GDPR (General Data Protection Regulation)  

In accordance with the valid legislation on personal data protection 1, 2 (hereinafter referred to as "personal data protection legislation"), the operator ZINNIA TRADE, with its registered office at Bancíkovej 1/A,21 03, Bratislava, IČO: 48124401 (hereinafter referred to as the "Company" or " personal data "processed by us" in various grammatical forms), services and goods, the provision of technical and business information, the sending of direct marketing, market research and customer satisfaction and the resulting rights and obligations.

When processing personal data in the framework of the above activities, you are the person concerned, i. j. the person about whom we process his personal data.

The legal basis for the processing of your personal data is - your consent for marketing, the conclusion of a contract, our legitimate interest.

Scope of processed personal data - identification and contact data (name and surname, residence, telephone number, e-mail address, in specific cases also date of birth), location data (especially IP addresses, information about the device used, visit to websites-cookies) .

Personal data is processed manually and automatically by our employees or through authorized intermediaries (marketing agencies, IT solution providers and software).

In order to fulfill certain purposes of personal data processing, we share your personal data with third parties who act on our behalf, for example with suppliers of certain services for our Company - intermediaries according to pre-agreed rules. These rules contain the scope specified by personal data protection legislation.

As an operator, we have a legal obligation to provide your personal data during inspections, supervisory activities or at the request of state authorities or institutions, if it follows from special regulations.

We also process your personal data as an intermediary, for example on the basis of the authorization of representatives of manufacturing companies of our brands.

The provision of personal data is always voluntary. Their provision is in most cases a condition for fulfilling your requirement according to the purpose of processing. If you do not consent to the processing of your personal data for the given purpose of processing, we will not be able to fulfill your request in most cases.

Retention of personal data

We process and store your personal data in accordance with the Company's security policies and the instructions of business partners for us as intermediaries and only for the time strictly necessary to fulfill the purpose of processing. Only persons authorized by us to access your personal data have access to it in accordance with security policies and instructions.

We only store your personal data for a limited time, and it will be deleted when the need to hold it for the purposes of processing in accordance with the Registration Plan ceases.

We are obliged to back up your personal data in accordance with the Retention Rules. We will completely delete them from the backup repositories in accordance with the Backup Policy and the Registry Plan. Personal data stored in back-up storage facilities are necessary to prevent security incidents, in particular data breaches due to a security incident. Our obligation to provide data backup arises from the security requirements of applicable legislation on personal data protection.

Your rights

Right of access to personal data

You have the right to access your personal data and the right to obtain confirmation that personal data is being processed about you. If personal data about you is processed, you have the right to information within the scope of this policy and to access your personal data. You have the right to provide a copy of the personal information we hold about you, as well as information about how we use your personal information. In most cases, your personal information will be provided to you in writing, unless you require another method of providing it. If you have requested this information by electronic means, it will be provided to you electronically, if technically possible. If you repeatedly request the same amount of your personal information, we may charge you a reasonable fee commensurate with your administrative costs.

Right of correction

You have the right to correct personal data processed about you if they are incorrect or inaccurate. It is very important for us to have the right information about you. If you find that the information we record about you is incorrect, inaccurate or incomplete, please let us know and ask you to correct your information (eg change of residence, change of contact, change of surname in case of marriage, etc.). We will then correct / supplement this information without undue delay.

Right of deletion

If we process personal data about you in an illegal manner, e.g. longer than necessary or if we process them for no reason, you have the right to delete them (the so-called "forgetfulness" right).

Processing restrictions

If you request the correction of your personal data, or object to the deletion of your personal data, if its processing is illegal, or if we no longer need it for our purposes, but you may need it to prove or defend legal claims, or you objected to the processing of your personal data. for other reasons, we will limit the processing of your personal data until the matter can be resolved.

The right to object

If you believe that  does not have the right to process your personal data, or if you want the automated decision to be reconsidered, you may object to the processing. In such cases, we can only continue to process them if we can demonstrate compelling legitimate reasons that outweigh your interests, rights and freedoms. However, we may process your personal data whenever necessary to determine, assert or defend legal claims.

Right to data portability

You have the right to obtain and request us to transfer the personal data you have provided to us to another third party, in a structured, commonly used and machine-readable format. However, the right to obtain and transfer personal data only applies to personal data that we have obtained from you with your consent or under a contract to which you are a party. The right to portability does not apply to personal data that we process about you on the basis of the Labor Code, the Act on Safety and Health at Work or on the basis of other special regulations.

The right to withdraw consent

In most cases, we do not process your personal information with your consent. However, we may ask for your consent in specific cases. In cases where we do so, you have the right to withdraw your consent to the continued use of your personal data.

Right to lodge a complaint

If you want to file a complaint about the way your personal data is processed, including the exercise of the above rights, you can contact our company in writing to our above address or by e-mail to :  office@zinniatrade.com.  We will properly review all your suggestions and complaints.

You have the right to file a complaint with the supervisory body, which is the Office for Personal Data Protection of the Slovak Republic.

[1] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / EC (General Data Protection Regulation).

[2] Act no. 18/2018 Coll. on the protection of personal data.