Fenzy-Inteko Privacy Policy

The Fenzy-Inteko doo privacy policy is intended to familiarize customers, prospective customers or users of the Fenzy-Inteko doo online store with the purposes and basis of the processing of personal data by the Inteko doo company. , Slap 3/E, 5271, Vipava, Slovenia, email info@fenzy.be (hereinafter: Fenzy-Inteko company or provider or person responsible for personal data).

At Fenzy-Inteko we care about your privacy, therefore we treat your data carefully.

This privacy policy may change or be supplemented at any time without notice. By using the provider's web pages, the user agrees to such changes and new data.

All its activity is governed by European Legislation (Decree (EU) 2016/697 on the privacy of users when processing and transmitting their personal data (GDPR General Data Protection Regulation), the conventions of the Council of Europe ( ETS no108, ETS no181, ETS no185, ETS no189)), Law 34/2002 on Information Services and Electronic Commerce, Organic Law 15/1999 on the Protection of Personal Data and Royal Decree 1720/2007 of 21 December, which approves the Regulations for the development of the Organic Law and other regulations in force at all times and which ensure the correct use and treatment of the user's personal data.

The Privacy Policy regulates the treatment of the data that the supplier obtains from you when you visit and use Fenzy-Inteko web pages or send them to us in any other way (while buying by phone, etc.).

Responsible for personal data and the authorized person for data protection

The controller of personal data is the company Inteko doo, Slap 3/E, 5271, Vipava, Slovenia.

In the Fenzy-Inteko company we have the authorized data protection person who is available at the email info@fenzy.be

Data of the authorized person

Personal information

Personal data is that information that identifies individuals as defined. The person is considered as such when it is possible to determine it directly or indirectly, mainly, with the indication of the identifier that can be the name, the identification number, location data, electronic identifier or with the physical, physiological, genetic identification data, psychological, economic, cultural or social.

The provider, in accordance with the intentions defined in this policy, collects the following personal data:

• The user's basic data (name and surname, address, date of birth, location);
• Contact data and communication data with the user (email, telephone number, date, time and content of mail or electronic communication, date, time and duration of telephone calls, recording of telephone calls) ;
• Channel and campaign – way of obtaining a member or the source through which you have achieved contact with the supplier - (web page, advertising campaign, call center);
• Details of all your purchases and invoices issued (date and place of purchase, products purchased, prices of products purchased, total purchase price, payment method, address for distribution, number and date of issue of invoice, code biller, etc.) and information on how to resolve product claims;
• Data about your use of the provider's website (dates and times of website visit, visited pages or URLs, retention time on a certain page, number of pages viewed, total retention time on the website, applications downloaded from the website) and data on the use (reading) of messages (email, SMS) from the provider.
• Data from forms voluntarily completed by the user, e.g. eg in the context of prize games or the use of configurators to identify optimal products for the user's needs;
• Other data that the user voluntarily provides to the provider at the request of certain services that require this information.

The provider collects your personal data only in the event that you make it possible or with your consent, that is, at the time of requesting the products or services, or subscribing to the newsletter, participating in the games with prizes, etc. or when there is a legal basis for the collection of personal data or if the provider has a legitimate interest in the processing.

The period of time in which the provider retains your data is specified in the Retention of personal data section of this Policy.

Purpose of processing and basis for data processing

The provider collects and treats your data in accordance with the following legal bases:

• Law and Contract Relations,
• the user's consent and
• legitimate interest.

Processing based on law and contractual relationships

The provision of personal data is part of the obligation of the contract, it is an obligation that is essential to conclude and fulfill the contract and is an obligation by law. You must provide your personal data; if you do not provide the personal data, the contract cannot be performed and the supplier cannot perform services or distribute the products according to the contract, since it does not have the necessary data for the fulfillment of the contract.

Processing based on legitimate interest

The provider may also process the data on the basis of the legitimate interest for which the provider strives, except when such interests prevail the interests or fundamental rights, and freedoms of the individual, which require the protection of personal data. In cases of the use of legitimate interest, the provider always decides in accordance with the General Data Protection Regulation.

Treatment based on your consent

If you give your consent, the provider collects and uses your personal data for the following purposes:

• the security that they access and use your real email address when doing business with the provider and your online store. Also for administrative reasons on the provider page,
• send you the advertising news and other news by email, SMS messages, postal mail or telephone calls when for these purposes there are no other bases and you have agreed,
• the guarantee that you can access the special information that is available to you on the provider's website and in your Internet account/profile that the provider guarantees,
• prepare and send the personalized electronic magazine, if you have subscribed to it,
• other purposes to which you specifically agree when you cooperate with the provider.

Profiling users based on their consent

Based on your consent, the provider also carries out personalized communication through various communication channels (by email, SMS, phone calls, postal mail, notifications through the browser, information on the website, social networks).

In order to offer you the best offers and content tailored to your needs, with your consent we formulate your profile, which is the basis for personalized communication.

For these purposes we may use the following information:

• demographic data (gender, date of birth or age, address)
• history of your purchases (items purchased, time of purchase, number of purchases)
• responses to various Fenzy-Inteko questionnaires on Fenzy-Inteko websites
• behavior on Fenzy-Inteko websites (product or content research, adding products to the shopping cart, Internet transactions)
• your responses (opening a message, clicking a link, purchasing) to the various messages we send you

Depending on this user profile, it will depend on what types of content and offers you will receive from us:

• what products and content will be presented to you (for example, new collections of dresses etc.) to be of maximum interest to you
• what offers you will receive (customers with more or more frequent purchases at Fenzy-Inteko get better offers)
• how often we will send you messages and through which communication channels

If you have given your consent to this type of processing, but you no longer want it, you can stop it at any time by using the unsubscribe link in the messages received or by writing a request to the email address info@fenzy.be .

Retention of personal data

The provider will only store your personal data for as long as is necessary to achieve the purpose for which the personal data was collected and processed (for example, to ensure that you access and use your online account with the provider and the provider's online store). supplier, the fulfillment of your orders by the supplier, verification of your payments and fulfillment of other obligations of the supplier and/or your obligations, to ensure that you can access the specific information available, for the sending of newsletters by the supplier , etc.).

The personal data that the provider processes on the basis of the law, it keeps for the time that is prescribed by law.

The data that the provider processes due to the contractual relationship with the user, is kept for the time necessary for the fulfillment of the contract and another 5 years at the end of it. The exception is in the event there is a dispute between you and the provider regarding the contract. In the mentioned situation the provider stores the data 5 years after the final decision of the court, arbitration or resolution. If there was no legal dispute, the data is kept for 5 years from the day the dispute was peacefully resolved.

The provider keeps the personal data that is processed based on the user's personal consent or legitimate interest permanently, until the same revokes its consent or requests the interruption of the processing. The provider deletes such information before the cancellation occurs only when the purpose of the personal data processing has already been achieved (for example, in the event that the provider ceases to operate its website, the provider will delete all personal data collected for this purpose, even if the individual who previously consented to the processing of their personal data did not submit the cancellation) or if so determined by law.

When the retention period expires, the administrator permanently and efficiently deletes the personal data or effectively and permanently anonymizes the personal data, so that it can no longer be linked to a particular individual.

Contractual treatment of personal data

As a user you are familiar with and accept that the provider may entrust certain tasks regarding your data to other persons (contracted processors). Contractors may process entrusted data exclusively on behalf of the provider, within the limits of the provider's authorization (in a written contract or other legal act) and in accordance with the purposes defined in this privacy policy.

The contractors with whom the administrator works are the following:

• accounting service; law firms and other providers of legal advice;
• data processing and analytics providers;
• maintenance of computer systems;
• email delivery providers (for example, Mailchimp and others);
• payment system providers, such as PayPal, Klarna, Sofort and others);
• system providers to maintain the relationship with buyers;
• providers of solutions for online advertising (eg Google, Facebook).

Contractual processors may process personal data only in accordance with the administrator's instructions and may not use personal data to pursue their own interests.

The administrator and the users do not transfer the personal data to third countries (outside the European Economic Area - EU Member States and Iceland, Norway and Liechtenstein) or to international organizations other than the US - all contract processors in the US USA are included in the Privacy Shield program.

freedom of choice

The information you provide about yourself is also controlled by you. If you choose not to provide your data to the provider, then you will not be able to access certain sites or features on the website.

People who wish to unsubscribe from Fenzy-Inteko newsletters should send us an email at info@fenzy.be If your personal information (postal code, email address, physical address, telephone number) changes, do not feel free to contact us at info@fenzy.be

Automatic recording of information (non-personal data)

Every time you access a website, general non-personal information (number of visits, average time spent on the website, pages viewed) is automatically recorded (not as part of the application). This information is used to measure the attractiveness of our site and to improve content and usability. Your information is not subject to further processing and will not be forwarded to third parties.

cookies

Cookies are inconspicuous documents that are temporarily stored on your hard drive and allow the provider to identify your computer the next time you visit the site. The provider uses cookies solely to collect information about the use of the website and the optimization of its online advertising.

Advertising cookies track the individual's use of the provider's website, unless the individual does not agree to the use of cookies on the website.

Security

The provider continuously works to ensure the security of personal data. Your data is protected against loss, destruction, falsification, manipulation and unauthorized access or unauthorized disclosure at all times.

Consent of a minor in relation to information society services

Minors under 16 years of age should not transmit any personal data to the Websites or otherwise without the explicit permission (consent or approval) of the responsible parent of the child (a parent or guardian). The provider will never knowingly collect personal data from persons known to be minors (under 16 years of age), nor will it use or disclose it in any way to any unauthorized party without the consent of the holder of parental responsibility. of the minor.

This is without prejudice to the general contract law of the Member States, such as rules on the validity, design or effect of a contract relating to a minor.

Taking into account the available technology, the provider makes all reasonable efforts to verify that the holder of parental responsibility for the minor has given his consent.

Individual rights for data processing

If you have any questions about our privacy policy or the processing of your personal information, you can contact us without reservation. Contact us at info@fenzy.be or call us at 00386 (0)5 364 30 00. We will notify you in accordance with your request, in writing and in accordance with the regulations.

To ensure fair and transparent processing, You, as an individual, have the following rights under the rules:

Right to withdraw consent: if you as an individual give your consent to the processing of your personal information (for one or more specific purposes), you have the right to withdraw your consent at any time without prejudice to the lawfulness of the data processing, which were treated until their revocation.

Consent can be revoked in writing and sent to the address of Fenzy-Inteko do.o., Slape 3/E, 5271 Vipava, Slovenia or by email info@fenzy.be .

The right of access to personal data : As an individual, you have the right to obtain from a provider (personal data manager) confirmation as to whether your personal data is processed and, where applicable, access to personal data and certain information (about the purposes of processing, or types of personal data, users, storage periods or criteria for determining periods, the existence of the right to correction or deletion of data, the right to restrictions and objections to processing and the right to appeal to the supervisory authority, the source of the data if the data was not collected by you, about the existence of automated decision-making, including the design of the profiles, the reasons for it, and the meaning and consequences of such processing for you, and other information in accordance with Article 15 of the GDPR;

Right to Correction of Personal Data – As an individual, you have the right to have the provider rectify inaccurate personal information relating to you without undue delay. As an individual, taking into account the purposes of the processing, you have the right to complete incomplete information, including the submission of a supplementary statement;

The right to delete personal data ("right to be forgotten") : As an individual, you have the right to obtain or delete, without undue delay, personal information relating to you and the provider must delete the information without delay when there is one of the following reasons:

(a) the data is no longer necessary for the purposes for which it was collected or processed,
(b) if you revoke consent and there is no other legal basis for the processing,
(c) if you object to the processing and there are no compelling legitimate grounds for the processing,
(d) the data has been unlawfully processed,
(e) the data must be deleted for compliance with legal obligations under EU law or the law of the Member State that applies to the provider,
(f) information has been collected with respect to the offers of services of the information society.

As an individual, in some cases described in paragraph 3 of Article 17 of the GDPR, you do not have the right to delete your data;

Right to limit processing : As an individual, you have the right for the provider in the following cases to limit processing:

(a) if you dispute the accuracy of the data for the period allowing the provider to verify the accuracy of the data,
(b) the processing is unlawful and you object to data deletion, instead requesting a restriction on its use,
(c) the provider no longer needs the data for the purposes of processing, but you need it to enforce and defend legal claims,
(d) you have filed an objection to the processing, until it is verified that the legitimate reasons of the supplier prevail over your reasons;

The right to data portability : As an individual, you have the right to receive personal information relating to you, which you have provided to the supplier, in a structured, widely used and electronically readable form and you have the right to pass this information on to another manager without that the provider to whom the personal data has been provided hinders it, in particular when:

(a) the processing is based on consent or contract and
(b) the processing is carried out by automated means.

As an individual you have, when carrying out the aforementioned rights, the right to transfer personal data directly from one manager (provider) to another when technically possible;

The right to oppose the processing : as an individual you have, based on reasons related to your personal situation, the right to challenge at any time the processing of personal data necessary for the performance of tasks of public interest or for the exercise of the public authority granted to the provider (article 6 (1) point (e) GDPR) or is necessary for the legitimate interests pursued by the provider or a third party (article 6 (1) letter (f) GDPR), including the creation of profiles based on those processes; the provider stops processing the personal data unless it proves that the legitimate reasons for processing prevail over your interests, rights and freedoms, or to enforce, perform or defend legal claims.

Where personal data is processed for marketing purposes, an individual has the right, at any time, to object to the processing of data relating to him or her for the purposes of such marketing, including profiling as regards such direct marketing. ; when an individual objects to processing for direct marketing purposes, the data is no longer processed for these purposes.

Where data is processed for scientific or historical and research purposes or statistical purposes, an individual has the right to object, for reasons relating to his or her particular situation, to the processing of data relating to him or her, unless the processing is necessary to the performance of the task, which is processed for reasons of public interest;

The right to lodge a complaint with the supervisory authority : Without prejudice to any other remedy (administrative or otherwise), you, as an individual, have the right to lodge a complaint with the supervisory authority, in particular in the country in which you normally reside, where you work and where a violation is alleged to have occurred (in Slovenia, this is the Information Commissioner) if you believe that the processing of personal data relating to you violates the rules on the protection of personal data.

Without intervening in any other assets (administrative or extrajudicial), You as an individual have the right to an effective remedy against a legally binding decision with the supervisory authority in relation to it, as well as in cases where the supervisory authority does not deal with your claim or in three months does not inform you about the status of the claim or the decision on the claim. Proceedings against the supervisory authority are dealt with by the courts of the Member State in which the supervisory authority is based.

A person may have all the requirements related to the exercise of rights in relation to personal data, addresses, in writing and sent to the address of Fenzy-Inteko do.o., Slape 3/E, 5271 Vipava, Slovenia or by mail Email info@fenzy.be .

For the purposes of reliable identification in the case of the exercise of rights in relation to personal data, the controller may request additional information from an individual and may refuse to act only if it proves that the individual cannot be reliably identified.

At the request of the individual with whom you exercise your rights regarding personal data, the operator must respond without undue delay and no later than one month after receipt of the request.e.

Notification to the supervisory authority of a violation of the protection of personal data

In case of non-compliance with the protection of personal data, the service provider will be obliged to inform the competent inspection body, except when it is probable that the rights and freedoms of individuals will not be compromised by the infringement. When the commission of a crime is suspected, the bidder is obliged to inform the police and/or the competent prosecutor's office about the violation.

In the event of an infraction that may cause a high risk to the rights and freedoms of individuals, the bidder is obliged to do so immediately and in a timely manner. When this is not possible, the interested party will be informed without delay. The notification to the person must be carried out in an understandable and clear language.

Publication changes

Any changes to our privacy policy will be posted on this website.

By using websites, an individual confirms that they accept all the content of this privacy policy.

Updated: May 25, 2018.