Privacy Policy

GDPR

Who processes your personal data?

We – the company – process your personal data.

Mgr. Vladimíra Ilavská

Namestie SNP 476/17, 811 06 Bratislava

ID: 51 689 456

vladimira@studiolavish.com

Your personal data is also processed by: Google LLC, META - Facebook Inc., Mailchimp, but only if you have given us consent to process personal data through the services that these companies provide on our website.

I. Introductory provisions

1. For the purposes of these Principles, the following shall apply:

• Personal data includes name and surname, email address, telephone number, IP address, cookies.

1. The operator of www.lavish.sk, as the administrator of Personal Data, hereby informs about the method and scope of processing of Personal Data, including the scope of the rights of the Participant (as defined below) related to the processing of his/her Personal Data.
2. When processing personal data, the operator proceeds in accordance with the following legal regulations:

• Act No. 18/2018 Coll. on the Protection of Personal Data
• Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the “Regulation”)

1. The Participant is a natural person who purchases services from the Operator or uses a part of the website www.lavish.sk that requires personal data (name and email address, e.g. contact form).
2. The purpose is to sell services and provide information. In connection with the above, Personal Data is processed:

• to the extent that they were provided in connection with the order of the Operator's service, or within the framework of negotiations on concluding a contract with the Operator, as well as in connection with the concluded contract
• for the purposes set out below in Article II.

II. Purpose and period of processing of Personal Data

The Operator processes Personal Data for the following purposes:

a. fulfillment of business terms and conditions, or other obligations, and provision of services:

1. personal data will be processed during negotiations on the purchase, consultancy, renovation between the Operator and the Subscriber, for the purpose of purchasing furniture or accessories, as well as during the duration of the contractual relationship;
2. marketing campaigns: for the purpose of fulfilling the marketing campaign, evaluation, termination, delivery of any winnings, etc. Processing time: for the duration of the marketing campaign.

b. compliance with legal obligations (especially accounting, tax and archiving obligations, providing cooperation to administrative authorities, police, courts, etc.):

1. the tax document will be kept for 10 years from the termination of the contract: In order to fulfill the legal obligation to archive accounting documents pursuant to Act No. 563/1991 Coll., on accounting, as amended, Personal Data will be further processed and kept for a period of 10 years from the year following the year in which the contract between the Operator and the Subscriber was concluded;
2. fulfillment of obligations in connection with the exercise of rights from defective performance, providing cooperation to administrative authorities, the police, and the court: The operator is authorized to process the customer's basic personal, identification, and contact data, data about the goods, and data from communication between the customer for a period of 4 years from the date of expiration of the warranty period for the goods.

c. legitimate interests of the Operator, protection of the rights and legally protected interests of the Operator:

1. effective defense in the event of a dispute. The processing time is set here at 4 years from the expiration of the warranty period for the goods and is extended by the period for which the dispute is ongoing;
2. The legitimate interest of the Operator is also to send commercial communications (general offers and individual offers) in accordance with Section 7(3) of Act No. 480/2004 Coll., on certain information society services and in accordance with point 47 of the Regulation, if the Operator has obtained electronic contact details in connection with the sale of goods and services to the Subscriber.

d. marketing and commercial offers of the Operator's services:

• general sending of commercial product offers: sending general advertising messages without targeting a specific group of recipients. The period of processing personal data in this case is 3 years;
• individual offer: sending advertising communications after evaluating certain personal aspects relating to the natural person. The operator does not perform profiling in accordance with Art. 22 of the Regulation, as this is not automated processing, but manual creation of individual offers. The period of processing of personal data in this case is 3 years;
• Cookies: short text files generated by a web server and stored on a computer via a browser. There are two types. First of all, these are cookies necessary to ensure the functioning and analysis of the website (the transmission of electronic communication via an electronic communication network; no objection can be made to the use of these cookies). Furthermore, these are cookies that evaluate some personal aspects relating to a specific natural person. The Participant must consent to the use of the second type of cookies. The processing period in this case is 3 years. For re-marketing purposes, cookies are transferred to other processors only if they have given consent for this purpose, with an expiration period of a maximum of 500 days. If consent to advertising cookies is withdrawn, it is technically not possible to immediately delete cookies once transferred from the processor. Cookies are automatically deleted from the processor after the expiration period has expired. An immediate solution to prevent re-marketing activities by the processor is to delete cookies from the browser.

III. Protection of personal data and information on processing

1. If the Subscriber does not provide his/her Personal Data, it is not possible to conclude a contract with the Operator. In this context, personal data are necessary for the provision of a specific service by the Operator.
2. After the expiry of the periods specified in Article II., the Controller will delete or anonymize the Personal Data.
3. The Participant is obliged to provide the Operator with only true and accurate Personal Data. The Participant is responsible for the correctness, accuracy and truthfulness of the provided Personal Data. The Operator is not responsible for the correctness of the provided data.
4. The operator will make every effort to prevent unauthorized processing.
5. The Operator is authorized to transfer the Subscriber's personal data to third parties for the following purposes: completing the ordering process, sending commercial communications, assessing customer satisfaction, providing customer support services, and handling complaints.
6. Personal data is and will be processed in electronic form in a non-automated manner.

IV. Participant's rights related to the processing of personal data

1. The Participant's rights regarding the protection of personal data:
   a. request access to his/her Personal Data from the Operator;
   b. to correct the Personal Data provided;
   c. to delete the Personal Data provided;
   d. to restrict the processing of Personal Data;
   e. file a complaint with the Office for Personal Data Protection;
   f. the right to transfer personal data to another administrator;
   g. the right to object to the processing of personal data;
   h. the right to withdraw consent.
2. The Participant may exercise his/her rights under paragraph 1 of this Article via the link provided in the footer of the e-mail sent by the Operator or by sending a request to the address info@lavish.sk
3. The rights under paragraph 1 of this Article, letters c) and d) cannot be exercised to the extent and for the purposes specified in Article II, paragraph 1, letters a), b) and c).
4. If the Subscriber believes that the Operator is processing his/her Personal Data in a manner that is contrary to the protection of his/her private and personal life or in violation of applicable legal regulations, especially if the Personal Data is inaccurate with regard to the purpose of its processing, he/she may:

• ask the Operator for an explanation by e-mail to info@lavish.sk
• object to the processing and request by e-mail sent to info@lavish.sk that the Operator ensure the elimination of the situation thus created (e.g. by blocking, correcting, supplementing or destroying Personal Data). The Operator shall decide on the objection without delay and inform the Participant. If the Operator does not comply with the objection, the Participant has the right to contact the Personal Data Protection Office directly. This provision does not affect the Participant's right to contact the Personal Data Protection Office directly with his/her complaint.

5. If the Subscriber exercises the right under this article, the Operator is obliged to respond within 30 days of receipt of the request by the Operator.

6. The application for exercising the right from Article IV., Point 1 a) and f) may only be accepted via data message or letter with an officially certified signature to the address of the company's registered office. The application must include an e-mail address to which a verification e-mail will then be sent to confirm the applicant's identity.

7. If the Participant exercises any of the rights under Article IV., Paragraph 1, the Operator has the right to request proof of the Participant's identity. The request for access to personal data must therefore be sent from the applicant's email address. If the request is submitted in a different form or from a different email address, the Operator has the right to request additional verification in the form of a response to a verification email. If the applicant does not prove his identity within 14 days of sending the verification email, his request to exercise the rights under Article IV., Paragraph 1 will not be accepted.

8. In the event of a repeated and unfounded request for a physical copy of the processed Personal Data, the Controller is entitled to charge a reasonable fee for the administrative costs associated with this.

V. Final provisions

1. All legal relationships arising from the processing of Personal Data are governed by the laws of the Slovak Republic, regardless of where they were accessed from. The Slovak courts are competent to resolve any disputes arising in connection with the protection of privacy between the Subscriber and the Operator.
2. The data subject has the right to contact the Office for Personal Data Protection (https://dataprotection.gov.sk/uoou/sk).
3. These Principles come into effect on September 1, 2018.

—----------------------------------------------------------------------------------------------------------------

How can I change, update or delete my personal information?

Customers can change or update their personal data at any time by sending a written request to info@lavish.sk. At the same time, upon the written request of the Participant, personal data will be deleted from the database and the company Mgr. Vladimíra Ilavská will no longer process them.

What are cookies and how do we use them?

A cookie is a small text file that is transferred from a website and stored on the Participant's computer or mobile device. The company Mgr. Vladimíra Ilavská (and/or its partners such as Google, Meta-Facebook, Mailchimp, etc.) uses cookies to improve and simplify the Participant's visit to the website www.lavish.sk. We do not use them to store the Participant's personal information and do not provide them to third parties.

Do you have to provide us with your personal data?

You provided us with your personal data voluntarily based on your free consent, and you were not obliged to grant us such consent to the processing of personal data.

Will we transfer your personal data to a third country?

The implementation of the services provided by us requires cooperation with the aforementioned companies. This means that the Subscriber's personal data may be transferred to third countries. However, the transfer always takes place in accordance with the legislative requirements imposed on this transfer by Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain acts and Regulation (EU) No. 2016/679 of the European Parliament and of the Council, while in any case the protection of your personal data is ensured. Specifically, these are servers, cloud solutions of the relevant companies Google LLC, Meta - Facebook Inc., Mailchimp.

What rights do you have?

You have the following rights in relation to the protection of personal data:

• the right to access your personal data, you have the right to request confirmation from us whether we are processing personal data concerning you and, if we are processing your data, you have the right to obtain access to this personal data and detailed information about all facts related to the processing of this personal data (Your right to access personal data is governed by Section 21 of Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain acts and Article 15 of Regulation (EU) No. 2016/679 of the European Parliament and of the Council). At your request, we are obliged to provide you with your personal data that we process about you, and for the repeated provision of this data, we are entitled to require you to pay a reasonable fee corresponding to administrative costs;
• the right to correct personal data, namely to correct incorrect data concerning you, or to supplement incomplete personal data (Your right to correct personal data is governed by Section 22 of Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts and Article 16 of Regulation (EU) No. 2016/679 of the European Parliament and of the Council);
• the right to erasure of personal data (Your right to erasure of personal data is governed by Section 23 of Act No. 18/2018 Coll. on the protection of personal data and on amendments and supplements to certain acts and Article 17 of Regulation (EU) No. 2016/679 of the European Parliament and of the Council), if:
  (a) the personal data is no longer necessary for the purpose for which we collected or otherwise processed it,
  (b) we process personal data unlawfully,
  (c) you withdraw your consent to the processing of your personal data and there is no other legal basis for the processing of your personal data,
  (d) you object to the processing of personal data and there are no overriding legitimate reasons for the processing of personal data or you object to the processing of personal data pursuant to Section 27(2) of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, (e) the reason for the deletion is the fulfillment of an obligation pursuant to Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, a special regulation or an international treaty by which the Slovak Republic is bound or,
  (f) personal data were collected in connection with the offer of information society services pursuant to Section 15(1) of Act No. 18/2018 Coll. on the protection of personal data and on amendments and supplements to certain acts.
  You cannot exercise the right to erasure of your personal data if:
  (a) the processing of personal data is necessary for the exercise of legal claims,
  (b) to exercise the right to freedom of expression or the right to information,
  (c) to fulfill an obligation under Act No. 18/2018 Coll. on the protection of personal data and on the amendment of certain acts, Regulation (EU) No. 2016/679 of the European Parliament and of the Council, a special regulation or an international treaty by which the Slovak Republic is bound, or to fulfill a task carried out in the public interest or in the exercise of public authority vested in the person processing the personal data,
  (d) for reasons of public interest in the area of ​​public health in accordance with Section 16(2)(h) to (j) of Act No. 18/2018 Coll. on the Protection of Personal Data and on amendments and supplements to certain acts, (e) for archiving purposes, for scientific purposes, for historical research purposes or for statistical purposes pursuant to Section 78(8) of Act No. 18/2018 Coll. on the Protection of Personal Data and on amendments and supplements to certain acts, if it is likely that your right would make it impossible or seriously impede the achievement of the objectives of such processing;
• the right to restrict the processing of personal data (Your right to restrict the processing of personal data is governed by Section 24 of Act No. 18/2018 Coll. on the protection of personal data and on amendments and supplements to certain acts and Article 16 of Regulation (EU) No. 2016/679 of the European Parliament and of the Council), if
  (a) you contest the accuracy of the personal data, for a period allowing us to verify the accuracy of the personal data,
  (b) the processing of personal data is unlawful and you object to the erasure of the personal data and request the restriction of their use instead,
  (c) we no longer need the personal data for the purposes of processing the personal data, but you need them for the exercise of a legal claim, or,
  (d) you object to the processing of personal data pursuant to Section 27(1) of Act No. 18/2018 Coll. on the protection of personal data and on amendments and supplements to certain acts and Article 21(1) of Regulation (EU) No. 2016/679 of the European Parliament and of the Council.
  If the processing of personal data has been restricted, we may, in addition to storing personal data, process personal data only with your consent or for the purposes of exercising legal claims, for the protection of individuals or for reasons of public interest;
• the right to object to the processing of personal data (Your right to object to the processing of personal data is governed by Section 27 of Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain acts and Article 21 of Regulation (EU) No. 2016/679 of the European Parliament and of the Council), if personal data is processed on the basis of the legal basis pursuant to Section 13, paragraph 1, letter e) or letter f) of Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain acts, or Article 6, paragraph 1, letter e) or f) of Regulation (EU) No. 2016/679 of the European Parliament and of the Council. In such a case, the controller may not process personal data unless we demonstrate compelling legitimate interests in the processing of personal data that override your rights or interests, or grounds for exercising a legal claim;
• the right to personal data portability (Your right to personal data portability is governed by Section 26 of Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain acts and Article 20 of Regulation (EU) No. 2016/679 of the European Parliament and of the Council), in a structured, commonly used and machine-readable format, and you have the right to transfer these personal data to another controller, if technically possible and if the processing is carried out by automated means and takes place on the basis of a legal basis pursuant to Section 13, paragraph 1, letter a) or letter b) of Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain acts, or Article 6, paragraph 1, letter a) or letter b) of Regulation (EU) No. 2016/679 of the European Parliament and of the Council 2016/679, i.e. if we process personal data based on your consent or for the purpose of fulfilling a contract or contractual obligation.

What do we need your personal data for?

We need your personal data processed through Google Analytics to analyze traffic to our website, and in particular to verify whether our website is still interesting to you and other users and whether its traffic is not decreasing.

We need your personal data processed through Google AdWords and Facebook Pixel to personalize advertising, and in particular to ensure that our website's advertising is displayed mainly to those users who may be interested in our content, services and products.

We process your personal data, which we process based on your consent, only for these purposes, with the proviso that in order to achieve the purpose of processing, we may provide it to Google LLC, Meta - Facebook Inc., which provide services through which your data is obtained.

We process your personal data by automated means, and their processing does not involve automated individual decision-making and profiling pursuant to Section 28, paragraphs 1 and 4 of Act No. 18/2018 Coll. on the Protection of Personal Data, or Art. 22 of Regulation (EU) No. 2016/679 of the European Parliament and of the Council.

Who can you contact in case of a problem?

If you believe that we have violated your rights in the area of ​​personal data protection, you can contact us at the e-mail address: info@lavish.sk

Or you can contact the Personal Data Protection Office of the Slovak Republic, Hraničná 12, 820 07 Bratislava.

You can refuse cookies or delete them if necessary. Instructions on how to do this can be found in the "Help" section of your web browser.

We – the company – process your personal data.

Mgr. Vladimíra Ilavská

Namestie SNP 476/17, 811 06 Bratislava

ID: 51 689 456

contact: vladimira@studiolavish.com