We use cookies to better measure and analyse website traffic.
I understand

privacy policy

GDPR

Who processes your personal data?

Your personal data is processed by us - the company

Mgr. Vladimíra Ilavská

Námestie SNP 476/17, 811 06 Bratislava

ICKO: 51 689 456

info@lavish.sk

Your personal data is also handled by: Google LLC, META - Facebook Inc., Mailchimp, but only if you have given us your consent to process your personal data through the services provided by these companies on our website.

I. Introductory provisions

  1. For the purposes of this Policy:
  • Personal data name and surname, e-mail address, telephone number, IP address, cookies.
  1. The Operator www.lavish.sk, as the controller of Personal Data, hereby informs you of the manner and scope of processing of Personal Data, including the scope of the Participant's rights (as defined below) related to the processing of their Personal Data.
  2. When processing personal data, the controller shall comply with the following legal provisions:
  • Act No. 18/2018 Coll. on Personal Data Protection
  • Regulation (EU) 2016/679 of the European Parliament and of the Council ("the Regulation")
  1. A subscriber is a natural person who purchases from the Operator and services or has used the part of the www.lavish.sk website that requires personal data (name and email address, e.g. contact form).
  2. The purpose is to sell services and provide information. Personal Data is processed in connection with the above:
  • to the extent that they have been provided in connection with the order for the Operator's service, or in the context of the negotiations for the conclusion of a contract with the Operator, as well as in connection with the concluded contract
  • for the purposes set out below in Article II.

II. Purpose and duration of processing of Personal Data

The Controller processes Personal Data for the following purposes:

a. the performance of the terms and conditions or any other obligation and the provision of the Services:

  1. personal data will be processed for the period of negotiations on purchase, consulting, renovation between the Operator and the Participant, both for the purpose of purchasing furniture or accessories and for the duration of the contractual relationship;
  2. marketing actions: for the purpose of fulfilling the marketing action, evaluation, termination, delivery of any winnings, etc. Processing time: for the duration of the marketing event.

b. compliance with legal obligations (in particular accounting, tax and archiving obligations, providing assistance to administrative authorities, police, courts, etc.):

  1. The tax document will be kept for 10 years from the end of the contract: In order to fulfil the legal obligation to archive accounting documents on the basis of Act No. 563/1991 Coll., on Accounting, as amended, the Personal Data will be further processed and kept for 10 years from the year following the year in which the contract between the Operator and the Subscriber was concluded;
  2. performance of obligations in connection with the exercise of rights arising from defective performance, provision of assistance to administrative authorities, police, court: The controller is entitled to process the customer's basic personal, identification and contact data, data about the goods and data from customer communications for a period of 4 years from the date of expiry of the warranty period for the goods.

c. the legitimate interests of the Controller, protection of the rights and legally protected interests of the Controller:

  1. effective defence in the event of a dispute. The processing period is set here at 4 years from the expiry of the warranty period for the goods and is extended by the period for which the dispute is pending;
  2. The legitimate interest of the Operator is furthermore to send commercial notifications (blanket offers and individual offers) in accordance with Section 7(3) of Act No. 480/2004 Coll., on certain information society services and in accordance with point 47 of the Regulation, if the Operator has obtained details of electronic contact in connection with the sale of goods and services to the Subscriber.

d. marketing and commercial offers of the Operator's services:

  • generic mailing of commercial product offers: sending general advertising communications without targeting a specific group of recipients. The processing period for personal data in this case is 3 years;
  • individual offer: sending of advertising communications after evaluation of certain personal aspects relating to the individual. The controller does not carry out profiling in accordance with Article 22 of the Regulation, as this is not automated processing, but the manual creation of individual offers. The period of processing of personal data in this case is 3 years;
  • cookies: short text files generated by a web server and stored on your computer by your browser. There are two types. Firstly, there are the cookies necessary for the functioning and analysis of the website (to carry out the transmission of electronic communications via an electronic communication network, the use of these cookies cannot be opposed). Secondly, there are cookies that evaluate certain personal aspects relating to a specific natural person. The use of the second type of cookies requires the consent of the Participant. The processing period in this case is 3 years. For the purpose of re-marketing, cookies are only passed on to other processors if consent for this purpose has been granted with them, with an expiry period of a maximum of 500 days. If consent for advertising cookies is withdrawn, it is technically not possible to immediately delete the cookies once they have been passed on to the processor. The deletion of cookies by the processor will occur automatically after the expiry period. The immediate solution to prevent re-marketing activities by the processor is to delete the cookies from the browser.

III. Data protection and processing information

  1. If the Participant does not provide his Personal Data, it is not possible to conclude a contract with the Operator. In this context, the Personal Data is necessary for the provision of a specific service of the Operator.
  2. Upon expiry of the time limits referred to in Article II. The Controller shall delete or anonymize the Personal Data.
  3. The Participant is obliged to provide only true and accurate Personal Data to the Operator. The Participant is responsible for the correctness, accuracy and truthfulness of the Personal Data provided. The Operator shall not be liable for the accuracy of the data provided.
  4. The controller shall make every effort to prevent unauthorised processing.
  5. The Operator is entitled to transfer the Subscriber's personal data to third parties for the following purposes: completion of the ordering process, sending of commercial notifications, customer satisfaction assessment, customer support services, handling of complaints.
  6. Personal data is and will be processed in electronic form in a non-automated manner.

IV. Participant's rights related to the processing of personal data

  1. Participant's rights in relation to the protection of personal data:
    a. To request from the Controller access to his Personal Data;
    b. To correct the Personal Data provided;
    c. To erasure of the Personal Data provided;
    d. To restrict the processing of Personal Data;
    e. To lodge a complaint with the Office for Personal Data Protection;
    f. The right to transfer Personal Data to another controller;
    g. The right to object to the processing of Personal Data;
    h. The right to withdraw consent.
  2. The Subscriber may exercise his/her rights under paragraph 1 of this Article by using the link provided in the footer of the email sent by the Operator or by sending a request to info@lavish.sk.
  3. The rights under paragraph 1(c) and (d) of this Article may not be exercised to the extent and for the purposes set out in Article II(1)(a), (b) and (c).
  4. In the event that the Participant believes that the Controller carries out processing of his Personal Data that is contrary to the protection of his private and personal life or contrary to the applicable law, in particular if the Personal Data are inaccurate with regard to the purpose of their processing, he may:
  • request an explanation from the Operator by e-mail to info@lavish.sk
  • object to the processing and request, by e-mail sent to info@lavish.sk, that the Controller ensure the elimination of the situation (e.g. by blocking, correcting, supplementing or destroying the Personal Data). The Controller shall promptly decide on the objection and inform the Participant. If the Operator does not comply with the objection, the Participant has the right to contact the Data Protection Authority directly. This provision is without prejudice to the right of the Subscriber to address his/her complaint directly to the Data Protection Authority.

5. If the Subscriber exercises a right under this Article, the Operator shall respond within 30 days of receipt of the request by the Operator.

6. Receipt of a request to exercise the right under Article IV, Paragraph 1 a) and f) may only be made by means of a data message or a letter with a certified signature to the address of the registered office of the Company. The request must be accompanied by an e-mail address, to which a verification e-mail will then be sent to confirm the identity of the applicant.

7. If the Subscriber exercises any of the rights from Article IV, Paragraph 1, the Operator shall have the right to require proof of the Subscriber's identity. Thus, the request for access to personal data must be sent from the e-mail address of the applicant. If the request is made in a different form or from a different e-mail address, the Controller shall have the right to request additional verification in the form of a reply to the verification e-mail. In the event that the applicant does not prove his/her identity within 14 days of the sending of the verification e-mail, his/her request to exercise the rights under Article IV, Paragraph 1 will not be accepted.

8. The Controller shall be entitled to charge a reasonable fee for the administrative costs involved in the event of a repeated and unjustified request for the provision of a physical copy of the Personal Data processed.

V. Final Provisions

  1. All legal relations arising from the processing of Personal Data shall be governed by the laws of the Slovak Republic, regardless of where the access to the Personal Data was made. The Slovak courts are competent to resolve any disputes arising in connection with the protection of privacy between the Participant and the Operator.
  2. The data subject has the right to contact the Data Protection Authority (https://dataprotection.gov.sk/uoou/sk).
  3. This Policy shall enter into force on 01.09.2018.

—---------------------------------------------------------------------------------------------------

How can I change, update or delete my personal data?

Customers may change or update their personal information at any time by submitting a written request to info@lavish.sk . At the same time, at the written request of the Subscriber, the personal data will be deleted from the database and the company Mgr. Vladimíra Ilavská will not process them further.

What are cookies and how do we use them?

A cookie is a small text file that is transmitted from a website and stored on the Participant's computer or mobile device. Mgr. Vladimíra Ilavská (and/or its partners such as Google, Meta-Facebook, Mailchimp, etc.) uses cookies to improve and simplify the Participant's visit to www.lavish.sk . We do not use them to store the Participant's personal information, nor do we provide them to third parties.

Do you have to provide us with your personal data?

You have voluntarily provided us with your personal data on the basis of your free consent, and you have not been obliged to give us such consent to the processing of your personal data.

Will we transfer your personal data to a third country?

The implementation of our services requires cooperation with the companies mentioned above. This means that the Subscriber's personal data may be transferred to third countries. However, the sale always takes place in accordance with the legislative requirements imposed on this transfer by Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain laws and Regulation (EU) No 2016/679 of the European Parliament and of the Council, while ensuring the protection of your personal data in all cases. Specifically, these are servers, cloud solutions of the respective companies Google LLC, Meta - Facebook Inc., Mailchimp.

What rights do you have?

You have the following rights in relation to data protection:

  • the right of access to your personal data, you have the right to ask us to confirm whether we are processing personal data concerning you and, if we are processing your data, you have the right to obtain access to this personal data and detailed information about all the facts related to the processing of this personal data (your right of access to personal data is regulated by Section 21 of Act No.18/2018 Coll. on the protection of personal data and on amending and supplementing certain laws and Article 15 of Regulation (EU) No 2016/679 of the European Parliament and of the Council). Upon your request, we are obliged to provide you with the personal data we process about you, and we are entitled to require you to pay a reasonable fee corresponding to the administrative costs for the repeated provision of such data;
  • the right to rectification of personal data, namely to rectification of incorrect data relating to you or completion of incomplete personal data (your right to rectification of personal data is regulated by Section 22 of Act No.18/2018 Coll. on the protection of personal data and on amending and supplementing certain laws and Article 16 of Regulation (EU) No 2016/679 of the European Parliament and of the Council);
  • the right to erasure of personal data (Your right to erasure of personal data is regulated by § 23 of Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain laws and Article 17 of Regulation (EU) No. 2016/679), if:
    (a) the personal data are no longer necessary for the purpose for which we obtained or otherwise processed them,
    (b) we process personal data unlawfully,
    (c) you withdraw your consent to the processing of personal data and there is no other legal basis for the processing of personal data,
    (d) you object to the processing of personal data and there are no overriding legitimate grounds for the processing of personal data or you object to the processing of personal data pursuant to Section 27(2) of Act No. 18/2018 Coll. on the protection of personal data and on amendment and supplementation of certain acts, (e) the reason for deletion is the fulfilment of an obligation pursuant to Act No. 18/2018 Coll. on the protection of personal data and on amendment and supplementation of certain acts, a special regulation or an international treaty by which the Slovak Republic is bound or,
    (f) the personal data were collected in connection with the offer of information society services pursuant to Section 15(1) of Act No. 18/2018 Coll.
    The right to erasure of your personal data cannot be exercised if:
    (a) the processing of personal data is necessary for the exercise of a legal claim,
    (b) for the exercise of the right to freedom of expression or the right to information,
    (c) for the fulfilment of an obligation under Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts, Regulation (EU) No 2016/679 of the European Parliament and of the Council, a special regulation or an international treaty by which the Slovak Republic is bound, or for the fulfilment of a task carried out in the public interest or in the exercise of official authority entrusted to the person processing the personal data,
    (d) for reasons of public interest in the field of public health in accordance with Section 16(2)(h) to (j) of Act No 18/2018 Coll. on the protection of personal data and on amendment and supplementation of certain acts, (e) for archiving purposes, for scientific purposes, for historical research purposes or for statistical purposes pursuant to Section 78(8) of Act No. 18/2018 Coll. on the protection of personal data and on amendment and supplementation of certain acts, if it is likely that your right would make it impossible or seriously impede the achievement of the purposes of such processing;
  • the right to limit the processing of personal data (your right to limit the processing of personal data is regulated by Section 24 of Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain laws and Article 16 of Regulation (EU) No. 2016/679), if
    (a) you object to the accuracy of the personal data during the period allowing us to verify the accuracy of the personal data,
    (b) the processing of the personal data is unlawful and you object to the erasure of the personal data and request instead the restriction of its use,
    (c) we no longer need the personal data for the purpose of processing the personal data, but you need it to assert a legal claim, or,
    (d) you object to the processing of the personal data pursuant to Section 27(1) of Act No. 18/2018 Coll. on the protection of personal data and on amending certain acts and Article 21(1) of Regulation (EU) No 2016/679 of the European Parliament and of the Council.
    If the processing of personal data is restricted, we may, in addition to storing personal data, only process personal data with your consent or for the purpose of exercising a legal claim, for the protection of individuals or for reasons of public interest;
  • the right to object to the processing of personal data (your right to object to the processing of personal data is regulated by Section 27 of Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain laws and Article 21 of Regulation (EU) No. 2016/679 of the European Parliament and of the Council), if the processing of personal data is based on a legal basis pursuant to Section 13(1)(e) or (f) of Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts, or Article 6(1)(e) or (f) of Regulation (EU) No 2016/679 of the European Parliament and of the Council. In such a case, the controller may not process the personal data unless we demonstrate compelling legitimate interests for the processing of the personal data which override your rights or interests or grounds for exercising a legal claim;
  • the right to the portability of personal data (Your right to the portability of personal data is regulated by § 26 of Act No. 18/2018 Coll. 2016/679 of the European Parliament and of the Council), in a structured, commonly used and machine-readable format, and you have the right to transfer this personal data to another controller if this is technically feasible and if the processing is carried out by automated means and takes place on the basis of a legal basis within the meaning of Section 13(1)(a) or (b) of Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts, or Article 6(1)(a) or (b) of Regulation (EU) No 2016/679 of the European Parliament and of the Council, i.e. if we process personal data on the basis of your consent or for the performance of a contract or a contractual obligation.

Why do we need your personal data?

We need your personal data processed by Google Analytics to analyse the traffic on our website and therefore, in particular, to check whether our website is still interesting for you and other users and whether traffic is not decreasing.

We need your personal data processed through Google AdWords and Facebook Pixel to personalise advertising and therefore, in particular, to be able to ensure that our website advertisements are displayed mainly to users who may be interested in our content, services and products.

We process your personal data that we process on the basis of your consent only for these purposes, provided that we may disclose it to Google LLC, Meta - Facebook Inc., which provide the services through which your data is collected, in order to achieve the purpose of the processing.

We process your personal data by automated means, whereby the processing does not involve automated individual decision-making and profiling pursuant to Section 28(1) and (4) of Act No. 18/2018 Coll. 2016/679 of the European Parliament and of the Council (EU) No. 2016/679

Who can you contact in case of a problem?

If you believe that we have violated your privacy rights, you may contact us at info@lavish.sk

Or you can contact the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava.

You can refuse cookies or delete them if necessary. You can find instructions on how to do this in the "Help" section of your web browser.

Your personal data is processed by us - the company

Mgr. Vladimíra Ilavská

Námestie SNP 476/17, 811 06 Bratislava

ICKO: 51 689 456

Contact: info@lavish.sk

‍