Protection of personal data in accordance with the GDPR

This is a translation for information only. The Slovenian version is binding.

(General Data Protection Regulation)

By accepting the terms set out below, or by giving your voluntary, explicit, informed and unambiguous consent to the use, processing and storage of your personal data, you consent to its use and processing. You give your consent by ticking the box ‘I agree to the terms and conditions and the obligation to pay, and I consent to the processing of my personal data’ during the purchase process on the website.

On the website, the company Kozmetika-Moja.Si, Krelagen d.o.o. stores and processes the personal data you provide with your order in order to provide high-quality sales and after-sales services. To give you an overview of the flow of personal data, we also provide details of how your personal data is stored and processed. We strictly protect your data as a trade secret and will not use it for unauthorised purposes, misuse it or pass it on to unauthorised persons.

What personal data do we store and process?

• Buyer’s first name and surname
• Buyer’s address
• Buyer’s postcode and post town
• Buyer’s country
• Buyer’s phone number
• Buyer’s e-mail address
• IP address of the computer from which the buyer placed the order
• Referring page through which the buyer came to our website
• Products ordered by the buyer
• Time of the order (date and time)

Where is your personal data stored?

Your personal data is stored in the shop’s administration. The website uses the Prestashop platform of the company PrestaShop SA.

Who has access to your personal data?

Your personal data is accessed by Kozmetika-Moja.Si, Krelagen d.o.o., and contracted partners. Under our mutual contracts, all contracted partners are obliged to protect your data as a trade secret and may not use it for their own purposes, misuse it or pass it on to third parties.

To whom is your personal data passed on, which data is passed on and why?

To the delivery service:

• GLS Slovenija d.o.o., for the final delivery of parcels (first name, surname, address, post town, postcode, country, phone number, e-mail address)

To e-mail services:

• MailerLite Limited, the owner of the MailerLite online service through which we inform newsletter subscribers about news and offers (first name, surname, e-mail address, phone number, company, town, postcode, country and details of purchases in our shop)
• Avant.Si d.o.o., the owner of the online services through which we inform buyers by e-mail about their order and its delivery (first name, surname, address, post town, postcode, country, phone number, e-mail)

To the payment system:

• Paypal Holdings inc. (PayPal), if you choose PayPal as your payment method, as this is the basis for making the payment through their service (first name, surname, address, postcode, post town, country, item).
• Stripe Payments Europe, Ltd. (Stripe), if you pay by payment card, as this is the basis for making the payment through their service (first name, surname, e-mail address, address, order amount and payment card details). We do not receive or store your payment card details.

Being informed of the purposes for which your personal data is processed is a condition for the validity of personal consent. By accepting the terms on this page when ordering, you as the buyer have consented to the processing of your personal data for one or more specific purposes. Your personal data is collected for specified, explicit and lawful purposes from the moment of ordering on the website until consent is withdrawn or the sales programme is discontinued.

We collect, process and store your personal data for the following purposes (data marked with a plus is strictly necessary for the performance of the contract or for taking steps at the request of the individual prior to entering into a contract (*Personal Data Protection Act (ZVOP-1): Article 9(3) and Article 10(2)). Data without a plus is not strictly necessary for the performance of the contract, but helps us provide a better service, sales process and after-sales activities. If you do not want us to store and process some of this data, you can tell us so before your purchase by writing it in the notes when placing your order.

Buyer’s first name and surname

• + to send the ordered parcel to the correct address
• + to create the invoice
• + to send instructions for use by post
• to send promotional material by e-mail

Buyer’s address

• + to send the ordered parcel to the correct address
• + to create the invoice
• + to send instructions for use by post
• to send promotional material by e-mail

Buyer’s postcode and post town

• + to send the ordered parcel to the correct address
• + to create the invoice
• + to send instructions for use by post
• to send promotional material by e-mail

Buyer’s country

• + to send the ordered parcel to the correct address
• + to create the invoice
• + to send instructions for use by post
• to send promotional material by e-mail

Buyer’s phone number

• + to arrange the parcel delivery time
• + to notify you of the parcel delivery time
• + to inform you of the status of the consignment
• + to inform you of any changes to the order

Buyer’s e-mail address

• + to notify you of the parcel delivery time
• + to inform you of the status of the consignment
• + to confirm complaints
• + to inform you of any changes to the order
• for our company’s promotional e-mails

IP address of the computer from which the buyer ordered

• + as proof of the order in the event of any complaints

Referring page through which the buyer came to our sales website

• for marketing purposes (better understanding of the buyer’s needs)

Products ordered by the buyer

• + to create the invoice
• + to enable any complaint claims
• for after-sales marketing activities (better understanding of the buyer’s needs)

Time of the order (date and time)

• + to enable and confirm any complaint claims

Personal data that is not strictly necessary for the performance of the contract is collected because it is necessary for the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or rights of the individual which require the protection of personal data, in particular where the individual is a child. (ZVOP-1: 9/4 and 10/3)

Person authorised to protect your data: Krelagen d.o.o. (Kozmetika-Moja.Si, Krelagen d.o.o.)

At Kozmetika-Moja.Si, Krelagen d.o.o. we have assessed that a data protection impact assessment of the envisaged processing operations is not required, as these are entirely basic processing operations that are strictly necessary to provide the ordered service, and we do not ask customers to enter any data that is not strictly necessary for this purpose.

Ensuring the exercise of individuals’ rights

Access to data and information, right to rectification

The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning them is being processed and, where that is the case, access to the personal data and certain information. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement. You can send a written request for access to your personal data or a request for any corrections by e-mail to info@kozmetika-moja.si or by post to Krelagen d.o.o., Prvomajska 7, 5000 Nova Gorica, Slovenia.

Objection to automated processing and profiling

The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them, including profiling based on these provisions. The controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims. You can send a written request or objection to automated processing and profiling by e-mail to info@kozmetika-moja.si or by post to Krelagen d.o.o., Prvomajska 7, 5000 Nova Gorica, Slovenia.

Erasure of personal data (right to be forgotten)

You may request the erasure of your personal data at any time after your order has been completed, but in that case you accept all possible consequences (inability to send additional instructions for the product, loss of the right to make a complaint, loss of special offers for existing customers). You may request the erasure of your personal data after you have received and paid for the ordered parcel.

Copy of your data in a machine-readable format

You may request a copy of your personal data in a machine-readable format at any time after your order has been completed. You can send a written request for a copy of your personal data in a machine-readable format by e-mail to info@kozmetika-moja.si

Data portability

The buyer has the right to receive their personal data in a structured, commonly used and machine-readable format and the right to transmit this personal data to another controller without hindrance from us as the controller to which the personal data was provided. You can send a written request for the transfer of your data by e-mail to info@kozmetika-moja.si or by post to Krelagen d.o.o., Prvomajska 7, 5000 Nova Gorica, Slovenia.

All information is provided free of charge, except where requests are manifestly unfounded or excessive, in particular because of their repetitive character, in which case the controller may:

• charge a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the action requested
• refuse to act on the request.

Privacy and cookies

The provider undertakes to protect all of the user’s personal data on a permanent basis. The provider will use personal data solely for the proper provision of its services and other necessary communication.

The provider will never pass on your data for other purposes or to third parties, except where this is necessary to fulfil the order. Your personal data will never be used if you do not agree with the way it is used.

Upon registration, the online shop permanently stores the data entered and any changes the user subsequently makes themselves in a suitably secured and protected system. Users can view the data we hold through their customer account. By registering, the user consents to the collection and use of the personal data they enter during registration. The data you provide is collected solely for internal purposes and for processing payment.

The user is also responsible for protecting personal data by keeping their username and password secure and by having suitable anti-virus protection on their computer.

Cookies

The website www.kozmetika-moja.si uses so-called cookies to function smoothly. These are files that the website sends to the browser with which the user accesses websites. They help us improve your experience of the website. By using the website, you agree to the use of cookies.

List of cookies we collect

The list below shows the cookies we collect and the information stored in them.