Privacy Policy
INFORMATION
ON THE PROTECTION OF OUR CUSTOMERS’ PERSONAL DATA
(INFORMATION
OBLIGATION OF THE GDPR)
This
document provides you with information in accordance with our information
obligation under the Regulation of the European Parliament and of the Council (EU)
2016/679 of 27 April 2016 on the protection of natural persons with regard to
the processing of personal data and on the free movement of such data, and
repealing the Directive 95/46/EC (GDPR).
The
information provided relates to your personal data, which we process in order
to be able to provide you with our products and services, to effectively manage
relationships and contacts with us and you and our personal data
intermediaries, to answer your questions, to deal with your requests, etc., and
to send you selected marketing/commercial communications and invitations in
accordance with legal regulations.
Who is the
controller of your personal data?
The
controller of your personal data is:
Sigmanit s.r.o., IČO: 54 961 769, Zvolenská 2/13, 949 11 Nitra, Slovak Republic,
registered in the Commercial Register maintained by the District Court in Nitra,
Section Sro, Entry No. 58560/N
What personal data do we process?
We
process the following categories of personal data:
-
name, surname and form of addressing (Mrs, Mr),
-
contact details (postal address, e-mail address,
telephone contact),
-
data necessary for your basic identification and
delivery of goods,
-
Information relating to the IP address of the
device from which you log in to our website,
-
Information about interactions between you and
us, such as history of your relationships and transactions with us, including
your visits, purchases, saved product configurations, visits for repair and
modification purposes, contacts with us, your questions, requests, applications
and complaints addressed to us, and history of their assessment;
-
information about the goods you purchased (e.g.
date of order creation, date of delivery, method of delivery, information
concerning repair, service, claimed product defects,
-
information about your interests and preferences,
-
information about the consents you have given us
and our management of those consents (for example, including keeping a register
of revoked consents).
In
case your purchase will be subject to our legal obligations to prevent money laundering and the
prevention of terrorist financing under the Act (AML), we will process, in
addition to the above, other categories of personal data:
-
Date of Birth,
-
Address of permanent residence or other
residence,
-
Nationality,
-
Type and number of identity document,
-
for a minor who does not have an identity card,
identification of the name, surname and birth registration number or date of
birth, permanent residence or other residence, the nationality of the minor and
his or her legal representative,
However,
at most to the extent established by valid legal regulations in the area of
protection against the legalization of income from criminal activity and in the
area of preventing the financing of terrorism.
Who are the processors of personal data and how
we transfer them
Your data may be transferred outside the Slovak Republic,
within the EEA countries, where appropriate (i) to achieve any of the purposes
set out in this information obligation, or (ii) to transfer your data to data
recipients in accordance with this information obligation. If your personal
data is transferred outside the Slovak Republic, we will ensure that your
personal data is protected by the following security measures:
- The
laws of the country to which your information is transmitted ensure an adequate
level of data protection (Article 45 GDPR) or
- The
transfer is subject to standard data protection clauses approved by the
European Commission (Article 46(2) of the GDPR) or to binding corporate rules
(Article 47 of the GDPR).
Retention period
of your personal data
Your
personal data is stored:
a)
for the period necessary for the performance of
the contract/service or guarantee and for the assertion or defence of related
claims, i.e. for a period of 10 years from the end of the year in which the
contract was concluded or until the claims expire;
b)
in the case of data processing on the basis of
law - for the period that is bindingly determined by the relevant law;
c)
in the case of data processing for direct
marketing purposes – until your consent has been revoked (if there is no other
legal basis for the processing). In addition, we will keep evidence of the
consent given for 10 years for evidentiary purposes - to prove the facts in the
event of any claims related to improper processing of personal data;
d)
to carry out our obligations related to product
safety, if any - for a period of 10 years from the end of the year in which the
contract was concluded;
e)
in the case of data processing for the purposes
of our legitimate interest – for a period until you object, subject to the
necessity of processing the data until the end of the period necessary to
establish, exercise or defend claims.
We
process data provided by you, data provided by controllers, document-based
data, website data (cookies), in relation to business entities and public
registers.
What are your fundamental rights?
You
have the following rights:
·
Right
to information:
You have the right to have clear, transparent and easily understandable
information about how we use your personal data and your related rights. This
is partly the reason why we provide you with information in the form of this
document.
·
Right
of access to data:
You have the right to access your personal data. You may also request access to
your personal data to verify that we use it in accordance with applicable data
protection laws.
·
Right
to rectification:
You have the right to have your personal data corrected if it is inaccurate or
incomplete.
·
Right
to erasure:
Also known as the “right to be forgotten”. In simple terms, this means that you
can request the erasure or removal of your personal data if there is no other
legal basis for the processing in order for us to continue using it. Please
note that this is not an absolute right and is subject to exceptions. We are
obliged to delete personal data without undue delay, if you exercise the right
to erasure or even without it, and if: personal data are no longer necessary
for the purpose for which they were obtained or otherwise processed and there
is a legal title to continue processing, if you revoke the consent on the basis
of which the processing of personal data is carried out, and there is no other
legal basis for the processing of personal data, if you object to the
processing of personal data and no legitimate reasons for the processing of
personal data prevail, if personal data is processed illegally, if the reason
for the deletion is meeting of an obligation under an act, a special regulation
or an international agreement to which the Slovak Republic is bound, or if the
personal data was obtained in connection with the offer of information society
services.
·
Right
to restriction of processing:
You have the right to block or prevent the further use of your personal data.
In the event of restriction of processing, we may continue to store your
personal data, but their use by us will be limited.
·
Right
to data transfer:
You have the right to obtain and reuse your personal data for your own purposes
within the various services. For example, if you terminate your relationship
with us, this right allows you to easily transfer, copy or transfer your
personal data within our IT systems and the systems of other entities without
thereby reducing their usability. Please note that this is not an absolute
right and is subject to limitations. You may exercise this right only if it
does not adversely affect the rights of others (for example, you may exercise
it in connection with personal data you have provided to us and which we have
processed for the purpose of performing our contract with you).
·
Right
to file a complaint:
You have the right to file a complaint about the way we handle or process your
personal data, both with us and at any time with a national data protection
authority. In the Slovak Republic it is the Office for the Protection of
Personal Data (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07
Bratislava, Slovak Republic;
https://dataprotection.gov.sk/uoou/; statny.dozor@pdp.gov.sk; +421 /2/ 3231 3214.
·
The
right not to be subject to automated decision-making: You have the right not to be subject to a
decision based solely on automated processing, including profiling, which
produces legal effects concerning you or similarly significantly affects you.
·
In the event of direct marketing, you have the
right to object at any time to the
processing of your data for direct marketing purposes. If you exercise this
right, we will stop processing your data for this purpose. You have the right
to object at any time to the processing of your data on the basis of the
legitimate interest mentioned above, as well as for other purposes of
processing. We will no longer process your data for these purposes unless we
can demonstrate that there are valid legal reasons in relation to these data
that outweigh your interests, rights and freedoms, or the data will be
necessary for us to establish, investigate or defend claims.
·
The right to withdraw consent to the processing
of personal data. You have the right to withdraw your consent at any time by
sending an e-mail and in case of difficulties also by means of a regular letter
to the following addresses: e-mail: sigmanit@icloud.com,
adresa: Zvolenská 2/13, 949 11 Nitra, Slovak Republic.
·
Your personal data will be profiled based on your
consent to receive tailored information. Sending customized marketing and
business communications may affect your purchasing decisions by
displaying or offering certain of our products and providing special discounts.
The provision of your personal data is voluntary, but failure to provide it
will result in the inability to conclude and perform the contract/provide
services.
Contact:
In matters relating to the protection of personal
data in the Slovak Republic, you can contact our contact point for the
protection of personal data at the following e-mail address: sigmanit@icloud.com.
What are the
purposes and legal basis for the processing of your data?
Depending
on our obligations and rights you grant us or which result from applicable law,
we process your personal data for this purpose and on this legal basis:
Purpose of processing |
Legal
basis |
Marketing
communication and market research: - sending
notices that may contain commercial content relating to the goods and
services offered; - our
direct offer of products and services (including offers of jewellery models,
accessories, investment options and other products and services, - invitations
to events organized by us (direct marketing), - sending
questionnaires about marketing surveys, surveys about our products and
services, and surveys containing marketing, advertising or promotional
content relating to you or our products and services, including their
adaptation to your needs and expectations, data collection from different
sources and profile creation (profiling for marketing purposes). We
want to ensure that we do not send you unnecessary information. We will make
every effort to ensure that what we send you is relevant and useful to you.
Based on the information collected, such as purchase history, visits to our
website, opening our e-mail correspondence, etc., we create a customer
profile so that we can provide you with personalized offers, notifications
and invitations. |
Your consent under the Article 6(1)(a) GDPR.
|
Taking pre-contractual actions based on your
interest in the offer For example arranging a date for the
presentation of selected goods, responding to your request for a meeting, or
information about our products and services or any other request for
information, granting and processing the right to a discount or special
offer. |
Acts
preceding and aimed at concluding the contract under the Article 6(1)(b) GDPR |
Performance of the concluded contract For the purposes of performance and under a
contract concluded relating to purchased products or services. |
Contract concluded under the Article 6(1)(b)
GDPR |
Compliance
with legal obligations Documentation of the service or contract
performed for accounting and tax compliance purposes. |
Legal obligation of the controller under the
Article 6(1)(c) GDPR In relation to the provisions in the field of
accounting and tax obligations |
Evaluation and improvement of the quality of
our products, services and customer experience Better choice of services according to customer
needs, overall optimization of our products and services, building knowledge
about our customers. For the purposes of evaluating and improving
the quality of our products and services, as well as for research and
development purposes, your personal data may be anonymised and, as such, used
by other entities we will cooperate with in the area. |
Our legitimate interest under the Article
6(1)(f) GDPR. Optimization of our internal processes and
offered products and services. |
Management,
maintenance and development of IT systems and data security |
Our legitimate interest under the Article 6(1)(f)
GDPR. Maintenance and correct use of our IT systems. |
Protection against claims Enabling
possible investigation, defence against third-party claims and for
evidentiary purposes, securing information in the event of a legal need to
prove certain facts. |
Our
legitimate interest pursuant to Article 6(1)(f) GDPR. The
need for evidence. |
Management of your personal data Keeping
customers’ personal data up to date, correcting and maintaining it in order,
as well as contacting customers in case of problems with customer requests
and centralizing, combining, sharing, updating and correcting your personal
information that you have provided to us or that has already been available
to us. Managing your consent, such as verifying that you have agreed to
receive marketing materials. Your
personal data is stored in protected repositories electronically in order to: - manage
your personal data effectively (e.g. ensuring that your questions are up to
date, solving your questions, their accuracy, enabling them to be shared in
accordance with the law, etc.); - provide
you with the best possible customer service, - support
and facilitate certain activities described in other processing purposes. |
Our legitimate interest pursuant to Article 6(1)(f)
GDPR. Processing of rights and obligations of
customers |
Maintaining relationships and solving your
queries Conducting
customer satisfaction surveys with our products and services. |
Our
legitimate interest under the Article 6(1)(f) GDPR After-sales
service |
Processing for the purposes of compliance with
a legal obligation of protection against the legalization of proceeds of
crime and the prevention of terrorist financing In
those cases where we are obliged under applicable law to comply with legal
obligations in the field of protection against legalization of proceeds of
crime and in preventing terrorist financing, we must process a larger range
of personal data. For these purposes, we have an obligation and we are
entitled to request from you further information necessary for your
identification, otherwise we cannot sell our goods or provide our services to
you. |
Legal
obligation of the controller under the Article 6(1)(c) GDPR In
the field of protection against the legalization of proceeds of crime and the
prevention of terrorist financing. |