We use cookies to better measure and analyze website traffic.
I understand

privacy policy

GDPR

Who processes your personal data?

We process your personal data – the company

Mgr. Vladimíra Ilavská

Námestie SNP 476/17, 811 06 Bratislava

ID: 51 689 456

info@lavish.sk

Your personal data is also handled by: Google LLC, META - Facebook Inc., Mailchimp, but only if you have given us consent to process your personal data through the services that these companies provide on our site.

I. Introductory provisions

  1. For the purposes of these Principles, the following definitions apply:
  • Personal Data includes name and surname, email address, telephone number, IP address, and cookies.
  1. The operator of www.lavish.sk, as the controller of Personal Data, hereby provides information on the method and scope of Personal Data processing, including the extent of the Participant's rights (as defined below) related to the processing of their Personal Data.
  2. When processing personal data, the operator proceeds in accordance with the following legal regulations:
  • Act No. 18/2018 Coll. on Personal Data Protection
  • Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the "Regulation")
  1. A Participant is a natural person who purchases services from the Operator or uses a part of the www.lavish.sk website that requires personal data (name and email address, e.g., a contact form).
  2. The purpose is to sell services and provide information. In connection with the above, Personal Data is processed:
  • to the extent that it was provided in connection with the order of the Operator's service, or within the negotiations on the conclusion of a contract with the Operator, as well as in connection with the concluded contract
  • for the purposes stated below in Article II.

II. Purpose and duration of Personal Data processing

The Operator processes Personal Data for the following purposes:

a. fulfilling the terms and conditions, or other obligations, and providing services:

  1. personal data will be processed for the duration of negotiations regarding purchase, consultation, or renovation between the Operator and the Participant, for the purpose of purchasing furniture or accessories, as well as during the contractual relationship;
  2. marketing campaigns: for the purpose of fulfilling the marketing campaign, evaluation, termination, delivery of any prize, etc. Processing time: for the duration of the marketing campaign.

b. compliance with a legal obligation (especially accounting, tax and archiving obligations, providing cooperation to administrative bodies, police, courts, etc.):

  1. the tax document will be kept for 10 years from the termination of the contract: For the purpose of fulfilling the legal obligation of archiving accounting documents based on Act No. 563/1991 Coll., on Accounting, as amended, Personal Data will be further processed and stored for 10 years from the year following the year in which the contract between the Operator and the Participant was concluded;
  2. fulfilling obligations in connection with the application of rights from defective performance, providing cooperation to administrative bodies, police, court: The Operator is entitled to process the customer's basic personal, identification and contact details, data about the goods, and data from communication between the customer for a period of 4 years from the date of expiry of the warranty period for the goods.

c. legitimate interests of the Operator, protection of rights and legally protected interests of the Operator:

  1. effective defense in case of a dispute. The processing time here is set to 4 years from the expiry of the warranty period for the goods and is extended by the period during which the dispute is conducted;
  2. the legitimate interest of the Operator is also sending commercial communications (general offers and individual offers) in accordance with § 7 par. 3 of Act No. 480/2004 Coll., on certain information society services and in accordance with point 47 of the Regulation, if the Operator has obtained electronic contact details in connection with the sale of goods and services to the Participant.

d. marketing and commercial offers of the Operator's services:

  • general sending of commercial product offers: sending general advertising messages without targeting a specific group of recipients. The processing time of personal data in this case is 3 years;
  • individual offer: sending advertising messages after evaluating some personal aspects relating to a natural person. The Operator does not perform profiling in accordance with Article 22 of the Regulation, as it is not automated processing, but manual creation of individual offers. The processing time of personal data in this case is 3 years;
  • cookies: short text files generated by the web server and stored on the computer via the browser. There are two types. Firstly, there are cookies necessary to ensure the functioning and analysis of the website (carrying out the transmission of electronic communication through an electronic communication network; disagreement cannot be expressed with the use of these cookies). Furthermore, there are cookies that evaluate some personal aspects relating to a specific natural person. The Participant must agree to the use of the second type of cookies. The processing time in this case is 3 years. For re-marketing purposes, cookies are transferred to other processors only if consent has been granted to them for this purpose, with an expiration period of a maximum of 500 days. If consent to advertising cookies is withdrawn, it is not technically possible to immediately remove cookies already transferred to the processor. The removal of cookies at the processor will occur automatically after the expiration period. An immediate solution to prevent re-marketing activities by the processor is to delete cookies from the browser.

III. Personal Data Protection and Processing Information

  1. If the Participant does not provide their Personal Data, it is not possible to conclude a contract with the Operator. In this context, Personal Data is essential for the provision of a specific service by the Operator.
  2. After the expiry of the periods specified in Article II, the Operator will delete or anonymize the Personal Data.
  3. The Participant is obliged to provide the Operator only with true and accurate Personal Data. The Participant is responsible for the correctness, accuracy, and truthfulness of the Personal Data provided. The Operator is not responsible for the correctness of the data provided.
  4. The Operator will make its best effort to prevent unauthorized processing.
  5. The Operator is entitled to transfer the Participant's personal data to third parties for the following purposes: completion of the order process, sending commercial communications, customer satisfaction evaluation, customer support services, and handling complaints.
  6. Personal data is and will be processed electronically in a non-automated manner.

IV. Rights of the Participant related to the processing of personal data

  1. Participant's rights in connection with the protection of personal data:
    a. to request from the Operator access to their Personal Data;
    b. to correct the Personal Data provided;
    c. to delete the Personal Data provided;
    d. to limit the processing of Personal Data;
    e. to file a complaint with the Office for Personal Data Protection;
    f. the right to transfer personal data to another controller;
    g. the right to object to the processing of personal data;
    h. the right to withdraw consent.
  2. The Participant may exercise their rights under paragraph 1 of this article via the link provided in the footer of the email sent by the Operator or by sending a request to info@lavish.sk
  3. The rights under paragraph 1 of this article, letters c) and d), may not be exercised to the extent and for the purposes specified in Article II, paragraph 1, letters a), b) and c).
  4. In the event that the Participant believes that the Operator is processing their Personal Data in a way that violates the protection of their private and personal life or violates applicable legal regulations, especially if the Personal Data is inaccurate with regard to the purpose of its processing, they may:
  • request an explanation from the Operator by email to info@lavish.sk
  • object to the processing and request, by email to info@lavish.sk, that the Operator rectify the situation (e.g., by blocking, correcting, supplementing, or deleting Personal Data). The Operator will decide on the objection immediately and inform the Participant. If the Operator does not comply with the objection, the Participant has the right to contact the Office for Personal Data Protection directly. This provision does not affect the Participant's right to contact the Office for Personal Data Protection directly with their complaint.

5. If the Participant exercises a right under this article, the Operator is obliged to respond within 30 days of receiving the request by the Operator.

6. Requests to exercise the right under Article IV, Point 1 a) and f) are only possible via data message or a letter with a notarized signature to the company's registered office address. The request must include the email address to which a verification email will then be sent to confirm the identity of the applicant.

7. If the Participant exercises any of the rights under Article IV, Paragraph 1, the Operator has the right to request proof of the Participant's identity. The request for access to personal data must therefore be sent from the applicant's email address. If the request is submitted in another form or from a different email address, the Operator has the right to request additional verification in the form of a response to a verification email. If the applicant does not prove their identity within 14 days of sending the verification email, their request to exercise the rights under Article IV, Paragraph 1 will not be accepted.

8. The Operator is entitled, in the case of a repeated and unjustified request for the provision of a physical copy of the processed Personal Data, to charge a reasonable fee for the administrative costs associated therewith.

V. Final Provisions

  1. All legal relations arising from the processing of Personal Data are governed by the laws of the Slovak Republic, regardless of where access to them was made. The Slovak courts have jurisdiction to resolve any disputes arising in connection with privacy protection between the Participant and the Operator.
  2. The data subject has the right to contact the Office for Personal Data Protection (https://dataprotection.gov.sk/uoou/sk).
  3. These Principles come into effect on 01. 09. 2018.

—---------------------------------------------------------------------------------------------------

How can I change, update or remove my personal data?

Customers can change or update their personal data at any time by sending a written request to info@lavish.sk. Also, upon written request of the Participant, personal data will be deleted from the database and Mgr. Vladimíra Ilavská will no longer process it.

What are cookies and how do we use them?

A cookie is a small text file that is transferred from a website and stored on the Participant's computer or mobile device. Mgr. Vladimíra Ilavská (and/or its partners such as Google, Meta-Facebook, Mailchimp, etc.) uses cookies to improve and simplify the Participant's visit to the website www.lavish.sk. We do not use them to store the Participant's personal information, nor do we provide them to third parties.

Do you have to provide us with your personal data?

You have provided us with your personal data voluntarily based on your free consent, and you were not obliged to grant us such consent to the processing of personal data.

Will we transfer your personal data to a third country?

The provision of our services requires cooperation with the aforementioned companies. This means that the Participant's personal data may be transferred to third countries. However, the transfer always takes place in accordance with the legislative requirements for this transfer under Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts and Regulation (EU) 2016/679 of the European Parliament and of the Council, while in each case the protection of your personal data is ensured. Specifically, this concerns the servers and cloud solutions of the respective companies Google LLC, Meta - Facebook Inc., and Mailchimp.

What are your rights?

In connection with the protection of personal data, you have the following rights:

  • Right of access to your personal data, you have the right to request confirmation from us as to whether we are processing personal data concerning you, and if we are processing your data, you have the right to access this personal data and detailed information about all facts related to the processing of this personal data (your right of access to personal data is governed by § 21 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts and Article 15 of Regulation (EU) 2016/679 of the European Parliament and of the Council). At your request, we are obliged to provide you with your personal data that we process about you, and for repeated provision of this data, we are entitled to request payment of a reasonable fee corresponding to administrative costs;
  • The right to rectification of personal data, namely to correct incorrect data concerning you or to supplement incomplete personal data (your right to rectification of personal data is governed by § 22 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts and Article 16 of Regulation (EU) 2016/679 of the European Parliament and of the Council);
  • Right to erasure of personal data (your right to erasure of personal data is governed by § 23 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts and Article 17 of Regulation (EU) 2016/679 of the European Parliament and of the Council) if:
    (a) the personal data are no longer necessary for the purpose for which we obtained or otherwise processed them,
    (b) we process personal data unlawfully,
    (c) you withdraw your consent to the processing of personal data and there is no other legal basis for the processing of personal data,
    (d) you object to the processing of personal data and there are no overriding legitimate grounds for the processing of personal data or you object to the processing of personal data pursuant to § 27 par. 2 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, (e) the reason for the erasure is the fulfillment of an obligation under Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, a special regulation or an international treaty by which the Slovak Republic is bound, or,
    (f) the personal data were obtained in connection with the offer of information society services pursuant to § 15 par. 1 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts.
    You cannot exercise the right to erasure of your personal data if:
    (a) the processing of personal data is necessary for the exercise of a legal claim,
    (b) for the exercise of the right to freedom of expression or the right to information,
    (c) for the fulfillment of an obligation under Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, Regulation (EU) 2016/679 of the European Parliament and of the Council, a special regulation or an international treaty by which the Slovak Republic is bound, or for the fulfillment of a task carried out in the public interest or in the exercise of official authority vested in the person who processes the personal data,
    (d) for reasons of public interest in the field of public health in accordance with § 16 par. 2 letters h) to j) of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, (e) for archiving purposes, for scientific purposes, for historical research purposes or for statistical purposes pursuant to § 78 par. 8 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, if it is likely that your right would make it impossible or seriously impede the achievement of the objectives of such processing;
  • Right to restriction of processing of personal data (your right to restriction of processing of personal data is governed by § 24 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts and Article 16 of Regulation (EU) 2016/679 of the European Parliament and of the Council) if
    (a) you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data,
    (b) the processing of personal data is unlawful and you object to the erasure of the personal data and request instead the restriction of their use,
    (c) we no longer need the personal data for the purpose of processing personal data, but you need them for the exercise of a legal claim, or,
    (d) you object to the processing of personal data pursuant to § 27 par. 1 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts and Article 21 par. 1 of Regulation (EU) 2016/679 of the European Parliament and of the Council.
    If the processing of personal data has been restricted, we may, in addition to storing personal data, process personal data only with your consent or for the purposes of exercising a legal claim, for the protection of persons or for reasons of public interest;
  • Right to object to the processing of personal data (your right to object to the processing of personal data is governed by § 27 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts and Article 21 of Regulation (EU) 2016/679 of the European Parliament and of the Council) if the processing of personal data is based on a legal basis pursuant to § 13 par. 1 letter e) or letter f) of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, or Article 6 par. 1 letter e) or f) of Regulation (EU) 2016/679 of the European Parliament and of the Council. In such a case, we, as the operator, must not process personal data if we do not demonstrate necessary legitimate interests for the processing of personal data that override your rights or interests, or reasons for the exercise of a legal claim;
  • Right to data portability (your right to data portability is governed by § 26 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts and Article 20 of Regulation (EU) 2016/679 of the European Parliament and of the Council), in a structured, commonly used and machine-readable format, and you have the right to transfer this personal data to another operator, if it is technically possible and if the processing is carried out by automated means and is based on a legal basis within the meaning of § 13 par. 1 letter a) or letter b) of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, or Article 6 par. 1 letter a) or letter b) of Regulation (EU) 2016/679 of the European Parliament and of the Council, i.e. if we process personal data on the basis of your consent or for the purpose of fulfilling a contract or contractual obligation.

What do we need your personal data for?

We need your personal data processed through the Google Analytics service to analyze the traffic to our website, and thus especially to verify whether our site is still interesting for you and other users and whether its traffic is not decreasing.

We need your personal data processed through the Google AdWords and Facebook Pixel services to personalize advertising, and thus especially to ensure that advertising for our website is displayed mainly to those users who may be interested in our content, services, and products.

We process your personal data that we process on the basis of your consent only for these purposes, with the proviso that in order to achieve the purpose of processing, we may provide them to Google LLC, Meta - Facebook Inc., which provide services through which your data is obtained.

We process your personal data by automated means, while their processing does not involve automated individual decision-making and profiling pursuant to § 28 par. 1 and 4 of Act No. 18/2018 Coll. on the Protection of Personal Data, or Article 22 of Regulation (EU) 2016/679 of the European Parliament and of the Council.

Who can you contact in case of a problem?

If you believe that we have violated your rights in the area of personal data protection, you can contact us at the e-mail address: info@lavish.sk

Or you can contact the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava.

You can refuse cookies or delete them if necessary. You can find instructions on how to do this in the "Help" section of your web browser.

We process your personal data – the company

Mgr. Vladimíra Ilavská

Námestie SNP 476/17, 811 06 Bratislava

ID: 51 689 456

contact: info@lavish.sk

​