Privacy policy

Scented.si's privacy policy is in line with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC General Decree on Personal Data Protection) and the legislation of the Republic of Slovenia and includes the following information:

• contact information of Scented, Sergeja Masten sps and contact of the Data Protection Officer,
• the legal basis and purposes of the processing of personal data,
• the types of personal data collected,
• use of cookies and related technologies,
• manage privacy settings
• transmission of personal data,
• deadlines for the retention of personal data,
• protection of personal data,
• the rights of individuals with regard to personal data, including the right to appeal,
• changes to privacy policy.

1. MANAGER AND CONTACT

The controller of personal data is Scented, Sergeja Masten sp, Ulica Metoda Mikuža 20, 1000 Ljubljana (hereinafter also "Scented.si").

Your questions regarding this Privacy Policy, the confidentiality of your personal data, the method of processing or your requests regarding the exercise of personal data rights will be answered by the person responsible and / or the data protection officer with us. You can contact the data protection officer via the above address or via e-mail info@scented.si.

2. LEGAL BASIS AND PURPOSES OF TREATMENT

Scented.si collects, records, edits, stores, transmits and otherwise processes personal data that we have about you, based on various legal bases and for the purposes defined in the following document.

2.1 TREATMENT UNDER CONTRACT

Scented.si processes personal data for the exercise of rights and obligations under concluded contracts, namely:

• contracts for the sale / purchase of products - personal data of customers provided in the online store at scented.si (regardless of the application);
• contracts for the use of services - personal data of subscribers to services (eg opening a user profile in an online store, signing up to receive e-news).

In the context of exercising rights and fulfilling contractual obligations Scented.si processes personal data of individuals for the purposes of identifying the individual, concluding a contract (although the contract for the sale of Scented.si and customers in the online store concluded at the time Scented.si send the customer an e-mail confirming the received order ("confirmation of the order"), it is considered that the personal data provided in this case are processed on the basis of the contractual legal basis and for the purpose of concluding the contract), to communicate with you conditions, new version of the website, changed conditions of membership in the club, etc.) to provide support to users (eg elimination of technical problems), and in case of purchase for the purpose of ordering (delivery, delivery of products, invoicing, resolving any customer claims complaints, guarantees)), sending notifications to individuals regarding the execution of orders and any other purposes necessary for the execution of the order, for storing the history of purchases (registered users only), for carrying out any recovery procedures and for own accounting and tax purposes.

Preservation of the text of the contract and accessibility to the text of the contract

The company Scented, Sergeja Masten sp will NOT keep the text of the contract between the seller and the buyer, at the same time it will NOT be available to the consumer later. Contracts are concluded only in the Slovenian language.

2.2 Processing on the basis of legal obligations - purposes

Scented.si processes personal data on the basis of legal obligations applicable to trade (eg, in particular, tax regulations, storage of invoices, storage of data of prize game winners, etc.).

2.3 Processing on the basis of legitimate interests - purposes

Scented.si may process personal data on the basis of legitimate interests pursued, except where such interests are outweighed by the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data. In the case of further processing of data collected on an individual, Scented.si carry out an assessment in accordance with the General Data Protection Regulation. Such continued use of data in pseudonymous or aggregated (combined) form represents, for example, the lawful use of data for marketing and other business or technical analyzes. Scented.si. Deletion of certain data may also be used as an additional measure in some forms of further processing of traffic data.

Based on a legitimate interest, you can Scented.si processes personal data to the extent strictly necessary and proportionate to ensure the operation of online services, in particular with the aim of preventing unauthorized access to your user account, spreading malicious codes, preventing fraud or. other misuse of websites or mobile applications, as well as to protect their intellectual property rights in relation to online services.

Based on legitimate interests, you can Scented.si also processes your personal data for the purposes of direct marketing (in the case of customers), prevention of abuse, assertion of claims or defense against claims in administrative and judicial proceedings.

2.4 Processing on the basis of consent - purposes

Scented.si processes personal data on the basis of consent for the processing of personal data provided by the individual to the company for the following purposes:

1. for the purpose of direct marketing - receiving notifications. Notices include current offers, benefits and / or invitations to events of the manager and his business partners, invitations to participate in sweepstakes and competitions, and useful tips, news and reminders from the world of sports and healthy living;
2. to perform marketing analysis and customer segmentation and to provide customized product and service offerings;
3. for the purpose of participating in prize games.

Depending on the provided personal data, you can receive notifications and customized offers via SMS, MMS to the provided mobile phone number, by e-mail to the provided e-mail address or. in printed form to the forwarded address.

You can revoke your consent at any time. change in the same way as consent was given: by clicking on the 'unsubscribe' button located at the bottom of the email.

Where consent involves direct marketing based on an individual’s profile, it can Scented.si performs the classification of individuals into segments based on the use of websites Scented.si for the purposes of customized service and product offerings.

3. PERSONAL DATA WE COLLECT

Scented.si collects various information about you, including personal information that may directly or indirectly identify you, insofar as you or others choose to share this personal information with Scented.si. We receive data in several ways, including shopping in the online store, by subscribing to e-news (direct marketing), registering a user profile in the online store, visiting the website. Scented.si collects information about your use of the services we offer.

Personal data we collect:

1. basic personal data such as: name and surname, date of birth, e-mail address, address of residence (street, street number, postal code, place, country), delivery address (street, street number, postal code, place, country), telephone number and password to ensure the security and use of our services;
2. online store user account data, when you decide to provide your data via the online profile, in addition to the basic personal data you provide us at registration, we also collect personal data such as content and data (information) that you upload to the user account or post, post, share or otherwise share using the online store (e.g. comments, etc.);
3. information on the purchase and method of payment;
4. we collect technical information from your browser, computer or mobile device when you access the Scented.si services.

4. COOKIES

When you use our online services, cookies are loaded on your computer. In general, cookies and related technologies work by assigning a unique number to a browser or device that has no meaning outside Scented.si.

Scented.si uses these technologies to customize the experience and to help provide content that is specific to your use.

You can find a list of cookies used by the website and this link.

You can use the settings in your browser or mobile device to manage the collection of information via cookies or related technologies. Scented.si is committed to allowing you to manage your privacy and sharing, but does not accept responsibility for missing "Do Not Track" signals via a web browser. Rejection of cookies may result in some features of the services offered being not available to you.

5. DEADLINES FOR THE KEEPING OF PERSONAL DATA

We keep personal data for as long as necessary to provide our services or longer if there are legal obligations.

Personal data associated with your user account is kept until the request for deletion, while the data related to the purchase made by the user in the online store is retained. You can close the user account yourself in the user account settings or ask us to delete it. Closing your user account and deleting your personal information may take up to 10 business days from a complete request. Please note that we may retain certain information from closed accounts in accordance with the law, to prevent fraud, to recover debts, resolve disputes, resolve problems, assist in investigating competent authorities, enforce terms of service and take other measures permitted by law. The information we retain will be treated in accordance with this Privacy Policy.

Data related to payment for purchases in online stores and related contact information about individuals may be stored for the purpose of fulfilling contractual obligations until full payment of services or. until the possible expiry of the limitation period in respect of an individual claim, which may be up to five years by law. In accordance with tax regulations, issued invoices are kept for 10 years after the end of the year in which the invoice is issued.

Personal data obtained on the basis of consent is kept until the revocation of consent, but for a maximum of 10 years.

Data about you that are no longer necessary for the purposes for which they were collected or otherwise processed may be anonymized and combined with other data that do not allow identification of an individual, to gain insight into statistical information that is commercially useful for Scented.si, such as statistics on the use of the services we offer. This personal information is anonymized and does not offer a link to an identifiable individual.

6. PROTECTION OF PERSONAL DATA

We implement several technical and organizational measures to ensure the security of personal data during collection, transfer and storage. Scented.si strives to adequately protect your personal information, but we do not guarantee the complete security of the personal information you provide to us, and we are not responsible for the theft, destruction, loss, intentional or unintentional disclosure of your personal information or information about you. Scented.si adheres to generally accepted standards for the protection of received information both during transmission and after its receipt, but no method of electronic transmission or storage provides 100 % security, so Scented.si cannot ensure complete security. Scented.si uses SSL (Secure Sockets Layer) technology, which provides encryption of personal data and credit card data. Scented.si cooperates with a company that ensures the security of our services and your personal data. Servers Scented.si are additionally protected by the use of firewalls and other technologies to ensure data security.

The user is also responsible for data protection by ensuring the security of his / her mobile device or computer as well as by protecting the username, password and the appropriate software (anti-virus) protection of his / her electronic device. To ensure that these measures are effective in preventing unauthorized access to your personal information, you should be aware of the security features available to you through your browser. Use a browser that allows you to set security features before sharing your personal or credit card information over the Internet. Please note that if you use a browser that does not support the use of SSL technology, such transfer of personal data may be risky.

Most browsers allow you to be notified if you are on a website that does not provide a secure connection, or if you send data over an unsecured connection. Scented.si recommends that you enable these features of your browser to help secure your personal information. You can also track your address (URL). Secure web addresses start with https: // instead of http: //, along with the secure connection symbol used by your browser (usually such a symbol is a lock at the beginning of the web address). Such a symbol indicates the use of secure communication with the server. At the same time, please check the details (validity) of the security certificate of the site where you are located.

7. LIMITATION OF LIABILITY

Scented.si is committed to protecting the personal information and information about you, but no connection over the Internet can be 100 % secure and cannot guarantee the complete security of the information you provide to us. You provide us with your personal information at your own risk.

8. RIGHTS OF INDIVIDUALS

Scented.si ensures the exercise of the rights of data subjects. Requests of an individual regarding the exercise of rights are sent to the e-mail address info@scented.si or by post to Scented, Sergeja Masten sp, Ulica Metoda Mikuža 20, 1000 Ljubljana. 

An individual is obliged to provide proof of identity and / or address to a request that is not submitted from the registered user's e-mail address. Scented.si will respond to your request in accordance with applicable regulations.

The individual has the following rights in relation to personal data:

8.1 Right of access to data

An individual can request it at any time Scented.si confirm whether data relating to him are being processed and, if so, provide access to personal data and provide information regarding the processing of his personal data (eg the purpose of the processing, the type of personal data, users to whom they have been or will be provided) personal data, the envisaged data retention period, technical and organizational measures for data protection, etc.).

8.2. Right of correction

An individual can request it at any time Scented.si enable the correction of inaccurate personal data concerning him and the supplementation of incomplete personal data.

Logged-in users can do this through the settings of their user profile in the online store.

8.3 Right of deletion

In accordance with the conditions specified in more detail by the applicable regulations, the individual may at any time request that Scented.si provide for the right to have personal data deleted (so-called right to be forgotten).

8.4 Right to limit processing

In accordance with the conditions specified in more detail by the applicable regulations, the individual may at any time request that Scented.si provide for the right to restrict the processing of personal data. Logged-in web service users can do this in their user profile settings.

Please note that if we restrict the processing of certain personal data, we may not be able to provide a full service.

8.5 Right to data portability

An individual can request it at any time Scented.si enable personal data in a structured, commonly used and machine-readable form to be transmitted to the individual or transferred to the controller of the individual's choice (if technically feasible), under conditions specified in more detail by applicable regulations.

8.6 Right to contract

In so far as Scented.si does not process personal data on the basis of legitimate interests, as presented above, the individual may in certain cases object to such processing. Scented.si will stop processing such personal data unless it considers that it has reasonable and legitimate reasons for continuing the processing or if the processing is necessary for legal reasons.

Objections to the processing of personal data for the purposes of direct marketing can also be made by revoking the consent to receive notifications by clicking on the 'unsubscribe' button, which is located at the bottom of the email or. to follow the instructions in each notification sent.

8.7 Revocation of consent

The individual may revoke the consent at any time, in cases where he has given consent for a specific purpose of processing your personal data.

Logged-in users can revoke their consent in the user profile settings.

Withdrawal of consent does not affect the lawfulness of the processing of personal data carried out until its withdrawal.

8.8 Right of appeal to the supervisory authority