GDPR / Protection of personal data

INFORMATION / processing of personal data

MR Trading s.r.o.,

Business register of the District Court Bratislava I, section Sro, vl. no. 133457/B, ID: 52 100 120, VAT number: 2120906799 , registered office: Na Grunte 1, 831 52 Bratislava, SR, manager:

We would like to inform you about:

  1. Processing of personal data
  2. Cookies policy

The protection of natural persons in connection with the processing of personal data is a fundamental right. In article 8 par. 1 of the Charter of Fundamental Rights of the European Union and in Article 16, paragraph 1 of the Treaty on the Functioning of the European Union stipulates that everyone has the right to the protection of personal data concerning them. At the same time, we would like to inform you that on 19.12.2017 the President of the Slovak Republic, Mr. Andrej Kiska, signed the Act on the Protection of Personal Data and on Amendments to Certain Acts, which was assigned number 18/2018 in the collection of laws on 30.01.2018, which as of 25.05. .2018 repealed the previous Act No. 122/2013 Coll. on the protection of personal data.

As of May 25, 2018, the processing of personal data is governed by Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain laws with regard to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons during the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation).

In view of the above, the operator:

  • the operator has taken appropriate technical and organizational measures.
  • made the so-called Assessment of the impact on personal data protection

The processing of personal data is lawful if it is carried out on the basis of at least one of the legal bases in accordance with § 13 of the Act. no. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws:

  1. Consent of the person concerned for at least one specific purpose (the person concerned has expressed consent to the processing of his personal data for at least one specific purpose)
  2. Processing of personal data necessary for the performance of a contract to which the person concerned is a party, or for the implementation of measures prior to the conclusion of the contract based on the request of the person concerned
  3. The processing of personal data is necessary according to a special regulation or an international treaty to which the Slovak Republic is bound,
  4. The processing of personal data is necessary to protect the life, health or property of the person concerned or another natural person
  5. The processing of personal data is necessary to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator,
  6. Processing of personal data for the purpose of legitimate interests (processing of personal data is necessary for the purpose of the legitimate interests of the operator or a third party, except in cases where these interests are overridden by the interests or rights of the data subject requiring the protection of personal data, especially if the data subject is a child; this legal basis does not apply to the processing of personal data by public authorities in the performance of their tasks)

The legal basis for the processing of personal data according to the above-mentioned paragraph letter c) and e) must be established in Act 18/2018 Coll., in a special regulation or in an international treaty to which the Slovak Republic is bound; a special law must establish the purpose of processing personal data, the category of persons concerned and the list of processed personal data or the scope of processed personal data. Personal data processed on the basis of a special law can be provided, transferred or published from the information system only if the special law establishes the purpose of provision or the purpose of publication, the list of processed personal data or the scope of processed personal data that can be provided or published, or the recipients to whom provide personal data.

Pursuant to § 21 of Act NR SR no. 18/2018 Coll., the affected person has the right to obtain confirmation from the operator as to whether personal data relating to him or her is being processed. If the operator processes such personal data, the person concerned has the right to obtain access to this personal data and information about

  1. the purpose of processing personal data,
  2. categories of processed personal data,
  3. the identification of the recipient or the category of recipient to whom the personal data have been or are to be provided, in particular the recipient in a third country or an international organization, if possible,
  4. period of storage of personal data; if this is not possible, information on the criteria for its determination,
  5. the right to request from the operator the correction of personal data concerning the person concerned, their deletion or restriction of their processing, or the right to object to the processing of personal data,
  6. just file a motion to initiate proceedings pursuant to § 100,
  7. sources of personal data, if the personal data were not obtained from the person concerned,
  8. the existence of automated individual decision-making, including profiling according to § 28 par. 1 and 4; in these cases, the operator will provide the data subject with information, in particular, about the procedure used, as well as the meaning and expected consequences of such processing of personal data for the data subject.

The affected person has the right to be informed about adequate guarantees regarding the transfer according to § 482 par. 2 to 4, if personal data is transferred to a third country or an international organization.

The operator hereby also informs that, as a data subject, you have the right to:

  • Right of access to data (Art. 15)
  • Right to correction (Art. 16)
  • Right to erasure (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to portability (Art. 20)
  • Right to object (Art. 21)
  • if the processing is carried out based on the legitimate interest of the e-shop operator (e.g. for direct marketing purposes), the customer has the right to object to such processing of his personal data at any time,
  • the right to object for the purposes of direct marketing must be explicitly notified to the person concerned at the latest in the first communication with him and this right must be presented clearly and separately from any other information,
  • after applying the customer's objection, the e-shop operator is obliged to immediately end the processing of personal data for the purposes of direct marketing and to no longer process these personal data for the purposes of direct marketing.
  • Right to withdraw consent
  • if the processing takes place on the basis of the customer's consent (e.g. loyalty program, consumer competition), the customer can withdraw his consent to the processing at any time and the operator of the e-shop is obliged to stop the processing of personal data that was processed on the basis of consent, if there is no other legal basis ,
  • if the processing is carried out on the basis of the customer's consent, the customer must have the right to revoke the consent at any time according to Art. 13 par. 2 letters c) Regulations by the e-shop operator informed in advance.

The rights of the affected person / affected persons are stated in § 19 to § 30 of Act no. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws. As an operator, we have the operator's obligations in exercising the rights of the affected persons, which you can exercise in person, by post or by e-mail from the operator, see identification and contact details of the operator.

Procedure of the operator when processing the request of the person concerned / persons concerned

  • all information and notices of the operator towards the data subject must be in a concise, transparent, understandable and easily accessible form, formulated clearly and simply, the category of data subjects to whom the notices and information are addressed must be taken into account,
  • as a general rule, information and notices should be provided in the same way in which the affected person exercises his right, unless he requests another way,
  • the operator of the e-shop is obliged to process the request of the affected person within 1 month of its delivery (if necessary, the operator can extend the processing of the request by another 2 months, while he is obliged to notify the affected person of the extension of the deadline).

The operator is obliged to provide the person concerned with his/her personal data, which he processes. For the repeated provision of personal data requested by the data subject, the operator may charge a reasonable fee corresponding to administrative costs. The operator is obliged to provide personal data to the person concerned in a manner according to his request. Any affected person can contact the responsible person with questions regarding the processing of his/her personal data, as well as for the purpose of handling the concerns of the affected person.

Information systems of the operator

Information system e-shop www.greenware.sk

Information system - marketing

Information system - wages and HR

Identification and contact details of the operator:

MR Trading s.r.o.,

Business register of the District Court Bratislava I, section Sro, vl. no. 133457/B, ID: 52 100 120, VAT number: 2120906799 , registered office: Na Grunte 1, 831 52 Bratislava, SR, manager:

Contact person:

Email: info@greenware.sk

Phone: 0903 52 92 98

The operator does not have a designated responsible person, as it does not have a legislative obligation.

 

Determination of the responsible person

The operator and intermediary are obliged to designate a responsible person if

  1. the processing of personal data is carried out by a public authority or a public institution, except for courts in the exercise of their judicial authority,
  2. the main activities of the operator or intermediary are processing operations which, due to their nature, scope or purpose, require regular and systematic monitoring of the data subject on a large scale, or
  3. the main activities of the operator or intermediary are the processing of special categories of personal data according to § 16 on a large scale or the processing of personal data related to the recognition of guilt for committing a crime or misdemeanor according to § 17 on a large scale.

 Information system e-shop www.greenware.sk

The operator operates and manages this online store (hereinafter also just the "portal"). Through this portal, the operator creates the opportunity for buyers (consumers as well as business customers) to conclude contracts concluded remotely or outside the operating premises, for the purpose of purchasing goods and services in the form of an e-shop.

Scope of processed personal data: title, first name, last name, address (street, number, area code, city), telephone contact, email contact and IP address, cookies.

You provide us with this data for the purpose of preparing and executing the order, delivering the goods, tracking the order status, or for the purpose of updating data for the e-shop and establishing pre-contractual relations. They do not require or provide special categories of personal data, only ordinary categories of personal data. We store your personal data for a period of 3 years, or for the storage period determined by the applicable legal regulations of the Slovak Republic and the EU.

The provision of personal data of the persons concerned is a contractual requirement for the fulfillment of the contract. The legal basis for the processing of personal data is Act No. 18/2018 Coll. Act on the Protection of Personal Data and on Amendments and Supplements to Certain Acts with regard to Regulation (EU) 2016/679 of the European Parliament and the Council of Europe of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which Directive 95/46/EC is repealed) - General Data Protection Regulation. The processing of your personal data is for the fulfillment of the contract to which you are a party, or for the registration of your account in the e-shop, if you ask us to do so by registration before concluding the contract.

The operator also provides personal data to third parties in the following scope: title, first name, last name, address (street, number, area code, city), telephone contact, email address. Courier and delivery companies are considered third parties, namely those that provide their services on the basis of a special law (e.g. Act No. 324/2011 Coll. Act on postal services") and those that are not governed by this or any other special law. However, in both cases these are entities that deliver the goods ordered in the e-shop in their own name and under their own responsibility. For the processing of the personal data of the person concerned (e-shop customer) for the purpose of delivering goods or services via the selected delivery person, no additional separate consent to the processing of personal data is required.

  • courier providing services according to Act no. 324/2011 Coll. – legal basis = legitimate interest arising from the special Act no. 324/2011 Coll. according to Art. 6 par. 1 letter f) Regulations (valid only in relation to personal data established in § 11 paragraph 1 of Act No. 324/2011 Coll.)
  • courier not providing services according to Act no. 324/2011 Coll. – legal basis = consent according to Art. 6 par. 1 letter a) Regulations/contract according to Art. 6 par. 1 letter b) Regulations / legitimate interest according to Art. 6 par. 1 letter f) Regulations; (as mentioned in the example above in the information obligation)

The operator hereby also informs that, as a data subject, you have the right to:

  • Right of access to data (Art. 15)
  • Right to correction (Art. 16)
  • Right to erasure (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to portability (Art. 20)
  • Right to object (Art. 21)
  • if the processing is carried out based on the legitimate interest of the e-shop operator (e.g. for direct marketing purposes), the customer has the right to object to such processing of his personal data at any time,
  • the right to object for the purposes of direct marketing must be explicitly notified to the person concerned at the latest in the first communication with him and this right must be presented clearly and separately from any other information,
  • after applying the customer's objection, the e-shop operator is obliged to immediately end the processing of personal data for the purposes of direct marketing and to no longer process these personal data for the purposes of direct marketing.
  • Right to withdraw consent
  • if the processing takes place on the basis of the customer's consent (e.g. loyalty program, consumer competition), the customer can withdraw his consent to the processing at any time and the e-shop operator is obliged to stop the processing of personal data that was processed on the basis of consent, unless there is another legal basis ,
  • if the processing is carried out on the basis of the customer's consent, the customer must have the right to revoke the consent at any time according to Art. 13 par. 2 letters c) Regulations by the e-shop operator informed in advance.

The rights of the affected person / affected persons are stated in § 19 to § 30 of Act no. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws. As an operator, we have the operator's obligations in exercising the rights of the affected persons, which you can exercise in person, by post or by e-mail with the operator, see identification and contact details of the operator.

Procedure of the operator when processing the request of the person concerned / persons concerned

  • all information and notices of the operator towards the data subject must be in a concise, transparent, understandable and easily accessible form, formulated clearly and simply, the category of data subjects to whom the notices and information are addressed must be taken into account,
  • as a general rule, information and notices should be provided in the same way in which the affected person exercises his right, unless he requests another way,
  • the operator of the e-shop is obliged to process the request of the affected person within 1 month of its delivery (if necessary, the operator can extend the processing of the request by another 2 months, while he is obliged to notify the affected person of the extension of the deadline).

Information system - marketing

When sending newsletters to customers' e-mail addresses, their personal data is processed, but to a lesser extent and for a different purpose than when purchasing goods or services. The operator of the web portal / web portals, in this case, creates a new information system of personal data, e-shop marketing. The legal basis for such processing of personal data of the person concerned (e-shop customer) is his consent. The consent provided for marketing purposes is voluntary and its provision is not a contractual or legal requirement.

Purpose of personal data processing:

  • sending newsletters of a commercial and non-commercial nature via electronic mail (e-mails), which may contain advertising and other offers or links to the operator's website
  • sending information, offers and catalogs in paper form
  • satisfaction survey
  • contacting customers via phone or SMS messages.

Scope of processed personal data: name, surname, e-mail address and telephone contact.

Personal data will be stored for 5 years (consent is granted for a period of 5 years), if legal regulations for some personal data do not require a different storage period. The operator processes only ordinary and not special categories of personal data.

The operator hereby also informs that, as a data subject, you have the right to:

  • Right of access to data (Art. 15)
  • Right to correction (Art. 16)
  • Right to erasure (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to portability (Art. 20)
  • Right to object (Art. 21)
  • if the processing is carried out based on the legitimate interest of the e-shop operator (e.g. for direct marketing purposes), the customer has the right to object to such processing of his personal data at any time,
  • the right to object for the purposes of direct marketing must be explicitly notified to the person concerned at the latest in the first communication with him and this right must be presented clearly and separately from any other information,
  • after applying the customer's objection, the e-shop operator is obliged to immediately end the processing of personal data for the purposes of direct marketing and to no longer process these personal data for the purposes of direct marketing.
  • Right to withdraw consent
  • if the processing takes place on the basis of the customer's consent (e.g. loyalty program, consumer competition), the customer can withdraw his consent to the processing at any time and the e-shop operator is obliged to stop the processing of personal data that was processed on the basis of consent, unless there is another legal basis ,
  • if the processing is carried out on the basis of the customer's consent, the customer must have the right to revoke the consent at any time according to Art. 13 par. 2 letters c) Regulations by the e-shop operator informed in advance.

The rights of the affected person / affected persons are stated in § 19 to § 30 of Act no. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws. As an operator, we have the operator's obligations in exercising the rights of the affected persons, which you can exercise in person, by post or by e-mail with the operator, see identification and contact details of the operator.

COOKIES USAGE POLICY

Use of cookies

This website uses cookies that help us provide better services. By using our website, you agree to the use of cookies in accordance with your browser settings. If you visit our website and the acceptance of cookies is enabled in your browser, we consider this as acceptance of our terms of use of cookies. Instructions for changing cookies can be found in the help of each browser.

What are cookies?

Cookies are small text files that can be sent to your browser when you visit websites and stored on your device (computer or other device with Internet access, such as a smartphone or tablet). Cookies are stored in the file folder of your browser. Cookies usually contain the name of the website from which they originate, validity and value. The next time you visit the site, the web browser reloads the cookies and sends this information back to the website that originally created the cookie. The cookies we use do not harm your computer.

Why do we use cookies?

We use cookies in order to optimally create and constantly improve the quality of our services, adapt them to your interests and needs, and improve their structure and content. On our pages you will find temporary and permanent cookies. Temporary ones are kept on your device until you leave the site. Persistent cookies remain on your device until they expire or are manually deleted. The length of time we retain information depends on the type of cookie. By using cookies, there is no violation of the Personal Data Protection Act, as we do not collect personal data by using them, nor do we provide them to intermediaries or to third parties. Each user by viewing this website of ours agrees to their use and storage in their browser. If the user does not agree to the use of cookies, he does not visit our website or actively deletes or blocks cookies. If the use of cookies is refused, you will still be able to visit our site, but some functions may not work properly.

Cookies are stored on the user's computer to enable access to various functions. We use cookies to increase the efficiency of your visits to our website. We use cookies for the purpose of remembering browsing preferences, such as text size, preferred language, color preferences, etc., which allows us to navigate our site more easily, and to collect analytical information, such as the number of visitors to our website. Cookies allow us to better collect information about the use of our website. However, we do not in any way collect your personal data and information in their data. Only a unique session identifier is stored, which allows us to reload the user's profile and preferences on the next visit to the website.

We use several types of cookies on our website:

  • Necessary cookies are essential for the basic functioning of our website. These cookies enable site navigation and use of desired features, such as access to secure areas of the site. Without these cookies, we would not be able to provide the services that enable this site to function.
  • Performance cookies collect anonymous information about how users use our site. These cookies let us know how users interact with the site by providing information about what areas they visited, how long they spent on our site and whether there were any problems, such as error messages. This information helps us improve the performance of our site.
  • Functionality cookies improve the functioning of the site. These cookies can remember, for example, information such as username, language or preferred location. These cookies may be used to provide requested services such as watching a video, commenting on a blog or interacting with third party services such as social media features. By remembering your choices, the site can provide improved and more personalized services.

Changing settings

By changing the settings in your web browser, you can specify that you will be offered the option of the browser notifying you when cookies are stored on your computer. By changing the settings, you can also determine that your browser will not accept cookies from this website. However, if your browser does not accept cookies from this website, you may not be able to access or use all of the website's functions. Regarding the use of cookies, you can contact us electronically at our email address listed on this website. 

How to control cookies?

The menu of the majority of browsers contains options for configuring settings, e.g. allow cookies, view cookies, disable all or selected cookies, etc. You can find further information about managing cookies at this address . 

COOKIES - is not personal data under all circumstances; personal data is when it is part of a chain of other data related to a specific natural person, on the basis of which this natural person can be identified.

  • cookies as personal data - depending on the circumstances of a specific case, it can be a legal basis
    • consent according to Art. 6 par. 1 letter a) Regulations
    • contract according to Art. 6 par. 1 letter b) Regulations
    • legitimate interest according to Art. 6 par. 1 letter f) Regulations (marketing purposes) - at the same time, the obligation to fulfill the conditions according to § 55 of Act no. 351/2011 Coll. - if cookies are not personal data - the obligation to fulfill the conditions according to Act no. 351/2011 Coll.

The cookies we use do not damage your computer.

Kontakty