GDPR
Protection of personal data
Your security is our priority. In this document you will find all the necessary information about how we protect your privacy. You will learn more about what data we collect, how we use it, with whom we share it, how you can control its processing, as well as the measures we take to protect your data and your rights related to the processing.
Who we are and how you can contact us
Mabel Media spol. s r. o., Volgogradská 4787/18 080 01 Prešov, Slovensko, IČO: 44486707, DIČ: SK 2022721052
The person responsible for personal data protection is Marián Beliš, who can be contacted at the e-mail address: info@henryofparis.com.
By placing an order, subscribing to commercial communications, or browsing our website, you allow our company to use your personal information.
What information do we collect about you?
Purchase data
When making a purchase, we request the information necessary to process it in order to fulfill the contract. Mandatory data are only those without which we cannot send the purchase and process the order. This includes your name, email address, delivery address, telephone number and the ordered goods.
We store personal data for user records for a period of 5 years from your last completed order. During this period, we process your personal data, including your name, surname and email address, for direct marketing purposes, based on the legitimate interest of the administrator.
In our store, you do not provide any information directly related to the handling of money in your accounts. All currently offered forms of electronic banking (payment for goods online) are carried out directly on the bank’s website, which only provides us with information about the success or failure of the payment and your name or account number (to identify the payment and, if necessary, to refund the payment).
Under no circumstances do we obtain any other information, such as your login details or account balance. The only data that we may store in this context is related to the “remember” function of your card. However, this function is also secured by the bank and only the bank can pair your card number with the anonymized data that our system uses to remember your card.
Data when participantingin consumer competitions
If you decide to participate in one of our consumer competitions, we process all relevant data to the extent specified in the registration form or questionnaire (in particular name, surname, e-mail address, or telephone number, age and postal address).
We process your personal data on the legal basis of preparation and performance of the contract, or on the legal basis of consent granted, or on the legal basis of legitimate interest, with details provided in the competition statute, its annex containing information on the processing of personal data, or on the competition information page.
Personal data for the purposes of organizing and evaluating the competition are processed until the specific consumer competition is fully closed and will then be deleted, usually within 3 months after the end of the competition. Details and other possible purposes of processing may be specified in the competition statute, its annex containing information on the processing of personal data, or on the competition information page.
Data when granting consent for direct marketing purposes
If you were not our customer but have given us specific consent to process your personal data for direct marketing purposes, we will process it on this legal basis, to the extent of your name, surname, age and email address.
We will process your personal data for a period of 5 years from the date of consent. After this period, it will be deleted unless you provide your consent again.
Other data processed for direct marketing purposes
Based on legitimate interest, we also process the email addresses you have provided to us during sales, exhibitions, marketing or competition events, if you have expressed interest in news via the website. Such personal data will be processed for a period of 5 years from the date of their collection or until an objection is raised, whichever is earlier.
How we use data
We use the data we collect about you for the following purposes:
Provision of our services
Based on the data collected from you, we can provide our services in accordance with our General Terms and Conditions. The data collected when creating an order is used to process it, ensure delivery and sell this personal data to carriers. We may also use it to remind you of your order if you have not completed the process with a binding order. This data is also necessary for our accounting and billing system.
Communication
We use your contact information to send you notifications regarding order processing and service provision or to respond to your questions (when you ask about the status of your order, want to inform us of a new delivery address, or request a change to your order details). We also process your contact information, as well as your purchase information, if you want to return or complain about a product.
How we use data for marketing purposes
If you have given us your consent or if you have been our customer in the last five years, we will also send you commercial information about news and current offers that may be of interest to you. You can easily unsubscribe from these emails by clicking on the “Unsubscribe” option in the email you receive.
If you have been our customer, all personal data used for marketing is used on the legal basis of legitimate interest and we retain it for marketing purposes for 5 years from your last order. If you were not our customer but have given us your consent to process your personal data for marketing purposes, we will process your personal data for 5 years from the date you gave this consent.
Who we provide access to data to
Your personal data is used exclusively for our internal purposes, primarily for the reasons stated above. However, not all necessary services related to personal data are provided exclusively by us and we also use the services of third parties. We have concluded a contract with third parties to whom we provide your personal data, which allows us to ensure and protect your rights in the field of personal data protection.
As part of your order, personal data may be transferred to transport companies:
- Direct Parcel Distribution SK s.r.o.
In addition to processing your order, we process your personal data in third-party information and marketing systems that are necessary for our business, such as:
- SuperFaktura, s.r.o., so sídlom Pri Suchom mlyne 6, 811 04 Bratislava
- Google Ireland Limited, Gordon House, so sídlom Barrow Street, Dublin 4, Írsko
- MailChimp / The Rocket Science Group LLC Facebook Ireland Limited, so sídlom 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Írsko
- WebSupport, s.r.o., Karadžičova 7608/12, 821 08 Bratislava Ako chránime vaše údaje
In accordance with the requirements of applicable legislation, we implement all necessary security, technical and organizational measures to protect your personal data from any misuse. We store this data on our secure servers and protect the personal data database from damage, destruction, loss and misuse.
Access to systems
Access to systems that process our customers’ personal data is granted only to a limited number of internal users as necessary to perform their job duties. These may include employees working in customer support, order processing and similar tasks. Each individual employee only has access to the amount of personal data that is necessary for their job. Access to all critical systems that process our customers’ personal data is restricted within the internal network and these individuals automatically lose access to your personal data in the event of termination of their legal relationship with us.
Rights guaranteed by GDPR and how to exercise them with us
Right of access to information and right of rectification
K
At any time in the future, if you wish, you can request confirmation by sending a message to the email address info@henryofparis.com as to whether or not we are processing your personal data. If we are processing your personal data, in addition to the information provided in the General Terms and Conditions, this Privacy Policy and the document containing information on the use of cookies, we may also provide you, upon your request, with information about any third parties to whom your personal data has been or will be disclosed. If we do not obtain personal data directly from you, you have the right to access all information available to us about where we obtained your personal data.
If we process your personal data inaccurately, you can notify us by sending a message to the email address info@henryofparis.com. We will then correct the inaccurate personal data without undue delay.
Right to object to the processing of personal data
Even if we process your personal data based on our legitimate interest, you have the right to object to such processing, including objections to the processing of personal data for direct marketing purposes. You can do so by sending a message to the email address info@henryofparis.com. If you raise such an objection, we will assess without undue delay whether your objection is justified in accordance with the law and how we will handle your personal data in the meantime. If we do not demonstrate legitimate grounds for the processing, we will stop processing your personal data.
Right to restrict the processing of personal data
You have the right to ask us to restrict any processing of your personal data, including erasure, so that we cease processing it:
If you inform us that the personal data we collect about you is inaccurate, until we have verified its accuracy. If the processing of your personal data is unlawful and instead of erasure, you request that we restrict its use by sending a message to info@henryofparis.com. If we no longer need your personal data to provide our services, but you need them to exercise your rights. If you object to the processing in accordance with the paragraph above, until we have verified whether our grounds for the processing outweigh your interests. Right to be forgotten (right to erasure of personal data)
If you find out that we are processing your personal data:
Even if the processing is no longer necessary for the purposes for which we obtained it. If you object as set out above and we cannot demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, and/or are unlawful, you have the right to request, without undue delay by sending an email to info@henryofparis.com, that we erase the processed personal data from our records. However, we cannot erase the data even at your request if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with our legal obligation or for the performance of a task carried out in the public interest, or for the establishment, exercise or defence of legal claims.
Right to access data
If you request, by sending a message to the email address info@henryofparis.com, that we provide you with the personal data we process, we will send it to you in a structured, commonly used and machine-readable format (e.g. in *.xls, *.csv or similar format). If you ask us to send your personal data to another personal data controller, we will of course comply with your request.
The right to unsubsribe from commercial communications at any time
If you no longer wish to receive commercial communications from us, you can opt-out by clicking on the link included in each commercial communication.
Right to withdraw consent to receive commercial communications and the processing of personal data for participation in consumer competitions at any time
If we request your consent to process personal data as part of our special promotions, you may withdraw this consent at any time without giving any reason. You may withdraw your consent either in the manner described in the consumer competition rules or by sending a withdrawal of consent to the email address info@henryofparis.com. In this case, the personal data will be deleted immediately. However, further participation in the competition will be excluded. Withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent before its withdrawal.
The right to file a complaint with the Personal Data Protection Office
If you believe that we are not fulfilling all of our legal obligations related to the processing of personal data, please contact us at info@henryofparis.com. If we do not help you, you have the right to contact the Office for Personal Data Protection at its address: Hraničná 4826/12, 820 07 Bratislava, by e-mail at ochrana@pdp.gov.sk or in another manner acceptable to the Office for Personal Data Protection.
For more information about the Office, please visit their website at www.uoou.sk.