VARSTVO OSEBNIH PODATKOV
We pay a lot of attention to the privacy of visitors and customers in our online store, and we are aware the personal data users entrust to us is sensitive information, so we undertake to keep it carefully protect against abuse, disclosure, unauthorized access, and we will not pass them on to third parties under any circumstances in accordance with the GDPR (EU 2016/679). All data will be treated confidentially and will be used only for the purpose for which it was provided. We will only entrust the delivery service (e.g. Pošta Slovenije, GLS, etc.) with the necessary information for the delivery of the ordered products (recipient information and delivery address).
Personal data collection
When you visit our online store, we store certain data about your device, your interaction with our website and information necessary to complete the purchase. In addition, we may also collect information that we need to contact you for customer support.
Data about your device:
- Examples of information we collect: your browser version, IP address, time zone, cookie information, which pages you open, how you interact with our site
- Purpose of collection: correct loading of the website, performing analytics and optimization of the website
- Source of Collection: Data is automatically collected when you access our website using cookies, files, tags and pixels
Your data:
- name and surname
- delivery address
- contact telephone number
- email address
- password in encrypted form
- other data that the user voluntarily enters into forms in the online store (e.g. entry of any notes when submitting an order, entry of a message when submitting a contact form)
These data are only needed to process your order or in case we need to contact you in connection with your order. We are not responsible for the correctness, completeness and up-to-dateness of the data entered by users. Users themselves are also responsible for the protection of personal data by ensuring the security of their username and password. Users have the right to view or correct personal data. All the data we keep about you is accessible on your profile, where you can also correct it.
Sharing of your data
We share your data only with companies necessary to process your order, such as a delivery service.
Advertisement
From time to time, we also use your data for advertising or website analysis. For example: Facebook: we use the Facebook pixel, which uses some data obtained through cookies. Google Analytics: used to analyse the website. You can always opt out of advertising by writing to us at info@lavendea.com. After saving, we will keep your data until you express your desire to delete it.
RIGHT OF DATA ACCESS
You have the right to obtain confirmation from the controller whether your personal data is being processed, and when this is the case, you have the right to obtain access to your personal data and the following information regarding the processing of personal data: purposes of processing, types of personal data, users or user categories, to whom your personal data has been or will be disclosed, in particular users in third countries or international organizations, where possible, the envisaged period of retention of personal data or, if this is not possible, the criteria used to determine this period, the existence of a right, that the operator is required to correct or delete personal data or limit the processing of personal data in relation to the user to whom the personal data relates, or the existence of the right to object to such processing, the right to file a complaint with the supervisory authority when personal data is not collected from the user, all available information regarding their source, the existence of automated decision-making, including profiling, and meaningful information about the reasons for it, as well as the meaning and intended consequences of such processing for the user. Upon your request, you will be provided with one free copy of your personal data being processed. For additional copies of data that you would request, the controller will charge you a reasonable fee, subject to administrative costs.
RIGHT OF OBJECTION
Based on reasons related to your particular situation, you have the right to object at any time to the processing of personal data if it is based on legitimate interests pursued by the controller or a third party. The controller will stop processing personal data, unless it proves imperative reasons for the processing that override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. Where personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing, including profiling if it is related to such direct marketing. If direct marketing is based on consent, the right to object can be exercised by withdrawing the personal consent given.
ENFORCEMENT OF RIGHTS
Your exercise of these rights is subject to certain exceptions when protecting the public interest (e.g. preventing or detecting crime), the controller's interests (e.g. ensuring confidentiality) or the rights and freedoms of others. Please also note that proof of your identity and full details of your request may be required before it can be processed. If you exercise any of the above rights, a response will be given without undue delay, but no later than within one month. In complex cases or when a large number of requests are received, this deadline can be extended for a further two months, which you will be notified about. Both in case of exercising rights and in case of possible questions or in case you want to communicate your wishes or comments regarding data protection to the controller, you can write to the address info@lavendea.com. If you are not satisfied with the processing of your data or with the response to any exercise of the stated rights, you have the right to appeal to the data protection authority, i.e. the Information Commissioner of the Republic of Slovenia (address: Dunajska 22, 1000 Ljubljana, e-mail: gp.ip@ip- rs.si, phone: 012309730, website: www.ip-rs.si).
RIGHT TO RECTIFICATION
You have the right to request the Controller to correct inaccurate personal data relating to you without undue delay. Taking into account the purposes of the processing, you have the right to complete incomplete personal data, including the submission of a supplementary statement.
THE RIGHT TO DELETION
You have the right to request the controller to delete personal data relating to you without undue delay, and it must delete your personal data without undue delay in the following cases: when the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, when you revoke the consent that is the basis for the processing of your personal data, and there is no other legal basis for the processing, when you object to the processing based on the legitimate interest of the controller, and there are no overriding legitimate reasons for their processing, when you object to the processing for the needs direct marketing, when personal data must be deleted to fulfil a legal obligation in accordance with EU law or the Slovenian legal order.
THE RIGHT TO RESTRICT PROCESSING
You have the right to request that the processing of your personal data be restricted when one of the following cases applies: when you dispute the accuracy of the data, namely for a period that allows the controller to verify the accuracy of your personal data, when the processing is illegal, and you object to the deletion of the personal data, and instead you request the limitation of their use when the controller no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, when you have filed an objection in relation to the processing, until it is verified whether the controller's legitimate reasons prevail over yours reasons.
THE RIGHT TO DATA PORTABILITY
You have the right to receive personal data about you held by the controller in a structured, commonly used and machine-readable format, and the right to transmit this data to another controller without the controller to whom the personal data was provided, thereby obstructed, when the processing is based on your consent or contract and the processing is carried out by automated means.
RIGHT OF OBJECTION
Based on reasons related to your particular situation, you have the right to object at any time to the processing of personal data if it is based on legitimate interests pursued by the controller or a third party. The controller will stop processing personal data, unless it proves imperative reasons for the processing that override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. Where personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing, including profiling if it is related to such direct marketing. If direct marketing is based on consent, the right to object can be exercised by withdrawing the personal consent given.
ENFORCEMENT OF RIGHTS
Your exercise of these rights is subject to certain exceptions when protecting the public interest (e.g. preventing or detecting crime), the controller's interests (e.g. ensuring confidentiality) or the rights and freedoms of others. Please also note that proof of your identity and full details of your request may be required before it can be processed. If you exercise any of the above rights, a response will be given without undue delay, but no later than within one month. In complex cases or when a large number of requests are received, this deadline can be extended for a further two months, which you will be notified about. Both in case of exercising rights and in case of possible questions or in case you want to communicate your wishes or comments regarding data protection to the controller, you can write to the address info@lavendea.com. If you are not satisfied with the processing of your data or with the response to any exercise of the stated rights, you have the right to appeal to the data protection authority, i.e. the Information Commissioner of the Republic of Slovenia (address: Dunajska 22, 1000 Ljubljana, e-mail: gp.ip@ip- rs.si, phone: 012309730, website: www.ip-rs.si).
COOKIES
The website uses cookies to provide a better user experience and monitor visit statistics. When you visit the site, some data (IP address, date, time, address of the page you are coming from) is stored on the server. This data is anonymous and is used only for the analysis of visits to the website (in connection with the Google Analytics tool). Visitors are informed about the use of cookies on their first visit to the website, for the use of some cookies we ask the visitor for his consent. The visitor can change his decision regarding the use of cookies at any time on this website. The website does not forward cookies to external service providers and does not use them to display advertising messages.
ABOUT COOKIES
Cookies are small text files that a website downloads to your web browser when you visit it. Some cookies are absolutely necessary for the website to function. Cookies do not contain any personal or other data that could be used to identify the user. As a user of the website www.lavendea.com, you agree to cookies being loaded onto your computer to ensure the operation of all website functions, web analytics and advanced advertising. The following cookies are loaded:
– Google Analytics cookies for analytical purposes;
– Facebook cookies for remarketing and advertising;
– Google cookies for remarketing and advertising;
– Cookies to display social sharing buttons and pop-ups and exposure;
- Marketing automation cookie tools for monitoring user activity on the website.
Cookies allow certain contents or functions of the application to be adapted for a specific visitor, according to his choices or preferences or according to the characteristics of his terminal equipment. Cookies for analytical purposes enable continuous improvement of the website.
You can withdraw your consent to the use of individual cookies at any time. Withdrawal of consent may result in altered operation of some website functionality or disable the use of individual services.
MANAGING COOKIES IN THE BROWSER
Most web browsers automatically accept cookies, and after they expire, the browser automatically deletes the cookies. The user can also manually delete all cookies or cookies for an individual website (domain) or completely disable the use of cookies in the browser. Instructions for deleting cookies or disabling their use can be found in the help section of your web browser. If you completely disable the use of cookies, some functionalities of the website will not work properly.
PRIVACY POLICY CHANGE
We reserve the right to change the privacy policy due to changes in business conditions or changes in legislation.
CONTACT
For any questions, complaints or request to delete your data, we are always available at info@lavendea.com
EN 
SI