You are using an outdated browser. For a faster, safer browsing experience, upgrade for free today.
Phones: +421905948274
We are open: 9:00 - 16:00
Compare (0) My Wish List (0) Sign In
€ EUR
En

Nontoxic

  • Your shopping cart is empty!

Privacy Policy

Date of last revision: October 22nd 2020

General Information

Welcome to our Privacy Policy page! When use our store services, you trust us with your information. This Privacy Policy is meant to help you understand what data we collect, why we collect it, and what we do with it. When you share information with us, we can make our services even better for you. As you use our services, we want you to be clear how we’re using information and the ways in which you can protect your privacy. This is important; we hope you will take time to read it carefully. Remember, you can find controls to manage your information and protect your privacy and security. We’ve tried to keep it as simple as possible.

 

Data Protection

This Data Protection Policy refers to the nature, scope and purpose of personal data processing (hereinafter referred to as "data") relating to our websites, features and content thereof, as well as the external presence such as our social media profiles (collectively referred to as "online offer"). With regard to the terminology used, e.g. "processing" and "controller", we refer to the definitions stimulated in Article 4 of the General Data Protection Regulation (GDPR).

 

Collection, Processing & Use of Personal Data

Types of Processed Data:

  • Personal data (e.g. name, address).
  • Contact data (e.g. email address, telephone number).
  • Content data (e.g. text input, images, videos).
  • Usage data (e.g. websites visited, interest in content, access time).
  • Meta and communications data (e.g. device information, IP addresses)

Categories of Data Subjects

  • Visitors and users of the online offer (hereinafter referred to as "user").
  • Customers utilising our website (hereinafter referred to as "user").

Processing Purposes

  • Provision of the online offer, its functions and content.
  • Processing of all orders including the related physical processes, in particular, that of package dispatch and in respect to the possible reverse transaction in case of warranty.
  • Responding to contact requests and communication with users.
  • Security measures
  • Audience measurement/marketing

Definitions

"Personal data" means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

"Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

"Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

In accordance with Article 13 of the GDPR, we provide information in regard to the legal basis of our data processing. Provided the legal basis in the data protection statement is mentioned, the following applies: The legal basis for obtaining consent is Article 6 paragraph letter 1 and Article 7 of the GDPR, the legal basis for the processing for the fulfilment of our services and the execution of contractual measures as well as the answer to inquiries is Article 6 paragraph 1 letter b of the GDPR, the legal basis for the processing in order to fulfil our legal obligations is article 6 (1) letter c of the GDPR, and the legal basis for the processing in order to safeguard our legitimate interests is Article 6 (1) letter. f of the GDPR. Processing is necessary in order to protect the vital interests of the data subject or of another natural person as stated in Article 6 paragraph 1 letter d of the GDPR.

 

Collaboration with Processors and Third Parties

If, in the context of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit them to them or otherwise grant access to the data, this will only be done on the basis of a legal permission (eg if a transmission of the data to third parties, as required by payment service providers, pursuant to Art. 6 (1) (b) GDPR to fulfil the contract), you have consented to a legal obligation or based on our legitimate interests (eg the use of agents, web hosters, etc.).

Your data will be processed, in particular, to order processing in respect to payment and shipping services.

If we commission third parties to process data on the basis of a so-called „contract processing contract“, this is done on the basis of Art. 28 GDPR.

 

Payment Data

Your payment data is encrypted during the order processed and transferred via the internet. We never gain access to your payment data thanks to special embedding used during the order process and are therefore not the processors of the data. The data is processed exclusively by this payment service provider:

GOPAY s.r.o.

Planá 67
370 01 Planá
Česká republika
gopay@gopay.cz

 

Shipping Data

In order to improve our service, we work together with a third party service provider who processes parcel tracking numbers and publishes more detailed information regarding the status of a parcel. Third party information:

Zásielkovňa s. r. o.

Kopčianska 3338/82 A

851 01 Bratislava

info@zasielkovna.sk

 

Slovenská pošta, a. s.

Partizánska cesta 9

975 99 Banská Bystrica 1

zakaznickyservis@slposta.sk

 

Data Transmission in Third-Party Countries

If we process data in a third country (ie outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third-party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfil our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. GDPR. That the processing is e.g. on the basis of specific guarantees, such as the officially recognized level of data protection (eg for the US through the Privacy Shield) or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").

 

Withdrawal

You have the right to consent according to. Art. 7 paragraph 3 of the GDPR. This right to consent also applies to data processed in the future.

You may at any time object to the future processing of your data in accordance with Art. 21 of the GDPR. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

 

Rights of the Data Subject

The user shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the controller shall provide a copy of the personal data undergoing processing as in accordance with Article 15 of the GDPR.

The user shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data or incomplete personal data concerning him or her in accordance with Article 16 of the GDPR.

The user shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay in accordance with Article 17. The user shall have the right to obtain from the controller restriction of processing of personal data in accordance with Article 18 of the GDPR.

The user shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided in accordance with Article 20 of the GDPR.

The user shall have the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR.

 

Data Usage for Advertising Purposes

Your personal data is used to improve your shopping experience and shape it to suit your requirements. The information used to achieve this is the data already available to us, e.g. via your internet connection, the chosen end device, the operating system, the date, the time at which our website was visited or the pages accessed as well as information that was provided to us by you. You may object to the use of your personal data for advertising purposes at any time. A notification via email info@nontoxic.eu.

 

Newsletters

The following information is intended to inform you about the content of our newsletter, the subscription, shipping and statistical evaluation procedures, as well as your right of opting out. By subscribing to our newsletter, you agree to receive it and to the described procedures.

We send newsletters, emails and other electronic notifications with advertising information (hereinafter “newsletter”) only with the consent of the recipient or legal permission. Insofar as the content of the newsletter is concretely described as part of a subscription, it is relative for the consent of the users. Otherwise, our newsletters only contain information concerning our products and the relevant information thereof e.g. special offers, promotions and information about our company.

Subscription details: To subscribe to the newsletter, all you have to do is enter your email address.

The dispatch of the newsletter and the associated performance measurement are based on a consent of the recipients according to Article 6 paragraph 1 letter a, Art. 7 GDPR in conjunction with section107 paragraph 2 of the Telecommunications Act, or if consent is not required, based on our legitimate interests in direct marketing according to Article 6 paragraph 1 letter f GDPR in conjunction with section 107 (2) and the like 3 of the Telecommunications Act.

The logging of the registration process is based on our legitimate interests in accordance with Article 6 paragraph 1 letter f of the GDPR. Our interest lies in the use of a user-friendly and secure newsletter system, which serves both our business interests and the expectations of the users and also allows us to prove our consent.

Termination/Cancellation

As the user you can terminate the receipt of our newsletter at any time, i.e. revoke your consent. The newsletter cancellation link can be found at the bottom of each newsletter. We may save the submitted email addresses for up to three years based on our legitimate interests before deletion thereof to provide prior consent. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for cancellation is possible at any time, provided that at the same time the former existence of a consent is confirmed.

 

Cookies

Cookies are small text files that are stored on a user's computers. Different types of information can be stored within the text files. A cookie is primarily used to store information about a user (i.e. the device on which the cookie is stored) during or after their visit on a website. Session cookies are cookies that are deleted after a user leaves a website and closes the browser. In the case of session cookies, the contents of a shopping cart in an online shop or a login status are saved. Persistent cookies remain stored even after the browser has been closed. Thus, a login status, for instance, will be saved if the user visits the website after several days. Likewise, user interests can be stored which as used for range measurement or marketing purposes. A third-party cookie refers to cookies that are offered by providers that do not manage the website that is being visited. Cookies offered by the person that manages the website are called first-party cookies.

The user is requested to disable the settings in their browser if they do not want any cookies stored, Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of the website being visited.

A general contradiction explaining the use of cookies used for online marketing purposes can be found in a variety of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookie can be switched off in the browser settings. Please note that, once the settings have been changed, not all the features available on this website may be used.

 

Social Media Online Presence

We maintain a social media online presence and other platforms in order to communicate with customers, interested parties and active users, and to inform them about our services. When viewing the respective networks and platforms, the business conditions and data processing policies of the respective operators apply.

We would like to point out that the users' data may be processed outside the European Union. This may result in risks to users because e.g. the enforcement of user rights could be made more difficult. With respect to US providers certified under the Privacy Shield, we point out that they are committed to respecting EU privacy standards.

Furthermore, the user's data is usually processed for market research and advertising purposes. Thus, e.g. user profiles are created from user behaviour and the resulting interests of the users. The usage profiles may, in turn, be used to e.g. place advertisements inside and outside the platforms that are presumably in line with users' interests. For these purposes, cookies are usually stored on the users' computers, in which the user behaviour and the interests of the users are stored. Furthermore, in the usage profiles, data can also be stored independently of the devices used by the users (in particular if the users are members of the respective platforms and logged in to them).

The processing of personal data linked to the user is based on our legitimate interests in effective information of users and the communication with users in accordance with Art. 6 paragraph 1 lit. f. GDPR. If the users are asked by the respective providers for consent to data processing (that is, they declare their agreement, for example, by ticking a checkbox or confirmation a button), the legal basis of the processing is in accordance to Art. 6 paragraph a., Art. 7 GDPR.

For a detailed description of the respective processing and the possibilities of contradiction (opt-out), we refer to the following linked information of the provider.

Also, in the case of requests for information and the assertion of user rights, we point out that these can be claimed most effectively from the providers. Only the providers have access to the data of the users and can take appropriate measures directly and provide information. If you still need help, then you can contact us.

  • Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) - data privacy statement: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
  • Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – data privacy statement/opt-out: http://instagram.com/about/legal/privacy/.

 

Security Measures

Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, the controller and the processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including inter alia as appropriate:

  • the pseudonymisation and encryption of personal data;
  • the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services;
  • the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident;
  • a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing.

 

Server Log Files

We automatically collect and store information in so-called server log files, which your browser automatically sends to us when enquiring about our website. The information comprises:

  • the type and version of the browser used
  • the operating system used
  • referrer URL
  • the hostname of the computer being accessed
  • time of the server request

This mainly serves as quality assurance of our services. The data cannot be assigned to specific persons. The data is not merged with other data sources. We reserve the right to check this data retrospectively if specific indications for illegal use come to our attention.

 

Data Erasure

The data processed by us is deleted or the processing thereof limited in accordance with Articles 17 and 18 of the GDPR. Unless explicitly stated in this Privacy Policy, the data stored by us is deleted as soon as it is no longer required for its purpose and the deletion does not conflict with any statutory storage requirements. Unless the data is deleted because it is required for other and legitimate purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be kept for commercial or tax reasons.

In the event of deletion, our system will be rendered unrecognizable and unrecoverable using an irreversible pseudonymization procedure.

 

Contact Details

For questions concerning the collection, processing or use of your personal data, for information, rectification, blocking or deletion of data as well as the revocation of consent, please contact: info@nontoxic.eu.