Free delivery on all orders over 50 euros. Look at the offer
Search ...
0 Wish list 0
0 My Wishlist
0,00 € 0
0 Shopping Cart
Spend 50,00 € to get free shipping Congratulations! You've got free shipping.
Wish list 0
Search ...
0,00 € 0
0 Shopping Cart
Spend 50,00 € to get free shipping Congratulations! You've got free shipping.

Privacy policy

1  Personal Data Protection Policy

As the controller of personal data, Alsta d.o.o. hereby informs the data subjects whose personal data it processes about the purposes and legal bases of the processing of personal data, the data security measures and their rights with regard to the processing of personal data performed.

Alsta d.o.o. shall process personal data in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”), the applicable Slovenian legislation on personal data protection and privacy in electronic communications, and other regulations governing the protection of personal data. The legal basis for the lawful processing of personal data derives from Article 6(1) of GDPR providing for: consent (a), performance of a contract (b), compliance with a legal obligation (c), performance of a task carried out in the public interest (e) and legitimate interest (f).

The Personal Data Protection Policy describes, among other things, for which purposes and how we process the personal data we receive from you on the basis of the legal grounds described below.

1.1  Who is the controller?

The data controller under this policy is:

Alsta d. o. o., Mušičeva ulica 15, 8000 Novo mesto, info@fragrance-perfumes.com

1.2  Information on the appointment of the Data Protection Officer

In accordance with Article 37 of GDPR, we have appointed the following person as the Data Protection Officer …X

1.3  What personal data does Alsta d.o.o. collect and for what purpose?

1.3.1  Websites

    • analytical monitoring of the website

The www.fragrance-perfumes.com website uses cookies to provide users with a smooth and pleasant user experience. To this purpose, we use either internal or external tools to analyze the use of applications and user experience.

For internal tools, we rely on the legal basis of our legitimate interest, whereas for third-party analytics tools, we will ask for your consent to provide data to these tools before using them.

For analytical processing, we will keep your personal data for a maximum of two years after the end of the calendar year in which it was collected or until your consent is withdrawn.

    • cookies

You can find information on cookies in the document accessible here. In this document you also have the option to set your consent for specific types of cookies.

1.4  Storage and deletion of personal data

Personal data is processed as long as necessary to fulfil the purpose for which the personal data was collected and processed. If the data is collected on the basis of a law, it is stored as long as the individual law prescribes.

Personal data necessary for the performance of the contract shall be stored for as long as necessary for the performance of the contract and for five years after the end of the calendar year in which the contract ends, unless a longer storage period would be necessary in the event of a dispute relating to the contract. In such a case, the personal data of the data subject shall be kept for 10 years after the end of the calendar year in which the court decision, arbitration or court settlement became final or – if there was no legal dispute – for 5 years after the end of the calendar year of the amicable resolution of the dispute.

Personal data processed on the basis of personal consent or legitimate interest shall be kept for a maximum period of one year after the end of the calendar year. In case of withdrawal of consent, personal data shall be deleted within three months at the latest. This data can be deleted before withdrawal where the purpose of the processing of personal data has been achieved or where required by law. Withdrawal of consent shall not affect the legality of data processing carried out on the basis of consent until its withdrawal.

As an exception, we may refuse a deletion request on the grounds set out in GDPR, such as the following: exercise of the right to freedom of expression and information, compliance with a legal obligation to process, grounds of public interest in the field of public health, archiving purposes in public interest, scientific or historical research purposes or statistical purposes, exercise or defence of legal claims.

After the storage period, personal data must be effectively and permanently deleted or anonymized so that it can no longer be linked to a specific data subject.

1.5  Subcontracting processing and export of personal data

When processing personal data, each processing or parts of processing may be entrusted to contractual processors with whom we have concluded a contract on contractual processing. These processors may process the entrusted data solely on our behalf, within the limits of the authorisation, as set out in a written contract or other legal act, and in accordance with the purposes set out in this Privacy Policy.

In our work, we cooperate with contract processors in the following areas:

    • providing hosting servers;
    • maintenance of information systems;
    • providers of e-mail services, software and cloud services;
    • providers of social networks (Facebook).

In order to better review and control individual processors and to ensure that mutual contractual relations are regulated, we also maintain a list of contractual processors with whom we cooperate.

For some services, we may also forward your personal data to potential partners in projects, supervisory authorities or based on requests of a judicial authority. In no case will we send your personal data to unauthorized third parties.

1.6  Data security and accuracy

As the controller, we are responsible for information and infrastructure security (premises and system software).

We have put in place appropriate organizational and technical security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, and against other unlawful and unauthorized forms of processing.

As data subject, you are responsible for providing us with your personal information securely and that the data provided is accurate and reliable. We, as the controller, will also do our best to ensure that the personal data we process is accurate and, where necessary, kept up to date. Therefore, from time to time it may happen that we contact you to confirm the accuracy of the personal data processed.

1.7  Rights of the individual regarding personal data

Under GDPR, you as data subject have the following data protection rights:

    • to request information about whether we process your personal data and, if so, what data we process, on what basis we process it and why we use it;
    • to request access to your personal data, which allows you to receive a copy of the personal data we process and to check whether we are processing it lawfully;
    • to request rectification of your personal data, such as the rectification of incomplete or inaccurate personal data;
    • to request erasure of personal data where there is no longer any reason for further processing or where you exercise the right to object to further processing;
    • to object to further processing of personal data where the organization relies on legitimate interest (including in the case of legitimate interest of a third party), where there are grounds relating to your particular situation; you have the right to object at any time if the we process personal data for direct marketing purposes;
    • to request the restriction of the processing of his or her personal data, which means suspension of processing of personal data, for example if you want that we establish the accuracy or verify the grounds for further processing of personal data;
    • for data processed on the basis of a contract or consent, to request transfer of personal data in a structured electronic format to another controller, insofar as this is possible and feasible;
    • you may withdraw the consent you have given to the collection, processing and transfer of your personal data for a specific purpose; upon notification that you have withdrawn your consent, we will cease to process your personal data for the original purpose, unless we have another lawful basis for carrying out the processing.

Rights can be exercised by a written notice sent by e-mail to info@fragrance-perfumes.com or by regular mail to the address Grizoldova ulica 5, 2000 Maribor. We will respond to a request concerning the rights of the data subject without undue delay and in any event within one month of receipt of the request. Should this deadline be extended (by up to two additional months) on t he account of complexity and number of requests, you will be notified. Access to an individual’s personal data and exercising the rights are free of charge to the individual, but we may charge a reasonable fee if your request is excessive or manifestly unfounded, in particular if it is repetitive. In such a case, we may also refuse your request. When rights under this heading are being exercised, we may need to request certain information from you to help confirm your identity, which is only a precautionary measure to ensure that your personal data is not disclosed to unauthorized persons.

At any time, and especially if you think that our enforcement of your rights from the protection of personal data is inadequate, you can also contact our Data Protection Officer at the address …X

When exercising these rights, or if you believe that your rights have been violated, you may contact the supervisory authority for protection or assistance, which in Slovenia is the Information Commissioner, Dunajska 22, 1000 Ljubljana, https://www.ip-rs.si/.

 

1.8  Questions, comments and reporting of breaches

Please send any questions, comments or reports of breaches to info@fragrance-perfumes.com or by regular mail to our address.

1.9  Policy changes

We strive to ensure that this policy is always in line with the legislation and our actual activities in the area of personal data processing. We will therefore amend this policy from time to time and publish it on this website.

Alsta, d. o. o

Last confirmation of the changed policy: 15. 02. 2023

© Fragrance Perfumes

Izdelava spletnih trgovin