The protection of the personal data you entrust to us is important to us and we do everything we can to make you feel safe with us. The purpose of these Terms of Personal Data Processing (hereinafter referred to as the “Terms”) is to explain to you how your personal data, which you provide to us when using our website www.fexinterier.sk (hereinafter referred to as the “Website”), will be processed and protected. At the same time, we would like to inform you about your rights in connection with the processing of your personal data.
These Terms and Conditions inform you about the general rules for the processing of personal data when using the website and Social Media Accounts. Please note that the specific conditions for the processing of your personal data depend on the purpose of the personal data processing. However, you will be informed about everything in due time. :
- Who are we and how can you contact us?
Our company FEX sro , with its registered office at Oravská Jasenica 137, 029 64 Oravská Jasenica , Company ID: 48 340 812, operates the website (hereinafter referred to as the “operator”).
When processing personal data, we are guided by Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), (hereinafter referred to as the “GDPR”) and Act No. 18/2018 Coll . on the protection of personal data and on amending and supplementing certain acts, as amended (hereinafter referred to as the “Act on the Protection of Personal Data”).
However, we will be happy to provide you with any information regarding the handling of your personal data at the e-mail address obchod@fexinterier.sk
2. For what purposes do we process your personal data?
On behalf of the controller, we only collect from you the data that we actually need to provide a full-fledged service in the field of design work – when providing client and product support, or when handling any complaints that may arise. The purposes of processing personal data in individual process steps are:
- When communicating with clients by telephone, in person, by electronic/paper mail or via an online contact form, we process data pursuant to Article 6(1)(f) of the GDPR Regulation – legitimate interest in order to respond to your inquiry/suggestion or question regarding the services provided and products supplied, when it is necessary to verify the relevance of the request, or to make any subsequent contact with you as the data subject.
- In the event of an interest in our services, when placing an order for services by telephone, in person, or by electronic/paper mail, we process data pursuant to Article 6(1)(b) of the GDPR Regulation – where data processing is necessary to carry out the necessary measures according to your requirements as the customer before concluding and confirming the order, i.e. during the pre-contractual relationship process – e.g. client identification during the creation, definition, or modification of the order, specifying or changing the address and delivery time, or adding other necessary data to conclude the order
- After confirming the order, i.e. after the contractual relationship between the operator and you as the data subject, the customer, during the necessary cooperative communication with the client, when informing about changes in the order status, during final personal delivery, or when preparing and issuing a tax document (invoice), we process data pursuant to Art. 6 para. 1 letter b) of the GDPR Regulation – where data processing is necessary for the fulfillment of the contractual relationship, to which you as the data subject, the client, are a contracting party.
3. List of processed personal data
- Data required for sending a message via the online contact form
- Name
- Email address
- Data required for order processing
- First and last name
- Email address
- Permanent residence address or other correspondence address for delivery of the shipment
- Phone number
- Billing information
- First and last name
- Permanent residence address or other correspondence address for invoicing purposes
- account number / IBAN
- Contact details in case of delivery of the shipment
- First and last name
- Permanent residence address or other correspondence address for delivery of the shipment
- Phone number – for the purpose of confirming the date, time and place of delivery, or in case of making changes to the order
- E-mail address – for the purpose of sending electronic order confirmation and changing the order status, as well as as an emergency means of communication if the customer is not available at the specified telephone number.
4. Processing and storage period of your personal data
- We must store your personal data that we have processed or are processing pursuant to Article 6(1)(b) of the GDPR Regulation – as part of fulfilling the operator’s obligations towards customers and clients, in order to fulfill our legal obligations in the area of taxes and accounting, which arise from generally binding legal regulations (e.g. storing individual accounting records of your confirmed orders and invoicing for the purpose of delivering selected goods to your contact address pursuant to Act No. 431/2002 Coll. on Accounting, as amended, for cases of proving compliance with tax obligations pursuant to tax legislation Act No. 595/2003 Coll. on Income Tax, Act No. 563/2 009 Coll. on Tax Administration, etc.) for the period specified in the relevant legal regulations. In any case, we follow the principle of minimization of personal data retention pursuant to Article 5(1)(e) of the GDPR, and therefore your personal data that is not subject to archiving under specific legal regulations will be deleted or anonymized.
- Personal data processed pursuant to Art. 6 para. 1 letter f) of the GDPR Regulation – based on legitimate interest, which were obtained in response to your inquiry/inquiry or question regarding the services provided and products supplied, when it was necessary to verify the relevance of the request, or to make any subsequent contact with the client/data subject, after processing and were not subsequently forwarded to a pre-contractual or contractual relationship, are deleted immediately.
As the Controller, we will ensure the deletion of personal data without undue delay after: all contractual relationships between you and us as the controller have been terminated; and/or
– all your obligations to the operator have ceased; and/or
– all your complaints and requests have been handled; and/or
– all other rights and obligations between you and us as the controller have been settled; and/or
– all processing purposes set out in legal regulations or processing purposes for which you have given us consent have been fulfilled, if the processing was carried out on the basis of the consent of the data subject; and/or
– the period for which consent was granted has expired or the data subject has withdrawn their consent; and/or
– the data subject’s request for erasure of personal data has been granted and one of the reasons justifying the granting of this request has been met; and/or
– the decisive legal event for the termination of the purpose of processing has occurred and at the same time the protective retention period defined with regard to the principle of minimization of the retention period of personal data has expired;
– and at the same time the legitimate interest of the operator no longer exists, all obligations set out in generally binding legal regulations that require the retention of the personal data of the data subject (in particular for the purposes of archiving, tax control, etc.) have ceased to exist, or which would not be possible to fulfil without their retention. We do not systematically process any accidentally obtained personal data for any purpose defined by us in any way. If possible, we will inform the data subject to whom the accidentally obtained personal data belong about their accidental acquisition and, depending on the nature of the case, we will provide them with the necessary cooperation leading to the restoration of control over their personal data. Immediately after these necessary actions aimed at resolving the situation, we will immediately destroy all accidentally obtained personal data in a secure manner. If you are interested in further information about the specific retention period of your personal data, please contact us using the contact details provided on our website.
5. Data disclosure
Our company does not publish the obtained data under any circumstances.
6. Cross-border transfer of personal data
There is no cross-border transfer of personal data.
7. Legal basis for processing personal data
When operating the website, we process personal data on the basis of various legal bases (consent, performance of a contract, compliance with a legal obligation, legitimate interest, etc.) depending on the purpose of processing personal data (conclusion and performance of a contract, organization of a competition, sending a newsletter , etc.). With regard to the purpose of processing personal data, we will inform you about the legal basis and purpose of processing personal data, recipients or categories of recipients, retention period of personal data and other relevant information. We will also provide you with information about your rights in connection with the processing of personal data by us.
8. Protection of personal data and its disclosure
Your personal data is safe because its processing is carried out automatically through our information systems and through appropriate technical and organizational measures guaranteeing the security of personal data, including protection against unauthorized processing of personal data, accidental loss of personal data, deletion of personal data or damage to personal data.
From the point of view of the Act on the Protection of Personal Data, we have the status of a controller, which means that it is our company that defines the purposes of processing. In connection with our activities, your personal data may be transferred or made available to other entities, whether in the position of an independent controller or an intermediary. As a controller, we ensure that everyone to whom your personal data is transferred adheres to a high standard of protection and has adequate personal, technical, organizational and professional competence. In no case do we provide personal data to an entity where this standard is not ensured.
We provide personal data to the necessary extent to the following groups of recipients:
- to persons who ensure the technical operation of our services, website, social media accounts and information infrastructure for us;
- to persons who ensure the security and protection of our services, website , and information infrastructure for us and who also regularly monitor and test this security and protection;
- to persons who provide us with analytical and statistical services, for the purpose of improving and optimizing our services, website and social media accounts.
With regard to the purpose of processing personal data, we will inform you in more detail about the recipients or categories of recipients .
9. Links to other sites
The Website may contain links to our partners’ websites and other websites that are not operated by us. If you click on a link to a third-party website, you will be redirected to that website. We strongly recommend that you read the privacy policy of each website you visit.
10. How long do we keep data?
The processing of your personal data is carried out in accordance with legal requirements, which means that we do not store personal data longer than is necessary for the purpose of processing.
If we process your personal data on a legal basis – your consent, we process your personal data for the period for which you have granted us your consent to process your personal data or for the period necessary for the relevant purpose of processing.
If we process your personal data on the legal basis of performance of a contract, we process your personal data for the entire duration of the contractual relationship between us and you or for the period necessary for the relevant purpose of the processing. If the contract is terminated, we will normally proceed to the destruction of your personal data, unless it is possible to process your personal data on another legal basis.
If we process your personal data on a legal basis – fulfillment of legal obligations, we process personal data for the period specified by legal regulations.
If we process your personal data on a legal basis – our legitimate interest or the legitimate interest of third parties, we process your personal data for the duration of the legitimate interest.
When processing personal data for the purpose of participating in a competition organized by us to promote our products or services, this period is specified in the specific competition statute or competition conditions.
11. What are your rights when processing personal data?
In connection with the personal data we process about you, you have several rights that you can exercise.
- Right to access personal data
You have the right to access and obtain a copy of your personal data. If we process your personal data, we will provide you with information about what data we process about you, for what purpose, to whom we have provided your personal data, whether it has been transferred to a third country and how long we will keep this data. If you request a copy by electronic means, we will provide you with the information in a commonly used electronic format, unless you request another method.
- Right to rectification of personal data
If your personal data is incorrect, you have the right to have it corrected. If it is incomplete, you have the right to have it completed. You can correct or complete your personal data in your Profile settings, or you can ask us to correct it.
- Right to restrict the processing of personal data
You have the right to restrict processing in cases specified by the Personal Data Protection Act, for example, until their correction (or until their accuracy is verified), or if the processing of personal data is unlawful and you request the restriction of their use instead of deleting personal data, or we no longer need the personal data for the purpose of processing them, but you need them to assert a legal claim.
- Right to erasure of personal data (right to be forgotten)
You have the right to erasure of data in cases specified in the Personal Data Protection Act, unless this right is restricted by law. The right to erasure applies, for example, if your personal data are no longer necessary for the purposes for which they were collected, or if you withdraw your consent to the processing of your personal data and there is no other legal basis for their processing.
- Right to personal data portability
If we process data based on your consent or a contract and the processing of personal data is carried out by automated means, you have the right to data portability (the right to receive data in a structured, commonly used, machine-readable format and the right to transmit it to another controller).
- Right to withdraw your consent
If we process your personal data based on your consent, you have the right to withdraw your consent to the processing of your personal data at any time.
- The right to file a complaint regarding the protection of personal data
If you feel that your rights have been violated, you can submit a proposal for proceedings on the protection of personal data to the Personal Data Protection Office of the Slovak Republic pursuant to Section 100 et seq . of the Personal Data Protection Act.
- Right to object to the processing of personal data
Pursuant to Section 27(3) of the Data Protection Act, we expressly inform you of your right to object to the processing of personal data concerning you (i) on grounds relating to your particular situation pursuant to Section 13(1)(e) (processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller) or (f) (processing of personal data is necessary for the purposes of the legitimate interests of the controller or a third party) of the Data Protection Act, including profiling based on these provisions, and (ii) for the purposes of direct marketing, including profiling to the extent that it is related to direct marketing.
With regard to the purpose of processing personal data, we will inform you in more detail about your rights related to such processing.
12. Protecting children’s privacy
Our services are also intended for persons under the age of 16. If you are under the age of 16, please ask your legal guardian (parent) for consent to the processing of personal data. If we discover that we have obtained personal data from persons under the age of 16 without verifying parental consent, we will take steps to remove this information from our servers and databases.
13. How can you contact us?
If you have any questions regarding the processing of your personal data, you can contact us at the above e-mail address, or by post at Kragujevská 3931/39, 010 01 Žilina. We respond to requests in paper or electronic form, usually in the same form in which the request was submitted.
We will provide you with information about the measures taken on the basis of your request pursuant to Sections 21 to 28 of the Data Protection Act within one month of receipt of the request. However, in justified cases, taking into account the complexity and number of requests, we may extend the aforementioned period by another two months, even repeatedly. We will inform you of any such extension within one month of receipt of the request, together with the reasons for the extension.
We generally provide information pursuant to Sections 19 and 20 of the Data Protection Act and notifications and measures taken pursuant to Sections 21 to 28 and 41 of the Data Protection Act free of charge. However, if your request is manifestly unfounded or disproportionate, in particular due to its repetitive nature, we may:
- to charge a reasonable fee taking into account the administrative costs of providing the information, of notifying or of taking the requested action; or
- refuse to act on the request.
- Change of Terms of Personal Data Processing
We may change these Terms from time to time (particularly in the event of technological changes, if we have added new website features or changed existing ones, or in the event of changes in legislation). The latest and most current version of the Terms will always be published on the website , including its effective date.
By using the Website after the effective date of such changes, we will consider you to have become familiar with the amended Terms and Conditions and their current version valid at the time of your use of the Website .