Personal data and their protection

In our company, the safe processing of your personal data is very important and protection is a matter of course for us.

Therefore, we have taken appropriate technical, organizational and staffing measures that correspond to the way in which your personal data is processed so that your personal data is protected and processed in accordance with Regulation (EC) No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”) and in accordance with Act No 18/2018 on the protection of personal data and amending and supplementing certain acts, as amended (hereinafter referred to as “The Data Protection Act”).

This document provides information on why we process your personal information, what are the reasons of processing, what rights do you have regarding the processing of your personal data, but also other information that might be interesting for you.

In view of the measures taken, we comply with strict rules determining which employee of our company has access to your personal data and what personal data he may process.

Who processes your personal data?

The personal data controller is the company EBENICA COFFEE S.R.O., with registered offices at Šúrska 136, 900 01 Modra, Registration number: 45 266 077, registered in Business Register at Municipal Court of Bratislava III, section Sro, insert No: 61237/B (hereinafter referred to as “EBENICA COFFEE”).

You can exercise your rights at the following email address: gdpr@ebenica.com

What personal data do we process?

We process only personal data that is necessary for provision of the customers with our services and customer support to comply with our legal obligations and also to protect our legitimate interests.

We collect personal information about our customers, including potential customers who are interested in our services, or who have given us permission to offer them my services.

We process the following personal data: Basic identification information, that means the title, name, surname, business name, password, username.

Contact details including e-mail address, telephone number and address.

Data about the orders, which includes information about the orders you have placed at our e-shop, and on the basis of this information, we may recommend you other appropriate products.

Information about communication with you, that we record in writing so that we can provide you with adequate customer support.

Transaction data is only payment information about our products, goods and services.

Information about your activity on the website www.ebenica.com, including where you are viewing it through your mobile device, data about the goods you are viewing, links you click, ways to move around our website, screen scrolling and also data about the device from which you are viewing our website, such as the IP address and its location, identification of the device, its technical parameters such as the operating system and its version, screen resolution, the browser used and its versions, and the data obtained from cookies and similar technologies for identification of the device;

Data about you reading the messages, we send to you, especially the times when messages are opened, as well as information about the device where you read the messages such as the IP address and its location, identification of the device, its technical parameters as the operating system and its version, resolution of the screen, the browser and its versions used, as well as data collected from cookies and similar technologies.

For what purposes do we process personal data?

There are two types of personal data we process, namely:

without the need for your consent;
with your consent.

Processing of personal data without the need for your consent: Processing based on the performance of the contract We process your personal data for the purpose of concluding a contract between you, as our customer and potential customers, and us, as a supplier of our services. In that case, personal data are processed only to the extent necessary for the conclusion and performance of the particular contract. The aim is particularly the performance of the subject of the contract, customer support, contract management and the registration of participants.

For this purpose, the provision of your personal data is entirely voluntary, but it is necessary for the conclusion of the contract and its subsequent report. Without this data, we would not be able to conclude and the contract with you and fulfill the obligations and rights arising therefrom.

Processing on the basis of legitimate interests The legitimate interests of EBENICA COFFEE are:

inform you about news and business offers related to products you have previously purchased from us,
defence of legal claims.

Processing for statistical purposes After your order has been completed and the time for which we store personal data has elapsed, the personal data are further processed for statistical purposes in an anonymized form.

Processing of personal data with your consent:
Processing for marketing purposes
We also process your personal data for marketing purposes if we have given consent from you for this purpose.

In particular, marketing includes the following activities:

offer of EBENICA COFFEE products and services. On the basis of your consent we send the offers electronically, in particular via e-mail,
sending of informative e-mails (Newsletter), including business offers, articles, reports and information about the activities of the company EBENICA COFFEE.

The consent provided for marketing purposes is completely voluntary, but it is necessary for us to send you offers of services of EBENICA COFFEE. Without this consent, we cannot provide you with individual offers of goods and/or services.

You can withdraw your consent at any time, even in part, at EBENICA COFFEE via email at: gdpr@ebenica.com

Use of cookies

We use cookies only with your consent. To prevent the use of cookies, you can start the Private browsing feature before you visit the website in your browser. In this case, however, you may not be able to see some parts of the website correctly, viewing it will be more complex for you, and you will not see the content that matches your needs.

For what term is your personal data stored?

You have given your consent to EBENICA COFFEE for the duration of the contractual relationship and for the next 10 years from the termination of such contractual relationship or until you withdraw your consent.

If you are not, or not going to be the client of EBENICA COFFEE, your consent will be valid for 10 years from the date of the grant or the moment you withdraw it.

After the relevant time expires, your personal data will be erased, but only to the extent and for the purposes for which no consent is required according to the legislation.

Where do we obtain personal data?

We obtain personal data: – directly from you when you conclude the contract, duration and the performance of the contract, – directly from you by giving consent to sending of information e-mails (Newsletter), – from other people you have given permission to do so.

How can you withdraw your consent to the processing of personal data for marketing purposes?

If you no longer wish to receive any offers from us, we are sorry, but we fully respect your decision. Consent to the processing of personal data for marketing purposes on the voluntary basis. This means you can withdraw it at any time.

What should the withdraw of the consent contain? – Who submits the withdrawal. Please provide your name, surname and e-mail address. – Please provide expressly that you do not wish us to process further your personal information for marketing purposes. You can withdraw your consent in general (it will apply to all marketing activities), or specify which marketing activities the withdrawal refers to (sending a newsletter, special offers, etc.). – The withdrawal should be addressed to EBENICA COFFEE.

How can I send a withdrawal? Withdrawal of consent can be sent via email to: gdpr@ebenica.com

What rights do you have regarding the processing of your personal data?

Our company emphasizes the respect of the rights of people concerned. When processing personal data, you can exercise the following rights as the person concerned:

Information on the processing of your personal data The information content is in particular the identity and contact details of the controller, the purposes of processing, the categories of personal data concerned, the recipient or categories of recipients of the personal data, information on the transfer of personal data to third countries, the retention period Personal data, authorized operators, calculation of your rights, the possibility of contacting the Personal Data Protection Authority, the source of personal data processed, information, whether and how automated decision-making and profiling occur.

Right to access You have the right to get a confirmation that your personal data is or is not processed and, if so, you have the right to access information about the purposes of the processing, categories of personal data, recipients or categories of recipients, the retention of personal data, information about your rights, the right to lodge a complaint to the Office for Personal Data Protection, information on the source of personal data, information on whether automated decision-making and profiling, information and guarantees are transferred to the transfer of personal data to third country or international organisation. You have the right to be provides with copies of processed personal data.

Right to rectification Have your personal information changed? Do we process your outdated or inaccurate personal data? Please inform us and we will correct your personal data.

Right to erasure (right to be forgotten) We are required to delete your personal data in certain, legally prescribed cases on your instructions. In this case, we are required to evaluate whether the rules are required for deletion, because in some cases laid down by laws, we are obliged to store and archive your data after a statutory period, even despite the fact that you would require the relevant data to be erased.

Right to limit processing If you wish your personal data would be processed solely for the most necessary legal reasons or to block personal data.

Right to data portability If you wish to provide your personal data to another operator, another company, you may ask us to submit your data in the appropriate format if there is no legal or other significant obstacle to us.

Right to object to automated individual decision-making If you happen to find out or think that the processing of the personal data violates your private and personal life, or it is the violation of the laws, please contact us and ask us to explain or remove the resulting unsatisfactory state. You can also raise an objection directly against automated decision-making.

Right to bring an initiative or complaint to the Personal Data Protection Authority You may contact the supervisory authority at any time with your incentive or complaint regarding the processing of personal data, to the Office for the Personal Data Protection Authority of the Slovak Republic, with registered offices in Hraničná 12, 820 07 Bratislava 27, Slovak republic, Registration number: 36 064 220, Tel. No.: + 421/2/3231 3220, website https://dataprotection.gov.sk/uoou/

Exercising Your rights Your rights to EBENICA COFFEE regarding the processing of your personal data can be obtained against us at the email address gdpr@ebenica.com.

We will provide you with a statement as soon as possible and at the latest within one month of receipt of your request regarding the protection of personal data. The time limit referred to, if it is necessary, can be extended by a further two months, taking into account the complexity of your application. We will inform you about the extension, including giving reasons.

All notices and statements to the rights we apply are provided free of charge. However, if the application was manifestly unfounded or disproportionate, in particular because it was repeated, we are entitled to charge a reasonable fee taking into account the administrative costs associated with providing the requested information. In the event of repeated application of copies of the personal data processed, we reserve the right, therefore, to charge a reasonable fee for administrative costs.

Who can access your data?

Personal data can be accessed by EBENICA COFFEE as an operator, its employees, and may also have access to contract intermediaries, especially companies providing IT services, programmer services, e-shop management and accounting.

For example, it may be an external company that manages our systems or other services that ensure the proper operation of the company and the processing of personal data. We have concluded a contract for the processing of personal data with the referred intermediaries and they are also bound by compliance with strict rules on the protection of personal data, including confidentiality, so as to ensure that the highest standard of legal protection is respected corresponding to the requirements of the legislation in force in the Slovak Republic.

In Modra, date May 24th 2018