Privacy Policy - lubive.com

Privacy Policy

Welcome to lubive.com / lubive.ro / lubive.pl! We value the privacy of our customers (the “customer”, “you”, “your”). This Privacy Policy (the “Privacy Policy”) is intended to inform you about our practices regarding the collection and use of your data that you may provide us with at our brick-and-mortar store (Showroom in Trnava) or submit to us through our website ľúbivé.com (the “Website”). Please read the Privacy Policy carefully!

A) This Privacy Policy was last modified on 1.6.2024 and may be sporadically updated to reflect changes in legislation, so please review it now and then. We will notify you of any substantial changes to the Privacy Policy. You can always find the most recent version on our Website.

B) We process your data with due care, in accordance with all applicable laws and regulations, including the regulation (EU) 2016/679 of the European Parliament and of the Council, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, the General Data Protection Regulation (the “GDPR”) and Act no. 18/2018 Coll. on Personal Data Protection, as amended (the “Personal Data Protection Act”).

C) The Privacy Policy only covers data processing of personal data you provide us with in relation to purchase of goods (e.g. handbags, backpacks, and bags) through our e-shop available on the Website. The Privacy Policy does not address, and we are not responsible for, the privacy practices of any other third parties, and accordingly we are not liable for such third party practices.

D) We do not knowingly collect or ask for information from people under the age of 16. We delete information that we learn is collected from a person under the age of 16 without verified parental consent.

E) To learn more about personal data management or if you have any other questions, you’re welcome to contact us at ľúbivé.sk.

1. Who processes your personal data?

1.1 onal data are being processed by ľúbivé s.r.o., with its place of business at Vajanského 6717/8, 917 01 Trnava, Slovak Republic, Company ID number: 56009127, Tax ID number: 2122161063, VAT number: SK2122161063, represented by the managing director Veronika Svinčáková, registered at the District Court of Trnava, in the Trade Register under entry number 55897/T(the „Controller“, “we”, “us” or “our”).

2. What personal data is processed?

We may collect the following types of information about you:

2.1. Personal Data

Through the Website, we may, for the purpose of creating an order, collect and process your personal data, mainly your name and surname, email address, phone number, address for delivery, or the name and registered office of the company (if you choose invoicing for the company), as well as the bank account number, which is in the case of direct payment to the bank account paired with your order. The Controller processes personal data only to the minimum extent necessary to fulfill the purpose of processing pursuant to Section 3 of this Privacy Policy. The customer is responsible for the accuracy and timeliness of the personal data provided.

2.2. Technical Information

We and/or our authorised external service providers (e.g. providers of payment and hosting services, as well as Google Analytics, Google AdWords, Mailchimp, Facebook, Glami) may automatically collect technical data when you visit or interact with our Website. Technical data may include, for example, the URL of the Website you visited before using our service, the time and date of user visits, surfing habits, IP address, the browser name, the type of computer or device accessing our service, time spent on the Website and other similar technical information (metrics). In a limited number of cases it is possible to use technical data and identify you by them as an individual, thus making them personal data according to applicable legal regulations, however, we never use technical information to identify you as an individual.

2.3. Cookies

2.3.1. What are cookies?

a) To make this Website work properly, we sometimes place small data files called cookies and similar technologies on your device.

b) A cookie is a small text file that the Website saves on your device when you visit it. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. They allow the basic functions of the e-shop to work properly. Permanent cookies last until you or your browser delete them or until they expire. They make it easier to use the e-shop when you return, and help you sign in or remind you of a Website’s offer in ad slots on other sites.

2.3.2. How do we use cookies?

a) We use our own functional cookies, which are necessary for the functioning of the Website, help it to work better, and for users to have a better experience while using it. Without them, the contents of the cart may disappear or you will not be able to stay logged in.

b) We use persistent third-party analytics cookies (e.g. Google Analytics & Google AdWords, Facebook Pixel), which allow us, for example, to recognize and count the number of users and see how they behave when using our Website, so we can improve its functionality, so that the users are more satisfied.

c) We may also use persistent third-party marketing cookies, specifically Glami.sk, Facebook Pixel, Google Analytics & Google AdWords, which allow distinct identification of your browser and internet device, allowing our service providers to identify what interests you and show you targeted content. These cookies also allow some companies to show you targeted content on other sites.

2.3.3. How to control cookies?

a) When you visit the Website for the first time, we inform you about the use of cookies, and if needed also request your consent to the use of cookies. Cookies will not be used for any other purposes other than those listed above.

b) As mentioned above, in some cases we may use cookies from third parties (service providers). A list of such third parties that you will encounter when using our Website is provided below. We are not responsible for third party sites and their privacy practices. These companies collect and process this information based on their privacy policies.

3. What are the purposes and legal bases for processing your personal data?

3.1. We process your personal data in order to:

3.1.1. Customer administration and performance of the contract that exists between us as a result of your decision to place an order and purchase goods through the Website

We process your data so that we can provide you with our goods and services, which may include the processing of personal data, that is necessary e.g. for the following activities:

creating, processing and informing you about the status of your order made through the Website,
handling your inquiries in relation to the service or goods ordered on the Website, including complaints about the goods,
records of customers and orders,
informing you about changes to this Privacy Policy and our General Terms and Conditions.

For this purpose, we process the following personal data that you have voluntarily provided to us: your first name, surname, e-mail address, telephone number, delivery address and your billing information.

Legal basis for such processing: performance of the contract in accordance with Article 6(1)(b) GDPR.

3.1.2. Direct marketing and customer relationship development
We process your data so that we can develop existing relationships with our customers. This purpose includes in particular the following activities:

communication with the customer and development of customer relations,

Legal basis for such processing: legitimate interest in accordance with Article 6(1)(f) GDPR.

3.1.3. Marketing activities and informing those interested about news and discounts on our goods and services through a newsletter

We process your data so that we can inform you about our goods, news or discounts that we have prepared for you on the Website. This purpose includes in particular the following activities:

loyalty program management, marketing campaigns and organizing competitions,
sending information about our goods and services or launching special events (discounts), pre-sale of our goods, as well as other related services.

For this purpose, we process the following personal data that you have voluntarily provided to us: email address and year of birth.

Legal basis for such processing: your consent to the processing of personal data in accordance with Article 6(1)(a) GDPR.

You have the right to revoke your consent provided for this purpose at any time by sending an e-mail to: info@lubive.sk. Withdrawal of consent is effective on the day of its delivery to the Controller.

3.1.4. Resolution of disputes, complaints and other inquiries

We process your data in order to resolve disputes, complaints and other customer inquiries.

For this purpose, we process the following personal data that you voluntarily provided to us when creating the order: your first name, surname, address or other contact details, as well as the circumstances of the case (i.e. dispute, complaint or inquiry) that we are dealing with.

Legal basis for such processing: fulfillment of a legal obligation in accordance with Article 6(1)(c) GDPR.

3.1.5. Compliance with tax, accounting and other legal regulations

We process your data for the purpose of fulfilling obligations arising from legal regulations (e.g. tax and accounting regulations related to financial transactions).

For this purpose, we process the following personal data that you have voluntarily provided to us: your first name, surname, address or other data that we are obliged to process in accordance with the law.

Legal basis for such processing: fulfillment of a legal obligation in accordance with Article 6(1)(c) GDPR.

4. Who are recipients of your personal data?

4.1. The Controller does not share your personal data with any unauthorized third parties (recipients), unless one of the following circumstances occurs:

4.1.1. Sharing is essential for the proper operation of the Website and the processing of the customer’s order

In the event that our external collaborators (processors) need access to your personal data in order to provide the services necessary to process and conclude your order (e.g. payment and delivery of ordered goods, litigation, marketing campaigns), we have adopted appropriate technical, contractual and organizational measures to ensure that your personal data is processed in accordance with the law.

Below is a list of our processors:

Companies in charge of managing the tax accounting agenda, auditors, lawyers,
Controllers of support processes for automated processing of personal data (server, cloud, payment gateway, other specific software, etc.),
Couriers or delivery companies that deliver our goods to you,
Marketing software operator (Mailchimp),
Controllers of tools that record Website analytics (e.g. Facebook Ireland Ltd. (Facebook Pixel), Google LLC (Google Analytics & Adwords) or Glami (Glami.sk/Glami.cz).

4.1.2. Sharing is necessary for legal reasons

We may share your personal data with recipients outside the Controller if we have a good-faith belief that access to and use of your personal data is reasonably necessary to: (i) meet any applicable law, regulation, and/or court order; (ii) detect, prevent, or otherwise address fraud, security or technical issues; and/or (iii) protect the interests, properties or safety of the Controller, our users or the public as far as in accordance with the law.

5. Automated individual decision-making and profiling is being used

5.1. We do not use profiling or automated individual decision-making when processing your personal data, and any decision regarding the processing of your goods order is controlled and managed by an authorized person.

6. Do we transfer your data to countries outside the EU/EEA?

6.1. No, the Controller does not directly transfer your personal data outside the countries of the European Union and the European Economic Area (EEA). In the event that the Controller cooperates with an external collaborator (processor) located outside the EEA (and thus the cross-border transfer of personal data occurs), the Controller may transfer your personal data only to countries that are considered to have an adequate level of protection of personal data in accordance with a decision of the European Commission, or in which appropriate safeguards are in place to protect your personal data (e.g. standard contractual clauses or binding company internal rules). Regardless of the country in which your personal data is processed, the Controller has taken appropriate technical and organizational measures to ensure a high level of protection of your data.

7. What is the storage period?

7.1. We only store your personal data if it is legally permitted and necessary for the purposes for which it was collected. Unless the deletion of your data is against the law or we need it in accordance with our legitimate business interests, your data will be deleted from our repositories and systems no later than five (5) years from the end of our cooperation (i.e. from your last order). The above does not apply if we are obliged to process your personal data for a longer period, e.g. in the event of a continuing litigation.

8. What are your rights?

8.1. Right of access – We offer our customers access to their personal data that we process. This means you can contact us and request from us a confirmation whether or not your personal data are being processed and if so, you have the right to request access to your data, which we will provide to you in the form of a so-called “registry” (stating, in particular, purposes, categories of personal data, categories of recipients of personal data, storage periods or criteria for determining storage periods).

8.2. Right to rectification – As a customer, you have the right to have inaccurate personal data we have stored you rectified.

8.3. Right to erasure – As a customer, you may also ask us to erase your personal data from our systems. We will comply with such requests unless we have other legal obligations to not delete your personal data. We will inform you about the reasons for possible non-deletion.

8.4. Right to restriction of processing – As a customer, you can ask us to restrict certain processing of your personal data. Restricting certain processing of your personal data may lead to restrictions on the use of the Website.

8.5. Right to data portability – As a customer, you have the right to receive your personal data from us in a structured, commonly used and machine-readable format in order to transmit the personal data to another controller.

8.6. How to use your rights – You may exercise your rights above, free of charge, in writing by sending a letter or email at info@lubive.sk. We may require proof of your identity depending on your request.

9. May I complain?

9.1. Yes, if you believe that the processing of your personal data by the Controller is not in accordance with the relevant data protection legislation (e.g. GDPR and/or the Personal Data Protection Act), you can file a complaint against the Controller with the relevant data protection authority (Office for Personal Data Protection of the Slovak Republic).

10. Is your data secure?

10.1. Yes, of course. Your satisfaction with our products and the security of your data are equally important to us. We take all necessary security (technical and organizational) measures to protect us and you from unauthorized access or unauthorized alteration, disclosure or destruction of the personal data we process. Measures include possible encryption, firewalls, secure devices and access rights systems, regular training of our employees, the conclusion of confidentiality agreements, as well as agreements on the processing of personal data. Should security breaches occur despite the security measures taken that are likely to adversely affect your privacy, we will notify you immediately. If you have any questions, do not hesitate to contact us at info@lubive.sk.