Personal data protection

Personal data protection principles in KOICentrum: Andrej Blaško - jenkie
1. General information on personal data protection

The controller for the processing of your personal data is Andrej Blaško - jenkie ., Maloboršanská 98 Hrubá Borša, 90050 Slovakia IČO: 44352905, DIČ: 1080185106.

Andrej Blaško - jenkie is committed to responsibly protecting the personal data of all its clients in accordance with European Union standards and the legal regulations of the Slovak Republic, in particular Regulation (EU) No. 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) and Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain acts (hereinafter referred to as the "Act on the Protection of Personal Data").

Below you will find information about how we handle the personal data of our clients and visitors to the website www.koikapor.sk, for what purposes this data is used and what are the other conditions for its processing. Please read all the information provided carefully.
2. Personal data and their processing

Personal data are data about a natural person, based on which it is possible to directly or indirectly identify a specific natural person (hereinafter referred to as the "data subject").

According to the sources from which they come, we distinguish two groups of data: a) personal data provided to us directly by clients; b) personal data that were not obtained from clients, but come from other sources, e.g.: IP addresses, data from visiting our website or from independent third parties authorized to handle them, etc.

According to the legal basis, the processing of personal data is lawful when at least one of the following conditions is met: a) processing is necessary for the performance of a contract to which the data subject is a party; b) processing is necessary for the purposes of the legitimate interests pursued by the operator; c) the data subject has consented to the processing of their personal data for one or more specific purposes:

a) For the performance of a contract to which the data subject is a party, Andrej Blaško - jenkie processes the necessary personal data of the data subjects: name, surname, place of residence, date of birth, telephone number, e-mail address, number of the customer's identity document from the e-shop, payment details; name, surname, place of residence, date of birth. The legal basis for processing this data is the fulfillment of contractual obligations related to the provision of ordered services of a commercial nature, in particular orders in the form of an e-shop. The data subject is obliged to provide the above personal data, because failure to provide them would make it impossible to conclude a contract. The personal data of the data subjects may also be provided to third parties if necessary for the performance of the contract. Third parties may be business partners - intermediaries: companies that carry out implementation and transport companies. The operator has concluded a personal data processing agreement with the intermediaries, which obliges the intermediary to comply with the established conditions for the protection of personal data. The list of business partners is available at the operator's headquarters.

b) Personal data of existing clients Andrej Blaško - jenkie in the scope of name, surname, place of residence, telephone number, e-mail address may also be used by the operator for marketing activities for the purpose of promoting similar services, ensuring information security, sending marketing news and information, newsletters, promotional offers, processing individual offers, market research and satisfaction with the products used. The lawfulness of the processing of these data is in the legitimate interest of the operator to provide addressees with comprehensive, general and client-oriented information regarding the latest special offers.

Andrej Blaško - jenkie is obliged to store personal data on a special list separately from data provided for other purposes. This list must be accessible only to authorized persons of the company and data processors. The company may not disclose the list or data to any third party and unauthorized parties. Clients may unsubscribe from the newsletter at any time.

We store the provided personal data in our information systems in accordance with legal regulations and only for as long as is necessary to provide quality services.

c) Andrej Blaško - jenkie also addresses potential customers, e.g. via forms published on its website. In this case, the necessary legal basis for obtaining and further processing personal data is the consent of the data subject. This consent must be free, specific and unambiguous. The data subject must know for what purpose the data is being processed. The data subject has the right to decide whether he or she agrees or disagrees with the processing of personal data. Separate consent of the data subject must be demonstrably documented for each specific purpose. The operator will use the so-called double-opt-in method when confirming consent (i.e. the data subject will receive advertising emails only if he or she confirms the activation of the given service in the email with a confirmation link that will be sent to his or her email address). The operator is obliged to provide his/her identification data, information on the purpose, legal basis and expected period of processing of personal data for which consent is required, information on possible recipients or categories of recipients to whom personal data will be provided, as well as information on any intention to transfer personal data to a third country. The data subject must be informed that he/she has the possibility to easily withdraw the consent granted at any time. The services provided on the website for which consent of the data subject is required are not directly addressed to persons under the age of 16.
3. Rights of the data subject

When obtaining personal data, the controller shall also provide the data subject with other information necessary to ensure fair and transparent processing, such as:

the existence of the right to request from the controller access to personal data concerning the data subject and the right to rectification or erasure or restriction of processing or the right to object to processing, as well as the right to transfer the data to another controller without hindrance from the controller to whom the personal data have been provided
the right to lodge a complaint with a supervisory authority
information on whether the provision of personal data is a legal or contractual requirement or a requirement that is necessary for the conclusion of a contract, whether the data subject is obliged to provide personal data, as well as the possible consequences of not providing such data
if the personal data have not been obtained from the data subject, any available information as to their source
the existence of automated decision-making, including profiling - the data subject has the right not to be subject to a decision that is based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her

If the controller intends to further process personal data for a purpose other than that for which they were obtained, it shall provide the data subject with information about this other purpose and other relevant information prior to such further processing.
4. Ensuring the security of personal data

To ensure the protection and security of the processed personal data, Andrej Blaško - jenkie has taken appropriate measures and uses modern information technologies.

Security measures of a technical and organizational nature protect the processed personal data against damage, destruction, loss, alteration, unauthorized access and disclosure, provision or publication, as well as against any other inadmissible methods of processing.

Internal regulations set out the conditions and rules for the access and processing of personal data in individual information systems for the controller's employees. Personal data is processed by automated means as well as manually. Internet connection and transfer of personal data are secured by encryption and an SSL certificate. Employees are obliged to maintain confidentiality and may not provide personal data to third parties without the consent of the data subject.
5. Use of analytical tools

The operator uses an analytical tool to monitor its websites, which prepares a data chain and monitors how visitors use the pages on the Internet. When a visitor browses the page, the system generates a cookie to record information related to the visit (pages visited, time spent on our site, browsing data, leaving the page, etc.), but this data may not be linked to the person of the visitor. This tool is a tool for improving the ergonomic design of the website, creating a user-friendly website and enhancing the online experience of visitors. The company does not use analytical systems to collect personal information. Most Internet browsers accept cookies, but visitors have the option to delete or refuse them. Since each browser is different, visitors can set their cookie preferences individually using the browser toolbar. However, if they choose not to accept cookies, they will not be able to use some of the features on our website.

The operator uses remarketing codes to record when a user views certain pages, which allows us to offer services tailored to the client's preferences in the future. Cookies providing remarketing codes can be disabled by website visitors by adjusting their browser settings accordingly.