Privacy policy

WHAT PERSONAL DATA DO WE PROCESS

– Basic contact information (name, surname, telephone number, e-mail address);

– Information on the use of our websites (clicks on links, time spent on the website) and information on the response to our e-mail (whether the message was open, which links you clicked on);

– Information we need to fulfill the contract and deliver the purchased goods (the subject of purchase, price, method of payment, date of payment, data on complaints, issued invoices, etc.).

 

LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

We may process your personal data on the following legal bases:

– When necessary to meet our legal obligations (eg. Issuing invoices for purchased goods);

– When the processing of your personal data is necessary for the conclusion and the fulfillment of the contract you have concluded with us or because you have requested an offer from us;

– When you have given your consent to the processing of your personal data for a specific purpose of processing (receiving electronic news, newsletters, and advertising), you always have the right to revoke the given consent.

 

PURPOSES OF PERSONAL DATA PROCESSING

We may use your personal information for one or more of the following purposes:

– Communicating with you regarding the provision of our services/goods and responding to your inquiries;

– Conclusion of the contract and fulfillment of obligations arising from the concluded contract;

– Marketing communication (sending e-mails);

– To assert any legal claims and resolve disputes;

– For statistical analysis of the sale of our goods and the use of our websites;

 

NEWSLETTER

By subscribing to the newsletter subscription form, you agree that we store your information on the Shopify platform:

– Name

– Surname

– E-mail address

for the purposes of sending sales content and marketing messages. You agree that we process this information for the purpose of personalizing these messages and advertising on Facebook and Instagram platforms. We use data in accordance with the GDPR only after you confirm this in the confirmation message you receive after completing the form. As a subscriber to the newsletter, you have the right to demand corrections and deletions, as well as to view the data we hold. You also have the right to object to the processing of data for the purposes of automated notification and profiling. Contact us at info@studio-mache.com with the subject »Data protection« and we will answer you in 48 hours.

 

CONTENT FROM THIRD WEBSITES

The content on this page may contain embedded content (eg. video, images, articles, related applications, etc.). This content behaves as if the user was visiting a foreign site directly. These pages are independent of the website studio-mache.com. Foreign sites may collect information about you, use cookies, and monitor your interactions ad behavior if you are connected to a foreign site, have an account there, and are logged in to it. We are not responsible for the collection, use, and processing of your data on foreign websites and applications installed on this site. Embedded content on studio-mache.com comes from platforms such as YouTube, Vimeo, Instagram, etc.

 

ANALYTICS AND STATISTICS

The use of Google Analytics on the website to manage analytics and visitor statistics. Google Analytics works anonymously on our site. You can read more about their cookies and the time of their existence in Cookies. You can disable Google Analytics cookies directly on this site or directly through Google.

 

HOW LONG DO WE KEEP YOUR PERSONAL DATA AND WHAT HAPPENS TO IT AFTER?

Basic personal data is kept at all times from the time the order is placed on the website. Data on issued invoices are kept for 10 years from the date of issue. We keep the data necessary for the conclusion and fulfillment of the contract between the customer and us for another 5 years from the fulfillment of the contract (supply of goods). Data and metadata in comments and messages sent via the contact form are stored indefinitely. Your comments for filling out the form are stored in the form of cookies for one year. Google Analytics uses several cookies, that are stored for up to 2 years. We will keep your data in the records of electronic news recipients for an indefinite period of time. You can request a complete deletion for them. Other personal data that we process on the basis of your consent are stored permanently or until you revoke your consent. After the retention period, personal data is deleted or anonymized, which means that we process it in such a way, that it can no longer be linked or attributed to you.

 

THE VOLUNTARY TRANSMISSION OF DATA AND THE CONSEQUENCES OF NON-TRANSMISSION

The provision of personal data is voluntary. You are not obliged to provide us with personal data, but if you do not provide them, you cannot enter into a contract with us (as we need them to deliver the order). When we obtain personal data from you, we will state which data is necessary to fulfill the specific action.

 

WHO HAS ACCESS TO YOUR PERSONAL INFORMATION

We do not pass on your personal data and do not provide information to third parties (outside the company Studio Mache, Simona Žiher s.p., except for those who have a written contract with us, on the basis of which they perform certain tasks related to data processing and are obliged to comply with legislation on processing and protection of personal data (co-called contractual processors). The contractual processors to whom we provide personal data are accounting service providers.

 

Contractual processors may only process personal data in accordance with our instructions and may not process personal data for their own purposes. They are committed, together with their employees, to protecting the confidentiality of your personal information.

Contractual processors do not export personal data to third countries (outside the Member States of the European Economic Area – these are EU members and Iceland, Norway, and Liechtenstein).

 

WHAT RIGHTS DO YOU HAVE REGARDING PERSONAL DATA, HOW CAN YOU REVOCATE THE CONSENT FOR PROCESSING, AND WHAT ARE THE CONSEQUENCES OF THE REVOCATION

You have the following rights regarding your personal information to request from us at any time:

 

– Confirmation, whether we are processing your personal data;

 

– Access to personal data and the following information: purposes of the processing; types of personal data; users or categories of users to whom personal data have been nor will be disclosed, in particular users in third countries or international organizations; the envisaged retention period of the personal data or, if that is not possible, the criteria used to determine that period; the existence of automated decision-making, including profiling and the reasons for it, as well as the importance and intended consequences of such processing for you;

– One (free of charge) copy of personal data in a form determined by you (if the request is made by electronic means of communication and you do not request otherwise, a copy shall be provided in electronic form); for additional copies you request, we may charge a reasonable fee, taking the cost into account;

– Correction of inaccurate personal data;

– Restriction of processing where:

You dispute the accuracy of personal data, for a period that allows us to verify the accuracy of personal data;

The processing is illegal and you oppose the deletion of personal data and instead request a restriction on their use;

We no longer need personal data for the purpose of processing, but you need them to assert, enforce or defend legal claims;

 

– Deletion of all personal data (right to be forgotten) if the preconditions of Article 18 of the General Data Protection Regulation are met, and in particular in the event that you revoke your consent to the processing of personal data;

Print of personal data in a structured, commonly used and machine-readable form, with the right to pass this data on to another controller without hindering;

– Cessation of the use of personal data for direct marketing purposes, including profiling; That you are not subject to a decision based solely on automated processing, including profiling, provided that the preconditions set out in Article 22 of the General Data Protection Regulation are met.

– The right to lodge a complaint against us with the Information Commissioner if you believe that the processing of your personal data violates the General Data Protection Regulation.

 

THE PROCEDURE OF RIGHTS EXECUTION

You can address your requests regarding the exercise of personal data rights in writing to Info@studio-mache.com

For the purposes of reliable identification in the case of exercising rights in relation to personal data, we may request additional information from you, and we may refuse to take action only if we prove that we cannot reliably identify you.

We must respond to your request to exercise your personal data rights without undue delay and at the latest within one month of receiving your request.

If you have submitted comments or sent electronic forms on this page, you can request us to provide you with all your collected data at any time or change it to anonymous – send this request to info@studio-mache.com. You may also request deletion of any information we receive from you at any time. This does not include the data we are required to collect for any administrative, legal, and security needs. Send a request for deletion from the newsletter system to info@studio-mache.com.

Any changes to our privacy policy will be posted on this website.