Principles of processing and protection of personal data

prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data within the meaning of Articles 13 and 14 of the Regulation (hereinafter referred to as "GDPR") and Act No. 18/2018 Coll. on the Protection of Personal Data (hereinafter referred to as "Personal Data Protection Act")

Pursuant to Article 6(1) (b) of the General Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, the Seller, as the controller, will process the Buyer's personal data without the Buyer's consent as a data subject in the process of concluding the Purchase Contract, as the processing of the Buyer's personal data will be carried out by the Seller in pre-contractual relations with the Buyer and the processing of the Buyer's personal data is necessary for the performance of the Purchase Contract, in which the Seller acts as one of the contracting parties.

Internet commerce (hereinafter referred to as "e-shop") can be defined as the sale of goods or services using information and communication technologies and web applications in the Internet environment, where on one side of this relationship is the operator of the e-shop and on the other side is the customer of the e-shop (hereinafter referred to as the "customer"). When making a purchase in an e-shop, a purchase contract is concluded between the operator and the customer via the Internet (distance contract. Such a contract also includes the collection of information, including personal data of the customer in the following scope: title, name, surname, residential address, or delivery address, email, telephone, content of the order, personal data necessary to make a payment via the Internet.

The Seller undertakes to treat and dispose of the Buyer's personal data in accordance with the applicable laws of the Slovak Republic.

The Seller declares that it will only collect personal data for the purposes set out in this Processing and Privacy Policy

The Seller declares that it will ensure that personal data is processed and used only in a manner that is appropriate to the purpose for which it was collected and that it will not combine it with personal data collected for other purposes.

I. Personal Data Controller

The controller of personal data is the operator of the e-shop:

Company name: Colette Boutique s. r. o.
Registered office address.
ID: 53923804
Represented by: Mgr. Mgr. Michaela Budáčová
Tel. no.: 0908889308
E-mail: info@colette.sk

II. Responsible person

It has not been established, as we are not obliged to do so under the GDPR.

III. Automated decision-making and profiling

Your personal data will not be used for automated individual decision-making, including profiling.

IV. Transfer of personal data to third countries

The controller does not provide, disclose or make available personal data to third countries

V. Security of personal data processing

The controller declares that it has taken appropriate personal, technical and organisational measures to ensure the protection of personal data.

VI. Purpose of the processing of personal data:

The data provided by the Buyer is necessary for the processing and processing of the order, the issuing of the invoice, the conclusion of the purchase contract and subsequent payment, the delivery of the goods or services and the provision of other related services (in particular in connection with consumer protection legislation).

Order processing - We process your personal data for the purpose of concluding a contract between you, as our customer and potential customer, and us, as a supplier, when using our services. In this case, personal data is only processed to the extent that is necessary for the conclusion and performance of the relevant contract. This includes in particular the performance of the subject matter of the contract, customer support, contract administration.

For this purpose, the provision of your personal data is entirely voluntary, but is necessary for the conclusion of the contract and its subsequent administration. If the buyer does not provide the necessary data, the seller has the right to cancel the order. The buyer undertakes to provide truthful information when making a purchase in the e-shop. Providing false information is in violation of the general terms and conditions of the e-shop. 

Communication and customer support: personal data is used for the purpose of communicating with you. For example, we may contact you for the following reasons. 

Marketing in the form of:
a) Sending newsletter messages to the e-mail address by subscribing the customer to the mailing list on the website of the online store in the following scope: (title, name, surname, e-mail address).
b) Participation in advertising campaigns (promotions) conducted on the website of the Colette Boutique s.r.o. online shop or in the form of leaflets in the following scope: (title, first name, last name, postal address, e-mail address, telephone, signature).
c) Visitors to the online shop can subscribe to the newsletter directly by entering their email address in the "Subscribe to newsletter..." field. listed on the site or as a buyer, he can express his consent within the meaning of Article 6(1) by ticking the appropriate box before placing an order. point. (a) of the General Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, to the processing and storage by the Seller of his personal data, in particular those listed above and/or which are necessary for the Seller's activities related to the sending of information about new products, discounts and promotions on the goods offered and to process them in all its information systems related to the sending of information about new products, discounts and promotions on the goods offered. The Buyer grants the Seller this consent for a limited period of time until the purpose of processing the Buyer's personal data is fulfilled. The Seller shall ensure the immediate destruction of the Buyer's personal data after the purpose of processing has been fulfilled. The consent to the processing of personal data may be revoked by the Buyer at any time in writing. Withdrawal of consent for the sending of newsletter messages can also be done electronically by unsubscribing from the mailing list. The automatic unsubscription is displayed at the bottom of the newsletter message that arrives at the e-mail address you have entered. Consent will expire within 1 month of receipt by the Seller of the Buyer's withdrawal of consent.

Marketing communication with the customer / CUSTOMER CONTEST:
organizing contests through online stores or social networks. This involves processing the following data:

-> first name, last name
-> e-mail address
-> address
-> phone number

Registration form: the customer has the opportunity to register in the e-shop, the registered customer has the opportunity to use the benefits offered by the e-shop. The processing of the following data:
-> first name, last name
-> address
-> phone number
-> e-mail address
-> password

Abandoned cart: the registered customer has not completed their purchase, has not completed payment and a notification email is sent to them and the contents of the cart are not yet in the purchase contract
-> identification data
-> contact details
-> location data

Segmentation: based on what the customer buys in the e-shop, newsletters are sent to the customer by the e-shop operator with information about similar goods that the customer buys in the e-shop. This involves the management of the following data:
-> IP address
-> e-mail address
-> first name, last name

Upselling: based on the contents of the customer's basket/possibly on goods previously purchased in the e-shop, the customer is shown the merchant's recommended goods for further purchase when completing his/her order (in the payment process). This involves the management of the following data:
-> IP address
-> email
-> phone number

Contact form: through the contact form, the customer can contact the e-shop operator faster and thus speed up the processing of their request. This involves processing the following data:
-> name
-> e-mail address

When operating a social media profile ( Facebook, Instagram and YouTube ), our interest is in raising awareness of the operator in the online environment and communicating with customers.

Personal data that you post on our social networking sites such as comments, likes, videos, images, etc. will be published via the social networking platform. We do not subsequently process the personal data for any other purpose.
The data subject has the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her. You can send your objections to by e-mail to the contact address of the controller info@colette.sk

Social network operators have their own adopted rules, service infrastructure and their own privacy provisions. We have no control over the transfer of your data and the use of your data by social network operators We recommend that you familiarize yourself with the privacy policy of the social network platform provider:

Facebook
https://www.facebook.com/policy.php.

Instagram
https://help.instagram.com/519522125107875;

YouTube
https://www.youtube.com/intl/ALL_sk/howyoutubeworks/user-settings/privacy/

In certain processing operations, we act as joint controllers with social network operators within the meaning of Article 26(4) of the GDPR.

Measuring traffic and improving services - we use cookies to collect data about traffic to our website, information viewed and other activity on the website. We collect this data based on your consent granted through the settings in your browser. For more information see " Cookie Policy".

In order to maintain full transparency, we would like to inform you that we will assess the accuracy of the personal data provided (if circumstances allow). If we become aware of incorrect personal data or information stored in our information system, we will immediately correct, restrict processing or delete the personal data.

If such data is disclosed, we will inform all parties involved.

There is no automated individual decision-making on the part of the controller within the meaning of Article 22 of the GDPR.

VII. Legal basis for the processing of personal data

Article 6(1)(a) Your consent to the processing of personal data for the purpose of direct marketing

Article 6(1) (b) the processing is necessary for the performance of a contract to which the data subject is a party or to carry out pre-contractual measures at the request of the data subject, since the ordering of goods (pre-contractual relationship) most often involves the conclusion of a purchase contract carried out over the Internet (concluded at a distance between the operator of the online shop and the data subject and the subsequent payment, delivery of goods or services, handling of complaints, etc.), the processing of the customer's personal data without the customer's consent is thus carried out.

Article 6(1)(c) processing is necessary for the fulfilment of the legal obligation of the controller to fulfil the purpose of invoicing, record keeping and other necessary related legal obligations of the online shop operator when processing the personal data of the data subject.

Article 6(1)(f) processing is necessary for the purposes of the legitimate interests of the controller or of a third party concerned, except where those interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data

VIII. Circle of persons concerned

e-shop customers (website visitors)

IX. Personal data that we process automatically

The website operator provides this brief explanation of the function of cookies, scripts and pixels:

Cookies are text files that contain small amounts of information that are downloaded to your device when you visit a website. With this file, the website retains information about your actions and preferences (such as login name, language, font size and other display settings) for a certain period of time, so that you do not have to enter them again the next time you visit the website or browse its individual pages

A script is a piece of programming code that is used to make a website function properly and interactively. This code runs on the operator's server or on your device.

Pixels are small, invisible text or images on a web page that are used to monitor website traffic. In order for this to happen, various data is stored via pixels. 

Cookies are divided

Necessary cookies: are cookies without which our website would not function or without which the proper use of this website would not be possible. These cookies are automatically placed on your device and cannot be disabled. Necessary cookies cannot identify you and are only used to guarantee the correct display and functioning of our website.

Analytical cookies: allow us to carry out various statistical analyses of our website. These cookies are used in an anonymised form, which means that they cannot identify you. You can disable the use of these cookies in your web browser.

Advertising cookies: remember product and page preferences, and in general the visit to the website. We strive to provide you with advertising relevant to you and based on your interests from other online platforms that are available based on your visits and browsing of our Website and other third party websites. We create a segmented profile based on these interests and then tailor the content and advertisements on our Website to different customer groups.

Marketing cookies: are used to carry out personalised advertising services. They do not directly store personal data, but are based on the unique identification of your browser and internet device. We would like to point out that refusing the use of these cookies will not prevent the display of advertisements on the website, but they may no longer be relevant to your interests.

How to control cookies:

You can control and/or delete cookies at your discretion - see details on aboutcookies.org. You can delete all cookies stored on your computer or other device and you can set most browsers to prevent them from being stored.

3.3.The Operator's website uses the following cookies:

All cookies used by the Operator can be found on https://www.cookieserve.com/ by entering the Operator's web address.

How long do we process personal data? Providing information to a third party.

The controller shall store personal data:

For as long as necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and to assert a claim arising from that contractual relationship.

After the expiration of the period of storage of personal data resulting from Act No. 395/2002 Coll., the Act on Archives and Registers and on the amendment of certain acts, the operator deletes the personal data.

X. Recipients of personal data

The recipient is anyone to whom the personal data is disclosed, regardless of whether they are a third party. A public authority which processes personal data on the basis of a specific regulation shall not be considered a recipient.

They are persons who are involved in the delivery of goods, services, making payments on the basis of a contract.


Stripe - online payment security on the Internet,

Apple PAY - securing online payments on the Internet

Shopify - e-commerce platform

XI. What rights do you have in relation to the processing of your personal data?

The proper processing of your personal data is important to us and its protection is a matter of course. You can exercise the following rights when processing your personal data:

Information about the processing of your personal data
The information contains in particular the identity and contact details of the controller, the purposes of the processing, the categories of personal data concerned, the recipient or categories of recipients of the personal data, information on the transfer of personal data to third countries, the retention period of the personal data, the authorised controllers, a list of your rights, the possibility of contacting the Data Protection Authority, the source of the personal data processed, information on whether and how automated decision-making and profiling takes place.

Right of access to personal data
You have the right to confirm whether or not personal data are being processed and, if so, to access information on the purposes of processing, the categories of personal data concerned, the recipients or categories of recipients, the period of retention of personal data, information on your rights, the right to lodge a complaint with the Data Protection Authority, information on the source of personal data, information on whether or not automated decision-making and profiling are taking place, information and safeguards in the event of a transfer of personal data to a third country or an international organisation. You have the right to be provided with copies of the personal data processed

Right to repair
Are we processing your outdated or inaccurate personal data? For example, have you changed your email? Please inform us and we will correct the personal data.

Right to erasure (right to be forgotten)
In certain cases provided for by law, we are obliged to delete your personal data on your instruction. However, each such request is subject to an individual assessment as to whether the conditions are met, as, for example, the controller may have an obligation or legitimate interest, if it outweighs your interests, to retain the personal data.

Right to restriction of processing
If you wish us to process your personal data only for the strictly necessary legal reasons or to block your personal data.

Right to data portability
If you wish us to provide your personal data to another data controller, another company, we will transfer your personal data in the appropriate format, provided that we are not prevented from doing so by any legal or other significant obstacles, to the entity designated by you.

Right to object
If you become aware or believe that we are processing your personal data in breach of the protection of your private and personal life or in breach of the law, please contact us and ask us to explain or remedy the situation.

The right to lodge a complaint with the Data Protection Authority
You can at any time address your complaint or complaint regarding the processing of personal data to the supervisory authority, namely the Office for Personal Data Protection of the Slovak Republic, located at Budova Park one, Námestie 1.mája 7286/18, 811 06 Bratislava - Staré Mesto, Slovak Republic, ID No.: 36 064 220, tel. no: +421/2/3231 3220, website https://dataprotection.gov.sk/uoou/.

XII. How can you exercise your rights?

You can contact us with your request in any of the following ways:

Email: info@colette.sk by post to the address of the registered office: Krížna 8, 811 07 Bratislava - Old Town district

electronically by clicking on the following links:
-> the data subject's request for the exercise of rights:
-> objection to the processing of personal data by the data subject:
-> withdrawal of consent to the processing of personal data

XIII. How long can you expect a reply from the operator Colette Boutique s.r.o.?

We will provide you with a statement and, where appropriate, information on the measures taken as soon as possible and within one month at the latest. We are entitled to extend the time limit by two months if necessary and in view of the complexity and number of requests. We will inform you of the extension, including the reason for it.

XIV. Where can you contact us?

If you have any questions or comments about this information obligation, please do not hesitate to contact us at any time by email to info@colette.sk or in writing to the following address: Krížna 8, 811 07 Bratislava - Staré Mesto.

This Privacy Policy shall come into force and effect upon its posting on the Website.  


Colette-Logo

About Colette

An authentic restaurant serving modern French cuisine in the style of Paris on a plate. Here you can enjoy French specialties, excellent wine, and original desserts. Atmosphere, taste, and emotion in one experience. J'adore!

Krížna 8, 811 07 Bratislava,
Slovak Republic
Phone: +421 908 889 308
Email: info@colette.sk

Opening hours

 Pick up your orders at
at our brick-and-mortar store - Krížna 8,
811 07 Bratislava

 MONDAY: CLOSED
 TUESDAY - SATURDAY: 5:00 p.m. - 10:00 p.m.                           
SUNDAY: CLOSED

Copyright © 2024 Colette Boutique s.r.o. | All Rights Reserved