Processing of personal data

Protection of personal data

• we approach the processing of your personal data only in a legal manner, professionally and sensitively
• Your personal data is stored in a secure information system
• all persons who come into contact with your personal data on the part of the operator are properly informed about the legal treatment of them and are bound by confidentiality
• we obtain from you only those data that are necessary to fulfill the purpose on the basis of which you contacted us
• you can ask us to delete our email communication history at any time by email, in writing or in person

I.
The controller of personal data according to § 5 letter o) Act no. 18/2018 Coll. on the protection of personal data as amended (hereinafter referred to as "the Act") is:

Himalaya Trade s.r.o.
address: B.Němcovej 1907/11, Topoľčany, Slovakia
IČO (Business ID nr.): 51044684
DIČ (Tax identification nr.): 2120589009

phone: +421 949 379 678
email: eshop@tibetskemisky.sk

• the operator obtains personal data through the website www.tibetskemisky.sk

 
II.
The purpose of personal data processing

• the purpose of personal data processing is pre-contractual relations
• the purpose of personal data processing is customer identification
• the purpose of processing personal data is to confirm interest in a service or product by phone or e-mail
• the legal reason for the processing of personal data is the fulfillment of the contract between you and the operator according to § 13 par. 1 letter b) of the Act

 
III.
List of processed personal data

• the operator processes your contact data for the purposes of pre-contractual relations, data for delivery
• contact data are name, surname, telephone number (for the purpose of order confirmation, communication with the customer, delivery of goods), e-mail address (for the purpose of sending order confirmation and communication with the customer)
• delivery data are recipient's name and surname, title, delivery address

IV. 
Recipients of personal data (subcontractors of the operator)
Recipients of personal data are persons:

• participating in the delivery of goods / services / making payments based on the contract
• providing services for operating an eshop (Wexbo) and other services in connection with the operation of an eshop,
• external carriers: Slovak Post, Packeta (Zásilkovna) and their contracted carriers for the Czech and Slovak Republics such as DPD, GLS, Česká pošta, to whom personal data are provided exclusively for the purpose of fulfilling the order, i.e. delivering the goods to the buyer.
• Tatiana Šutovská as an intermediary based on the GDPR Agreement on the provision of accounting services

V.
Voluntary provision of personal data

• the operator obtains only those personal data of customers that are necessary to fulfill the obligations that the customer, interested in the service or goods, expects from him
• the operator obtains personal data from customers to the extent necessary to fulfill the obligations arising from the contract concluded between the operator and the customer
• the operator processes the personal data of the person concerned only for the time necessary to fulfill the purpose resulting from the contract and from generally binding legal regulations

 
VI.
Disclosure of data

• the operator does not publish the obtained personal data of customers and does not intend to transfer personal data to a third country (a country outside the EU) or an international organization.

 
VII.
Processing conditions

• the operator has taken appropriate technical, organizational and personnel measures corresponding to the way personal data is processed, taking into account in particular the applicable technical means, the confidentiality and importance of the processed personal data, as well as the scope of possible risks that are capable of disrupting the security or functionality of its information systems
• the operator undertakes to handle and dispose of the personal data of the affected person in accordance with the applicable legal regulations of the Slovak Republic and EU regulations
• after fulfilling the purpose of processing, the operator shall immediately dispose of the personal data of the person concerned.

VIII.
Personal data retention period

• the operator stores personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between the person concerned and the operator and the application of claims from these contractual relationships
• after the expiration of the personal data retention period, the operator deletes the personal data

IX.
Rights and obligations of the person concerned

• ​​​​​​​the customer of the operator as the person concerned is obliged to provide complete and true data

X.
Instruction on the rights of the person concerned

Under the conditions set out in the Act, the data subject has the right to:

• ​​​​​​​the right to access your personal data according to § 21 of the Act,the right to correct personal data according to § 22 of the Act, or restriction of processing according to § 24 of the Act,
• the right to erasure of personal data according to § 23 of the Act,
• the right to object to processing according to § 27 of the Act,
• the right to data portability according to § 26 of the Act,
• the right to withdraw consent to processing in writing or electronically to the address or email address of the operator listed in art. And these conditions
• in case of doubts about compliance with obligations related to the processing of personal data, contact the Administrator or the Office for the Protection of Personal Data

XI.
Terms of personal data security​

• ​​​​​​​the operator declares that he has taken all appropriate technical and organizational measures to secure personal data.
• the operator has taken technical measures to secure data stores and personal data stores in documentary form, in particular:

            - security of data storage with an antivirus program,
            - password and encryption of data stores containing personal data
            - regular creation of backups
            - lockable technical security of premises in which personal data are stored in paper form

XII.
Final Provisions​

• ​​​​​​​by sending an order from the online order form, you confirm that you, as the person concerned, are familiar with the terms of personal data protection and that you accept them in their entirety.
• you agree to these terms and conditions by ticking the agreement via the internet form. By checking consent, you confirm that you are familiar with the terms of personal data protection and that you accept them in their entirety.
• the operator is authorized to change these conditions. The new version of the personal data protection conditions will be published on its website and at the same time it will send you a new version of these conditions to your e-mail address that you provided to the operator.