GDPR and Cookies

Consent to the Processing of Personal Data

Controller

Business name: FLÓRA CENTRUM s.r.o.
Company ID (IČO): 44 167 598
Tax ID (DIČ): 2022628993
VAT ID (IČ DPH): SK 2022628993
Registered: in the Commercial Register of the District Court of Trnava, Section: Sro, Insert No. 22071/T
Represented by: Ing. Soňa Lipecká
Contact: floracentrum@gmail.com

(hereinafter the “Controller”)

pursuant to the provisions of Article 6(1)(a) and the related provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “Regulation”)

1. Consent

a. By my declaration or by a clear affirmative action (a freely given, specific, informed and unambiguous indication of will) regarding this Consent to the Processing of Personal Data (hereinafter the “Consent”), I hereby honestly declare that, pursuant to the provisions of Article 6(1)(a) of the Regulation, I, as the data subject, voluntarily and freely grant my consent to the above-mentioned Controller as the operator of an information system in which the data of natural persons are processed using automated and non-automated means of processing. I grant this consent for the purpose of processing, handling, maintaining and using my personal data to the extent of: e-mail address, for a period of 5 years from the granting of this consent.

b. The purpose of processing the personal data to the above extent is the Controller’s marketing, which includes sending the Controller’s offers related to the offerings of the Controller’s garden centre in Kvetoslavov. The data subject acknowledges that the offers referred to in the preceding sentence may be of a marketing nature and does not object to receiving such offers.

c. The legal basis for processing personal data is consent to their processing pursuant to the provisions of Article 6(1)(a) of the Regulation.

d. At the same time, I declare that all the personal data I have provided in this Consent are true and were provided voluntarily and freely.

2. The data subject (i.e. the person who granted this Consent) is informed, within the meaning of the Regulation, that

2.1 Data subjects may address their comments and requests concerning the processing of personal data to Ms. Ing. Soňa Lipecká, in writing to the address of our company’s registered office or by e-mail to: floracentrum@gmail.com, or by telephone at: +421 31 5600 191.

2.2 The provision of personal data is not a contractual requirement necessary for the conclusion of a contract.

2.3 The period of processing of personal data for the above purpose is 5 years from the granting of consent.

2.4 The data subject has the right to withdraw this Consent at any time. The withdrawal of Consent does not affect the lawfulness of processing of personal data based on consent before its withdrawal. The data subject may withdraw consent in the same manner in which the consent was granted or via the Controller’s contact details specified above.

2.5 The data subject has the right to access their data. Based on the data subject’s request, the Controller will issue a confirmation as to whether or not personal data concerning the data subject are being processed. If the Controller processes such data, it will, upon request, issue a copy of the data subject’s personal data. The first copy is provided free of charge. For any further copies requested by the person, the Controller will charge a fee corresponding to the administrative costs incurred in providing the copy. If the person requests the information by electronic means, it will be provided in a commonly used electronic form, namely by e-mail, unless another method is requested. If the Controller processes such personal data, the data subject has the right to obtain access to those personal data and information about the purpose of processing the personal data, the category of processed personal data, the identification of the recipient or the category of recipient to whom the personal data have been or are to be disclosed, in particular a recipient in a third country or an international organisation, where possible, the retention period of the personal data; if this is not possible, information about the criteria for determining it, the right to request that the Controller rectify the personal data concerning the data subject, erase them or restrict their processing, or the right to object to the processing of personal data, the right to lodge a proposal to initiate proceedings under point 2.16, the source of the personal data if the personal data were not obtained from the data subject, the existence of automated individual decision-making, including profiling (in such cases the Controller will provide the data subject with information in particular about the procedure used, as well as about the significance and the envisaged consequences of such processing of personal data for the data subject).

2.6 The data subject has the right to the rectification of personal data if the Controller holds incorrect personal data about them. At the same time, the data subject has the right to have incomplete personal data completed. The Controller will carry out the rectification or completion of personal data without undue delay after the data subject so requests.

2.7 The data subject has the right to erasure of the personal data concerning them, provided that:

1. the personal data are no longer necessary for the purpose of performing the contract,
2. the data subject objects to the processing of personal data under point 2.4,
3. the personal data were processed unlawfully,
4. the reason for erasure is to fulfil an obligation under a law, a special regulation or an international treaty by which the Slovak Republic is bound.

2.8 The data subject will not have the right to erasure of personal data provided that their processing is necessary:

1. for exercising the right to freedom of expression and information;
2. for fulfilling an obligation under a law, a special regulation or an international treaty by which the Slovak Republic is bound, or for performing a task carried out in the public interest or in the exercise of official authority vested in the controller,
3. for reasons of public interest in the area of public health,
4. for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, where the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of such processing, or
5. for the establishment, exercise or defence of legal claims.

2.9 The Controller will carry out the erasure of data subjects’ personal data upon request, without undue delay after determining that the data subject’s request is justified.

2.10 The data subject has the right to restriction of processing of personal data where:

1. they contest the accuracy of the personal data by means of an objection under point 2.5, for a period enabling the Controller to verify the accuracy of the personal data;
2. the processing is unlawful and the data subject requests the restriction of their use instead of the erasure of the personal data;
3. the Controller no longer needs the personal data for the purpose of processing, but the data subject needs them for the establishment, exercise or defence of legal claims;
4. the data subject has objected to the processing of personal data on the basis of the Controller’s legitimate claim, pending the verification of whether the legitimate grounds of the Controller override the legitimate grounds of the data subject.

2.11 If the data subject requests the restriction of the processing of their personal data, the Controller will not carry out any processing operations with the data concerned, apart from storage, without the data subject’s consent.

2.12 The data subject will be informed by the Controller if the restriction of processing of such data is lifted.

2.13 The data subject has the right to data portability, which means obtaining the personal data they have provided to the Controller, whereby they have the right to transfer such data to another Controller in a structured, commonly used and machine-readable format, provided that the personal data were obtained on the basis of the data subject’s consent or on the basis of a contract and their processing is carried out by automated means.

2.14 The data subject has the right at any time to object to the processing of their personal data on grounds relating to their particular situation. The data subject may not object to the processing of their personal data if:

1. the processing of personal data is necessary for the performance of a task carried out for reasons of public interest,
2. the personal data are processed for a scientific purpose, a purpose of historical significance or a statistical purpose.

2.15 The data subject has the right to object to the processing of personal data concerning them for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing. If the data subject objects to the processing of personal data for direct marketing purposes, the Controller may no longer process their personal data.

2.16 The Controller will assess the objection received within a reasonable time. The Controller may not continue to process the personal data unless it demonstrates compelling legitimate grounds for the processing of personal data which override the rights or interests of the data subject, or grounds for the establishment of a legal claim.

2.17 The data subject has the right to lodge a proposal to initiate proceedings with the Office for Personal Data Protection of the Slovak Republic if they believe that their rights in the area of personal data protection have been violated.

3. Cookies and Analytical Tools

3.1 The website floracesk.sbs uses cookies and similar technologies to ensure the functionality of the website, analyse traffic and target advertising campaigns.

3.2 Before storing any optional (non-essential) cookies, the Controller requires the informed consent of the visitor through a cookie banner (the Cookie-Script CMP tool). The visitor may withdraw their consent at any time by clicking the “Cookie Settings” link in the website footer.

3.3 Categories of cookies:

• Essential – ensure the basic functioning of the website, security and the user session. These cookies are stored without the need for consent.
• Analytical – Google Analytics 4 (operated by Google Ireland Ltd.) is used to measure traffic and user behaviour on the website.
• Marketing – Google Ads (operated by Google Ireland Ltd.) is used to measure advertising campaign conversions and for remarketing.

3.4 Third parties as processors of personal data:

Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland
Scope of processed data: IP address (in anonymised form), cookie identifiers, device and browser information, behaviour on the website (pages viewed, clicks, time spent on the page).
Purpose of processing: traffic measurement (Google Analytics 4), optimisation and measurement of the effectiveness of advertising campaigns (Google Ads).
Retention period: typically 14 months for Google Analytics 4, in accordance with Google’s policy.
Transfer outside the EU: Google Ireland Limited is a certified participant in the EU-US Data Privacy Framework, which ensures an adequate level of protection of personal data when transferred to the United States of America.

3.5 The Controller has implemented Google Consent Mode v2, which technically ensures that, before the visitor grants consent, no personal data, cookies or identifiers enabling the identification of a specific person are sent to Google’s services.

3.6 A detailed list of all cookies, their purpose, retention period and the option to individually manage consent for each category can be viewed by the visitor by clicking the “Cookie Settings” button in the website footer.

3.7 The legal basis for processing personal data through analytical and marketing cookies is the consent of the data subject pursuant to Article 6(1)(a) of the Regulation. The legal basis for processing essential cookies is the Controller’s legitimate interest pursuant to Article 6(1)(f) of the Regulation in ensuring the functionality and security of the website.

3.8 In relation to the processing of data through cookies, the data subject has the same rights as those set out in points 2.1 to 2.17 above, including the right of access, rectification, erasure, restriction of processing, data portability and the right to object.