1.2. In data collection and processing, KREATO is here understood as the administrator, governing the process as to for what purpose and by which means the user data shall be collected and processed.
DATA WE COLLECT
2.1. Data provided by customers. KREATO processes personal data of its users and customers. Primarily, we process data provided by customers themselves while completing their registration on the website or placing their orders. 2.2. This data includes e-mail address (applies to both users and customers), and customers’ name, surname, address, phone number, and payment details (applies only to customers).
HOW WE USE YOUR DATA
3.1. In order to process your order, we use your name, surname and contact details. The legal basis here is our contractual obligation. In such case, personal data processing spans across all stages of processing your order: receiving the order, its processing (including receiving the payment), delivering the ordered goods, aas well as possible warranty claim. KREATO is unable to handle your
order without obtaining the above personal data.
3.3 We process your personal data for our marketing purposes only if we have your consent to do so.
3.4 We may also process your personal data in order to fulfil our legal obligations, and this may be done without your consent (e.g. disclosure of information to be reviewed by the Office for Personal Data Protection of the Slovak Republic).
HOW WE SHARE INFORMATION
4.1. Your personal data is processed exclusively by KREATO and its employees.
4.2. Furthermore, KREATO authorizes other business entities, the so-called intermediaries, to use your personal data. Intermediaries are business entities je that is authorized by KREATO to process your personal details for the purposes of providing services related to your order, doing so in accordance with the rules determined by KREATO. In case such data processing requires your
consent, we provide intermediaries solely with the data for providing the service, and only upon your consent. Intermediaries cooperating with KREATO are:
- shipping companies
- Google LLC (providing services such as Google Analytics, ect.)
- Hotjar Ltd.
FOR HOW LONG DO WE STORE YOUR DATA?
5.1. KREATO stores personal data for longer than is strictly required in order to realise the purpose for which the data was collected, i.e. its contractual obligation established by the existence of the
order. This means personal data processing spans across all stages of processing your order: receiving the order, its processing (including receiving the payment), delivering the ordered goods,
aas well as possible warranty claim. Furthermore, bound by a legal retention period, KREATO stores some data as part of its accounting documentation.
5.2. KREATO sends marketing communications to you, as individual, normally by e-mail where you have consented that we may do so. You can unsubscribe from marketing e-mails at any time.
5.3. Any further processing of your personal data, exceeding the legal requirements, is carried out by KREATO only in cases where i tis necessary to fulfil its other legal obligations.
YOUR RIGHTS AND CHOICES
6.1 For personal data that we have about you, you can:
Access data: you can access your personal data we collected and used;
Delete data: you can ask us to erase or delete all or some of your personal data (e.g., if it is no longer necessary to provide services to you);
Change data: you can ask us to edit some of your personal data;
Correct data: you can ask us to change, update or fix your data in certain cases, particularly if it’s inaccurate;
Limit or Restrict Use of Data: you can ask us to stop using all or some of your personal data (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your personal data is
inaccurate or unlawfully held);
Right to Access and/or Take Your Data: you can ask us for a copy of your personal data and can ask for a copy of personal data you provided in machine readable form;
6.2 You also have the right to:
Object to use of data: you can ask us to stop processing all or some of your personal data we collected in view of pursuing our business interests, including profiling and direct marketing
6.3 . If you feel your rights have been violated and/or your privacy has been breached, you can contact the Office for Personal Data Protection of the Slovak Republic to file a complaint.
7.1. KREATO cares about security while handling your personal data, doing so in line with the legal framework, including the General Data Protection Regulation (GDPR). KREATO implements
appropriate technical and organisational measures to secure personal data protection.