Cookie policy

Information on processing of personal data when using cookies

 

BAGPIPERS, s.r.o. uses cookies when operating the website www.friiofnorway.eu (hereinafter referred to as the “website”). Since personal data may be processed when these cookies are recorded, the company is obliged to inform the data subjects about the processing of their personal data in accordance with the transparency principle. This document is to inform data subjects about the scope, purpose, and duration of the processing of their personal data. Personal data may be processed electronically by employees or processors of BAGPIPERS, s.r.o.

 

Controller       

 

BAGPIPERS, s. r. o.       
Sinokvetná 1569/21, 821 05 Bratislava
hello@friiofnorway.eu
Id. No  51 286 955
Phone +421 918 468 151

 

Data Protection Officer

The controller did not designate any Data Protection Officer.

 

Cookies

 

Cookies are small files stored in the memory of the end device (such as a notebook, tablet, smartphone, etc.) of website visitors. Through them, the controller obtains information related to the use of the device and is able to ensure optimal settings of the website.

 

Purpose of processing

 

• Technical cookies enable the use of basic functions such as pre-filling forms and remembering visitor preferences, and without them, it is not possible to guarantee the full functionality of the website.
• Analytical cookies are used to record and analyze visitor behavior on the website and subsequently improve its functionality and appearance, and without them, it is not possible to guarantee the full functionality of the website.
• Advertising cookies are used to optimize the displayed content and advertisements based on the visitor’s habits.
• Third-party cookies are created and used by service providers such as Google Analytics or Facebook, whose services are integrated into the website.

 

Legal basis for processing

 

The processing of personal data of data subjects by tracking the activities of website visitors and evaluating them may be based on a legitimate interest under Article 6(1)(f) GDPR or on the consent of the data subject under Article 6(1)(a) GDPR.

 

• specific settings of services
• direct marketing

 

The processing of personal data of data subjects for ensuring the functionality of the website may be based on the performance of a contract under Article 6(1)(b) GDPR. Without processing such data, the controller would not be able to provide website visitors with the services.

 

Consent

 

Consent, which is the legal basis for the processing of personal data, can be withdrawn by the data subject at any time. It is possible to check the current settings of cookie files and change them at any time here.

 

Scope of processed personal data

 

• Technical cookie files: mainly records of website visitors that remember their input on multiple subpages (e.g. moving selected items to a shopping cart).
• Analytical cookie files: mainly browser type/version, used operating system, previously visited website, device IP address and name, server request time, individual user ID and displayed parts of the website.
• Advertising cookie files: mainly IP address, individual user ID, potential interest in a product and displayed parts of the website.

 

Retention period

 

The actual cookies are stored on the end device of the website visitor and can be controlled and deleted by them at any time. The information that the controller associates with these cookies is kept for as long as necessary for the purpose for which it was collected, but no longer than 12 months.

 

Recipients

 

Personal data of data subjects may be made available to providers of online marketing services, as well as other intermediaries, which may also include providers of cookies. The controller only provides personal data to the necessary extent and while maintaining the confidentiality of the recipient.

 

Transfer to third countries

 

The controller does not transfer personal data to international organizations or to third countries.

 

The rights of the data subject

 

The data subject is entitled to exercise the following rights with the controller through the contact details provided above:

• Right of access to personal data (Art. 15 GDPR) – the right to obtain a copy of the personal data that the controller has available about the data subject, as well as information on how their personal data is used.
• Right to rectification of personal data (Art. 16 GDPR) – the right to request the correction of personal data if it is inaccurate or incorrect.
• Right to erasure of personal data (Art. 17 GDPR) (i) if these data are no longer necessary for the purposes for which they were collected, (ii) if consent has been withdrawn and there is no other legal basis for processing, (iii) if the data subject objected to processing based on a legitimate interest and the legitimate reasons of the controller do not outweigh the interests, rights and freedoms of the data subject or objected to processing for direct marketing purposes, (iv) personal data were processed unlawfully.
• Right to restriction of processing (Art. 18 GDPR) (i) if the data subject believes that incorrect personal data is being processed, until its accuracy is verified, (ii) if processing is unlawful and the data subject requests restriction instead of erasure, (iii) if the controller no longer needs the personal data, but the data subject needs it for their own purposes for demonstrating, exercising or defending their legal claims, (iv) if the data subject objects to processing, until it is verified whether the legitimate reasons of the controller outweigh their interests, rights and freedoms.
• Right to data portability (Art. 20 GDPR) – the right to request the transfer of personal data in a structured, commonly used and machine-readable format to another controller, if personal data is processed on the basis of consent and/or a contract by automated means.

 

If the data subject believes that the processing of personal data concerning them is in breach of applicable law, they have the right to lodge a complaint with the supervisory authority (Art. 77 GDPR). The supervisory authority in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 12 in Bratislava.

 

The right to object to processing

 

The data subject has the right to refuse at any time the processing of their personal data for the purposes of direct marketing – in such a case, personal data must not be further processed for these purposes. If the controller processes personal data to ensure its legitimate interests or the legitimate interests of others, the data subject may object to such processing for reasons arising from their particular situation (Article 21 of the GDPR); in such a case, the controller may further process their personal data only if they demonstrate the existence of compelling legitimate grounds which override the interests, rights, and freedoms of the data subject, or if the data is necessary for the establishment, exercise, or defence of legal claims.

 

Automated decision making including profiling

 

During the processing of personal data by the controller, there is no decision-making under Article 22 of GDPR which is based solely on automated processing, which has legal effects or similarly significantly affects the data subject.