We carefully fulfill all obligations for protecting your personal data imposed on us by the GDPR Regulation (General Regulation of the European Parliament and of the Council (EU) on the Protection of Personal Data No. 2016/679 of 27. April 2016) and Act 18/2018 Coll. on the Protection of Personal Data (hereinafter referred to as the "Act"). In accordance with these regulations, we provide you with the following information:
To whom do you provide your data?
The controller of personal data is the company plexcore s.r.o., with its registered office at Kopčianska 1226/78, 851 01 Bratislava, IČO: 47159235, registered in the Commercial Register of the District Court Bratislava III, section SRO, file number 89214/B (hereinafter referred to as the "controller").
If you have any questions regarding the processing of your personal data, you may also contact us via email at info@plexcore.sk with the subject "GDPR".
Pursuant to § 44 of the Act and Article 37 GDPR, the controller of personal data is not obliged to appoint a Data Protection Officer, however, the controller fulfills the protection of personal data with the highest professional care, including through regular monitoring of the relevant legislation and updating of this document.
What is the purpose of processing your personal data?
Ensuring a consultation
We process your personal data for the purpose of organizing a consultation with an expert
Payments
Payments on our website are processed through an external payment gateway. Therefore, we only have access to your payment data to the extent of the last 4 digits of the payment card you used to complete the purchase. We do not process other data about your payment methods.
Customer support
If you contact us via our contact form, by phone or in another way, we will retain the data you provide until your request is handled, and subsequently, if necessary, for the period required to defend or assert our legal claims.
Sending reminders
If the invoice for the goods you selected is not paid on time, we may send you reminders until it is paid.
Determination, exercise and defense of legal claims
After the termination of the contractual relationship, we may, based on our legitimate interest, also retain some of your personal data for the duration of the limitation periods, the processing of which is necessary to protect our rights and any defense of legal claims, including the recovery of unpaid payments.
Accounting and tax documents
Some personal data may be stated on accounting documents (i.e. mainly invoices). According to applicable legal regulations (e.g. the Accounting Act or the Value Added Tax Act), we are obliged to retain these documents for up to 10 years. If we therefore have a statutory obligation to archive these documents, we store your personal data stated on the relevant accounting documents together with them.
Scope and sources of processed data
For the above purposes, we process personal data that you provide us within the contractual agreement. This mainly concerns the following data:
- identification data (mainly name, surname, gender, date of birth, address of residence, IČO, bank account number),
- contact data (your email address and phone number),
- data on the service provided (mainly data on delivered goods and services and the customer's payment history),
- the last 4 digits of your payment card.
Sources of personal data
We process personal data that you provide us in connection with the creation of your customer account on www.plexcore.sk in connection with another procedure for concluding a contractual relationship and during its course. Some personal data may be further verified and/or directly obtained from publicly accessible registers, lists and records (e.g. the Commercial Register of the Slovak Republic).
Special cases in which we may process personal data.
In addition to the above cases, we may process personal data in these special cases and for the following purpose, based on the GDPR Regulation:
Marketing communication
- We may further use your personal data for sending news about our services and other business communications related to our services. This mainly concerns news and offers that may be relevant to you based on your previous purchases and preferences. We may also send you messages that otherwise relate to the consultation you purchased or a reminder regarding an incomplete purchase. We will send you news and similar business communications via your contact details. The legal basis for such processing is consent, which is voluntary, may be withdrawn at any time, and which you may grant us during your registration for a customer account. If you withdraw your consent for such processing, we will no longer process your personal data for the purpose of sending marketing communications.
- Scope of managed data. In order to be able to send you relevant marketing communications, we mainly use the following personal data:
- identification data (name, surname),
- contact data (correspondence address, email address),
- data on goods and services that we have delivered to you,
- data on your preferences (data on your usual order on the www.plexcore.sk website),
- data on your activity on our website.
- Purpose and period of processing. The purpose of processing your personal data is to send marketing offers and other business communications, based on your consent. We process data for this purpose for the duration of the validity of the consent or until you withdraw your consent. If such processing is carried out based on our legitimate interest, we will process your data for this purpose for the duration of the existence of your customer account or until you express an objection or raise objections against such processing; in that case, the processing will be terminated immediately.
Period of processing and data retention
The controller retains the personal data of the data subjects for an indefinite period, until the purpose of processing expires. You provide consent for the processing and retention of your personal data for an indefinite period, until the withdrawal of consent.
Processors and recipients of data
We process your personal data internally, but in some activities our service providers – so-called processors – help us. In their selection, we have taken into account their professional and technical ability to process personal data so that an appropriate level of protection is ensured. The following categories are included:
- A company that provides us with the operation and hosting of the online shop
- A company that provides us with accounting services
- Provision and access to personal data to other persons:
- Personal data may be made accessible to subjects authorized according to special regulations (e.g. authorities acting in criminal proceedings, courts, etc.)
- Transfer of personal data to a third country or international organization is not anticipated.
The legal ground for processing personal data is:
- performance of a contract between you and the controller according to § 13 paragraph 1 letter b) of the Act,
- legitimate interest of the controller in providing direct marketing (mainly for sending business notices and newsletters) according to § 13 paragraph 1 letter f) of the Act,
- your consent to processing for the purpose of providing direct marketing (mainly for sending business notices and newsletters) according to § 13 paragraph 1 letter a) of the Act.
Information about your rights in the processing of personal data
As a data subject, several rights arise for you from the GDPR, to which we would like to draw your attention by this means, namely:
- Right of access to personal data
You have the right to request from us confirmation of whether we process personal data concerning you and, if so, you have the right to access such personal data, as well as the right to basic information about the processing of your personal data (defined in Article 15 GDPR). For this purpose, you may contact us at any time via the contact details provided in point 1. - Right to rectification and/or completion of personal data
You have the right to request that we promptly rectify inaccurate personal data concerning you, as well as the right to complete incomplete personal data (in accordance with Article 16 GDPR). For this purpose, you may contact us at any time via the contact details provided in point 1. - Right to erasure of personal data
You have the right to request the immediate erasure of your personal data only in the case where:- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- you withdraw the consent on the basis of which the processing is carried out, and there is no other legal basis for processing;
- you object to the processing and no legitimate grounds for processing prevail;
- the personal data are processed unlawfully;
- the personal data must be erased in order to comply with a legal obligation under the law of the European Union or the law of the Member State to which you are subject;
- the personal data were collected in connection with the offer of information society services according to Article 8 paragraph 1 GDPR.
For this purpose, you may contact us at any time via the contact details provided in point 1., after which we will subsequently assess whether there are any exceptions in your case where it is not necessary to erase your data even if one of the above-mentioned conditions is met (e.g. it is necessary to assert legal claims).
- Right to restriction of processing of personal data
You have the right to have us restrict the processing of your data (i.e. only retain your data, but not process them in any other way), if:
- you have challenged the accuracy of the personal data;
- the processing is unlawful and you object to the erasure of personal data and instead request restriction of their use;
- we no longer need your personal data for the purposes of processing, but you need them to establish, assert or defend legal claims;
- you object to the processing.
For this purpose, you may contact us at any time via the contact details provided in point 1., after which we will subsequently assess whether there are any exceptions in your case where your personal data may be processed in any other way than merely retention.
- Right to object to the processing of personal data
You have the right to object to the processing of your personal data if the legal basis for processing your personal data is:
- necessary fulfillment of a task carried out in the public interest or in the exercise of official authority or
- processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, except for cases where such interests are overridden by your interests or
- fundamental rights and freedoms of your person, which require the protection of personal data, especially if the data subject is a child.
If your data are processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data to the extent that it relates to such direct marketing.
For this purpose, you may contact us at any time via the contact details provided in point 1.
The controller may not further process the personal data of the data subject unless it demonstrates compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject, or grounds for the establishment, assertion or defense of legal claims
- Right to data portability of personal data
If the processing of your personal data is carried out by automated means, based on your consent or for the purpose of performing a contract, you have the right to obtain the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transfer such data to another person (controller).
- Right to withdraw consent to the processing of personal data at any time
Last but not least, you have the right to withdraw at any time the consent you have given for the processing of your personal data concerning you. The withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal. For this purpose, you may contact us at any time via the contact details provided in point 1.,
- Right to lodge a complaint with a supervisory authority
By this means we also inform you that if you consider that there has been a violation of the rights of natural persons in the processing of your personal data or a violation of the Act or the GDPR Regulation, you may submit a proposal to initiate proceedings for the protection of personal data (according to § 100 of the Act) to the Office for Personal Data Protection of the Slovak Republic. A model proposal is published on the website of the Office for Personal Data Protection of the Slovak Republic www.dataprotection.gov.sk.
Cookies
In order to ensure the proper functioning of the website, we sometimes store small data files, so-called cookies, on your device. This is a common practice on most large websites
What are cookies?
A cookie file is a small text file that a website stores on your computer or mobile device when browsing it. Thanks to this file, the website retains information about your steps and preferences (such as username, password, language, font size and other display settings) for a certain period of time, so you do not have to re-enter them on your next visit to the site or when browsing its individual pages.
What cookies do we use?
On our website, we use the following types of cookie files:
For the management of cookie files and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent-gathering tool "Real Cookie Banner". Details on how "Real Cookie Banner" works can be found at https://devowl.io/rcb/data-processing/.
The legal basis for processing personal data in this connection is Article 6 paragraph 1 letter c GDPR and Article 6 paragraph 1 letter f GDPR. Our legitimate interest is the management of cookies and similar technologies used and the related consents.
The provision of personal data is not contractually required nor necessary for concluding a contract. You are not obliged to provide personal data. If you do not provide us with personal data, we will not be able to manage your consents.
Necessary cookies: These cookies are necessary for the operation of our website. This includes, for example, cookies that allow you to log in to secure sections of our website.
Performance cookies: These cookies enable us to analyze how you use our website. We can use this to improve and simplify the usability of our website. The data collected by these cookies are aggregated and anonymous.
Functional cookies: These cookies remember your preferences for the purpose of improving your user comfort. This allows the website to adapt content for you or remember your preferences, for example your language choice. The data collected by these cookies do not personally identify you.
The cookie files we use do not damage your computer and cannot be used to collect your personal data.
How to check cookies?
You may check and/or delete cookie files at your discretion – details can be found on the aboutcookies.org website. You can delete all cookie files stored on your computer and most browsers can be set to prevent them from storing cookies. In that case, however, you will probably have to manually adjust some settings on each visit to the website and some services and functions will not work.
What other related information is there?
Sometimes on our website we may also link to services and products of third parties. The websites of these third parties have their own personal data protection conditions and are independent of ours. For this reason, we do not bear any legal responsibility for the content and activities of these third parties. Nevertheless, it is our aim to maintain a high level of security. Therefore, if you have any suspicion of improper behavior by these third parties, contact us via the contact details provided in Article I of this document.
Validity.
These Guidelines are valid and effective from 01.10.2024
Given that in the future an update of information on the processing of personal data contained in these Guidelines may be required, the Controller is entitled to update these Guidelines at any time. In such a case, however, the Controller will inform you in an appropriate manner, at least 14 days in advance.
