Privacy protection

Dear Customer,

In order for us to process your order, we need your personal information. The security of your data and its processing in a lawful manner is important to us. Here you will learn how we process your personal data and how we achieve its security.

 

Who are we?

Your personal data is processed by our company nvst, s.r.o. with its registered office at Karpatské námestie 7770 / 10A, 831 06 Bratislava, IČO: 52 372 855, entered in the Commercial Register of the District Court Bratislava I, file number 137046 / B, operator of the internet shop lunchbox.land (hereinafter referred to as the “operator”).

 

Which personal data do we process?

Eshop

In order for you to process your order and fulfill all legal obligations related to it, we process your personal data in the scope of title, name, surname, delivery address, address for billing purposes, order data, payment details, contact person, tel. No., email, IP address, information from cookies.

Warranty claim data

In order to process your warranty claim, we process your personal data in the range of title, name, surname, date of birth, address and type of stay, delivery address, address for invoicing purposes, data on the claimed goods, bank account number, payment details, method of processing. complaints, phone number, email, signature, name and surname of the contact person, phone no. contact person.

Marketing

In order to be able to send you information about products and services and contact you with market research, we process your personal data in the range of name, surname, email.

Competitions/promotions

In order for you to participate in our competitions or promotions, we process your personal data in the range of name, surname, address, phone number, email.

 

Why do we process your personal data?

E-shop

We process your personal data for the purpose of concluding the contract via the Internet and its fulfillment, in particular for receiving and registering the order, order processing, sending the goods, issuing the accounting document, resolving the withdrawal from the contract and possible complaints.

Accounting

Your personal data are processed in order to fulfill the obligations arising from our specific legislation relating to the accounting agenda.

Warranty claim evidence

We process your personal data in order to file your complaint for the purpose of processing it. We process your personal data for this purpose, due to the fulfillment of a contractual obligation.

Marketing

We process your personal data for the purpose of customer care, providing information about products and services and market research, through a selected method of communication. We only process your personal data for this purpose if you give us your consent.

Competitions/promotion

We process your personal data due to your participation in the competition and, if you become a winner, also for the purpose of delivering the prize. We only process your personal data for this purpose if you give us your consent.

 

Who do we share your data with?

In order to fulfill our contractual obligations, we provide your personal data to the carrier.

In the event of a complaint, we provide them to the carrier and supplier on the basis of a special law.

Your personal data is also processed by the Shopify family of companies, which operate a platform on which our online store runs.

 

How long do we store your data for?

Accounting

Accounting documents are kept for 10 years.

E-shop

Purchase contracts concluded through the online store are kept for the duration of the order and for the time necessary for the case of exercising the rights, e.g. complaints.

Warranty claims

Documents related to the complaint are kept for 5 years.

Marketing

Marketing documents shall be kept for the period for which the person concerned has given his consent or for a shorter period until the withdrawal of consent. If consent is not given for a specific period, personal data shall be processed unless the purpose for which the person gave consent has ended.

Compatitions

Documents relating to the competition are kept for the duration of the competition and personal data about the winners for the time necessary to assert any claims, max. for 5 years.

 

Where do we send your data to?

Our online store uses the Shopify e-shop platform, through which your personal data is first transferred to the Irish company Shopify International Ltd. and the Canadian parent company Shopify, Inc. Shopify Inc. uses the platform to operate. a combination of providers and data centers in Canada and the United States. 

Not satisified?

If you are not satisfied with how we process your personal data, you can let us know by email hello@lunchbox.sk. You also have the opportunity to file a complaint with the Privacy Office if you think we are processing your personal data illegally.

 

How do we process your personal data?

We process your personal data in electronic and paper form. We do not use any means of automated individual decision-making. We process your personal data in the following programs and online applications:

Pohoda - accounting software

Shopify platform for e-shops

How do we protect your personal information?

The security of your personal data is important to us. To ensure the protection of your personal data, we have taken the necessary technical and organizational measures. The operator has set a consistent password policy. Personal data is processed only by authorized persons who are regularly trained to protect your personal data. The scope of their competencies results from the employment contract and the instructions of the operator.

 

What are your rights?

Right of access to data

You have the right to know if we process your personal data. If we process this, you can ask us for access to the data. Upon your request, we will issue a confirmation with information about the processing of your personal data by our company.

Right of correction

You have the right to have your personal data that we process correct, complete and up-to-date. If your personal information is incorrect or out of date, you can ask us to correct or supplement it.

Right of deletion

 

In certain circumstances, you have the right to have your personal information deleted. You can ask us to delete your data at any time. We will delete your personal information if 

• we no longer need your personal information for the purpose for which you provided it to us;
• you revoke your consent;
• object to the processing of your personal data;
• We process your personal information illegally;
•  Personal data must be deleted in order to comply with a legal obligation;
• if you are a child, or the parent of the child who consented to the processing of personal data via the Internet; 

Right to restrict processing

You can ask us to limit the processing of your personal data. If we comply with your request, we will only store your personal data and will not continue to work with it. Your data will be restricted if:

• let us know that your personal information is incorrect until we verify it;
• We process your personal data illegally, but you do not consent to its deletion and instead request that we only restrict the processing of your personal data;
• We no longer need your information, but you do need it to prove, assert, or defend your rights;
• You object to the processing of your personal data until we verify that our legitimate interests outweigh your reasons.

Right to data portability

You have the right to request that we provide you with your personal information in electronic form (such as an XML or CSV file) that will allow you to easily transfer the information to another company. You can also ask us to transfer your personal data to the selected company directly. We will comply with your request if you have provided us with personal information directly and you have given us your consent to its processing.

Right to object

You have the right to object to the processing of your personal data. If we process your personal information for direct marketing purposes, you may object to its processing at any time. Upon dispute, we will delete your personal information. If we process your personal information in the following cases:

• to perform a task in the public interest or in the exercise of official authority
• because of our legitimate interest,
• Creating a customer profile,

You can object to their processing if you have personal reasons.

 

How can you exercise these rights?

You can contact us with your request in one of the following ways:

• by email at hello@lunchbox.sk
• by sending a notification to the operator's registered office

We will deal with all your requests and will inform you of the outcome of its processing in the same way as you submit.

 

Final provisions

This Privacy Policy will take effect on the date of its publication 6. february 2021 .

We reserve the right to change this policy if the processing of personal data in our company changes.