COOKIE AND PRIVACY POLICY

DATA PROTECTION STATEMENT

PRINCIPLES OF PROCESSING AND PROTECTION OF PERSONAL DATA

prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data pursuant to Articles 13 and 14 of the Regulation (hereinafter referred to as "GDPR") and Act No. 18/2018 Coll. on the Protection of Personal Data (hereinafter referred to as the "Act on the Protection of Personal Data")

Pursuant to Article 6(1)(a) of the Regulation b) of the General Regulation EP and R (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, the Trader as the controller will process the Buyer's personal data in the process of concluding a purchase contract without his consent as the data subject, since the processing of the Buyer's personal data will be carried out by the Trader in pre-contractual relations with the Buyer and the processing of the Buyer's personal data is necessary for the performance of the purchase contract, in which the Buyer acts as one of the contracting parties.

An online store (hereinafter referred to as "e-shop") can be defined as the sale of goods or services using information and communication technologies and web applications in the Internet environment, where on one side of this relationship is the e-shop operator and on the other the e-shop customer (hereinafter referred to as "customer"). When purchasing in the e-shop, a purchase contract is concluded between the operator and the customer via the Internet (a distance contract). Such a contract also includes obtaining information, including the customer's personal data, in the following scope: title, name, surname, address of residence, or delivery address, email, telephone, content of the order, personal data necessary for making a payment via the Internet.

The merchant undertakes to handle and dispose of the buyer's personal data in accordance with the applicable legal regulations of the Slovak Republic.

The merchant declares that it will collect personal data exclusively for the purposes specified in these principles of processing and protection of personal data

The merchant declares that it will ensure that personal data is processed and used exclusively in a manner that corresponds to the purpose for which it was collected and that it will not be associated with personal data that was collected for other purposes.

1. Personal data controller

The personal data controller is the e-shop operator:

Trade name: Dauriel Studio, s.r.o.

registered office: Horná 37, 974 01 Banská Bystrica, Slovak Republic

Company ID: 56 733 062

entry in: Commercial Register of the District Court of Banská Bystrica, section: Sro, file no. 51103 S

legal form: Spol. s r. o.

email: info@michaeladauriel.com

Tel. number: xxxxxxxxxxxx

2. Responsible person

Not appointed, as this obligation does not arise from the GDPR.

3. Automated decision-making and profiling

Your personal data will not be used for automated individual decision-making, including profiling.

4. Transfer of personal data to third countries

The operator does not provide, disclose or make personal data available to third countries.

5. Security of personal data processing

The operator declares that it has taken appropriate personnel, technical and organizational measures to ensure the protection of personal data.

6. Purpose of processing personal data:

The data provided by the buyer are necessary for processing and completing the order, issuing an invoice, concluding a purchase contract and subsequent payment, delivering goods or services and possibly providing other related services (especially in connection with legal regulations governing consumer protection).

Processing of an order for goods - We process your personal data for the purpose of concluding a contract between you, as our customer and potential customer, and us, as a supplier, when using our services. In such a case, personal data is processed only to the extent necessary for concluding and fulfilling the relevant contract. This mainly concerns fulfilling the subject matter of the contract, customer support, and administering the contract.

For this purpose, providing your personal data is completely voluntary, but it is necessary for concluding the contract and its subsequent administration. If the buyer does not provide the necessary data, the Merchant has the right to cancel the order. When purchasing in the e-shop, the buyer undertakes to provide truthful information. Providing false information is contrary to general terms and conditions.

Communication and customer support:

Personal data is used for the purpose of communication with the Buyer. The merchant may contact the buyer for the following reasons:

- assistance with completing your order,

- providing information on the current status of the request, order or complaint

- obtaining other necessary information

Registration form: The buyer has the opportunity to register in the e-shop, a registered customer has the opportunity to use the benefits offered by the given e-shop. This involves the processing of the following data:

 name, surname

 address

 telephone number

 e-mail address

 password

Contact form: through the contact form, the customer can contact the e-shop operator more quickly and thus expedite the processing of his request. This involves the processing of the following data:

 name

 E-mail address

When operating a profile on social networks (Facebook, Instagram, YouTube), our interest is to raise awareness of the operator in the online environment and to communicate with customers.

Personal data that you publish on our social network pages, such as comments, likes, videos, images, etc., will be published via the social network platform. We do not subsequently process the personal data for any other purpose.

The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her. You can send objections

by e-mail to the contact address of the operator info@michaeladauriel.com

The operators of social networks have their own adopted rules, service infrastructure and their own provisions for the protection of personal data. We have no influence on the data transfer and use of your data by the operators of social networks. We recommend that you familiarize yourself with the privacy policy of the provider of the social network platform:

Facebook

https://www.facebook.com/policy.php;

Instagram

https://help.instagram.com/519522125107875;

YouTube

https://www.youtube.com/howyoutubeworks/our-commitments/protecting-user-data/

In certain processing operations, we act as joint controllers with social media operators within the meaning of Art. 26 point 4 GDPR.

Traffic measurement and service improvement – ​​through cookies we obtain data on traffic to our website, information viewed and other activity on it. We collect this data based on your consent granted through your browser settings. More information in the following section Cookie Policy.

In order to maintain full transparency, we would like to inform you that we will assess the accuracy of the personal data provided (if circumstances permit). If we discover incorrect personal data or information stored in our information system, we will immediately correct, restrict processing or delete the personal data. If such data is provided, we will inform all parties involved.

The operator does not carry out automated individual decision-making within the meaning of Article 22 GDPR.

7. Legal basis for processing personal data:

Article 6 (1) (a) Your consent to the processing of personal data for the purpose of providing direct marketing

Article 6 (1) (a) b) processing is necessary for the performance of a contract to which the data subject is a party, or in order to take measures prior to the conclusion of a contract at the request of the data subject, since when ordering goods (pre-contractual relationship) a purchase contract is most often concluded via the Internet (concluded remotely between the operator of the online store and the data subject and this is also related to the subsequent payment, delivery of goods or services, handling of complaints, etc.), the customer's personal data is processed without the customer's consent.

Article 6(1)(c) processing is necessary to fulfil the operator's legal obligation to fulfil the purpose of invoicing, recording accounting documents and other necessary related legal obligations of the operator of the online store when processing the personal data of the data subject.

Article 6(1)(a) f) processing is necessary for the purposes of the legitimate interests of the controller or a third party, except where these interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring protection of personal data

8. Scope of data subjects:

E-shop customers (website visitors)

9. How long do we process personal data? Providing information to a third party.

The operator stores personal data:

For the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the operator and to exercise the claim arising from these contractual relationships.

After the expiry of the personal data storage period resulting from Act No. 395/2002 Coll. Act on Archives and Registries and on Amendments to Certain Acts, the operator will delete the personal data.

10. Recipients of personal data

The recipient is anyone to whom personal data is provided, regardless of whether they are a third party. A public authority that processes personal data on the basis of a special regulation is not considered a recipient.

There are persons who participate in the delivery of goods, services, and the execution of payments under a contract.

11. What rights do you have in connection with the processing of your personal data?

Proper processing of your personal data is important to us and their protection is a matter of course. When processing personal data, you can exercise the following rights:

Information on the processing of your personal data

The content of the information is mainly the identity and contact details of the controller, the purposes of processing, the categories of personal data concerned, the recipient or categories of recipients of personal data, information on the transfer of personal data to third countries, the period of retention of personal data, authorized controllers, list of your rights, possibility to contact the Personal Data Protection Office, source of processed personal data, information on whether and how automated decision-making and profiling takes place.

Right to access processed personal data

You have the right to confirmation as to whether or not personal data is being processed and, if so, you have the right to access information on the purposes of processing, categories of personal data concerned, recipients or categories of recipients, period of storage of personal data, information on your rights, right to lodge a complaint with the Personal Data Protection Office, information on the source of personal data, information on whether automated decision-making and profiling takes place, information and guarantees in case of transfer of personal data to a third country or international organisation. You have the right to be provided with copies of processed personal data.

Right to rectification

Are we processing your outdated or inaccurate personal data? Have you changed your e-mail, for example? Please inform us and we will correct your personal data.

Right to erasure (right to be forgotten)

In certain cases stipulated by law, we are obliged to erase your personal data at your request. However, each such request is subject to an individual assessment of whether the conditions are met, because, for example, the controller may be obliged to retain the personal data if its legitimate interest outweighs your interests.

Right to restriction of processing

If you wish us to process your personal data exclusively for the most necessary legal reasons or to block your personal data.

Right to data portability

If you wish us to provide your personal data to another controller, another company, we will transfer your personal data in an appropriate format, if there are no legal or other significant obstacles preventing us from doing so, to the entity designated by you.

Right to object

If you find out or just believe that we are processing personal data in violation of the protection of your private and personal life or in violation of legal regulations, please contact us and ask us for an explanation or to eliminate the unsatisfactory situation that has arisen.

Right to file a complaint or suggestion with the Office for Personal Data Protection

You can at any time contact the supervisory authority with your suggestion or complaint regarding the processing of personal data, namely the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, IČO: 36 064 220, tel. no.: +421/2/3231 3220, website https://dataprotection.gov.sk/uoou/

12. How can you exercise your rights?

You can contact us with your request by email at info@michaeladauriel.com

13. We will provide you with a statement and, if applicable, information about the measures taken as soon as possible, but no later than within one month. We are entitled to extend the deadline by two months if necessary and given the complexity and number of requests. We will inform you about the extension of the deadline, including the reason.

14. If you have any questions or comments regarding this information obligation, do not hesitate to contact us at any time by email at info@michaeladauriel.com

15. You can unsubscribe from receiving information emails via the web link provided at the bottom of each email.

This Privacy Policy becomes effective and effective upon its publication on the Website.