains unaffected.
The Data Subject may exercise the right to withdraw consent to the processing of personal data in writing to the Operator's address registered as its registered office in the commercial register at the time of withdrawal of consent to the processing of personal data or electronically via electronic means (by sending an e-mail to the Operator's e-mail address stated in the Operator's identification in this document).
XII. Instruction on the Data Subject's right to lodge a complaint with a supervisory authority:
12.1.The Data Subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement if the Data Subject considers that the processing of personal data relating to them infringes the Regulation, all without prejudice to any other administrative or judicial remedy.
The Data Subject has the right for the supervisory authority to which the complaint has been lodged to inform them, as the complainant, of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the Regulation.
12.2.The supervisory authority in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic, Galvaniho Business Centrum II; Galvaniho 7/B; 821 04 Bratislava, Slovakia.
Tel. contact: + 421 2 32 31 32 14, Email: statny.dozor@pdp.gov.sk,
XIII. Information related to automated decision-making, including profiling:
13.1.As the Operator does not process the Data Subject's personal data in the form of automated decision-making including profiling referred to in Article 22(1) and (4) of the Regulation, the Operator is not obliged to provide information pursuant to Article 13(2)(f) of the Regulation, i.e., information on automated decision-making including profiling and on the procedure used, as well as on the significance and envisaged consequences of such processing of personal data for the Data Subject. Not applicable.
XIV. Final provisions
14.1.These Privacy Policy and Cookie Policy and instructions form an integral part of the General Terms and Conditions and the Complaints Procedure. The documents – General Terms and Conditions and Complaints Procedure of this Website are published on the Seller's Website domain.
14.2.These Privacy Policy shall enter into force and effect on their publication on the Seller's Website on March 25, 2024.
This e-shop is certified by http://www.pravoeshopov.sk