Privacy Policy

Declaration on the processing of personal data

 

 

Dear client,

PINNAC COMPANY, s.r.o. Stará Vajnorská 17 831 04 BratislavaID: 35757078, hereinafter referred to as “the company or operator”, processes your personal data in order to provide high-level services, including more efficient use of our client service, fulfillment of legal obligations and provision of information about our news , including various benefits (see ” General Terms and Conditions” ). We process your personal data only on the basis of the legal conditions specified in the Regulation [1] or the Act [2] on the protection of personal data. Our goal is effective protection of your personal data and a transparent procedure for providing information.

 

 

1. Principles of personal data protection

As an operator, the company has a legal obligation to provide your personal data during inspection, surveillance activities or at the request of authorized state authorities or institutions, if this results from special regulations [3] .

Your personal data will be stored securely, in accordance with the security policy of the operator and intermediary, and only for the time necessary to fulfill the purpose of processing. Access to your personal data will only be granted to persons authorized by the operator to process personal data, who process them on the basis of the operator’s instructions, in accordance with the operator’s security policy.

Your personal data is backed up in accordance with the operator’s retention rules. Your personal data will be completely deleted from the backup storage as soon as possible in accordance with the backup rules. Personal data stored on backup storages serves to prevent security incidents, in particular disruption of data availability as a result of a security incident. The company is obliged to ensure data backup in accordance with the security requirements of the Regulation and the Personal Data Protection Act.

When personal data is processed by the operator, you are the affected person , i.e. the person about whom personal data relating to him/her are processed.

 

In accordance with the Regulation and the Personal Data Protection Act, the company, as an operator, processes your personal data to the extent and under the conditions established in special regulations. We process your personal data on the basis of the legal conditions specified in Art. 6 Regulations.

 

What personal data do we process about you.

When you use our services, we collect various types of data, such as your username and password, your contacts, and other settings. We monitor which products you view on our website and from which device, which of our e-mailed offers interested you, and we derive additional data about you from this in order to show you tailored offers and to further improve our website in the future. If you make a purchase with us or create an account, we also work with your first and last name, your orders and the data you set in your account.

We process the following personal data:

  1. identification data , which in particular means first and last name, username and password;
  2. contact data means personal data that allows us to contact you, in particular e-mail address, telephone number, delivery address, billing address and your contact on social networks;
  3. your settings , which means data in your account, in particular saved addresses and profiles, newsletter settings, membership in loyalty programs, shopping lists, tracked products, your evaluation of products and services and completed questionnaires;
  4. data about your orders , which are mainly product data
  5. and about the services you have ordered, the method of delivery and payment, including the payment account number and data on complaints;
  6. data about your behavior on the website , including when you view it through our mobile application, in particular the goods and services you view, the links you click on, the way you move around our website and screen scrolling, as well as data about the device from which you you browse our website, such as the IP address and the location derived from it, device identification, its technical parameters such as the operating system and its version, screen resolution, the browser used and its version, as well as data obtained from cookies and similar technologies for device identification;
  7. data about your behavior when reading the messages we send you , in particular the times of opening the messages and also data about the device on which you read the messages, such as the IP address and the location derived from it, the identification of the device, its technical parameters such as the operating system and its version, resolution screens, used browser and its version;
  8. derived data , which means personal data derived from your settings, data about the goods and services you purchase from us, data about your behavior on the web and data about your behavior when reading emails we send you; this is mainly data about your gender, age, financial situation, purchasing behavior and relationship to various goods and services;

 

 

Purposes of processing your personal data

 

E-shop

If you register with us

In order to register, you must visit our website, and if you do, we also perform the following processing:

Processing based on contract performance

If you create an account on our website, we process your identification and contact details, your settings and your order details (if you later purchase from us), based on the performance of a contract with you (without your consent), in order to maintain your user account. The contract on which our processing is based is created by the creation of your account. For this purpose, we use personal data for the duration of the existence of your account, which you can delete at any time.

Processing based on legitimate interest

If you create an account on our website, we process your identification and contact data, your settings, data about your orders (if you later buy from us, even if you buy without logging in) and data about your behavior on the website and behavior when reading e- emails also on the basis of our legitimate interest (ie without your consent), for the purpose of:

  • obtaining information on the basis of which we can improve our services for you in the future to make your shopping experience even better, in particular to determine your satisfaction with our services; our legitimate interest here is to improve our services to you and
  • providing you with tailored offers and targeted advertising that we may send to you by email, social media or other electronic means, send you by post or display on our website; our legitimate interest here is the effective promotion of our products and services.

In order to be able to prepare a tailor-made offer for you, we analyze the above data and obtain additional derived data from them , which we use for this purpose. In this way, we can also use data about your web behavior that we obtained before you registered (if you have not turned off web personalization in the Privacy Settings in the past), and we can collect data about your web behavior even if you do not log in (e.g. when we identify you with a cookie). According to this data, we also divide our users into different groups, where each group receives its own specific offer.

So, if you viewed a product offer on our website or clicked on it in an e-mail we sent you, we can display this product on the first page of our website on your next visit, or send you an offer for this product by e-mail. Based on the products you have viewed, we can also judge which customer group you belong to and, accordingly, offer you other products on the website or by e-mail that we think may be of interest to you.

To disable this feature, please contact us at the email address below.

Based on our legitimate interest (that is, without your consent), we will also use your settings to test new features and applications before deployment, as described in the Cookies section.

For these purposes, we use personal data for the duration of the existence of your account, which you can delete at any time. You have the right to object to this processing.

If you buy from us

In order to be able to shop with us, you must visit our website, which is why the processing described in the Cookies section applies to you. If you make a purchase from us, we also carry out the following processing:

Processing based on contract performance

If you buy from us as a natural person, we process your personal data for the purpose of processing your order, your identification and contact data and data about your orders . If you have a user account with us, we can also use your settings for this purpose .

If you purchase from us as a representative of a legal entity, we process the same data for the same purpose based on our legitimate interest in concluding and fulfilling a contract with the person you represent.

The fact that we use this data for the purpose of processing your order means that we use it in particular:

  • so that you can complete your order on the website, for example, so that the goods placed in the basket are not deleted, or the data from the order in progress;
  • so that we can communicate with you about the order, for example, to send you a confirmation of the order or to notify you about the shipment of the goods;
  • for the needs of payment for goods, including ensuring deferred payment; in this context, we may also transfer your data to our partners operating payment systems or ensuring payment deferral, as described in the section Who processes your personal data and to whom do we transfer it?;
  • for the needs of goods delivery; in this context, we will transfer your data to postal carriers (UPS, Slovak Post) exclusively for the purpose of delivering these goods; as described in Who processes your personal data and to whom do we pass it on?;
  • in connection with a complaint about ordered goods or services; in this context, we may transfer your data to mail carriers (UPS, Slovak Post), as described in the section Who processes your personal data and to whom do we transfer them?;

For this purpose, we use personal data for the time necessary to process your order, or processing a contractual requirement such as a claim.

Processing based on legitimate interest

If you buy from us, we will keep your identification and contact details and details of your orders based on our legitimate interest (without your consent) for the purpose of protecting legal claims and our internal records and control. Our legitimate interests here are the protection of legal claims and control of the proper provision of our services.

Furthermore, based on our legitimate interest (that is, without your consent), we process your identification and contact data, your settings and data about your orders (if you later buy from us) for the purposes of:

  • obtaining information on the basis of which we can improve our services for you in the future to make your shopping experience even better, in particular to determine your satisfaction with our services; our legitimate interest here is to improve our services to you and
  • by providing you with tailored offers and targeted advertising that we may send to you by email, text message, social media, notify you by telephone or other electronic means, or send you by post; our legitimate interest here is the effective promotion of our products and services. In order to be able to prepare a tailor-made offer for you, we analyze the above data (that is, your identification and contact data and data about your orders) and obtain additional derived data from them , which we use for this purpose. According to this data, it also divides our users into different groups, where each group receives its own specific offer. If you do not register with us, we do not use data about your behavior on the web to prepare the offers with which we address you.

In order to create customized offers and targeted advertisements that we will show you on the website, as described in the Cookies section, we will also use data about your orders .

In order to protect legal claims and our internal records and control, we process data during the 3-year limitation period and one year after its expiration with respect to claims made at the end of the limitation period. In the event of initiation of judicial, administrative or other proceedings, we process your personal data to the extent necessary for the entire duration of such proceedings and the remaining part of the limitation period after its termination.

For the other stated purposes, we use personal data for a maximum of 6 months. You have the right to object to this processing carried out on the basis of our legitimate interest.

Processing based on the fulfillment of legal obligations

We also have to fulfill certain statutory obligations. If we process your personal data for this very reason, we do not need to obtain your consent for such processing. On this legal basis, we process your identification and contact data, order data, mainly due to compliance with the following laws:

  • Act No. 40/1964 Coll., Civil Code,
  • Act No. 250/2007 Coll., on consumer protection,
  • Act No. 102/2014 Coll. on consumer protection when selling goods remotely or off-premises
  • Act No. 222/2004 Coll., on value added tax,
  • Act No. 431/2002 Coll., on accounting.

For these purposes, we use personal data for a maximum of 10 years from the issuance of the last document for your order.

If you are the recipient of goods or services ordered from us

If you are the recipient of goods or services ordered from us, we process your identification and contact data :

  • based on our legitimate interest in the preparation, conclusion and performance of the contract with our customer. Fulfilling this contract is our legitimate interest;
  • based on our legitimate interest in obtaining information on the basis of which we can improve our services in the future or information for the creation of our internal statistics and reports; our legitimate interest here is to improve our services to our customers;
  • for the purpose of fulfilling legal obligations, in particular according to Act no. 222/2004 Coll., on value added tax and Act no. 431/2002 Coll., on accounting.
  • for the purpose of protecting legal claims and our internal records and control; our legitimate interests here are the protection of legal claims and control of the proper provision of our services.

For the preparation, conclusion and fulfillment of the contract with our customer, we use personal data for the time necessary to process the order. After the expiration of this period, we will continue to retain the data based on our legitimate interest for the purpose of protecting legal claims and our internal records and control, namely during the duration of the limitation period of 3 years and one year after its expiration with regard to claims made at the end of the limitation period. In the event of initiation of judicial, administrative or other proceedings, we process your personal data to the extent necessary for the entire duration of such proceedings and the remaining part of the limitation period after its termination. Our legitimate interests here are the protection of legal claims and control of the proper provision of our services. For the purpose of fulfilling legal obligations, we use personal data for a maximum of 10 years for the relevant order.

You have the right to object to this processing based on corrective interest.

If you communicate with us through different channels:

If you communicate with us through various channels, in particular through the call center, e-mail, chat tools and social networks, we will process your identification and contact data and records of the communication that took place, including call recordings , based on our legitimate interest (ie without your consent) for the purposes :

  • fulfilling your requests; if you have purchased from us and your request relates to an order, we can implement this processing based on the fulfillment of the contract with you;
  • record of your requests so that we can check that we fulfill them properly and on time;
  • proving that we have accepted and processed your request, e.g. When you order any goods from us in this way or make a complaint;
  • their analysis to improve the quality of our services.

For these purposes, we store personal data for a period of 3 months. If you place an order with us using one of the channels, we can keep the data for the protection of legal claims for the duration of the limitation period of 3 years and one year after its expiration with regard to claims made at the end of the limitation period. In the event of initiation of judicial, administrative or other proceedings, we process your personal data to the extent necessary for the entire duration of such proceedings and the remaining part of the limitation period after its termination.

You have the right to object to processing based on our legitimate interest.