Information pursuant to Article 13 and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the "Regulation") in accordance with Sections 19 and 20 of Act No. 18/2018 Coll. on the Protection of Personal Data (hereinafter referred to as the "Act").
Ensuring the protection of personal data and the confidential treatment of personal data is very important to us at Colette Boutique s.r.o.. We make sure that the processing of personal data complies with the applicable legislation, the principles of legality, fairness and transparency.
The purpose of this document is to inform the data subjects about the processing and protection of personal
data, in particular:
- to ensure that data subjects know exactly what personal data we collect as a controller, why we collect and use it and to whom we provide it;
- to explain how we use the personal data provided by data subjects to enable us to offer our products and provide our services as professionally as possible;
- to make data subjects aware of their rights and options regarding the personal data we collect and process about them, as well as how we take care of the privacy of data subjects.
The data controller is:
Colette Boutique s. r. o.,
IČO: 53 923 804,
with registered office: Krížna 8, 811 07 Bratislava - Staré Mesto,
registered in the Commercial Register of the District Court Bratislava I, Section Sro, Insert No.: 153995/B,
E-mail: michaela@colette.sk,
tel.+421 915 287 925
(hereinafter referred to as the "Controller").
In case of any questions, comments or requests regarding the processing of your personal data, please contact Mgr.
Michaela Budáčová, in writing, in person or by e-mail.
A data subject is any natural person who provides the controller with personal data in connection with the use of the controller's services or in connection with an expressed interest in such services. A data subject shall also be a natural person acting on behalf of a legal person if that natural person provides his or her personal data in connection with the use of the controller's services or in connection with an expressed interest in such services. A data subject is also a natural person about whom the controller has obtained personal data in connection with the use of the controller's services or in connection with an expressed interest in such services from other sources, for example, if the contact details of the data subject have been provided to the controller by another person for the purpose of cooperation or order processing.
3.1 Purchase in the e-shop of the operator
When purchasing in the e-shop, the operator requires personal data necessary for the processing of the order of the goods of the data subject, namely name and surname, delivery address, billing address, e-mail address and telephone number. If the data subject is acting in the name and on behalf of a legal entity or another natural person, in addition to the data of the legal entity (business name, registered office, VAT number, VAT number, bank account number, entry in the relevant register, etc.) and of another natural person who is also a data subject (business name, business address, e-mail address, telephone no., telephone no., etc.), the data of the data subject shall be provided to the following, or registration in the relevant register, if the natural person is an entrepreneur), the controller also requests and processes the personal data of the acting data subject to the extent that his or her authorisation to act on behalf of the legal entity or other natural person is implied, most often name, surname, e-mail, telephone number and job title, and/or personal data resulting from the power of attorney granted. On the basis of these data, the controller prepares an invoice, sends the ordered goods and processes the order placed by the data subject. If the necessary personal data of the data subject are not provided, the order cannot be processed by the controller.
3.2. Registered customer account
The personal data processed in connection with the voluntary and gratuitous registration with the operator via its website are name and surname, address, e-mail address, telephone number, billing address, delivery address, where applicable, data concerning a legal entity and/or another natural person, if the data subject acts on behalf of and for the account of such legal entity or other natural person when registering, in the scope of the business name, registered office, registration number, VAT number or business name, business address, e-mail address, or registration number, if the data subject is a natural person - entrepreneur. The voluntary registration of a customer account means that an order can be placed in the Operator's e-shop and will be processed even without such registration and the Operator will proceed in accordance with paragraph 3.1
above.
The owner of a registered customer account is entitled to benefit from the advantages of registration provided by the Operator in the form of
(a) easier order placement due to the automatic retrieval of the data necessary for invoicing and order processing, as well as the possibility of easier updating of such data,
(b) the possibility to benefit from volume or other discounts on ordered goods within the loyalty programme provided by the Operator and finally
(c) information about news and promotions in the Operator's e-shop in the form of a newsletter
(hereinafter referred to as "Services associated with a registered customer account ").
If the required personal data are not provided, the customer account cannot be registered with the controller and the Services associated with the registered customer account cannot be provided to the data subject or to the person on whose behalf and on whose behalf the data subject acts.
3.3.Contact form
The operator allows anyone to inform about the provision of e-shop services, the range of goods offered, commercial and warranty conditions, or any other facts relating to the business activities of the operator, through a contact form, in which the data subject, in addition to the description of their request, also provides the data necessary for its processing by the operator, which are name, surname and e-mail address.
4.1 Processing of personal data which is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures at the request of the data subject.
The above legal basis relates to the processing of the data subject's personal data for the following purposes:
- For the conclusion of a valid contract between the controller and the data subject and for the purposes of its proper performance by both parties in accordance with the controller's terms and conditions of business and warranty, i.e.
- In the framework of pre-contractual relations for the purpose of answering questions of the data subject submitted via the contact form, as well as for technical administration on the www.colette.sk website, necessary for the proper provision of services by the operator, namely personal data in the scope of first and last name, e-mail.
- For the registration of a customer account, which establishes a gratuitous contractual relationship between the controller as the provider of the Services associated with the registered customer account and the owner of the registered customer account, in particular for the involvement of the data subject in the loyalty programme and the associated provision of various
4.2 Processing of personal data which is necessary for the purposes of legitimate interests pursued by the controller
The above legal basis relates to the processing of the data subject's personal data for the following purposes:
- For marketing purposes in the form of various forms of promotion of goods and services of the controller directed to registered customer account holders on www.eshop.colette.sk
- For the purpose of proving, exercising and enforcing any claims arising out of the contract between the controller and the data subject.
- The use of functional and analytical cookies without profiling of the data subject and without the possibility to identify the relevant connection between the data subject and a specific IP address, where the legitimate interest of the controller is the proper functioning of the of the functionalities of its website and e-shop and the improvement of its services, other the development of the website and e-shop in the interests of further business development of the operator.
Further information on the use of cookies, consent to their use according to § 116 of the Electronic Communications Act, as well as its revocation, can be found HERE ( click here: https://support.google.com/analytics/topic/2919631?hl=sk&ref_topic=1008008)
4.3 Processing of personal data based on the free and informed consent of the data subject
This legal basis applies to the processing of personal data of the data subject for the following purposes:
- For marketing purposes, if the data subject is not in any contractual relationship with the controller and has given the controller free and informed consent for these purposes, in particular in relation to the sending of commercial communications about news, current offers and promotions, or other forms of marketing. Any consent given is voluntary and may be withdrawn by the data subject at any time, but this shall not affect the lawfulness of the processing of personal data prior to its withdrawal.
- To ensure communication through the contact form of the controller, published on its website, in which requests and questions are handled, as well as any related communication with a data subject who does not have a contractual or other legal relationship with the controller that would allow the processing of his or her personal data in the scope of name, surname and e-mail address on another legal basis; such data subject consents to the processing of the personal data by completing and submitting the contact form, whereby the controller shall cease processing the personal data and shall discard the personal data as soon as the purpose of the processing has been fulfilled, i.e.
- For the use of so-called marketing cookies used for the purpose of targeting the controller's marketing campaigns or advertising.
Further information regarding the use of cookies, consent to their use under the Regulation and under Section 116 of the Electronic Communications Act, as well as its revocation, can be found HERE. https://support.google.com/analytics/topic/2919631?hl=sk&ref_topic=1008008
4.4. Processing of personal data which is necessary for the fulfilment of the legal obligation of the Controller
The Controller processes the personal data of the data subject in accordance with the relevant general legal regulations governing the obligation to keep personal data and/or documentation in which the personal data of the data subject are contained, in particular with regard to the storage of the data concerning the data subject on an invoice, contract or order in the accounting records of the controller, in the internal database of the business activity, or when disclosing the data to state and other public authorities supervising the activities of the controller (e.g. Slovak Trade Inspection Authority, Office for Personal Data Protection of the Slovak Republic, etc.), or which settle disputes or enforce final and enforceable decisions (courts of the Slovak Republic, bailiff, etc.).
The controller shall process the personal data of the data subject in accordance with the principle of minimisation their retention and thus for the duration of the purpose for which the controller holds the personal data the data subject has obtained.
The controller shall process the personal data of the data subject:
- related to a purchase made in the e-shop for a period of five (5) years from the processing of the order by the controller,
- which relates to his or her registered customer account for as long as such customer account is established,
- obtained by the operator through the completion of the contact form by the data subject, such personal data shall be retained by the controller only for the duration of the purpose, which is the full processing of the data subject's request,
- the processing of which is necessary for compliance with a legal obligation of the controller for as long as it is necessary to do so under the relevant legal legislation (e.g. under the Value Added Tax Act, the accounting, etc.),
- the processing of which is necessary for the exercise of rights and legitimate interests the controller for as long as those legitimate interests last (e.g. the exercise of claims in court and their recovery in enforcement proceedings, etc.).
When you visit the operator's website, small "cookies" are stored on your device (computer, tablet, smartphone ...), which are subsequently read by our company as the operator. Cookies used in this way serve to improve the data subject's browsing experience on the website of the operator, from the moment of visit to the end of browsing. When you close the website of the controller, some of these cookies will be deleted and some will remain on the data subject's device and will be activated whenever you visit our website, for a period of time ranging from 1 minute to an indefinite period of time, depending on the functionality.
Cookies used by us as the operator:
- help to identify the data subject the next time he/she visits the operator's website, in order to make the website suitable for the data subject's device, or to avoid the data subject having to log in repeatedly each time he/she visits the operator's website,
- help to detect, correct and/or remove non-functioning parts of the operator's website, enable the data subject to use the functions of the operator's e-shop (e.g. remembering the goods in the basket, etc.)) - these are cookies that are necessary for the proper functioning of the website of the operator, so disabling them in the internet browser of the data subject may cause incorrect functioning and display of the website of the operator, which may reduce the comfort of the data subject when using the website of the operator, in particular the functioning of the registered customer account;
- enable us to track traffic to the website of the operator, browsing of individual products, where applicable, to determine the effectiveness of the advertisements of the operator through which the data subject accessed the website of the operator, to measure traffic to the website of the operator from specific countries and locations, as well as traffic to the website of the operator at specific times of the day; this information is important for us as the operator to be able to further develop our website, including the e-shop, and thus to develop our business as well. The aforementioned activities aimed at collecting the information specified above are carried out by the operator via Google Analytics, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on data protection in this context can be found HERE. https://support.google.com/analytics/topic/2919631?hl=sk&ref_topic=1008008
The operator is not responsible for the storage of cookies on third-party websites or the use of cookies stored on the end device of the data subject as a user by third parties.
On the website www.colette.sk, the visitor will be presented with a so-called pop-up cookie bar, which allows the visitor to select the settings of the individual cookies, i.e. essential, analytical and marketing cookies. The use of the appropriate web browser setting to allow the storage and download of cookies (e.g. not to block cookies) is deemed to be consent to the use of cookies, granted pursuant to Section 116 of the Electronic Communications Act, as amended. The consent of the data subject as a user lasts as long as the settings of his/her internet browser are maintained. If the data subject does not consent to the use of cookies, they will not be used by the operator. In the event of refusal of consent (refusal to store cookies), the operator cannot guarantee the full functionality of its website or e-shop, in particular, it does not guarantee the possibility of the data subject logging in as a user to a registered customer account.
The data subject can set his or her internet browser to refuse the storage of cookies, or only allow the storage of cookies that he or she trusts, or to accept cookies only from the websites that he or she has just visited. The person concerned can also delete all or only some of the cookies already stored on his or her device in his or her browser. By changing the settings of the Internet browser or by prohibiting the use of cookies, the consent of the data subject to the use of cookies, granted pursuant to Section 116 of the Electronic Communications Act, as amended, shall expire.
7.1 The personal data of the data subject shall be disclosed to a third party if this is necessary for the performance of the contract or if the data subject has given his or her explicit consent to such disclosure. In the context of order processing and contract fulfilment, personal data are provided to contractual service providers of the controller, such as banks, etc. The data may be used by the service providers solely for the purposes of contract fulfilment or the provision of other services by the controller to the data subject.
7..2. The personal data of the data subject will be processed by an external company, which is the creator and operator of the operator's e-shop, an accounting service provider, a provider of legal and audit services, a provider of marketing services, an e-shop administrator, an IT service provider and a carrier, on the basis of the instructions of the controller in the capacity of an intermediary and for the purposes specified by the controller, while ensuring the protection of personal data in accordance with the relevant legislation and in accordance with the information contained in this document.
For more information, please contact us at info@colette.sk.
The controller transfers the personal data of the data subject to a third country, namely to a processor with whom the controller cooperates in the processing of personal data for the purpose of ensuring the most efficient service of providing newsletters and other news to the data subject. Such transfers are made specifically to the United States of America. Those to whom such data is disclosed in the United States comply with the terms of the US-EU Privacy Shield and thereby provide an adequate level of protection for the personal data of data subjects.
For more information, please contact us at info@colette.sk.
As a Data Controller, we do not carry out automated individual decision-making or profiling.
The data subject shall have the right to object at any time to processing of personal data on grounds relating to his or her particular situation. The data subject may object to the processing of his or her personal data on the following grounds:
- legal basis for the performance of a task carried out in the public interest or in the exercise of official authority, or on the grounds of the legitimate interest of the controller,
- processing of personal data for direct marketing purposes, in which case the controller may no longer process the personal data of the data subject,
- processing for scientific or historical research purposes or for statistical purposes.
The controller shall consider the objection received within a reasonable time. The controller may no longer process the personal data unless he or she demonstrates compelling legitimate interests for the processing of the personal data which override the rights or interests of the data subject, or the grounds for asserting a legal claim.
10.1 The data subject has the right to access his or her personal data. At the request of the data subject, the controller shall issue a confirmation as to whether the personal data of the data subject are being processed. If the controller processes such data, it shall, on the basis of such a request, issue a copy of the data subject's personal data containing all the particulars in accordance with data protection legislation. The issue of the first copy pursuant to the above shall be free of charge. For any further copies requested by the data subject, the controller shall charge a fee corresponding to the administrative costs incurred in issuing the copy. If the data subject requests the information by electronic means, it will be provided to him or her in a commonly used electronic form, in the form of an e-mail, unless the data subject requests otherwise.
10.2. The data subject shall have the right to rectification of personal data if the controller records inaccurate personal data concerning the data subject. At the same time, the data subject has the right to have incomplete personal data completed. The controller shall carry out the rectification or completion of the personal data without undue delay after the data subject has requested it or without delay after the data subject has informed the controller of the need to complete the personal data.
10.3. The data subject shall have the right to erasure of personal data concerning him or her, provided that:
- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- the data subject withdraws the consent on the basis of which the processing is carried out;
- the data subject objects to the processing of personal data pursuant to point X.,
- the personal data have been unlawfully processed,
- the reason for erasure is the fulfilment of an obligation imposed by law, a special regulation or an international treaty to which the Slovak Republic is bound, or
- the personal data were collected in connection with the offer of information society services to a person under 16 years of age.
The controller shall erase the personal data of the data subject upon request, without undue delay after it has assessed that the request of the data subject is justified.
However, the controller shall not erase the personal data of the data subject despite his or her request if the processing of the personal data of the data subject is necessary:
- to exercise the right to freedom of expression and information;
- for the performance of an obligation under the law, a special regulation or an international treaty by which the Slovak Republic is bound, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,
- for reasons of public interest in the field of public health,
- for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, where the right to erasure is likely to render impossible or seriously impede the achievement of the objectives of such processing, or
- for the establishment, exercise or defence of legal claims.
10.4 The data subject shall have the right to restrict the processing of personal data in the event that the data subject contests the accuracy of the personal data by objecting pursuant to point X. during a period allowing the controller to verify the accuracy of the personal data; or if the processing of the data subject's personal data is unlawful and the data subject requests the restriction of the use of the personal data instead of the erasure of the personal data; or if, although the controller no longer needs the personal data for the purposes of the processing, the data subject needs the personal data for the establishment, exercise or defence of legal claims; or where the data subject has objected to the processing of personal data on the basis of a legitimate claim by the controller, pending verification whether the legitimate grounds on the part of the controller override those of the data subject. If the data subject requests the restriction of the processing of his or her personal data, the controller shall not carry out any processing operations, other than storage, on the personal data without the consent of the data subject and, in the event of the revocation of such restriction of the processing of personal data, the data subject shall be informed of this fact.
10.5 The data subject shall have the right to data portability, which means that the controller shall provide the data subject with the personal data being processed, whereby the data subject shall have the right to transmit those data to another controller in a commonly usable and machine-readable format, provided that the personal data have been obtained on the basis of the data subject's consent or on the basis of a contract and the processing is carried out by automated means.
10.6 The data subject shall have the right to withdraw his or her consent to the processing of personal data at any time, provided that the processing of personal data was based on this legal title. The data subject shall withdraw his/her consent by contacting the Contact Person with his/her request in any way he/she chooses - in writing or by e-mail. However, the lawfulness of the processing of personal data on the basis of the consent granted until its withdrawal is not affected by its withdrawal.
10.7. The data subject has the right to file a petition with the Office for Personal Data Protection of the Slovak Republic if he/she believes that his/her rights in the area of personal data protection have been violated.
Colette Boutique s.r.o. uses various security, technical and organisational measures to ensure the security of the data we process, including personal data, and to prevent unauthorised access, alteration, misuse, erasure or loss. At the same time, we ensure that such measures are also used by third parties to whom we have entrusted your personal data and that they respect the confidentiality of any data so entrusted, and in particular your personal data, and strictly observe the obligation of confidentiality in relation to it.
For us, data protection is not a one-off or formal matter. The information that we are obliged to provide to you with regard to the processing of personal data in our services may change or become outdated due to technical or technological progress and/or due to changes in the legal regulation of personal data protection or changes in the application practice of the relevant public authorities, in particular the Office for Personal Data Protection of the Slovak Republic.
For the reasons stated above, we reserve the right to modify and change these terms and conditions at any time and to any extent whatsoever. In the event that we change these privacy policy in a material way, we will bring this change to your attention, e.g. by a public notice on the Colette Boutique s.r.o. website or by a special notice addressed to you, sent via email.
Ifyou would like more information regarding the processing of your personal data, please contact our Contact Person. We will be happy to answer your questions.
About Colette
Authentic restaurant with modern French cuisine in the style of Paris on a plate. Here you will enjoy French specialties, excellent wine and original desserts. In addition, we also prepare a traditional brunch for you every weekend. J´adore!
Krížna 8, 811 07 Bratislava,
Slovak Republic
Phone: +421 908 889 308
Email: info@colette.sk
Opening hours
Pick up your orders
in the brick and mortar shop - Krížna 8,
811 07 Bratislava
MONDAY: CLOSED
TUE - SAT: 17:00 - 22:00
SUNDAY LUNCH: 11:00 - 15:00
Copyright © 2024 Colette Boutique s.r.o. | All Rights Reserved
Made by Hason Digital