INFORMATION ON THE PROTECTION OF PERSONAL DATA OF THE COMPANY'S CUSTOMERS
Fine Art STUDIO, s. r. o.
Content
LEGAL FRAMEWORK FOR THE PROTECTION OF PERSONAL DATA
E-SHOP OPERATOR
Identity of the e-shop operator
Contact details of the e-shop operator
PURPOSE OF THE PROCESSING OF PERSONAL DATA, LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA AND RETENTION PERIOD
CATEGORIES OF RECIPIENTS OF PERSONAL DATA
THE RIGHTS OF DATA SUBJECTS IN THE CONTEXT OF THE PROCESSING OF PERSONAL DATA
Right of access to personal data
Right to rectification of personal data
Right to erasure of personal data
The right to restrict the processing of personal data
Right to object to the processing of personal data
Right to data portability
Right to lodge a complaint with a supervisory authority
COOKIES COOKIES
LEGAL FRAMEWORK FOR THE PROTECTION OF PERSONAL DATA
The legal framework for the protection of personal data on the territory of the Slovak Republic is established by Act No. 18/2018 Coll. Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/49/EC (General Data Protection Regulation). In connection with the processing of our customers' personal data, we hereby provide the following information on the protection of their personal data in accordance with the aforementioned legislation:
E-SHOP OPERATOR
Identity of the e-shop operator:
Name of the controller: Fine Art STUDIO, s. r. o.
Strmý vŕšok 33, 841 06Bratislava - Záhorská Bystrica
Operator ID: 45 847 762
VAT number of the operator: 2023117316
Registered in the Commercial Register of the District Court Bratislava I, Section: Sro, Insert No.: 67632/B
Contact details of the e-shop operator:
E-mail: info@oilandia.com
Mobile: +421 904 200 300
PURPOSE OF PERSONAL DATA PROCESSING, LEGAL BASIS OF PERSONAL DATA PROCESSING AND STORAGE PERIOD OF PERSONAL DATA
Pursuant to Article 13(1)(c) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/49/EC (General Data Protection Regulation), when obtaining personal data, the controller is obliged to provide the data subject with information regarding the purpose for which the personal data are to be processed as well as the legal basis for the processing of the personal data.
At the same time, in accordance with Article 13(2)(a) of the same Regulation, the controller is obliged to provide the data subject with information concerning the period of retention of the personal data or, where such information cannot be provided, to replace it with the criteria for determining it.
The activity of our business company is focused on the sale of goods through the e-shop and therefore the personal data of the data subjects are processed primarily for the purpose of concluding a purchase contract or for the purpose of fulfilling the purpose of pre-contractual relations.
CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Pursuant to Article 13(1)(e) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/49/EC (General Data Protection Regulation), when obtaining personal data, the controller is obliged to provide the data subject with information concerning the recipients or categories of recipients in the event that such persons or categories of recipients exist.
The personal data of the data subjects, i.e. our customers, are processed by employees of our company to the extent necessary for the fulfilment of the purpose of the pre-contractual and contractual relationship. Our company, as a controller, is obliged to oblige natural persons who come into contact with the personal data of the data subjects to confidentiality in accordance with the provisions of Section 79(2) of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Additions to Certain Acts, to confidentiality of the personal data. These persons are subsequently obliged to observe the obligation of confidentiality even after the termination of their employment.
In view of the fact that our company also cooperates with other entities, such as accounting service providers, law firms and others, in fulfilling its obligations related to its business activities, it concludes agreements on confidentiality and protection of confidential information with these entities within the meaning of the provisions of Sections 269(2) and 271 of Act No. 513/1991 Coll., Commercial Code. Our company concludes these contracts with legal entities or natural persons in the capacity of entrepreneurs, who, although they are not in the capacity of a controller and therefore do not process the personal data of customers directly on behalf of our company, have access to their personal data in a certain way. These persons are:
Law firms
Providers of consultancy and educational services
Providers of accounting services
Providers of tax advisory services
IT service providers
Audit service providers
RIGHTS OF DATA SUBJECTS IN THE PROCESSING OF PERSONAL DATA
Within the meaning of Article 13(2)(a) of the GDPR, the data protection authorities shall have the right of access to the data subject's data. (b) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/49/EC (General Data Protection Regulation), the controller is obliged to provide the data subject with information relating to the existence of the right of the data subject to request from the controller access to personal data relating to him or her and the right to rectification or erasure or restriction of processing, or the right to object to the processing of personal data, as well as the right to data portability. Customers of our company may exercise these rights by telephone, by e-mail or by written request sent to our company's address.
Pursuant to Article 13(2)(d) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/49/EC (General Data Protection Regulation), the controller is obliged to provide the data subject with information relating to the existence of the data subject's right to lodge a complaint with a supervisory authority.
Right of access to personal data
As data subjects, our customers have the right to obtain confirmation as to whether we are processing their personal data and, in the case of processing, to be informed about the nature of the data processed, the purpose of the processing of the personal data and the category of recipients of the personal data, the period of retention of the personal data and their possible transfer to third countries.
Right to rectification of personal data
In the event of an error on our part, our customers have the right to ask our company to rectify their personal data and, in the case of registration, have the right to individual rectification.
Right to erasure of personal data
Our customers have the right to have their personal data processed by us erased if the conditions are met. These conditions include the cessation of the purpose for which the personal data was processed, withdrawal of consent to processing, unlawful processing of personal data and objection to the processing of personal data on the grounds of legitimate interests.
In the event of exercising the right to erasure, the personal data will be erased by our company.
Right to restriction of processing of personal data
Our customers have the right to restrict the processing of personal data.
Right to object to the processing of personal data
Our customers have the right to object to the processing of their personal data in the case of the processing of personal data based on the legitimate interest of our company and in the case of the processing of their personal data for PR purposes.
Right to data portability
Our customers have the right to make a request to our company for the transfer of personal data if they need or wish to transfer it. In this case, our company will transfer the personal data to a data controller of our customers' choice.
Right to lodge a complaint with a supervisory authority
Our customers have the right to lodge a complaint with the supervisory authority, which in the territory of the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27, in case of suspicion that their personal data is being processed unlawfully, i.e. in violation of the applicable legislation.
COOKIES FILES
Cookies are basically small files that are stored on our customers' devices, which are e.g. mobile phone, computer, tablet or other. These files provide information about which website they come from, the length of time they are stored on your device and also store certain values such as the language of the page.
Due to the fact that our company operates on the Internet, where it offers certain services, we also use cookies.
Our company uses functional and technical cookies that serve us to ensure the proper functioning of our website. In the case of functional and technical cookies, due to the short-term nature of their storage, consent is not required to access and store them.
In case of any doubts or interest in any further information related to data protection, our customers can contact us by email at: info@oilandia.com.