Privacy Policy

GDPR

Who processes your personal data?

We process your personal data – the company

Mgr. Vladimíra Ilavská

Námestie SNP 476/17, 811 06 Bratislava

Company ID (IČO): 51 689 456

vladimira@studiolavish.com

Your personal data is also processed by: Google LLC, META - Facebook Inc., Mailchimp, but only if you have granted us consent to the processing of personal data through the services that these companies provide on our website.

I. Introductory Provisions

1. For the purposes of these Principles, the following terms are understood:

• Personal Data means first name and surname, e-mail address, telephone number, IP address, cookies.

1. The operator of www.lavish.sk, as the controller of Personal Data, hereby informs about the method and scope of Personal Data processing, including the scope of the User's rights (as defined below) related to the processing of their Personal Data.
2. When processing personal data, the Operator proceeds in accordance with the following legal regulations:

• Act no. 18/2018 Coll. on Personal Data Protection
• Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter the “Regulation”)

1. The User is a natural person who purchases services from the Operator or has used a part of the www.lavish.sk website that requires personal data (name and e-mail address, e.g., a contact form).
2. The purpose is the sale of services and the provision of information. In connection with the above, Personal Data is processed:

• to the extent provided in connection with the ordering of the Operator's service, or during negotiations regarding the conclusion of a contract with the Operator, as well as in connection with a concluded contract
• for the purposes listed below in Art. II.

II. Purpose and Duration of Personal Data Processing

The Operator processes Personal Data for the following purposes:

a. fulfillment of business terms and conditions, or other obligations, and provision of services:

1. personal data will be processed for the duration of the negotiations regarding the purchase, consulting, or renovation between the Operator and the User, for the purpose of purchasing furniture or accessories, as well as for the duration of the contractual relationship;
2. marketing events: for the purpose of fulfilling the marketing event, evaluation, conclusion, delivery of any prizes, etc. Processing duration: for the duration of the marketing event.

b. compliance with a legal obligation (especially accounting, tax, and archiving, providing cooperation to administrative bodies, police, courts, etc.):

1. tax documents will be kept for 10 years from the end of the contract: For the purpose of fulfilling the legal obligation of archiving accounting documents based on Act no. 563/1991 Coll., on Accounting as amended, Personal Data will be further processed and stored for a period of 10 years from the year following the year in which the contract between the Operator and the User was concluded;
2. fulfillment of obligations in connection with the exercise of rights arising from defective performance, providing cooperation to administrative bodies, police, courts: The Operator is entitled to process the basic personal, identification, and contact data of the customer, data about goods, and communication data between the customer for a period of 4 years from the date of the expiration of the warranty period for the goods.

c. legitimate interests of the Operator, protection of rights and legally protected interests of the Operator:

1. effective defense in case of a dispute. The processing period is set at 4 years from the expiration of the warranty period for the goods and is extended by the time the dispute is pending;
2. the Operator's legitimate interest is also sending business communications (general offers and individual offers) in accordance with Section 7 par. 3 of Act no. 480/2004 Coll., on Certain Information Society Services and in accordance with recital 47 of the Regulation, if the Operator obtained electronic contact details in connection with the sale of goods and services to the User.

d. marketing and business offers of the Operator's services:

• general sending of product business offers: sending general advertising communications without targeting a specific group of recipients. The processing duration of personal data in this case is 3 years;
• individual offer: sending advertising communications after evaluating certain personal aspects related to the natural person. The Operator does not perform profiling in accordance with Art. 22 of the Regulation, as it is not automated processing, but manual creation of individual offers. The processing duration of personal data in this case is 3 years;
• cookies: short text files generated by the web server and stored on the computer via the browser. Two types are distinguished. Firstly, there are cookies necessary to ensure the functioning and analysis of the website (carrying out the transmission of electronic communication via an electronic communications network, consent cannot be refused for the use of these cookies). Secondly, there are cookies that evaluate certain personal aspects related to a specific natural person. The User must give consent for the use of the second type of cookies. The processing duration in this case is 3 years. For re-marketing purposes, cookies are provided to other processors only if consent for this purpose has been granted to them, with an expiration period of a maximum of 500 days. If consent for advertising cookies is withdrawn, it is technically impossible to immediately remove the cookie already provided to the processor. Cookies at the processor are removed automatically after the expiration period. An immediate solution to prevent re-marketing activities by processors is to delete cookies from the browser.

III. Personal Data Protection and Processing Information

1. If the User does not provide their Personal Data, it is not possible to conclude a contract with the Operator. Personal Data is necessary in this context for the provision of the Operator's specific service.
2. After the expiration of the periods stated in Article II, the Operator will delete or anonymize the Personal Data.
3. The User is obliged to provide only truthful and accurate Personal Data to the Operator. The User is responsible for the correctness, accuracy, and truthfulness of the provided Personal Data. The Operator is not responsible for the correctness of the provided data.
4. The Operator will make maximum efforts to prevent unauthorized processing.
5. The Operator is entitled to transfer the User's personal data to third parties for the following purposes: completion of the ordering process, sending business communications, customer satisfaction evaluation, customer support services, handling complaints.
6. Personal data is and will be processed in electronic form by non-automated means.

IV. User Rights Related to Personal Data Processing

1. The User's rights in connection with personal data protection:
   a. to request access to their Personal Data from the Operator;
   b. for correction of provided Personal Data;
   c. for deletion of provided Personal Data;
   d. for limitation of Personal Data processing;
   e. to file a complaint with the Office for Personal Data Protection;
   f. the right to transfer personal data to another controller;
   g. the right to object to the processing of personal data;
   h. the right to withdraw consent.
2. The User can exercise their rights according to par. 1 of this article via the link provided in the footer of the e-mail sent by the Operator or by a request sent to the address info@lavish.sk
3. The rights according to par. 1, letters c) and d) of this article cannot be exercised to the extent and for the purposes stated in Art. II par. 1, letters a), b), and c).
4. In the event that the User believes that the Operator is processing their Personal Data in a way that is contrary to the protection of their private and personal life or contrary to relevant legal regulations, especially if the Personal Data is inaccurate with regard to the purpose of their processing, they may:

• ask the Operator for an explanation by e-mail to the address info@lavish.sk
• object to the processing and request by e-mail sent to info@lavish.sk that the Operator ensures the removal of the resulting state (e.g., by blocking, performing a correction, supplementing, or liquidating the Personal Data). The Operator will immediately decide on the objection and inform the User. If the Operator does not comply with the objection, the User has the right to turn directly to the Office for Personal Data Protection. This provision does not affect the User's authority to turn to the Office for Personal Data Protection with their grievance directly.

5. If the User exercises a right according to this article, the Operator is obliged to respond within 30 days of receiving the request.

6. Acceptance of a request to exercise a right from Article IV, point 1 a) and f) is possible only via a data message or by letter with an officially verified signature to the company's registered address. It is necessary to include in the request the e-mail address to which a verification e-mail will then be sent to confirm the applicant's identity.

7. If the User exercises any of the rights from Article IV, paragraph 1, the Operator has the right to request proof of the User's identity. The request for access to personal data must therefore be sent from the applicant's e-mail address. If the request is submitted in another form or from another e-mail address, the Operator has the right to demand additional verification via a reply to the verification e-mail. In the event that the applicant does not prove their identity within 14 days of sending the verification e-mail, their request to exercise the rights from Article IV, paragraph 1 will not be accepted.

8. The Operator is entitled to charge a reasonable fee for administrative costs associated with repeated and unfounded requests for a physical copy of the processed Personal Data.

V. Final Provisions

1. All legal relations arising during the processing of Personal Data are governed by the legal order of the Slovak Republic, regardless of where access to them was realized. The Slovak courts have jurisdiction to resolve any disputes arising in connection with privacy protection between the User and the Operator.
2. The data subject has the right to contact the Office for Personal Data Protection (https://dataprotection.gov.sk/uoou/sk).
3. These Principles become effective on 01. 09. 2018.

—---------------------------------------------------------------------------------------------------

How can I change, update, or remove my personal data?

Customers can change or update their personal data at any time based on a written request to the email info@lavish.sk. At the same time, upon the User's written request, personal data will be deleted from the database and the company Mgr. Vladimíra Ilavská will no longer process them.

What are cookies and how do we use them?

A cookie is a small text file that is transferred from a website and stored on the User's computer or mobile device. The company Mgr. Vladimíra Ilavská (and/or its partners such as Google, Meta-Facebook, Mailchimp, etc.) uses cookie files (so-called cookies) in order to improve and simplify the User's visit to the www.lavish.sk website. We do not use them to store the User's personal information, nor do we provide them to third parties.

Must you provide us with your personal data?

You provided us with your personal data voluntarily based on your free consent, while you were not obliged to grant us such consent to the processing of personal data.

Will we transfer your personal data to a third country?

The realization of the services we provide requires cooperation with the already mentioned companies. This means that the User's personal data may be transferred to third countries. However, the transfer always takes place in accordance with the legislative requirements placed on this transfer by Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts and Regulation (EU) 2016/679 of the European Parliament and of the Council, while in every case the protection of your personal data is ensured. Specifically, these are the servers and cloud solutions of the respective companies Google LLC, Meta - Facebook Inc., Mailchimp.

What are your rights?

In connection with personal data protection, you have the following rights:

• the right to access your personal data, you have the right to request confirmation from us as to whether we are processing personal data concerning you and, if we are processing your data, you have the right to obtain access to this personal data and detailed information about all facts related to the processing of this personal data (your right to access personal data is regulated by § 21 of Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts and Art. 15 of Regulation (EU) 2016/679 of the European Parliament and of the Council). Upon your request, we are obliged to provide you with your personal data that we process about you, and for repeated provision of this data, we are entitled to require you to pay a reasonable fee corresponding to the administrative costs;
• the right to correction of personal data, namely the correction of incorrect data concerning you, or completion of incomplete personal data (your right to correction of personal data is regulated by § 22 of Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts and Art. 16 of Regulation (EU) 2016/679 of the European Parliament and of the Council);
• the right to deletion of personal data (your right to deletion of personal data is regulated by § 23 of Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts and Art. 17 of Regulation (EU) 2016/679 of the European Parliament and of the Council), if:
  (a) personal data are no longer necessary for the purpose for which we obtained or otherwise processed them,
  (b) we are processing personal data illegally,
  (c) you withdraw your consent to the processing of personal data and there is no other legal basis for processing the personal data,
  (d) you object to the processing of personal data and there are no overriding legitimate grounds for processing the personal data, or you object to the processing of personal data according to § 27 par. 2 of Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts,
  (e) the reason for deletion is the fulfillment of an obligation according to Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts, a special regulation, or an international treaty by which the Slovak Republic is bound, or
  (f) personal data were obtained in connection with the offer of information society services according to § 15 par. 1 of Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts.
  You cannot exercise the right to delete your personal data if:
  (a) the processing of personal data is necessary to exercise a legal claim,
  (b) to exercise the right to freedom of expression or the right to information,
  (c) to fulfill an obligation according to Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts, Regulation (EU) 2016/679 of the European Parliament and of the Council, a special regulation, or an international treaty by which the Slovak Republic is bound, or to fulfill a task realized in the public interest or in the exercise of public power entrusted to the one who processes the personal data,
  (d) for reasons of public interest in the area of public health in accordance with § 16 par. 2 letters h) to j) of Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts,
  (e) for the purpose of archiving, for scientific purposes, for the purpose of historical research, or for statistical purposes according to § 78 par. 8 of Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts, if it is likely that your right would make the achievement of the objectives of such processing impossible or seriously hinder it;
• the right to limitation of personal data processing (your right to limitation of personal data processing is regulated by § 24 of Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts and Art. 16 of Regulation (EU) 2016/679 of the European Parliament and of the Council), if
  (a) you contest the accuracy of the personal data, during the period allowing us to verify the accuracy of the personal data,
  (b) the processing of personal data is illegal and you object to the deletion of personal data and request a limitation of their use instead,
  (c) we no longer need the personal data for the purpose of processing the personal data, but you need them to exercise a legal claim, or
  (d) you object to the processing of personal data according to § 27 par. 1 of Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts and Art. 21 par. 1 of Regulation (EU) 2016/679 of the European Parliament and of the Council.
  If the processing of personal data has been limited, we may, apart from storing the personal data, only process the personal data with your consent or for the purposes of exercising a legal claim, for the protection of persons, or for reasons of public interest;
• the right to object to the processing of personal data (your right to object to the processing of personal data is regulated by § 27 of Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts and Art. 21 of Regulation (EU) 2016/679 of the European Parliament and of the Council), if personal data is being processed on the basis of a legal ground according to § 13 par. 1 letter e) or letter f) of Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts, or Art. 6 par. 1 letter e) or f) of Regulation (EU) 2016/679 of the European Parliament and of the Council. In such a case, the operator must not process personal data unless we demonstrate necessary legitimate grounds for the processing of personal data that override your rights or interests, or grounds for exercising a legal claim;
• the right to portability of personal data (your right to portability of personal data is regulated by § 26 of Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts and Art. 20 of Regulation (EU) 2016/679 of the European Parliament and of the Council), in a structured, commonly used, and machine-readable format, while you have the right to transfer this personal data to another controller, if it is technically possible and if the processing is performed by automated means and takes place on the basis of a legal ground in the sense of § 13 par. 1 letter a) or letter b) of Act no. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts, or Art. 6 par. 1 letter a) or letter b) of Regulation (EU) 2016/679 of the European Parliament and of the Council, i.e., if we process personal data based on your consent or for the reason of fulfilling a contract or contractual obligation.

Why do we need your personal data?

We need your personal data processed via Google Analytics to analyze traffic on our website, specifically to verify whether our site remains interesting to you and other users and that its traffic is not declining.

We need your personal data processed via Google AdWords and Facebook Pixel to personalize advertising, specifically to ensure that our website's ads are displayed primarily to users who may be interested in our content, services, and products.

We only process your personal data based on your consent for these purposes, and to achieve these processing goals, we may provide them to Google LLC and Meta - Facebook Inc., which provide the services through which your data is collected.

We process your personal data by automated means; however, this processing does not involve automated individual decision-making or profiling under Section 28 (1) and (4) of Act No. 18/2018 Coll. on Personal Data Protection, or Art. 22 of Regulation (EU) 2016/679 of the European Parliament and of the Council.

Who can you contact in case of an issue?

If you believe that we have violated your personal data protection rights, you can contact us at the email address: info@lavish.sk

Alternatively, you may contact the Office for Personal Data Protection of the Slovak Republic, Galvaniho Business Centrum II, Galvaniho 7/B, Bratislava.

You can reject or, if necessary, delete cookies. Instructions on how to do this can be found in the "Help" section of your web browser.

Your personal data is processed by us – the company

Mgr. Vladimíra Ilavská

Námestie SNP 476/17, 811 06 Bratislava

ID No. (IČO): 51 689 456

contact: vladimira@studiolavish.com