INFORMATION ON THE PROCESSING OF PERSONAL DATA
According to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “Regulation“), addressed to you as so-called data subjects, whose personal data we obtain and process as so-called controllers.
Operator, contact details
The operator is the company Aluminum a.s., with registered office at Kollárová 2759/2, 010 01 Žilina, ID number: 55338810, registered in the Commercial Register of the District Court of Žilina, Section: Sro, Insert No.: 11073/L, (“Operator“).
Personal data that is the subject of processing
We process the following categories of your personal data:
– identification data (for example first name, last name)
– contact data (for example, delivery address, billing address, email address, telephone number)
– demographic data (such as gender, date of birth)
– payment data about your orders (for example, list of purchased goods, preferred method of delivery of goods, preferred method of payment for goods, data on complaints about goods)
– settings of your account and using the functionalities of our website (for example, password, list of favorite goods, subscription to news, tracking of sold out goods, ratings and reviews)
– data about your behavior on our website (for example date and time of access, information about your internet browser, IP address, operating system)
– information obtained through the so-called cookie files
Purposes and legal basis of personal data processing
We usually process your personal data for the following purposes and based on the following legal bases:
| Purpose of processing | Legal basis of processing |
| Processing your order, or performance of the contract concluded between you and the Operator | – processing is necessary for the performance of the contract concluded between you and the Operator or for the implementation of measures prior to the conclusion of the contract based on your request (pre-contractual relations) within the meaning of Art. 6 par. 1 letter b) Regulations |
| Consumer competitions | – the processing takes place on the basis of your consent to the processing of personal data in accordance with Art. 6 par. 1 letter a) Regulations |
| Marketing promotion and communication | – processing is necessary for the purposes of legitimate interests pursued by the Operator within the meaning of Art. 6 par. 1 letter f) Regulations – in justified cases, for example if you have not yet ordered any goods from us or are not a registered user, processing takes place on the basis of your consent to the processing of personal data in the sense of Art. 6 par. 1 letter a) Regulations |
| User settings and functionalities of our websites | – processing is necessary for the purposes of legitimate interests pursued by the Operator within the meaning of Art. 6 par. 1 letter f) Regulations – in justified cases, processing takes place on the basis of your consent to the processing of personal data in the sense of Art. 6 par. 1 letter a) Regulations |
| Fulfillment of obligations arising from legal regulations | – processing is necessary to fulfill the legal obligations of the Operator within the meaning of Art. 6 par. 1 letter c) Regulations |
| Proving, exercising and defending legal claims | – processing is necessary for the purposes of legitimate interests pursued by the Operator within the meaning of Art. 6 par. 1 letter f) Regulations |
Legitimate interests
The legitimate interests of the Operator or the legitimate interests of a third party in the processing of your personal data usually consist in the use of personal data for the purposes of marketing communication, promotion and presentation of the Operator and the goods offered by it, for the purpose of enabling the use of the functionalities of your account and the website of the Operator and for the purposes of applying (lawsuit ), enforcement or protection of the rights, legitimate interests and claims of the Operator or third parties.
Period of storage of personal data
The period of storage of personal data varies depending on the purpose and legal basis of processing your personal data. In general, the Operator stores your personal data for the following periods:
– if personal data is processed due to the fulfillment of an obligation arising from the law – for the period required by the relevant law
– if personal data is processed for the purpose of fulfilling the contract – for the duration of the performance of the contract (including pre-contractual negotiations) and during the period during which it is possible to apply (sue), prove or defend rights and claims from the contract or related to the contract
– if personal data is processed due to legitimate interests pursued by the Operator or a third party – for the duration of the relevant legitimate interest and during the period during which it is possible to assert (sue), demonstrate or defend rights and claims from the legitimate interest or related to the legitimate interest interest
– if personal data is processed on the basis of consent – for the period for which consent was granted or until the time of withdrawal of consent
Recipients of personal data
We do not provide your personal data to third parties, except in cases where you have given your consent to make your personal data available to a third party or there is another legal basis for providing your personal data to a third party, for example, if it is to fulfill a legal obligation of the Operator, or if the provision of personal data is necessary for the purpose of fulfilling the contract with the affected person, or if the provision of personal data is necessary for the purpose of protecting the legitimate interests of the Operator consisting, for example, in the application (suing), enforcement or defense of the Operator’s legal claims.
In the above cases, the personal data of the person concerned may be provided in particular to the following recipients or categories of recipients:
– contractual partners (for example, suppliers of goods, service providers)
– intermediaries who process personal data on behalf of the Operator
– joint operators who process personal data together with the Controller (for example, Facebook Ireland Limited or Google Ireland Limited)
– courts, state and local government authorities, public law institutions, law enforcement authorities, tax authorities, customs authorities and financial administration authorities, notary offices, executor offices
– control and supervisory authorities
Transfer of personal data to third countries
As part of the processing of your personal data, they are not transferred to third countries outside the territory of the European Union, nor to international organizations.
Your rights in connection with the processing of personal data
Right of access to data
The affected person has the right to obtain from the Operator a confirmation as to whether personal data concerning him/her are being processed, and if so, he/she has the right to obtain access to this personal data and additional information resulting from Art. 15 Regulations.
Right to rectification of data
The person concerned has the right to demand that the Operator correct his incorrect personal data without undue delay and/or that his personal data be supplemented.
The right to erasure of personal data
The affected person has the right to demand that the Operator delete his personal data without undue delay, if the conditions of Art. 17 Regulations (e.g. the purpose for which personal data was processed has expired; consent to the processing of personal data has been withdrawn and there is no other legal basis for processing personal data).
The right to restrict the processing of personal data
The affected person has the right to demand the restriction of the processing of his personal data, if the conditions of Art. 18 Regulations (e.g. the data subject contests the correctness of personal data; the processing of personal data would be illegal; the Operator no longer needs the personal data for processing purposes, but the data subject needs them to prove, exercise or defend legal claims).
The right to object to the processing of personal data
The person concerned has the right to object at any time for reasons related to his specific situation to the processing of personal data carried out by the Operator due to the performance of a task carried out in the public interest or in the exercise of public authority entrusted to the Operator or if the processing is carried out on the basis of the legitimate interest of the Operator or a third party, including objecting to related profiling. The person concerned also has the right to object to the processing of personal data for the purposes of direct marketing, including profiling to the extent that it is related to such direct marketing.
Right to data portability
The person concerned has the right to obtain from the Operator the personal data that he/she has provided in a structured, commonly used and machine-readable format. The person concerned has the right to transfer personal data obtained in this way to another operator without the Operator preventing him from doing so. Such transferability of personal data is possible if the personal data of the person concerned was processed on the basis of consent or on the basis of a contract and if the processing was carried out by automated means. If it is technically possible, the data subject has the right to direct transfer from one operator (from the Operator) to another operator.
The right to withdraw consent to processing
If personal data is processed based on the consent of the person concerned, the person concerned is entitled to revoke this consent at any time. The withdrawal of consent does not affect the legality of the processing of personal data of the person concerned before the withdrawal of this consent.
Exercising rights against the Operator
If the person concerned decides to exercise any of the above-mentioned rights against the Operator in connection with the processing of his personal data, he can do so in writing at the address of the Operator’s registered office or electronically at the email address: info@aluminium.as
The right to file a complaint with a supervisory authority
The affected person has the right to file a complaint with the supervisory authority responsible for supervising the processing of personal data. On the territory of the Slovak Republic, this authority is the Office for the Protection of Personal Data of the Slovak Republic, with headquarters at Hraničná 4826/12, 820 07 Bratislava.
Obligation/voluntariness to provide personal data
If the Operator processes your personal data for the purpose of fulfilling a legal obligation, you are obliged to provide such data to the Operator.
If the provision of personal data is a contractual requirement or a requirement that is necessary to conclude a contract between you and the Operator, the provision of personal data is voluntary.
If you refuse to provide the Operator with personal data required on the basis of legal regulations or personal data that is necessary to conclude and fulfill the contract or to perform the required action, the Operator has the right to refuse to enter into a contractual relationship with you or to perform the required action.
Automated decision making/profiling
The operator does not use decision-making based on the automated processing of your personal data, including profiling, which would have legal effects that concern you or otherwise significantly affect you.
Sources of personal data
The Operator obtains personal data primarily from you as the affected persons (directly or through intermediaries who process personal data on behalf and based on the instructions of the Operator). The Operator may also obtain your personal data from publicly accessible sources and registers, or from third parties, primarily in connection with the conclusion or performance of a contract with the Operator.
Cookies
What are cookies?
Cookies are small encrypted text files that are stored on your computer or on another device that you use when visiting websites. Cookies are sent via websites and stored in your browser. When you visit the website again, your browser will send cookies back to our website, so that your device can be recognized and thanks to this, the website can be customized according to your preferences.
What cookies do we use?
The cookies we use, in addition to ensuring the basic functionality of our website, allow us to recognize you when logging in to the user environment, to remember your previous choice when opening a new window, especially the contents of the shopping cart, to measure traffic to our website and analyze the way it is used, to link you with social networks, including automatic login to social networks, as well as to customize the content of our advertising displayed on third-party websites and social networks.
Specifically, we use the following cookies:
Basic cookies. These are necessary for our website to function. Your consent is not required to use these cookies.
Functional cookies. These are important, but not essential for the functioning of our website. Your consent is required to use these cookies. If it is not granted, our website may not function properly.
Performance cookies. These cookies allow us to measure and constantly improve the performance of our websites and thus provide you with the most interesting content. Your consent is required to use these cookies.
Marketing cookies. These cookies help us focus specifically on you and provide you with the most relevant advertising. Your consent is required to use these cookies.
Third party cookies. Through our website, cookies from the operators of marketing tools that we use on our website may be stored on your device, or we may share with these operators the information that was provided to us with the help of cookies. Cookies used by third parties and the way of using the data obtained through them are governed by the personal data protection policies of the relevant third parties. You consent to the use of these cookies on our website.
Our website also uses advertising and so-called affiliate systems provided by [Facebook, Heureka, Google AdWords, …]. If you click on a link or banner on the pages of one of our advertising or affiliate partners, this link will take you to our website and store cookies on your device that will recognize that you came to our website through an affiliate partner. You consent to the use of these cookies on the pages of our affiliate partner.
In addition, our website also uses so-called social plugins that are marked with logos on our websites. When you visit our website, your browser establishes a direct connection with the servers on which these plugins run. The content of the plugins is transferred directly to your browser, which then integrates it into our website. Plugin integration causes the social plugin to receive information that you have made available on our website. If you are logged in to social networks, it will be possible to assign your visit to your account in these social networks. If you do not want social networks to collect data about you through our website, you must log out of the social network before visiting our website.
How can you grant or withdraw consent to the use of cookies?
When you visit our website, we inform you about the use of cookies via a banner located at the bottom of our website. By setting your web browser, you can grant or withdraw consent to the use of cookies at any time – in accordance with § 55 par. 5 of Act no. 351/2011 Coll. on electronic communications, the setting of your web browser is considered consent to the use of cookies.
You can also set your web browser to block the storage of cookies on your device. It is also possible to block or enable the storage of cookies only for certain websites. You can then delete cookies that are already stored on your device at any time.
The specific procedure for the most used web browsers can be found here:
Chrome
Safari
Mozilla
Internet Explorer
Android
Changes to the rules, current wording
The operator may from time to time change or modify this information on the processing of personal data, especially for the purpose of harmonizing it in the event of changes to the relevant legislation or incorporating changes in the purposes, legal bases or means of personal data processing. The current wording of this information (including any changes made) is available on the Operator’s website www.aluminium.as, as well as in paper form at the address of the Operator’s registered office.