Personal Data Protection - GDPR

GDPR Regulation – general regulation on personal data protection

Data we collect:
Name, surname, address, telephone number and email address
The legal basis for processing personal data is in the case of an order (contract – distance purchase), which means that the client personally consents to data processing.
Personal data is processed for the purpose of communication via email, SMS or telephone for the purpose of processing the order, responding to an individual's question or inquiry. If you consent to being informed about new offers on the website www.yonidivinespa.com, personal data is processed for the purpose of informing you via email.
If you have given consent to be informed about news in the online store www.yonidivinespa.com, we store your email address permanently or until your cancellation. We keep personal data entered during the order for as long as www.yonidivinespa.com and the individual can assert claims against each other based on the concluded contract or for five years after the contract expires.
After the retention period expires, we effectively and permanently delete personal data.
Providing personal data is voluntary; the individual is not obliged to provide personal data, but if they do not provide it, they cannot receive goods, services or answers to their question, or information about novelties on the website. Which data needs to be provided is indicated on the individual online form.
We do not disclose personal data of individuals to unauthorised persons, except to those who perform certain tasks related to data processing based on a written contract with the online store www.yonidivinespa.com (YONI DIVINE SPA AAMA s.p.).
Contractual processors to whom we disclose personal data:
- Accounting service ()
- Parcel delivery (Pošta Slovenije d.o.o., DPD)
Contractual processors may process personal data only within the controller's (www.yonidivinespa.com) instructions and may not use personal data for other purposes. The online store www.yonidivinespa.com and users do not export personal data to third countries (outside the member states of the European Economic Area – EU member states and Iceland, Norway and Liechtenstein) or to international organisations.
The individual has the following rights regarding personal data:
The right to request from YONI DIVINE SPA AAMA s.p. at any time:
- Confirmation whether personal data concerning him/her is being processed
- Access to personal data and the following information (purpose of processing, types of personal data, users to whom personal data has been or will be disclosed)
- One (free) copy of personal data in a form chosen by the individual (if the request is made by electronic means of communication and the individual does not request otherwise, the copy is provided in electronic form). For additional copies requested by the individual, we may charge a reasonable fee considering the costs.
- Correction of inaccurate personal data
Restriction of processing when:
- the individual contests the accuracy of personal data, for a period that allows the controller www.yonidivinespa.com to verify the accuracy of personal data.
- the processing is unlawful and the individual opposes the deletion of personal data and instead requests restriction of their use.
- the controller www.yonidivinespa.com no longer needs the data for processing purposes but the individual needs them to assert or defend legal claims.
- Deletion of all personal data (right to be forgotten) if the conditions from Article 17 of the General Data Protection Regulation are fulfilled, especially if the individual withdraws consent for the processing of personal data.
- Transfer of personal data in a structured, commonly used and machine-readable form, with the right for the individual to transmit this data to another controller without hindrance from the original controller
- The right to lodge a complaint against the controller with the Information Commissioner if the individual considers that the processing of his/her personal data violates the General Data Protection Regulation. Every individual who considers that any of his/her rights regarding the protection of personal data has been violated by us can lodge a complaint with the supervisory authority – the Information Commissioner of the Republic of Slovenia: Republic of Slovenia, Information Commissioner, Zaloška 59, 1000 Ljubljana, https://www.ip-rs.si
Withdrawal of consent:
Consent can be withdrawn at any time by sending a request to info@yonidivinespa.com. After withdrawal of consent, the controller www.yonidivinespa.com will effectively delete the data, so that the data can no longer be linked to the individual.
After the withdrawal of consent, we will no longer be able to provide services that require personal data for which the individual has withdrawn consent.
The individual can address all requests related to exercising rights regarding personal data in electronic form to info@yonidivinespa.com.
For the purpose of reliable identification in the event of exercising rights regarding personal data, the controller may request additional information from the individual, and may refuse action only if it proves that the individual cannot be reliably identified.
The controller www.yonidivinespa.com must respond to the individual's request exercising his/her rights regarding personal data without undue delay and no later than within one month of receiving the request.
The controller www.yonidivinespa.com implements appropriate organisational and technical measures to protect personal data, adapted to the risks that the processing of personal data represents. These measures are defined in the personal data protection policy.