Personal data protection policy

We at our online store have always respected your privacy and protected your data.

We operate in accordance with the Personal Data Protection Act (ZVOP-1), and since the publication of these rules also with the European General Data Protection Regulation (GDPR).

We are committed to protecting the confidentiality of personal data and the privacy of our online store users. We use the collected personal data exclusively to provide the services we offer. We respect the confidentiality of personal data and the privacy of online store users, so we will do everything necessary to protect them from any violations and abuses. Users’ personal data is one of the areas to which we pay extreme care and attention, as we are aware of the sensitive nature of this area.

Personal data controller and contact details

This policy applies to the processing (use) of any personal data carried out by Berryshka d.o.o. (the controller) or carried out on behalf of the controller.

Information about the controller:
Berryshka d.o.o.
Šentvid pri Stični 152
SI-1296 Šentvid pri Stični
Tax number: SI22324437
Registration number: 8240051000
Phone: +386 51 656 558
E-mail: info@berryshka.com

Which personal data we process and collect

Basic contact details (identity details)

• Name and surname, telephone number, e-mail address; information on the identity of business users also includes the company name and VAT registration number or tax number.

Contact details

• Address, postal code and city, country of residence, invoice address (if different from the contact information), telephone number and e-mail address

Order and payment data

• We keep all information about your order and payment, including data on cancelled orders and returns

Other data

• Data which the user voluntarily enters in the contact form or order in the online store

Technical data

• IP addresses, information about the operating system, browser, operating system, location of your device, type of device you use to access our website and similar are also collected to ensure security and provability
• When you visit, we also collect data with your consent by using cookies to ensure better functionality and user experience, security, counting the number of users on the website and ensuring the smooth operation of the website. A session cookie for identification and monitoring is assigned to an individual user at the beginning of the visit. The website can also store other cookies on the user’s computer, such as the user’s identification number in encrypted form (to identify the user upon the next visit) and cookies from Google Analytics systems (analysis of website visits). Session cookies are stored in the server memory only for the duration of the visit and are deleted after one hour of inactivity, while permanent cookies are stored on the visitor’s computer for 2 years based on your consent, and they become inactive after that period.
• We are not responsible for the correctness, completeness and up-to-datedness of the data entered by the users.

Legal basis for processing personal data

We may process your personal data on the following legal bases:

• When this is necessary to fulfill our legal obligations (e.g. issuing a proforma invoice or an invoice for ordered goods, for keeping financial and business books)
• When you have given consent for the processing of your personal data for an individual purpose of processing, whereby you always have the right to revoke the given consent
• We will use the questions you send us via our contact forms on our website or e-mail addresses published on the website exclusively to resolve the problem or prepare an answer to your question

Purposes of personal data processing

It is necessary to explicitly confirm your consent and awareness of the fact that by sending us an inquiry, comment or question via the contact form and entering your data, you have expressed your consent and awareness that your data (name and surname, e-mail address and telephone number) will be kept for the purpose of correct communication.
We may use your personal data for one or more of the following purposes:

• Communicating with you regarding the provision of our services and responding to your inquiries and orders
• Conclusion of the contract and fulfillment of the obligations arising from the concluded contract
• For the enforcement of any legal claims and dispute resolution
• For statistical analyses on the use of our website

How we obtain data

We collect information about you in several ways when you:

• Send inquiry
• Submit an order
• Request proforma invoice
• Cancel order
• Sign up for newsletter

Technical data is obtained automatically.

Google provides us with the data you have allowed.

Who has access to your personal data

Besides us, your personal data may be used by our trusted partners we need to help us carry out our obligations, in accordance with the applicable Personal Data Protection Act and the European General Data Protection Regulation:

• We provide the courier services with the data they need to transport and deliver the order
• If your order includes products that are in stock with the supplier, we provide the supplier with the data needed to prepare the shipment with your delivery address and the contents of the order
  We provide the data to suppliers and authorised repairers in case of complaints or questions for which we need their cooperation
• We provide the data to authorised institutions if required by law (the court, etc.)

Personal data storage periods

We will store and process your personal data to the extent necessary to fulfill the purposes of the processing and as long as it is necessary to complete the order of the goods and then within the limitation periods for obligations that may arise from the processing of this personal data in question.
We keep data obtained on the basis of consent until the consent is revoked.
We keep data on issued invoices for 10 years from the date of issue.
In cases where the storage period of personal data is stipulated by the law, we store the data in accordance with the law.

Ensuring security

We use several security and protection systems on our websites, ensuring adequate protection against loss, disclosure, unwanted modification or misuse of data. We use SSL (Secure Socket Layer) technology for transfers of all personal data, which enables the necessary protection during data transfer, ensuring the safety of our customers while the data travels to the database.

Only authorised persons (contractual partners) have access to the collected personal data.

Please help us protect your personal data by ensuring the security of your username and password.

Cookies

Cookies are text files downloaded to your computer by a web server and do not contain any information that could identify you. They let the server know that you have returned to the website and we can use it to adapt the website to the user.
If you do not want to have our cookies on your computer, remember that the storage of cookies is under the full control of your browser. You can restrict or disable the storage of cookies at any time by selecting the appropriate options in your browser, and you can permanently delete cookies on your device at any time.

Google Fonts

We use Google Fonts from Google (1600 Amphitheater Parkway Mountain View, CA 94043, USA) on our website. Google Fonts are used with no authentication and no cookies are sent to the Google Fonts API browser. If you have your own Google account, your data will not be transmitted to Google while using Google Fonts. Google only records the use of CSS and the fonts used and stores this information securely. For more about these and other questions visit https://developers.google.com/fonts/faq. Read about which information Google collects and how it uses this information at https://policies.google.com/privacy?hl=sl.

Your rights

We provide our subscribers and users with full support in the realization of the rights listed below:

• We fully explain to you on this page how we use your personal data
• In certain cases, you may also exercise the right to delete your personal data; however, if you have ordered from us, please note that we must keep your data in accordance with the law
• In certain cases, you may request a temporary or permanent ban on the further processing of your personal data in whole or in part
• We will upon your request provide you with your personal data collected in electronic form

You have the right to information about your personal data we keep, as well as the right to delete this data. If you have any questions about the deletion, processing or use of your data, please contact us at our e-mail address or send us a request by post to our address.
We must respond to your request of exercising your rights in relation to personal data with no undue delay and within one month of receiving your request at the latest.

Any change to our personal data protection policy will be published on this webpage.