Privacy Policy

I. Data Controller

The controller of personal data pursuant to Section 5 (o) of Act No. 18/2018 Coll. on Personal Data Protection, as amended (hereinafter the “Act”), is:
Adelle Davis, s.r.o., Karloveská 63, 841 04 Bratislava – Karlova Ves borough, Company ID (IČO): 50916912, Tax ID (DIČ): 2120606730, VAT ID (IČ DPH): SK2120606730, File No.: Commercial Register of the District Court Bratislava I, Section: Sro, Insert No. 120139/B (hereinafter referred to as the “Controller”).
Contact details of the Controller:
Address: Karloveská 63, 841 04 Bratislava
Email: info@adelledavis.com
Phone: +421 902 731 894

Personal data mean any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The Controller has appointed a Data Protection Officer.
Contact details of the DPO: Juraj Šembera, +421 2 4020 0810

II. Sources and Categories of Personal Data

The Controller processes personal data that you have provided or personal data obtained by the Controller in connection with the fulfilment of your order.
The Controller processes your identification and contact details and data necessary for performance of the contract.

III. Legal Basis and Purpose of Processing Personal Data

The legal basis for processing personal data is:
– performance of a contract between you and the Controller pursuant to Section 13(1)(b) of the Act,
– legitimate interest of the Controller in providing direct marketing (in particular sending commercial communications and newsletters) pursuant to Section 13(1)(f) of the Act,
– your consent to processing for direct marketing purposes (in particular sending commercial communications and newsletters) pursuant to Section 13(1)(a) of the Act, where no order of goods or services has been placed.
The purpose of processing personal data is:
– processing your order and exercising rights and obligations arising from the contractual relationship between you and the Controller; personal data required for placing an order (name, address, contact details) are necessary for concluding and performing the contract; without providing such data, it is not possible to conclude or perform the contract,
– sending commercial communications and carrying out other marketing activities.
The Controller may carry out automated individual decision-making pursuant to Section 28 of the Act. You have given your explicit consent to such processing.

IV. Data Retention Period

The Controller stores personal data:
– for the period necessary to exercise rights and obligations arising from the contractual relationship between you and the Controller and to assert claims from such relationships (15 years from termination of the contractual relationship),
– until consent to processing for marketing purposes is withdrawn, but no longer than 5 years, where personal data are processed on the basis of consent.
After expiry of the retention period, the Controller shall erase personal data.

V. Recipients of Personal Data (Processors)

Recipients of personal data are processors involved in fulfilling the purpose of processing, such as delivery companies and accounting service providers. Processors are authorised to process personal data only to the extent necessary for performing their activities.
The Controller intends to transfer personal data to a third country (outside the EU) or an international organisation. Recipients in third countries are mailing service providers.

VI. Your Rights

Under the conditions set out in the Act, you have the right to:
– access your personal data,
– rectify personal data or restrict processing,
– erase personal data,
– object to processing,
– data portability,
– withdraw consent to processing in writing or electronically to the address or email of the Controller stated above.
You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe your right to personal data protection has been violated.

VII. Data Security

The Controller declares that it has adopted all appropriate technical and organisational measures to secure personal data.
The Controller has adopted technical measures to secure data repositories and repositories of personal data in paper form.
The Controller declares that only authorised persons have access to personal data.

VIII. Granting of Consent

You grant consent to the operator of the online store www.adelledavis.sk, i.e., the Controller. As a data subject, you grant your voluntary and explicit consent to the processing of your personal data in the scope stated in the order (name, surname, city, address, phone number and email address) for the purposes of marketing and promotional activities of the Controller. These include direct communication with the data subject, sending targeted advertising, creating similar audiences on behalf of the Controller, sending information about news and events organised by the Controller, and archiving for potential inspection by supervisory authorities.

By giving consent, you also grant the Controller voluntary and explicit consent to use and provide such personal data to third parties for the above purposes and for communication with third parties regarding marketing and promotional activities, where such processing is usual, necessary or appropriate, and to include such personal data in databases maintained by the Controller.

Consent may be withdrawn at any time by sending an email to info@adelledavis.com or by sending a written request to the Controller’s address. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal. The data subject also confirms that the Controller has fulfilled its information obligation.

IX. Final Provisions

By submitting an order via the online order form, you confirm that you are familiar with and accept this Privacy Policy in its entirety.
You agree to this Privacy Policy by ticking the consent checkbox in the online form.
The Controller is entitled to amend this Privacy Policy. The new version will be published on its website.

This Privacy Policy is effective as of 15 April 2024.