PRIVACY POLICY
Privacy statement
Obsession d.o.o., Ljubljana, Poljanski nasip 6, 1000 Ljubljana (Obsession d.o.o., Ljubljana - personal data controller) values and protects your privacy, strives for the highest level of security and pursues the principles of transparency and careful handling of personal data. This privacy statement elaborates on the managing and collection of the personal data provided by our digital platforms that facilitate the access to the website and the use of corresponding services for our visitors. Obsession d.o.o., Ljubljana processes personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of individuals and the processing of their personal data and on the free movement of such data and repealing Directive 95/46 / ES (hereinafter referred to as the General Data Protection Regulation or GDPR), in compliance with the current Personal Information Protection Act and other personal data protection regulations.
Continue reading to learn more about our processing of your personal data.
E-mail advertising if you subscribe to the newsletter
If you subscribe to our newsletter, we will regularly send you our e-mail newsletter based on your consent according to Art. 6 (1) 1 lit. a) GDPR, using the data required or disclosed by you separately for this purpose. You may unsubscribe from the newsletter service at any time. For this purpose you can either send a message to the contact option specified below or use the opt-out link in the newsletter. Upon unsubscription, we will delete your email address unless you have expressly consented to the further use of your data or we reserve the right to further use your personal data in the scope and manner permitted by the law, of which we inform you in this notice.
Legal basis for data processing
Personal data collected through application forms in an online store - or otherwise communicated to the controller - Obsession d.o.o., Ljubljana (first name and surname, email, telephone, street name and number, postal code, location, country, region, shopping cart contents, IP address) are gathered with the purpose of conducting the principal activity of the company Obsession d.o.o., Ljubljana i.e. an online shop, particularly for responding to customer demand, and for designing, concluding and implementing a contract. Such information processing is part and parcel of an exquisite service and is therefore valid on the basis of a contractual relationship between the customer and the service provider. The implementation of the contract whose party is the data subject represents the legal basis for the lawful processing of the personal data, i.e. the application of pre-contractual measures taken in response to the data subject's request (Article 6 (1) (b) GDPR).
Providing that your consent is the legal basis for data processing, you hold the right to revoke your consent at any time. However, this shall not affect the lawfulness of the personal data processing by Obsession d.o.o., Ljubljana prior to your withdrawal of consent (Article 6 (1) (a) GDPR). We will discontinue the managing of collected personal data for this specified purpose in case of revocation.
It is our legal obligation to transmit your personal data to law enforcement or other national authorities if deemed imperative. Furthermore, we are legally obligated to store accounting and taxation documents (Article 6 (1) (c) GDPR).
The distribution of personal data with our contractual partners to ensure efficient management and vital protection of operation along with the establishment, exercise and defense of legal claims represent the so-called legitimate interest of the company Obsession d.o.o., Ljubljana (Article 6 (1) (f) GDPR.)
Grounds for the collection of personal data by Obsession d.o.o., Ljubljana
Below are further specified the main categories and objectives of data assembled by the company Obsession d.o.o., Ljubljana:
We collect personal data from visitors to the website, customers and suppliers (including third-party service providers). Relevant personal data are in particular personal information, such as first name, and other contact data necessary to conduct a business relationship with you or your organization.
You may choose to permit personal data transmission, including your first name, email address, or other contact information when you connect with us via phone, email, post or by using our digital platforms or other communication channels. Personal data enable us to respond to your information queries, to prepare necessary steps and purchase offers, and to appropriately respond to warranty claims or other requests.
Personal data of customers and potential customers, including names, contact information, payment habits and credit cards are collected to conduct a business relationship with individuals or organizations. Data may be transferred to logistic partners for the purposes of ordering and delivering the products. Automatic data collection via digital tools enhances your safety and ensures confidentiality.
Confidential personal data supplied by you or automatically gathered via our digital tools, shall be utilized to better acknowledge the preferences of our customers, to propose customized solutions and shall serve as a basis for relevant marketing notifications and offers. Personal data shall be used to significantly improve the quality of the products, procedures and website.
We shall process your personal data with your expressly granted consent to inform you about the business activity, products and services of the company Obsession d.o.o., Ljubljana. If you object to such utilization of your personal data or if you do not wish to obtain further marketing information, you may unsubscribe at any time. Find unsubscribe links at the bottom of various communication channels or contact us by email or post to terminate your subscription. Your personal data will be permanently erased from our systems after the obtained withdrawal unless we store and manage your private data on an alternative legal basis.
Personal data of the visitors to our website may be gathered as a survey matter of the company Obsession d.o.o., Ljubljana.
Personal data of the visitors to our website or customers may be gathered to ensure the availability of particular products and to take into account the interests of our clients.
Personal data shall be collected in compliance with legislation. Collected personal and non-personal data are treated as strictly confidential and will not be traded or transmitted to third parties except for the particular instances mentioned in this statement.
How we capture your data
We collect provided personal data either as a result of your registration to receive marketing information in the course of our business relations, your participation in public forums or other activities on our digital tools, as a result of responding to customer surveys or other ways of communication with us. Personal data are gathered via diverse technologies, for instance »cookies«.
Your personal data will not be transmitted to third parties, except in the following occasions:
Command and control
We facilitate a certain control in decision-making with regards to collection, processing and transmission of personal data. In accordance with local legislation, your control and decision-making may incorporate the following points:
You may assert your control in decision-making or require access to your personal data by contacting us via telephone or email and abide by obtained instructions. Please consider the fact that we may not be able to fully comply with your interests and preferences or provide you with certain products and services should you choose to restrict further collecting and processing of your personal data. If you have any questions about specific personal data that we process and store, contact Obsession d.o.o., Ljubljana at [email protected] We will respond to your demand within one month with the right to an extension of an additional month. We will notify you in case of an extension within one month upon the receipt of your request.
Safety, integrity and data storage
Safety, integrity and confidentiality of your personal data are at the core of how we deliver trusted business insights. Our group implements technical, administrative and physical security measures aimed at providing security against unauthorized access, disclosure, use and modification of personal data. We consistently test our safety procedures to contemplate suitable innovative technologies and methods.
The transfer of sensitive personal and transactional data on the website is carried out in a safe mode by means of a protocol SSL (SecureSocketsLayer). Encrypted personal data are transferred to the provider's server in a secure format. The system prevents the interception of customers' personal and transactional data in an online store.
Global payments platform Stripe arranges and forwards safe authorizations and transactions with payment cards. The authorizations of payment cards are carried out in real-time with immediate data verification in the banking system.
Please consider the fact that despite our best efforts, safety measures are not inherently immaculate and impossible to evade.
We will retain your personal data as long as this is necessary for the processing purposes mentioned in this data privacy statement, except if extended storage period is needed or permitted by the legislation. In this respect, a regular review takes place.
Modifications to this privacy statement
We may occasionally alter this privacy statement to adjust it according to the latest technologies, industrial practices, legislative requirements and for other purposes. A valid version of this privacy statement will be published on our digital platforms. We recommend frequent monitoring of the Privacy Statement. If required by applicable legislation, we will obtain your consent prior to any alterations.
Comments and queries
Should you have objections or questions regarding privacy, contact Obsession d.o.o., Ljubljana in writing. You are eligible to lodge a complaint if you are dissatisfied with our processing of your personal data. Use provided contact information. In the case of a complaint you should provide the company Obsession d.o.o., Ljubljana with your contact information. We will address your appeal and reply in 30 days.
Privacy and cookies
Protection of our customers' personal data is one of the areas ingrained into the core of our business culture. We strive to accomplish and even surpass all the goals with diligence as confidentiality is fundamental to maintaining trust.
The following user data are collected for business purposes:
The seller is not responsible for the accuracy, completeness and currency of the personal data submitted by the users. Users' IP addresses are being collected to ensure safety. Each user is assigned a session cookie to identify and track the shopping basket. www.obsession.si may store other cookies on your computer, for instance: encrypted user identification number (to identify the user during the next visit), product reviews (to obtain a clear overview) and cookies used by Google Analytics (analysis of the visits to a website).
All the aforementioned information, except for cookies, are stored on the server leuchtenonline.de under the applicable legislation. Session cookies are stored on the server merely for the duration of the visit and are deleted after an hour of inactivity, while persistent cookies remain on the visitor's hard drive.
The implementation of the privacy policy
Obsession d.o.o., Ljubljana has adopted Privacy Policy. Employees who are in any way involved with users' personal data are familiar with the contents of Privacy Policy.
Which are my rights according to GDPR?
a) The right to be informed
We guarantee the exercise of all your statutory rights with regards to personal data processing in accordance with GDPR provisions. You are granted access to complimentary information about your personal data at our disposal, i.e. the right to access, rectification and erasure of personal data. Should you enquire further information regarding the erasure or processing of your personal data, contact us at [email protected] or send us a request via post at Obsession d.o.o., Ljubljana. You may contact our authorized person for data safety (Data Protection Officer - DPO) via email: [email protected] who shall also respond to your questions about the confidentiality, the method of data collecting and processing or your requirements for the exercise of statutory rights in relation to your personal data.
Notifications upon an obtained order: we highly value supreme user experience, therefore you will be contacted by our advisor upon the delivery of the product to inquire whether your expectations were met. Upon request, our advisor may provide you with further information regarding exclusive offers in case of repurchase. Should you wish to learn more about exceptional deals, you will regularly receive marketing materials via email or text messages. You may terminate your consent at any time by contacting us at [email protected] or by clicking on the link »Unsubscribe«. We also retain the right to enquire about the frequency of visits to our website. Your appreciated opinion will be utilized to enhance the overall user experience. Should you fill out promotional forms (coupons) on social networking sites, you will regularly receive notifications about promotional coupons on your email. The same aforementioned termination procedure applies in this case.
b) The right of access
You have the right to request access to your personal data (consent whether the data concerned are being processed or not) from the company Obsession d.o.o., Ljubljana as the controller of personal data in accordance with Article 15 of the General Data Protection Regulation (GDPR) and the following information:
c) The right to rectification
You have the right to rectification of any inaccurate personal data relating to you (Article 16 of the General Data Protection Regulation - GDPR).
d) The right to restrict processing
Under the conditions set out in Article 18 of the General Data Protection Regulation – GDPR, you hold the right to request from the company Obsession d.o.o., Ljubljana the restriction of processing of your personal data at any time in the following instances:
e) The right to erasure, objection, portability and appeal
Pursuant to the conditions set out in the General Data Protection Regulation, you also hold the right to:
You may lodge a complaint against the controller to the information commissioner Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit - Graurheindorfer Str. 153 - 53117 Bonn should you believe that data processing significantly breaches the General Data Protection Regulation and other applicable legislation.
Procedure to exercise legal rights
I confirm that I am fully aware of my right to contact the controller in writing at: [email protected] to address any of the aforementioned claims with respect to exercising personal data rights.
I confirm that I am entirely familiar with the fact that the controller may request further information from me for the purposes of reliable identification with respect to exercising personal data rights. However, the controller may refuse to take further action in case of clearly demonstrated unsuccessful identification.
About cookies
What are cookies and why are they necessary?
Cookies are short encrypted text files that are sent to the browser by the website you visit. This enables the website to recognize and remember the data at the time of your visit and help positively navigate your browsing experience. Cookies enable us to customize the contents of our website, consider your preferences and track the visits to our online shop. Your overall browsing experience is significantly more pleasant, quicker and more effective with the help of cookies.
Disabling cookies
You decide whether you will allow the storage of cookies on your device. You may supervise and modify the cookie settings in your web browser.
Choose the web browser you use for further information on cookie settings.
Should you modify or erase cookie files stored in your browser, modify or upgrade your browser or device, you may possibly have to disable cookies as well. The procedure for managing and deleting cookies varies according to the browser. Should you require technical assistance in this process, you may explore customer support in your browser.
You may also disable Google Analytics tracking at the following link: https://marketingplatform.google.com/about/.
Cookies used on this website:
Website cookies
Cookie name | Cookie function | Duration | Origin |
.ASPXANONYMOUS | Functional cookie intended for user login. | 2 months and 7 days | Website owner |
ASP.NET_SessionId | Functional cookie essential for the website operation. | Until the browser closes | Website owner |
Language | Functional cookie essential for the appropriate language display on the website and storage of language information. | Until the browser closes | Website owner |
DotNetNukeAnonymous | Functional cookie | Until the browser closes | Website owner |
_ContainerSrc | Functional cookie essential for storing the color template. | 1 day | Website owner |
_SkinSrc | Functional cookie essential for storing the color template. | 1 day | Website owner |
dnn_IsMobile | Functional cookie essential for storing information on whether a mobile device is used to browse the website. | Until the browser closes | Website owner |
cc_fs | Functional cookie for the operation of the banner "cookies". It stores information about the status of the banner display. | 1 year | Website owner |
cc_advertising | Functional cookie for the operation of the banner "cookies". It stores information about the consent to marketing cookies. | 1 year | Website owner |
cc_analytics | Functional cookie for the operation of the banner "cookies". It stores information about the consent to analytical cookies. | 1 year | Website owner |
cc_social | Functional cookie for the operation of the banner "cookies". It stores information about consent to social cookies. | 1 year | Website owner |
Other cookies
Cookie name | Cookie function | Duration | Origin |
Google Analytics | |||
__utma | Analytical cookie. Essential for distinguishing between users and sessions. | 2 years | Google Analytics |
__utmb | Analytical cookie. Records visits of new users or sessions. | 30 minutes | Google Analytics |
__utmc | Analytical cookie. Records the duration of the visit to the website. | Until the browser closes | Google Analytics |
__utmz | Analytical cookie. Stores the source of traffic or an advertising campaign that contains the information on how the user reached the website. | 6 months | Google Analytics |
__utmv | Analytical cookie essential for storing custom variables. | 2 years | Google Analytics |
_gat | Analytical cookie. The cookie is used to restrict the frequency of hits. | 1 minute | Google Analytics |
_ga | Analytical cookie. This randomly generated unique number is used to calculate the data about visits to our website. | 2 years | Google Analytics |
_gid | Analytical cookie. Essential for distinguishing between users and sessions. | 24 hours | Google Analytics |
AddThis | |||
__atuvc | Functional cookies for the operation of AddThis plug-in to connect to social networks. | 30 minutes | AddThis |
__atuvs | Functional cookies for the operation of AddThis plug-in to connect to social networks. | 30 minutes | AddThis |
loc | Functional cookies for the operation of AddThis plug-in to connect to social networks. | 1 year | AddThis |
mus | Functional cookies for the operation of AddThis plug-in to connect to social networks. | 1 year | AddThis |
notice_gdpr_prefs | Functional cookies for the operation of AddThis plug-in to connect to social networks. | 1 year | AddThis |
notice_preferences | Functional cookies for the operation of AddThis plug-in to connect to social networks. | 1 year | AddThis |
ouid | Functional cookies for the operation of AddThis plug-in to connect to social networks. | 1 year | AddThis |
uid | Functional cookies for the operation of AddThis plug-in to connect to social networks. | 1 year | AddThis |
uvc | Functional cookies for the operation of AddThis plug-in to connect to social networks. | 1 year | AddThis |
May, 2020