Privacybeleid

Privacy policy 

Company Mixáno for Dogs s.r.o. (hereinafter referred to as the "Operator") hereby fulfills an information obligation towards website users and other natural persons (hereinafter referred to as "Data Subjects") regarding the processing of their personal data.

The Operator processes the personal data of the Affected Persons in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (general regulation on data protection) (hereinafter: "GDPR regulation") and the provisions of Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain laws (hereinafter referred to as the "Act on the Protection of Personal Data") and the Rules for the Protection of Personal Data of the Operator,

The Operator hereby allows itself to ask the Affected Persons to familiarize themselves with the following provisions and conditions related to the processing of their personal data and their protection. The goal and effort of the Operator is for the Affected Persons to be informed in a simple way about the processing of their personal data by the Operator and to know their rights in connection with the processing of personal data.

If you, as a Data Subject, have any questions related to the processing of your personal data, you can contact the Operator using one of the contact details listed in Article 8.10.


1. General information

1.1 The terms used in these Rules have the same meaning as the terms used in the Terms and Conditions available here, unless otherwise stated below or the context indicates that they have a different meaning.

1.2 Processing of personal data means a processing operation or set of processing operations with personal data or sets of personal data, in particular obtaining, recording, arranging, structuring, storing, changing, searching, browsing, using, providing by transmission, dissemination or in any other way, regrouping or combining , restriction, erasure, regardless of whether it is carried out by automated means or non-automated means.

1.3 When processing personal data, the operator respects and honors the highest standards of personal data protection to the greatest extent possible, observing the following principles in particular:

(a) personal data of Affected Persons are processed in accordance with relevant legal regulations, correctly and transparently;

(b) when processing personal data, the Operator fully respects and takes care to protect the rights of the Affected Persons;

(c) personal data are always processed for a clearly and comprehensibly defined purpose, by defined means and in a defined manner;

(d) only those personal data are collected, the processing of which corresponds to the specified purposes (is adequate, relevant and necessary for the fulfillment of these purposes);

(e) personal data is kept by the Operator only for a period that is necessary in view of the purposes of their processing;

(f) The operator only processes accurate and up-to-date personal data. If it finds that the processed personal data is not accurate or updated, it will take appropriate measures without undue delay, in particular ensuring that inaccurate or incomplete personal data is corrected or deleted.

1.4 The Operator has taken appropriate technical and organizational measures in order to ensure the proper security of personal data, their highest possible security and to prevent any accidental or illegal breach of their security, in particular unauthorized or illegal provision or access to personal data of Affected Persons, to their alteration, destruction or loss, unauthorized transfer, to their other unauthorized processing, as well as to other misuse of personal data.

In order to ensure adequate security and confidentiality of personal data, the Operator applies the following security measures: physical security of data (data center); monitoring of all data access; minimization of accessing persons to only employees of the Operator who need to know them in order to be able to process them and who are contractually bound by strict confidentiality obligations.

The person concerned is responsible for the chosen access password that allows him to access the account and is obliged to keep it confidential. All passwords are stored in a one-way encrypted form and their readable form is unknown and indecipherable to the Operator.

The transmission of information over the Internet is never absolutely secure. Therefore, the operator cannot guarantee the security of data transmission.

2. Sources of personal data

2.1. The Operator obtains personal data primarily from the Affected Persons themselves when registering, creating or using a user account and further in connection with the purchase of the Operator's products, or participation in competitions or as part of communication (e.g. in the case of an objection, question, request for information) between the Operator and By the affected person. In addition, the Operator also obtains personal data from its own activities, namely through processing

2.2. The Operator also obtains personal data from publicly available sources (public records or lists), from the Operator's pages on social networks on which the Affected Persons publish their statements, from third parties authorized to handle the personal data of the Affected Persons and provide them to the Operator, by using cookies and similar technologies.

3. Categories of processed personal data

3.1. The Operator processes the following personal data of Affected Persons:

a) identification data, which means first and last name, username;

b) contact data, which means personal data that enable the Operator to contact the Affected Persons, in particular e-mail address, telephone number, address of permanent or temporary residence, or contact on social networks;

c) setting up a user account, which means the data in the user account of the Affected Person, in particular setting up newsletters, membership in loyalty programs, shopping lists, tracked products, evaluation of products and services and completed questionnaires, results of participation in competitions, data on winnings in competitions, etc.;

d) data on the behavior of the Affected Persons on the website, in particular the way of moving around the website and scrolling the screen, as well as data on the device from which the website is viewed, such as the IP address and the location derived from it, technical parameters such as the operating system and its version, screen resolution , the browser used and its version, as well as data obtained from cookies and similar technologies for device identification (more information about cookies and their use can be found in the document Policy for the use of cookies);

e) derived data, which means personal data derived from the setting, data about the behavior of the Affected Person on the website and data about the behavior when reading e-mails sent by the Operator;

f) data related to interactions with the Operator, which are in particular the identification and content of email messages and other correspondence sent to the Operator by the Affected Person, including identifiers such as IP addresses, date and time of sending, data regarding the time and content of the complaint and the method of resolution;

g) data on orders, which are, in particular, data on the products and services of the Operator ordered by the Affected Person, method of delivery and payment, account number.

 

4. Purposes of personal data processing

4.1. The Operator processes the personal data of the Affected Persons for various purposes. Depending on the purpose of the processing, in some cases the consent (which can be revoked at any time) of the affected persons is not required for the processing of personal data. Personal data is processed without the need to obtain the Data Subject's consent in most cases of processing, based on the fulfillment of a contract, the legitimate interest of the Operator or the fulfillment of a legal obligation.

4.2. The Operator processes the personal data of the Affected Persons for the purposes

a) registration, creation, control and administration of a user account, order processing and conclusion of a contract and delivery of products (namely: identification data, contact data and data on the behavior of Affected Persons on the website and data on orders). The legal basis in this case is the performance of the contract. Failure to provide personal data means the impossibility of entering into a contractual relationship and providing services. When using the website, you have the option to fill in additional information in your personal profile, but this is not mandatory.

but also for other purposes, namely:

b) fulfillment of legal obligations, e.g. Archiving obligations, accounting and tax purposes, provision of information to law enforcement authorities or other public authorities (namely: identification and contact data, data related to the use of the call center and interactions with the operator, data about the behavior of the Affected Persons on the website, derived data and data about the behavior of the Affected Persons when reading reports sent to them by the Operator, data about orders). Personal data are used for these purposes for a maximum of 10 years.

4.3. The User's consent to the processing of personal data is also not necessary, as long as the legal reason for the processing is the legitimate interests of the Operator. These legitimate interests mainly consist of processing for the purposes of:

(a) direct marketing (i.e. for the purpose of offering products and services, either in writing, electronically or by telephone, as well as sending commercial announcements and newsletters, carried out only to a limited extent, promotion of the Operator, its events and events in which it participated, through a social network, using social networks for the purpose of marketing); In addition to identification and contact data, the Likeness of the Affected Person and audio and video recordings may also be used in this context;

(b) exercising the rights and enforcing the claims and rights of the Operator in court and other proceedings, including negotiations with those interested in the claims of the Operator, transfers of claims, implementation of collateral, etc. (namely: identification and contact information, setting up a user account

(c) Increasing the security of the Operator's network and information systems (namely: identification and contact data, data on the behavior of Affected Persons on the website, derived data and related to the use of the call center and interactions with the Operator.)

(d) improving the quality of services and evaluating the activity of the Operator, i.e. conducting analyses, statistics, but also improving the design, content, functions of the website and the services provided (namely contact and identification data, data related to the use of the call center and interactions with the Operator, derived data, data on the behavior of Affected Persons on the website and User account settings)

(e) detection, prevention or resolution of fraud, if an illegal act has occurred, including use for the purposes of investigation by the relevant authorities (namely: identification and contact data, user account settings, data on the behavior of the Affected Persons on the website, derived data and data related to using the call center and interactions with the Operator, order data.)

4.4. The Data Subject's consent is the legal basis for the processing of personal data for the purposes listed below, in particular:

(a) advertising and marketing (namely: identification and contact data), i.e. support for the sale of products and services offered by the Operator (this is mainly the dissemination of information, the offer of products and services of the Operator), which is carried out more often or requires the processing of personal data of Affected Persons to a wider extent than the processing carried out for the legitimate interests of the Operator, in particular by post, electronic means or by telephone; this processing of personal data also includes the sorting and categorization of personal data of Affected Persons in the form of profiling);

(b) the use of so-called cookies and information about traffic to the Operator's website.



5. Time of personal data processing

5.1 Personal data are processed only for the time that is necessary for the purposes of their processing. For this purpose, the operator continuously assesses whether there is still a need to process certain personal data.

5.2 Personal data that the Company processes on the basis of a special law will be kept for the period required by the relevant special law.

5.3 If the processing of personal data is based on a contract, the Company processes your personal data for the duration of the contract and, in addition, for the period of limitation of the last contractual claim that can be considered.

5.4 The Company processes personal data for marketing purposes for a maximum period of 2 years from the last contact with you.

5.5 Personal data for the purpose of enforcing our legitimate claims are processed for the period for which the processing is necessary for the stated purpose (the longest period of limitation for these claims).

5.6 Based on the request of the Affected Person, the Operator will provide him with any further information about the period during which he stores his personal data.

6. Method of processing personal data

6.1. The Operator processes personal data of Affected Persons in a way that ensures the highest possible security of this data and that prevents any unauthorized, illegal or accidental access to personal data, their alteration, destruction or loss, unauthorized transfer, their other unauthorized processing, as well as any other misuse personal data.

6.2 The way in which personal data of Affected Persons is processed includes manual processing as well as automated processing in the Operator's information systems or in physical form. As part of the automated processing in these systems and during the manual processing of personal data, corresponding technical and organizational measures are used to ensure the protection of personal data of the Affected Persons.

6.3 In the processing of personal data by the Operator, no decisions are made based solely on automated processing that would have legal effects or otherwise significantly affect the data subjects whose personal data the Operator processes in accordance with these Rules.

6.4 The Operator performs profiling of personal data for the purposes of direct marketing so that only those products and services that may be of interest and benefit to the Affected Persons are offered to Users.

7. Transfer of personal data and recipient category

7.1 General information

7.1.1. The Personal Data of the Affected Persons are primarily processed by the Operator's own employees in connection with the fulfillment of their work duties, only to the extent that is necessary in each case; third parties (business partners of the Operator) are also used. Before any provision of personal data of Affected Persons to a third party, the Operator always concludes a written contract with this person, in which he adjusts the processing of personal data so that it contains the same guarantees for the processing of personal data that the Operator itself observes in accordance with its legal obligations.

7.1.2. All persons who pricome into contact with the personal data of the Affected Persons, they are obliged to maintain confidentiality about the information obtained in connection with the processing of this data.

7.1.3 Data that the Operator collects from Data Subjects is stored and processed only within the European Economic Area ("EEA"). An exception is if the Operator uses the services of a social network based in the USA (in this case, the social network provider must participate in the Privacy Shield). The Operator will never transfer the personal data of the Affected Persons outside the EEA without ensuring their safety and security. Therefore, it is ensured that all recipients have signed EU standard contractual clauses to justify the transfer or that the country in question guarantees adequate protection under the legislation on the protection of personal data. It can also rely on the Privacy Shield program. This is a program where US companies can commit to a higher level of privacy protection than required by US law. The Operator may also make information available outside of these groups in cases where fraud prevention is involved or if required by law.

7.2 Categories of recipients of personal data

In connection with the performance of the contract, the personal data of the Affected Persons may be provided to the business partners of the Operator, in particular the following categories of recipients:

a provider of accounting services that manages accounting and payroll for the Operator;
tax office;
auditing company performing an audit for the Operator;
delivery service provider;
provider of search services in publicly available resources;
enterprise information system suppliers;
cloud service provider;
supplier of portal technology;
IT support provider;
an external company contacting business partners with marketing offers;
social network providers;
attorney, court, executor;
other public authorities, as long as this is required by special legislation.
7.3 In the event that the Affected Person is interested in finding out about a specific recipient and the scope of personal data provided to this recipient, he may contact the Operator with his request via the contacts listed in Article 8.10.

8. Rights in connection with the processing of personal data

8.1 The data subject has the right to access his data. Based on the request of the Affected Person, the Operator will issue a confirmation as to whether the Personal Data of the Affected Person relating to him/her are being processed. If the Operator processes these personal data, it will issue a copy of these personal data based on the request of the person concerned. If the Data Subject requests information in the form of electronic means, it will be provided in a commonly used electronic form, namely by e-mail, unless he expressly requests another method of provision.

8.2 The affected person has the right to correct personal data if the Operator records incorrect personal data about him. At the same time, the Data Subject has the right to supplement incomplete personal data. The Operator will correct or supplement personal data without undue delay after the Data Subject requests it.

8.3 The person concerned has the right to erasure (right to be forgotten) of personal data concerning him, provided that:

personal data are no longer necessary for the purposes for which they were obtained or otherwise processed;
the data subject revokes the consent on the basis of which the processing is carried out, and if there is no other legal basis for the processing,
the person concerned objects to the processing of personal data and there are no valid reasons for the processing of personal data or the person concerned objects to the processing of personal data for the purpose of direct marketing,
personal data was processed illegally,
the reason for erasure is the fulfillment of an obligation by law, a special regulation or an international treaty to which the Slovak Republic is bound, or
personal data was obtained in connection with the offer of information society services to a person under the age of 16.
The affected person will not have the right to delete personal data, provided that their processing is necessary:

to exercise the right to freedom of expression and information;
to fulfill an obligation according to the law, a special regulation or an international treaty to which the Slovak Republic is bound, or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the Operator,
for reasons of public interest in the field of public health,
for the purposes of archiving in the public interest, for the purposes of scientific or historical research or for statistical purposes, if it is likely that the right to erasure will make it impossible or seriously difficult to achieve the goals of such processing, or
to demonstrate, exercise or defend legal claims.
The Operator shall delete the Personal Data of the Affected Persons on the basis of a request, without undue delay after evaluating the request of the Affected Person as reasonable.

8.4 The person concerned has the right to limit the processing of personal data, if:

challenges the correctness of personal data with an objection, 

o during the period allowing the Operator to verify the correctness of personal data;
processing is illegal and the Data Subject requests restriction of their use instead of erasure of personal data;
The Operator no longer needs personal data for the purposes of processing, but the Data Subject needs them to prove, exercise or defend legal claims;
The affected person objected to the processing of personal data based on the legitimate claim of the Operator, until it is verified whether the legitimate reasons on the part of the Operator prevail over the legitimate reasons of the affected person.
If the Affected Person requests restriction of the processing of his personal data, the Operator will not carry out any processing operations with the affected data, except storage, without the consent of the Affected Person.

The affected person will be informed by the Operator if the restriction on the processing of this data is lifted.

8.5 The affected person has the right to data portability, which means obtaining the personal data that he has provided to the Operator, while he has the right to transfer this data to another operator in a commonly user-readable and machine-readable format, provided that the personal data was obtained based on the consent of the affected person or on the basis of contracts and their processing takes place in the form of automated means.

8.6 The person concerned has the right to object to the processing of his personal data at any time for reasons related to his specific situation. The affected person can object to the processing of his personal data on the basis of:

the legal title of the performance of tasks carried out in the public interest or in the exercise of public authority, or from the legal title of the legitimate interest of the Operator,
processing personal data for direct marketing purposes,
processing for the purposes of scientific or historical research or for statistical purposes.
If the affected person objects to the processing of personal data for direct marketing purposes, the Operator cannot further process his personal data.

The operator will assess the received objection in a reasonable time. The Operator may not further process personal data if it does not prove the necessary legitimate interests in processing personal data that prevail over the rights or interests of the Data Subject, or grounds for asserting a legal claim.

8.7 The data subject has the right not to be subject to automated individual decision-making, including profiling. The person concerned has the right not to be subject to a decision that is based exclusively on automated processing and has legal effects that concern him or similarly significantly affect him. This right includes: the right to human intervention by the Operator; the Data Subject's right to express an opinion and the right to contest such a decision. Exceptions to this right are possible if the decision is: unavoidable for the conclusion or performance of the contract; permitted by Union or Member State law or based on express consent

8.8 The person concerned has the right to withdraw his consent to the processing of personal data at any time, as long as the processing of personal data was based on this legal basis. The affected person revokes his consent in the manner indicated in the consent itself or in this information, if there is no such information, he revokes the consent by contacting the Operator with his request in any chosen way. The contact details of the Operator are listed in Article 8.10. The legality of personal data processing prior to the withdrawal of consent on the basis of the granted consent is not affected by its withdrawal.

8.9 The affected person has the right to file a complaint / proposal to initiate proceedings to the supervisory authority - the Office for the Protection of Personal Data of the Slovak Republic with registered office Hraničná 4826/12, 820 07 Bratislava – Ružinov phone number: +421 /2/ 3231 3214; mail: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk, if he believes that his rights in the area of personal data protection have been violated.

8.10 The affected person may contact the Operator with their comments and requests regarding the processing of personal data in writing or by electronic means at the contact details listed below:

Relevant contact details for informing about the processing of personal data and exercising your rights related to the processing of personal data by the Operator, you can contact with your request to:

e-mail: info@mixano.dog

phone number: +420 770 111 417

The application does not have a set form and you can submit it by e-mail, post, telephone or in person.


Changes to the Personal Data Protection Rules
9.1 The Operator may update and change the personal data protection rules, especially in the case of legal changes or technological changes on the part of the Operator. The Operator will inform the registered Affected Persons about the change in the Rules by sending a notification via email.


Interface with Third Party Websites and Services
Websites and applications of the Operator may contain links, references and content from other websites and services. The operator warns that above such websites.

1. me and the services has no control and that they are not covered by the Rules for the protection of personal data and the use of cookies of the Operator, who advises the Affected Persons to always familiarize themselves with the policies of the protection of personal data and the use of cookies and with the terms of use on each website and service, which they visit or use through a link or linked interfaces.
   
   
   
   These Rules are valid and effective from September 15, 2021.