Personal data protection
We place great emphasis on the protection of your personal data in our activities. We collect and use only such personal data that we really need and use it exclusively for legitimate reasons. This information on personal data protection applies to all services we offer and contains information on the method of personal data processing. Your personal data is processed in accordance with all legally binding legal regulations in force in the Slovak Republic, in particular, but not exclusively, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC and Act No. 18/2018 Coll.
We encourage you to read this privacy notice carefully to familiarise yourself with all your rights before entering into a legal relationship with us.
By entering into a legal relationship with us and/or providing us with some of your personal data, you indicate that you understand how your personal data is processed.
1. Who are we?
Your personal data is processed by the controller:
Ecoprogress s.r.o.
Beskydská 9, 811 05 Bratislava – Old Town,
Company ID: 50 885 049
VAT ID: 2120550850
Contact: ecoprogress@ecoprogress.eu
2. What personal data do we process?
We only process personal data to provide you with our services and support, to comply with our legal obligations, and also to protect our legitimate interests.
In particular, we process the following categories of personal data:
- Basic identification data Basic identification data are part of every contract (accounting document) you conclude with us. These include: name and surname, academic title. If you do business as a natural person – entrepreneur or legal entity, this also includes an ID number, tax identification number, VAT number and place of business/registered office.
- Contact details Email, phone number, delivery address and billing address.
- Information about products and services (sending a quote) This information includes information about our products and services for the purpose of processing and delivering your order.
- Transaction data This is primarily payment information: bank account number or payment card details.
3. For what purpose do we process your personal data?
We process your personal data on the basis of the following legal bases:
(a) Performance of the contract
We process your personal data for the purpose of fulfilling the pre-contractual relationship and subsequently the contractual relationship pursuant to Section 13 (1) (b) of the Act, i.e. the personal data specified in the contract or in the accounting document are processed for the purpose of fulfilling pre-contractual and contractual rights and obligations (processing and delivery of the order).
(b) Statutory performance
We process your personal data for the fulfilment of a legal obligation imposed on the basis of generally binding legal regulations, e.g. for the purposes of invoicing and bookkeeping, the Act on Archives and Registries for archiving purposes, etc.
(c) Performance based on legitimate interest
See point 4.
d) Performance based on consent
See point 5.
e) Marketing purposes
We use your e-mail for marketing purposes only on the basis of your consent.
4. What is our legitimate interest?
We consider the storage of your basic personal data (name, surname, title, contact details – address, email and phone number) for legitimate interest as a legal basis for the enforcement of legal claims, fraud prevention, protection against abuse, processing.
5. How can you give us your consent?
We only ask for your consent to process your personal data in the following cases:
– Contact form – Registration – Sending the newsletter – Getting acquainted with the terms and conditions of personal data processing
You can give us your consent to the processing of your personal data by ticking the appropriate box with the processing of personal data (checkbox)
6. How can you withdraw your consent?
Consent to the processing of personal data is based on the principle of voluntariness. This means that you can withdraw it at any time in writing or electronically.
7. To whom do we share your data?
When processing your personal data, we also use the services of verified and contractually bound business partners who help us process and protect your personal data in the event of a mutual agreement. In order to provide our services, we provide personal data:
- External accounting firm
- Companies providing marketing services
- Law enforcement, state authorities, the financial administration, the tax office and the court if necessary
- Legal representative of the company in the case of debt collection or in the resolution of legal disputes
We have concluded a personal data processing agreement (brokerage agreement) with these processors and they are also bound by strict rules for the protection of personal data, including confidentiality in order to maintain the highest possible standard of legal protection corresponding to the requirements of the applicable legislation in the Slovak Republic
8. How long do we keep your personal data?
Accounting
Accounting documents are kept by law for a period of 10 years.
Debt collection/Litigation
Documents relating to litigation are retained for 10 years.
Registry
By law, the registry is stored for a maximum period of 10 years. Personal data that are not part of the registry records are stored until the purpose of personal data processing is fulfilled.
Newsletter
The consent is valid until its withdrawal, or until the end of the period of processing your personal data, no later than 5 years from the date of granting the consent. In each e-mail address you will find a link, after clicking on this link and confirming, your e-mail will be removed from the database.
Customer Registration
We process the data when registering in the Online Shop for a period of 10 years.
9. Where do we transfer your personal data?
We do not transfer the personal data we process for the above purposes to third countries.
10. Not satisfied?
If you are not satisfied with how we process your personal data, you can let us know by e-mail ecoprogress@ecoprogress.eu.
You also have the option of filing a complaint with the Office for Personal Data Protection if you believe that we are processing your personal data unlawfully.
11. How do we process your personal data?
We process your personal data in electronic and paper form, while we do not use the means of automated individual decision-making or profiling. The paper form of processing your personal data is carried out only for the purpose of bookkeeping, processing contractual documents and for the purposes of debt collection/litigation.
12. How do we ensure the protection of your personal data?
The security of your personal data is of paramount importance to us. In order to ensure the protection of your personal data, we have taken the necessary technical and organizational measures. Technical means for the processing of personal data are appropriately secured with passwords that are known only to authorized persons. These technical means are stored on our premises and are not taken out or transmitted. Only authorized persons who are properly instructed and who are familiar with our internal regulations and guidelines governing the handling of personal data have access to them. Data about you are stored in a protected database so that none of the data is leaked. The Website is secured by the SSL protocol from a globally recognized certification authority, i.e. the communication between you and our Website is encrypted with a security key so that it cannot be read by any third party.
13. Social Media
Our Website contains social media functions such as the "Like a share" button on Facebook and Instagram. The Operator may receive comments or links that the User has shared on Facebook or Instagram. In addition, the Operator may collect the data contained in the User's public profile on Facebook or Instagram and any information that the User shares using the Operator's services. Please note that you have already provided your personal data to Facebook, Inc. In this regard, please note that your interactions with these features are governed by the privacy policy of the company that provides these features, such as:
https://www.facebook.com/privacy/policy
https://privacycenter.instagram.com/policy
14. What rights do you have under the GDPR?
a) Right of access to data
You have the right to know whether we are processing your personal data. If we are processing it, you can ask us to access the data. Upon your request, we will issue a confirmation with information about the processing of your personal data by our company.
b) Right to rectification
You have the right to ensure that your personal data that we process is correct, complete and up-to-date. If your personal data is incorrect or out of date, you can ask us to correct or complete it.
c) Right to erasure
In certain circumstances, you have the right to have your personal data deleted. You can ask us to delete your data at any time. We will delete your personal data if
- We no longer need your personal data for the purpose for which you provided it to us;
- withdraw your consent;
- you object to the processing of your personal data;
- we process your personal data unlawfully;
- the personal data must be erased in order to comply with a legal obligation;
d) Right to restriction of processing
You can ask us to restrict the processing of your personal data. If we comply with your request, we will only store your personal data and will not work with it further. The restriction of the processing of your data will occur if
- you notify us that your personal data is incorrect until we verify its accuracy;
- we process your personal data unlawfully, however, you do not agree to their deletion and instead request that we only restrict the processing of your personal data;
- We no longer need your data, but you need it to establish, exercise or defend your rights;
- object to the processing of your personal data until we have verified whether our legitimate interests outweigh your reasons.
e) Right to data portability
You have the right to request that we provide you with your personal data in an electronic form that allows you to easily transfer your data to another company. We will comply with your request if you have provided us with personal data directly and have given us your consent to process it.
(f) Right to object
You have the right to object to us processing your personal data. Upon objection, we will delete your personal data. If we process your personal data in the following cases:
- on the basis of consent,
- due to our legitimate interest,
You can object to their processing if you have personal reasons to do so.
15. IP address and cookies
It is a set of numbers that uniquely identifies a device in a computer network. An IP address can be described as data relating to an identifiable person from a personal data protection perspective.
An IP address becomes personal data if:
- An IP address is personal data if it is processed by an internet service provider together with other identification (name, email, etc.),
- static IP addresses used by natural persons/individuals must be considered as personal data,
- a dynamic IP address will be considered personal data if the online service provider processes other identifiers considered personal data (e.g. name, surname, e-mail, etc.) together with the dynamic IP address.
During your visit, temporary statistical information is stored on our server, which is not personal data and which is necessary for the proper functioning of the Online Store (e.g. what you put in your shopping cart, when you came to the site, where you came to the site from) and for the purposes of targeting our marketing strategy.
We also use cookies on our server. These are small text files that can be sent to your browser when you visit our Website and stored on your device (computer or other internet-enabled device, such as a smartphone or tablet). Where any of the cookies implemented by us process personal data, this processing is carried out in accordance with Article 6 (1) (f) of the GDPR in order to protect our legitimate interests in the optimal functioning of the website and to ensure that our website is user-friendly and efficient, or this is done on the basis of your consent in accordance with Article 6 (1) (f) (a) of the GDPR. Cookies are stored in the file folder of your browser.
For more information about cookies, please visit the following websites:
AboutCookies.org – https://www.aboutcookies.org/
Wikipedia – https://sk.wikipedia.org/wiki/HTTP_cookie
Most internet browsers accept cookies automatically, but you can change your browser setting to delete cookies or not to accept them if this is your preferred setting.
The links below will help you find out how to work with your browser's cookie settings. Remember that if you disable cookies in your browser, these settings will apply to all websites, not just this one. However, disabling some cookies may have an impact on the functionality of our Website.
Browsers:
Microsoft Edge: support.microsoft.com
Chrome: support.google.com/chrome/answer/95647
Safari: support.apple.com/guide/safari/sfri11471
or in the case of mobile versions
Firefox: support.mozilla.org
Cookies usually contain the name of the Website from which they originate, validity and value. The next time you visit the Website, the web browser will reload the cookies and send this information back to the Website that originally created the cookie. The cookies we use do not harm your computer or other devices.
The information generated by the cookie about site usage (including IP address) is transmitted to Google. This information is then used to evaluate the visitor and compile statistical reports on site activity for us. Google Analytics cookies collect standard information about visitor behavior in anonymous form on the Internet.
We will never (and will not allow any third party) to use a statistical analytics tool to track or collect your personal information on our site. Google will not associate your IP address with any other Google data. Neither we nor Google will associate or attempt to associate your IP address with your identity.
If you visit our Website and the acceptance of cookies is enabled in your browser, we consider this to be acceptance of our Cookie Policy. We use cookies in order to optimally create and continuously improve our services, to adapt them to your interests and needs, and to improve their structure and content.
We use cookies to:
- the correct functionality of the cart so that you can complete your order as easily as possible
- Google Analytics
- Remembering your login credentials so you don't have to re-enter them
- Adapting our site to your requirements in the best possible way by tracking your traffic, your movement around the site and the features you use
- whether you have consented (or disagreed) to our use of cookies on this website and confirmed that you have read the Terms and Conditions and the Privacy Policy
16. Handling of applications
We will deal with all your requests and inform you of the outcome of their handling in the same way as you submit the request. When handling your request to exercise your data subject rights under the GDPR, we may ask you to credibly verify your identity.
Each of your requests for the exercise of the rights of the data subject will be assessed individually and competently, and we will always inform you of the outcome within one month of receipt of the request at the latest.
The one-month period may be extended by another two months if necessary, the extension is influenced by the complexity of the request and the number of requests. The process of handling a request related to the exercise of a data subject's right under the GDPR is free of charge. In the event that we do not handle your request for the exercise of the data subject's right in accordance with the GDPR in your opinion, you have the option of filing a complaint with the supervisory authority (www.dataprotection.gov.sk).
If the request is manifestly unfounded or excessive, in particular due to its repetitive nature, we may refuse to act on your request, or we may demand a reasonable fee taking into account the administrative costs incurred in processing the request. Otherwise, information within the meaning of Article 12(5) of the GDPR and Section 29(5) of the Act is provided free of charge. If you have submitted a request by electronic means, the information will be provided by electronic means if possible, unless you request otherwise.