Privacy Policy and Personal Data Protection System under the GDPR Regulation

The Data Controller of your personal data pursuant to Article 4, Point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "GDPR") is the company: VIVIEN, s.r.o., Šumavská 1, 821 08 Bratislava-Ružinov, ID (IČO): 36 403 873

Contact details of the Data Controller are:
Phone: 0903 421
Email: info@vivien.sk

What is personal data?

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the "Data Subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to a generally applicable identifier or an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

What is the processing of personal data?

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. The Data Controller is not required to appoint/designate a Data Protection Officer (DPO).

Sources and categories of personal data:

The Data Controller processes personal data provided directly by you, or personal data obtained through the fulfillment of your order. This includes your identification and contact details, as well as data necessary for the performance of a contract.

Legal basis and purpose of processing:

The legal basis for processing is:
Your consent to the processing of personal data for the purpose of direct marketing pursuant to Article 6(1)(a) of the GDPR.

Performance of a contract between you and the Data Controller pursuant to Article 6(1)(b) of the GDPR.

Processing is necessary for compliance with a legal obligation to which the Data Controller is subject pursuant to Article 6(1)(c) of the GDPR.

The purpose of processing personal data is:

Fulfillment of your order and the exercise of rights and obligations arising from the contractual relationship between you and the Data Controller. When placing an order, personal data required for the successful processing of the order is requested pursuant to Article 6(1)(b) of the GDPR (this includes subsequent payment processing, service delivery, complaint handling, etc.); the processing of the customer's personal data takes place without the customer's consent, as the legal basis for processing their personal data for the purpose of contract performance is the specific order between the customer and the Data Controller. The provision of personal data is a mandatory requirement for entering into and fulfilling the order; without providing personal data, it is not possible to create an order or for the Data Controller to fulfill its terms.

The Data Controller declares that they do not manipulate the logs or records in any manner and do not provide them to third parties or external entities.

Traffic measurement and service improvement – through cookies, we collect data regarding our website traffic, viewed information, and other onsite activities. We collect this data based on your consent granted through your browser settings. For more information, please see our "Cookie Policy".

In order to maintain full transparency, we would like to inform you that we assess the accuracy of the provided personal data (circumstances permitting). Upon detecting incorrect personal data or information stored within our information system, we will immediately correct, restrict the processing of, or erase the data. If such data disclosure occurs, we will inform all participating parties.

Data Retention Period:

The Data Controller stores personal data:
For the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Data Controller and to enforce claims arising from these contractual relationships.

Until consent to the processing of personal data for marketing purposes is withdrawn.

Upon the expiration of the personal data retention period resulting from Act No. 395/2002 Coll. on Archives and Registries and on Amendments to Certain Acts, the Data Controller shall erase the personal data.

Recipients of personal data

Who is a recipient?
A recipient means any natural or legal person to whom personal data is disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with special legislation shall not be regarded as recipients.

These include individuals involved in the delivery of goods, services, or the execution of payments based on a contract.

The Data Controller does not provide, publish, or transfer personal data to third countries (outside the EU).

Security conditions for personal data

The Data Controller declares that they have adopted appropriate personnel, technical, and organizational measures to ensure the protection of personal data.

The Data Controller has adopted technical measures to secure data storage systems and personal data repositories in physical/paper form.

The Data Controller declares that personal data is accessible exclusively by persons authorized by them.

Your rights:

Under the conditions set forth in the GDPR, you have:

• The right of access to your personal data pursuant to Article 15 of the GDPR
• The right to rectification of personal data pursuant to Article 16 of the GDPR
• The right to restriction of processing pursuant to Article 18 of the GDPR
• The right to erasure ("right to be forgotten") pursuant to Article 17 of the GDPR
• The right to object to processing pursuant to Article 21 of the GDPR
• The right to data portability pursuant to Article 20 of the GDPR
• The right to withdraw consent at any time (electronically or via the correspondence address)
• The right to lodge a complaint with the supervisory authority if you believe that your personal data protection rights have been violated.

Furthermore, you have the right to lodge a complaint with the office for personal data protection if you believe that a breach of your personal data protection rights has occurred.

How can you exercise your rights?

Right of access to data

You have the right to know whether we process your personal data. If we process them, you can request access to them. Based on your request, we will issue a confirmation containing information on the processing of your personal data. You can submit the request electronically to the email address info@vivien.sk, or by mail to the address: VIVIEN, s.r.o., Šumavská 1, 821 08 Bratislava-Ružinov.

Right to rectification

You have the right to ensure that your personal data processed by us is correct, complete, and up to date. If your personal data is incorrect or outdated, you can request its correction or completion electronically at the email address info@vivien.sk, or by mail to the correspondence address: VIVIEN, s.r.o., Šumavská 1, 821 08 Bratislava-Ružinov.

Right to erasure (Right to be forgotten)

Under certain circumstances, you have the right to have your personal data erased. You can request the erasure of your data at any time. We will erase your personal data if:

• we no longer need your personal data for the purpose for which you provided it,
• you withdraw your consent,
• you object to the processing of your personal data,
• we process your personal data unlawfully,
• the personal data must be erased to comply with a legal obligation,
• you are a child, or the parent of a child, who consented to the processing of personal data over the internet.

Right to restriction of processing

You can request that we restrict the processing of your personal data. If we grant your request, we will only store your personal data and will not perform any further processing operations with it. Restriction of data processing occurs if:

• you inform us that your personal data is incorrect, until we verify its accuracy,
• we process your personal data unlawfully, but you oppose its erasure and request the restriction of its use instead,
• we no longer need your data, but you require it for the establishment, exercise, or defense of your legal claims,
• you object to the processing of your personal data, pending verification whether our legitimate grounds override your reasons.

Right to data portability

You have the right to request that we provide your personal data in an electronic format (e.g., an XML or CSV file) that allows you to easily transfer your data to another company. You can also request that we transfer your personal data directly to a chosen company. We will grant your request if you provided the personal data directly to us and gave us your consent for its processing.

Right to object

You have the right to object to the processing of your personal data. If we process your personal data in the following cases:

• for the purposes of our legitimate interests,
• for customer profiling purposes,
• you may object to their processing based on grounds relating to your particular situation.

How can you exercise these rights?

You can address your request to us in any of the following ways:
by email: info@vivien.sk, or by mail to the registered business address: VIVIEN, s.r.o., Šumavská 1, 821 08 Bratislava-Ružinov, ID (IČO): 36 403 873

If you believe that your personal data protection rights have been breached, you have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection (Úrad na ochranu osobných údajov) at the following address:

Hraničná 12
820 07 Bratislava 27
Slovak Republic

Identification Details:
ID (IČO): 36064220
Tax ID (DIČ): 2021685985

Office Secretariat:
+421 /2 3231 3214

E-mail: statny.dozor@pdp.gov.sk