The personal data controller is: TESMAR s.r.o., ID: 45 602 531, with registered offices at: Tupého 14452/58, Bratislava, Slovakia, a company registered in the Commercial Register maintained by the District Court in Bratislava under file no. Sro, 143293/B.
By clicking on the “Yes” button, “I agree”, “Continue” or “Order” you acknowledge and express consent to the processing of your personal data as further defined under the Terms and Conditions. You also agree to be contacted by e-mail and/or telephone by the controller or a partner company.
Personal data processing in connection with cookies stored on your device is regulated in a separate document: [https://wpcplastic.com/cookies-eu/].
Identification of processed personal data
We process the personal data you provide:
- When ordering goods or services, we require mandatory data for their delivery and conclusion of the purchase agreement: name, last name and delivery address. We use your e-mail address to confirm the order and send you the terms and conditions and complaints policy.
- Optional data, such as a telephone number, helps us to fulfill the agreement more efficiently (e.g. delivery information). You provide this data voluntarily. Once the item has been delivered, we may send you an email asking you to rate the transaction. We may process your email address prior to ordering if you use features such as “Watchdog” (sending information about product availability).
- When contacting the customer line, we process the personal data provided in the communication.
- When paying with a payment card, your payment card details are not sent to us, but directly to the payment gateway provider as part of a secure transmission. The payment gateway further transmits the data to make the payment to the bank as part of another secure transmission. More information about the payment gateway and payment security can be found on the payment gateway provider’s website.
- We may process your personal data as part of joint marketing campaigns with our partners. We may combine this data for the purposes of marketing campaigns and for the proper fulfillment of an agreement.
- When you browse our website, we may collect information about your device and behavior, such as your IP address, date and time, browser and operating system, language, website behavior (what pages you visited and what products you viewed), or other information about your device.
- If you allow us to use location data, we may use it to show you the nearest retail location and other relevant information, send you personalized offers and marketing messages, and display personalized content.
We may also process your personal data that we obtain from our partners:
- When ordering goods or services through these partners.
- When dealing with complaints or inquiries regarding goods and services purchased through our partners.
- We may process your personal data as part of joint marketing campaigns with our partners. We may combine this data for the purposes of marketing campaigns and for the proper fulfillment of an agreement.
Purpose of personal data processing
We process your personal data for the following reasons:
- Purchase of goods and services: for the proper processing and delivery of your order.
- Customer care: to answer your questions and solve your problems.
- User account: to make available useful features (e.g. sending information about the delivery of the order to your phone number or e-mail).
- Improving our services: based on your order history and website behavior, we can offer you more relevant products and services. We may use testing tools (A/B testing), Google Analytics, Facebook Analytics, and others to optimize the website and off-site advertising (personalized third-party site advertising).
- Customer ratings: after purchasing goods or services, we may ask you to rate them.
- Call center: calls to our call center (info line) may be recorded after prior notification.
- Exercise of rights and legal claims: we may process your personal data to exercise our rights and legal claims (e.g. in the event of an outstanding claim).
- Checks by public authorities: we may process your personal data due to checks carried out by public authorities and for other similarly serious reasons.
- Marketing activities:
- E-mail marketing: We only send you marketing communications with your consent, which you can revoke at any time by e-mailing info@wpcplastic.sk.
- Telemarketing: We make marketing calls based on your consent or legitimate interest.
- Push notifications: The mobile application [NAME] sends short messages to your phone (“push notifications”).
- Marketing contests: Contest winners may be photographed/filmed to increase the transparency and attractiveness of the contests.
- Retargeting: We use retargeting techniques that show you ads based on your behavior on the site.
In some cases, we may share your data with third parties (e.g. carrier, service center, partner).
Legal basis of personal data processing
- Fulfillment and conclusion of an agreement: in order to enter into and fulfill a purchase or other agreement for goods and services, we need to process your personal data, such as billing and delivery information.
- Legitimate interests: we use your personal data to display relevant content and to communicate with you, including in the form of e-mails, SMS messages, push notifications and further to protect our legitimate interests (e.g. proof of delivery of goods, provision of service, communication regarding properties of the subject of purchase / service, etc.). You can object to this processing based on legitimate interests.
- Consent: for sending marketing messages (e-mail marketing) and telemarketing, we process your personal data based on your consent. You can revoke your consent to the processing of personal data at any time.
Transfer of personal data to third parties
As controller, we may transfer your personal data to the following third parties:
- Delivery: For the delivery of ordered goods by the carrier of your choice, it is necessary to provide the carrier with some of your personal data. This data includes first and last name, delivery address, telephone number, and amount to be paid (in case of cash on delivery). The carrier is authorized to process this data only for the purpose of delivering the goods and then to delete it immediately.
- Marketing communications: We may use third-party services to send marketing communications (e.g., email, text message) or telemarketing. The third party is bound by a duty of confidentiality and may not use your personal information for any other purpose.
- Acceleration and more efficient processing of a complaint: In order to process your complaint faster and more efficiently, the service center may need additional information about the defect, its manifestations and other relevant data. The following personal data are usually transferred to the service center: First and last name, address, telephone number, and e-mail address.
- Contractual partners: We will also pass on your personal data to one of our contractual partners to process the order. This is personal data: name and last name, delivery address, telephone number, e-mail, amount to be paid (in the case of cash on delivery), goods or services viewed, requested, or selected. The contractual partner then passes this data on to the carrier for the delivery of the goods. Your personal data may also be transferred to contractual partners for the purposes of marketing activities. Contractual partners may also transfer your personal data to our company for the purposes of marketing activities. Below is a list of contractual partners to whom your personal data may be transferred:
- WPC – WOODPLASTIC a.s., ID: 08920354, with registered offices at: V celnici 1034/6, Nové Město, 110 00 Prague 1, a company registered in the Commercial Register maintained by the Municipal Court in Prague under file no. B 25100. Duration of processing of personal data
We process your personal data for the following period:
- Contractual relationship: For the duration of the contractual relationship between us.
- Consent: 5 years, or until consent is revoked.
- Marketing communications: 5 years, or until consent is revoked.
- Legal obligations: Regardless of consent, for a period determined by law (e.g. tax documents 10 years).
- User account: For the period of use of the services and 3 years after cancellation (basic identification data and reason for cancellation).
- Telephone calls: 1 year, longer in case of legitimate interest (e.g. suspected abuse).
Security of personal data processing
We apply the following technical and organizational measures to secure personal data:
- Encryption of all communications between your device and our servers.
- Hashing of login credentials.
- Data storage on servers in secure data centers with limited access.
- Regular security checks and updates.
- Two-step verification for user account login.
- We do not store passwords in text form, we only use specially generated hash keys.
- Our online store is not intended for children under 16 years of age. If the user is under 16 years of age, the consent of their legal guardian is required.
Rights in connection with personal data processing
You have the following rights in connection with the processing of personal data:
- Withdrawal of consent: you can withdraw your consent to the processing of your personal data at any time.
- Correction and completion: you have the option to correct or complete your personal data if it is incorrect or incomplete.
- Restriction of processing: you can request the restriction of processing of your personal data.
- Objection to processing: you have the right to object to the processing of your personal data.
- Access to your personal data: You can request a copy of your personal data and information about how we work with it.
- Portability of your personal data: You have the right to transfer your personal data to another controller.
- Deletion: You can request the deletion of your personal data.
- Complaint: You have the right to file a complaint with the Personal Data Protection Office if you believe that we are processing your personal data unlawfully.
You can exercise your rights via email at: info@wpcplastic.sk.
You can submit a complaint to the Personal Data Protection Office at one of the contacts given here: https://dataprotection.gov.sk/sk/kontakt/.