Personal Data Protection

Privacy Statement

We are committed to protecting your privacy. Sofia Jewelry, s.r.o., Obchodná 53, 811 06 Bratislava, Slovakia Co. Reg. No.: 44 708 378, registered in: District Court Bratislava I, File No. 58031/B, Section Sro, (the “Company” or “We”) commits to protect your personal data.

In this document, you will find information on why, when, how and what personal data we process about you. You will also find the ways you may contact us with any questions concerning the processing of your personal data.

In certain circumstances, we may revise and amend the Privacy Statement. You are advised in your own interest to make sure each time you have the most recent information.

We are committed to take any measures to prevent any misappropriation of personal data you disclose to us. We will only process your personal data where statutory right to the processing of personal data is given.

What personal data do we process?

We process the following personal data:

a)      identifying data primarily consisting of the name and surname of a customer;

b)      contact data referring to personal data that allows us contacting you, such as e-mail address, telephone number and, contact address;

c)       data concerning your purchases, such as data on goods and services you have ordered or purchased, payment and complaint information.

Why do We process personal data? Under what authority?

As part of our business, we process personal data for different purposes and in different scope:

a)      without your consent in the context of the performance of a contract, our legitimate interest or in the context of fulfilling a legal duty, or

b)      based on your consent.

What processing can be undertaken without your consent depends on the purpose followed by the respective processing.

Consent of the data subject

Based on the consent of the data subject, We process personal data for the following purposes:

Loyalty program

On purchase, the customer may join the loyalty program. Member customers are entitled to different discounts on future purchases and other benefits of membership, such as newsletters, current offers and consumer contests. The customer receives a card acknowledging membership in the loyalty program; the card is non-transferrable. On joining the loyalty program, the customer gives a free, specific, informed and clear consent to the processing of personal data relating to the customer for such purpose in the scope of name, surname, and e-mail address. Registration in the program is a two-step procedure and requires that the visitor confirms his e-mail address by clicking the link in the activation e-mail.

The consent is granted for the period of the customer’s membership in the loyalty program; the consent may be revoked at any time—each sent notification contains a link to revoking the consent. The consent may also be revoked by written notice sent to the Company’s registered office, calling the Company’s infoline or mailing info@sofia.net.

Disclosure and processing of the customer’s personal data is a pre-condition of membership in the customer program and eligibility to customer benefits from the Company; absence of the possibility to process personal data will cause the membership in the customer program to terminate.

Consumer contest

If at the time the customer makes a purchase a consumer contest is being organised by the Company, upon granting a free, specific, informed and clear consent to the processing of personal data for the purpose of the contest, the customer will be signed up for the contest. The scope of personal data for which consent is granted covers name, surname, e-mail address and telephone, so as winners can be contacted.

The consent is valid until the end of contest. The customer may revoke the consent before the end of contest by written notice sent to the Company’s registered office.  Where such consent is revoked, the customer cannot be contacted if he wins the contest.

In addition to signing up for the contest, the customer may also join the loyalty program, provided he is not a member yet. Such decision is without prejudice to the participation in the contest.

Subscribing to newsletters

On subscribing to the newsletter, the visitor of www.sofia.net gives a free, specific, informed and clear consent to being sent newsletters, current offers and consumer contests of the Company and the processing of the visitor’s personal data for such purpose in the scope of name, surname, and e-mail address. The registration is a two-step procedure and requires that the visitor confirms his e-mail address by clicking the link in the activation e-mail.

The consent is valid for 5 years or until revoked; revocation is possible any time—each sent newsletter contains a link to revoking the consent. You may unsubscribe from the newsletter also by written notice sent to the Company’s registered office, calling the Company’s infoline or mailing info@sofia.net.

Processing based on the performance of a contract

Ordering goods/services from the e-shop

When goods/services are ordered from the e-shop, the Company processes customer’s personal data based on a purchase contract concluded over the internet (distance contract).

Customer’s personal data is processed in the scope of name, surname, address, telephone number and e-mail address.

Data is processed for a maximum of ten (10) years after expiry of the contract for the purpose of due account-keeping and compliance with tax duties.

Under a processing contract, recipients of such personal data may be other entities providing the performance of the object of contract.

Shipment delivery

When there is a need for the goods to be delivered, the Company processes customer’s personal data based on a purchase contract concluded over the internet (distance contract).

Customer’s personal data is processed in the scope of name, surname, address, telephone number and e-mail address.

Data is processed for the period necessary to deliver the shipment.

Under a processing contract, recipients of such personal data may be other entities providing the delivery of the object of contract.

Complaint handling

In the event of a complaint over the goods or services by the customer, the Company processes customer’s personal data based on the purchase contract.

Customer’s personal data is processed in the scope of name, surname, address, telephone number and e-mail address.

Data is processed during the warranty period – for two (2) years as a standard, unless other period of warranty was agreed or the warranty extended.

Under a processing contract, recipients of such personal data may be other entities providing the handling of the given complaint.

Processing based on legitimate interest

Video surveillance system

On your visit to the Company’s premises, we may process a recording from the video surveillance system on which you may be captured, based on our legitimate interest (hence without your consent) to protect our and your property and the persons moving around the Company’s premises and in its surroundings which also constitutes our legitimate interest.

For this purpose, we store personal data for a period of up to thirty (30) days. You have the right to object to such processing.

Customer communication

If you purchase goods or services from us, we will store your identification and contact information and your purchase details based on our legitimate interest (without your consent) for the purpose of our internal records and audit, but also to increase the quality of our services. In such case, our legitimate interests consist in increasing the quality of provided services, informing the customer of newly-arrived goods and services of the given e-shop with the aim of promoting their sales.

Customer’s personal data is processed in the scope of name, surname, address, telephone number and e-mail address.

Data is processed for a period of two (2) years from the last purchase.

Under a processing contract, recipients of such personal data may be other entities providing marketing communication with the existing customers. You have the right to object to such processing undertaken in our legitimate interest.

Watchdog

If the item is not available, as registered customer, you may set up a watchdog to be notified by the Company via e-mail once the item is again available.

Customer’s personal data is processed in the scope of name, surname, and e-mail address.

Data is processed for a period up to six (6) months from the unavailability of the selected goods.

Under a processing contract, recipients of such personal data may be other entities providing marketing communication with the existing customers. You have the right to object to such processing undertaken in our legitimate interest.

Abandoning the cart

If you did not finish your purchase order as a registered customer, or failed to complete the payment, we may send you an e-mail reminding you of the goods added to your cart.

Customer’s personal data is processed in the scope of name, surname, and e-mail address.

Data is processed for a period up to four (4) weeks from abandoning the cart.

Under a processing contract, recipients of such personal data may be other entities providing marketing communication with the existing customers. You have the right to object to such processing undertaken in our legitimate interest.

Following customer birthdays

Following customer birthdays is a marketing activity whereby we send you a wish and, where appropriate, a gift voucher or discount coupon.

Customer’s personal data is processed in the scope of name, surname, e-mail address, day and month of birth.

Data is processed up to a period of two (2) years from the last purchase.

Under a processing contract, recipients of such personal data may be other entities providing marketing communication with the existing customers. You have the right to object to such processing undertaken in our legitimate interest.

Reactivating customers

If you are a registered customer and are inactive in the e-shop for a longer period, We may contact you with the aim of motivating you to another purchase, or send you a discount code for your next purchase.

Customer’s personal data is processed in the scope of name, surname, and e-mail address.

Data is processed up to a period of two (2) years from the last purchase.

Under a processing contract, recipients of such personal data may be other entities providing marketing communication with the existing customers. You have the right to object to such processing undertaken in our legitimate interest.

Segmentation

Based on what you buy in the e-shop, We may send you information on goods similar to those purchased.

Customer’s personal data is processed in the scope of name, surname, and e-mail address.

Data is processed up to a period of two (2) years from the last purchase.

Under a processing contract, recipients of such personal data may be other entities providing marketing communication with the existing customers. You have the right to object to such processing undertaken in our legitimate interest.

Upselling

Based on the content of your cart/or on goods previously purchased in the e-shop, on completing your order (during the payment process), you may be recommended goods to add to your cart.

Customer’s personal data is processed in the scope of name, surname, and e-mail address.

Data is processed up to a period of two (2) years from the last purchase.

Under a processing contract, recipients of such personal data may be other entities providing marketing communication with the existing customers.  You have the right to object to such processing undertaken in our legitimate interest.

Processing based on the fulfilment of legal obligations

The Company must comply with certain statutory duties. If your personal data is being processed on said grounds, We need not obtain your consent for such processing. On the said legal basis, we process your identification and contact information and details of your purchases, whereby the basis is given by acts such as, without limitation:

  • Act No. 250/2007 Z. z. on Consumer Protection, as amended
  • Act No. 222/2004 Z. z. on Value Added Tax, as amended
  • Act No. 431/2002 Z. z. on Accounting, as amended

For these purposes, personal data is processed for a period of ten (10) years.

What are your rights with regard to the processing of personal data?

Just as we have certain rights and obligations with regard to the processing of your personal data, you enjoy certain rights with regard to the processing of your personal data, too. These include:

Right of access

As a rule, you have the right to know what data We process about you, for what purpose, for how long, where we collect it, to whom we disclose it, who processes your personal data apart from us and what are your other rights related to the processing of your personal data.  All the information is included in this document. However, if unsure what personal data we process about you, you have the right to obtain a confirmation as to whether or not personal data concerning you is being processed and where that is the case, you have the right of access to the personal data. Under the right of access, you may request a copy of the personal data undergoing processing; we provide the first copy for free; a fee applies to any further copies.

Right to rectification

If you believe that personal data concerning you we are processing is inaccurate or incomplete, you have the right to obtain without undue delay the rectification of inaccurate personal data and to have the incomplete personal data completed.

Right to erasure

In certain situations, you have the right to obtain from us the erasure of personal data concerning you. We will erase the personal data concerning you without undue delay where one of the following grounds applies:

  • the personal data concerning you is no longer necessary in relation to the purposes for which it was processed;
  • you revoke the consent on which the processing was based whereby such consent is necessary for the processing of such data and there is no other legal ground for processing;
  • you use your right to object to the processing of personal data we are processing based on our legitimate interests and we find there are no overriding legitimate grounds for the processing;
  • you believe that processing of personal data undergone by us has deflected from the generally binding laws and regulations.

Please be aware that if one of the grounds above applies, it does not mean we will immediately erase all your personal data. This right will not apply where the processing of personal data concerning you continues to be necessary to comply with our legal obligation or determination, exercise or defence of our rightful titles.

Right to restriction of processing

In certain situations, in addition to the right to erasure, you may use your right to obtain restriction of processing personal data. Such right allows you in certain instances to request that the personal data concerning you is identified and such data is not subject to any further processing operations—in such case, however, not for good (as is the case with the right to erasure), but only for a restricted period.

Right to portability

You have the right to receive from us all personal data concerning you and disclosed by you to us which we are processing based on your consent and the performance of a contract. We will provide you with the personal data concerning you in a structured, commonly used and machine-readable format. In order to be able to easily transmit the data at your request, these may only include data we process by automated means in our electronic databases.

Right to object to processing

You have the right to object to the processing of personal data by which we pursue our legitimate interest. As regards marketing activities, we will stop processing your personal data without further conditions; in all other situations, we will do so, unless material legitimate grounds justify that we continue such processing.

Right to lodge a complaint

Invoking the above rights does not prejudice your right to lodge a complaint with the respective authority. You may invoke such right primarily when you believe we are processing your personal data without authorisation or in conflict with the generally binding laws and regulations. You may lodge a complaint against the undergoing processing of personal data with the Office for Personal Data Protection, with its registered office at Hraničná 12, 820 07 Bratislava.

How can I claim any of the rights?

In all matters regarding the processing of your personal data, whether it is a request for information, exercising of a right, lodging a complaint or any other type of request, you may contact our data protection officer.

We will handle your request without undue delay; the procedure may take up to one (1) month. In exceptional circumstances, such as due to complexity of your request, we may extend such period by another two (2) months. We will notify you of any possible extension and the grounds of extension of the period for handling your request.

Data protection officer

You may contact the data protection officer in all matters regarding the procession of your personal data at gdpr@sofia.sk.