Privacy Policy
Protection of Personal Data
Limitless Biochem Technologies s.r.o
Rožová dolina 612/16; 821 09 Bratislava
ID: 56414935
VAT number: 2122299674
VAT number: SK 2122299674
(hereinafter referred to as the "operator")
Contact details of the person authorized by the operator
The affected person can, if necessary, at any time contact the person authorized by the operator ("trustee") in connection with the protection of personal data, namely:
Juraj Schrojf
Mobile: +421948152838
E-mail: sales@pansupplement.sk
I. GENERAL INFORMATION
1. The operator is a trading company mainly engaged in retail and wholesale trade, in particular the filling, delivery, import and export of mineral and healthy waters, as well as other activities that it has registered as business objects in the commercial register.
2. When carrying out the aforementioned activities, the affected persons may voluntarily provide the operator with their personal data identifying the user as a specific person, in particular by electronic mail (e-mail), by filling out a form, in connection with actions organized by the operator or within the framework of legal relationships in which the affected the person enters with the operator, such as by concluding an employment, civil / commercial law or other contract.
3. These Principles of processing and protection of personal data (hereinafter referred to as "Policies") apply to all situations in which personal data of the affected persons are processed by the operator, while at the same time they contain a range of information in connection with the processing of personal data that the operator provides to you must be provided.
II. EXPLANATION OF SOME TERMS
GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data.
Personal data - is any information relating to an identified or identifiable natural person (or "data subject"), meaning a person who can be identified directly or indirectly, in particular by reference to an identifier such as name, identification number, location data, online identifier, or by reference to one or more elements that are specific to the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
Processing – is an operation or a set of operations with personal data or sets of personal data, for example obtaining, recording, arranging, structuring, storing, processing or changing, searching, viewing, using, providing by transmission, dissemination or otherwise providing, rearranging or combining, limiting , erasure or disposal, whether by automated or non-automated means.
Information system - is any organized set of personal data that is accessible according to specified criteria, regardless of whether the system is centralized, decentralized or distributed on a functional or geographical basis.
Operator – is a natural or legal person, public authority, agency or other entity that alone or together with others determines the purposes and means of personal data processing.
Intermediary – is a natural or legal person, public authority, agency or other entity that processes personal data on behalf of the operator.
Consent of the person concerned – is any freely given, specific, informed and unambiguous expression of the will of the person concerned, by which he expresses his consent to the processing of personal data concerning him in the form of a statement or a clear confirming act.
III. METHOD, PURPOSE AND LEGAL BASIS OF PERSONAL DATA PROCESSING
1. The operator processes your personal data, both automatically and manually, but only to the extent necessary to fulfill the purpose of processing and for the necessary time (i.e. in the case of providing personal data beyond this scope, or if the purpose or legal basis of their processing no longer applies, the operator does not process such data further and removes them from its information systems).
2. The purpose and legal basis of the processing of personal data (that is, the reason for which the processing takes place) of the persons concerned is mainly:
• concluding contractual and other similar legal relationships with the operator and matters related thereto, e.g. fulfillment of contractual obligations in connection with mineral waters, etc. in accordance with Art. 6 par. 1 letter b) GDPR;
• application of legitimate interests of the operator in accordance with Art. 6 par. 1 letter f) GDPR, in particular sending news and newsletters to persons who have already provided their data to the operator in the past for the purpose of improving the quality of the services provided and providing related information;
• fulfillment of the operator's legal obligations pursuant to Art. 6 par. 1 letter c) GDPR, in particular in relation to the fulfillment of the legal obligations of the operator as an employer towards its employees, the fulfillment of obligations arising from the operator under the Act on Accounting, etc.;
• implementation of direct marketing based on the consent of the person concerned in accordance with Art. 6 par. 1 letter a) GDPR, e.g. sending news and newsletters to persons who have not yet provided their data to the operator;
• processing of personal data based on the consent of the person concerned pursuant to Art. 6 par. 1 letter a) GDPR in connection with the activity of the operator, in accordance with the purpose for which the consent was given, i.e. e.g. processing of personal data at events organized by the operator, if it is not a legitimate interest of the operator;
• processing of personal data for the purpose of protecting the vital interests of the person concerned pursuant to Art. 6 par. 1 letter d) GDPR, e.g. in cases where it is necessary to obtain and subsequently process personal data for the purpose of calling emergency medical assistance.
3. As a data subject, you provide personal data to the operator based on your voluntary decision (ie you have no obligation to do so). However, the operator states that in some cases it is not possible to perform the actions requested by you without providing specific personal data (for example, it is not possible to enter into an employment contract with the operator or execute an order or fulfill another contract without providing some of your personal data).
4. If the processing of the provided personal data requires your consent as the person concerned, the operator is obliged to request it from you in advance. When processing personal data on the basis of consent to processing, you can revoke your consent at any time, in the same simple way as it was granted (e.g. in the case of electronically granted consent, consent can be revoked by sending an e-mail message to the trustee or directly to the operator), but without that it affects the legality of personal data processing before withdrawing consent.
IV. SCOPE OF PERSONAL DATA PROCESSING
1. The operator processes your personal data only to the extent necessary to fulfill the purpose of processing. For example for the purposes of concluding the contract, the operator usually does not need to obtain and process your photo and thus only processes personal data that is necessary for the fulfillment of the rights and obligations arising from the contract (ie name and surname, address, contact, or other necessary data). At the same time, in case of providing personal data beyond the necessary framework, the operator does not process such data further and removes them from its information systems.
V. SECURITY OF PERSONAL DATA AND STORAGE PERIOD
1. The personal data voluntarily provided by you are stored in a secure environment and will be used by the operator exclusively in the fulfillment of duties and/or obligations towards persons who provided the operator with personal data in another way, and only to the extent that results from the information provided, for the necessary period to exercise the rights and fulfill the obligations of the operator resulting from the concluded contract, legal regulations, or for the period with which you have agreed (unless otherwise stipulated by legal regulations or agreement, this period is a maximum of 10 years from the provision of personal data).
2. In connection with the retention period of personal data, the operator refers in particular to the fact that the retention of personal data is also based on some legal regulations, such as the Act on Accounting, which directly imposes their storage for a certain period of time, and at the same time their longer-term storage is also necessary due to the possibility of exercising the operator's rights, especially with reference to statutory limitation periods. Even here, however, the operator stores only data whose storage is necessary.
3. The operator declares that he has ensured adequate technical and organizational measures to ensure the processing of your personal data, while at the same time declaring that after the expiry of the period of their processing and storage, he will ensure their liquidation, in a way that provides sufficient guarantees against their possible misuse.
VI. PROCESSING OF PERSONAL DATA BY AN ENTITY OTHER THAN THE OPERATOR
1. The operator declares that it will not rent, sell or exchange personal data of the person concerned (ie data such as name, address, telephone number, e-mail, etc. that identify the user as a specific person) to a third party without your express consent as a data subject, which does not affect the possibility of the operator to appoint an intermediary for the processing of personal data in accordance with these Principles and the GPDR regulation. In the conditions of the operator, this may be in particular: - persons participating in the transport of goods, if they are sent by the operator, - persons participating in the implementation of payment and other services based on the order, etc., - persons ensuring the operation of the website and related services, - persons providing marketing services, - persons performing accounting services, in the case of exercising the operator's rights, a lawyer, etc.
2. This also does not affect the fact that other persons expressly authorized and properly instructed by the operator may have access to your voluntarily provided data (e.g. persons in an employment relationship with the operator), but exclusively for the purposes necessary for processing Your personal data in accordance with the purpose for which they were provided. The operator is also authorized in the cases established by law, or obliged to hand over some personal data on the basis of valid legal regulations, for example to law enforcement agencies or other public authorities.
VII. PROFILING AND AUTOMATED DECISIONS
1. The operator declares that the personal data provided by you are not used for profiling purposes. Likewise, your personal data are not subject to automated decision-making.
VIII. TRANSFER OF DATA TO A THIRD COUNTRY
1. The operator also declares that it does not transfer your personal data to a third country (ie outside the EU) or to an international organization.
IX. STATEMENT OF THE PERSON CONCERNED
1. Before you voluntarily provide information to the operator, you declare that all personal data provided by you is true, accurate, up-to-date and complete and you give (where applicable) your voluntary consent to their processing.
X. INFORMATION ON THE RIGHTS OF THE PERSON CONCERNED
1. As a data subject, you have certain rights based on the GDPR, which include, for example:
• the right to file a complaint with a supervisory authority (ie the Office for the Protection of Personal Data of the Slovak Republic, with headquarters at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, ID: 36 064 220, phone number: +421 2 3231 3220),
• the right to request access to personal data,
• the right to correct and delete personal data,
• the right to limit processing, the right to object to the processing of personal data
• whether the right to data portability.
2. The complete instruction of the person concerned about all the rights granted to him in connection with the protection of personal data by the GDPR can be found at the headquarters of the operator, or the operator will provide it on request in electronic form.
XI. FINAL PROVISIONS
1. These Principles shall enter into force on March 1, 2022.
2. The operator is authorized to change these Principles. The operator will publish the new version of the Policy immediately after its acceptance.
Last modified on August 25, 2024