Cookies

Company:
Business Name: Liptov Farm Trade s. r. o.
Registered Office: Trnavská cesta 32/C, 821 08 Bratislava – Ružinov, Slovak Republic
Company ID No.: 54 104 785
Registration: in the Commercial Register maintained by the Municipal Court Bratislava III, Section Sro, Insert No. 155666/B
Contact details: konopnafarmaliptov@gmail.com
(hereinafter referred to as the “Company” or the “Controller”),

In order for the Operator’s services on the website www.konopnafarmaliptov.sk (hereinafter referred to as the “Website”) to function properly, small data files called cookies are stored on your device.

What are cookies? A cookie is a small text file that a Website stores on your computer or mobile device when you visit it. It allows the Website to remember your actions and preferences(such as login name, language, font size and other display preferences) over time so that you do not have to re-enter them each time you return to the Website or navigate from one page to another. Cookies are recorded and stored on the basis of your consent in accordance with Section 55(5) of Act No. 351/2011 Coll. on Electronic Communications, as amended. You can prevent the storage of these files on your device at any time by setting your web browser (www.allaboutcookies.org)
Purpose of the processing of the personal data for which the personal data are intended, legal basis for the processing of the personal data and identification of the recipient (Article 13(1)(c) and (e) of the GDPR Regulation and Article 19(1)(c) and (e) of the Act ):

The following cookies are used on the Operator’s website:

1. Technical (essential) cookies that enable the basic functions of the Website. Necessary cookies enable the recording of basic functions such as security settings, network management and accessibility. You can disable them by changing your browser settings, which in turn may affect the functioning of our Website.
1. Functional cookies help the Operator to set the same way the Website works for you as long as you view it, e.g. language selection, font size and other display preferences. Within the functional cookies, the Operator records data that allows the Operator to track traffic to the Website. These are statistics only and the data is anonymised, so the Operator is not able to identify you on the basis of this data. The Operator uses Google Analytics, an analytics tool from Google Inc. that records accesses to the Operator’s Website and its components. By analysing the traffic and the behaviour of visitors, the Operator then tries to adapt the content of the Website. The manner and scope of use of the data by Google can be found in the following link,
1. Marketing (advertising) cookies, which, for example, allow you to see advertising that interests you, measure the effectiveness of ads, etc.

For the collection of marketing cookies, the Operator uses cookies from Facebook Ireland Ltd., which display the Operator’s advertising on the Facebook social network or on another digital platform belonging to that company. In addition, the cookies of this company record the displayed advertisements in order to improve them. These cookies also track user behaviour on websites that have a Facebook pixel or Facebook Cookies. In the case of these files, personal data about the visitor to the Website is collected in the scope of contact data(in particular name, email address and telephone number) for the purpose of pairing with the user’s account on the social network Facebook and event data comprising other information about visitors to the Website and the actions they take on the Website, such as visits to the Website, application installations and product purchases on the Website for the purpose of analytics and measurement. The manner and scope of Facebook’s use of the data can be found in the following link.

Cookies from LinkedIn Ireland Unlimited Company are also recorded as part of marketing cookies. These are cookies that record the language preferences of a visitor to the site, are used to direct the visitor from other websites, track the visitor in order to present relevant advertising and measure the success of the ads, tailor the content. In these cases, the following data are recorded in particular: browser cookies on the mobile or computer, Google advertising ID on the Android device or IDFA on the iOS device, operating system, make and model of the device(user agent), IP address, access time(timestamp), page URL or app name, which are combined with other data of the registered user of the LinkedIn social network. The manner and scope of use of the data by LinkedIn can be found in the following link.

Cookies are obtained by the Operator on the basis of your consent, in the case of essential files, by your continued use of the Website or by your direct consent to the recording of other cookies. You can control and/or delete cookies at your discretion. You can delete all cookies stored on your computer and you can set most browsers to prevent them from being stored. However, in this case, you may have to manually adjust some settings each time you visit the Website and some services and features may not work.

Adjusting cookie settings in the most common browsers:

Firefox Google Chrome Internet Explorer Safari

To set cookies in other browsers, please refer to the documentation of the browser in question.

Legitimate interests of the Controller or a third party if the Personal Data is processed pursuant to Article 6(1) (f) of the GDPR and Article 13(1)(f) of the Act (Article 13(1)(d) of the GDPR Regulation and Article 19(1)(d) of the Act ): OU not processed on the basis of such a legal basis.
Information on whether the Data Controller intends to transfer the personal data to a third country or international organisation, identification of the third country or international organisation (Article 13(1)(f) of the GDPR Regulation and Article 19(1)(f) of the Act ): The operator does not intend such a transfer.
Retention period of personal data; if this is not possible, information on the criteria for determining it (Article 13 (2) (a) of the GDPR Regulation and Article 19 (2) (a) of the Act ):

Basic, so-called essential cookies are stored for the duration of the visit to the website. Functional cookies are stored for 13 months Marketing(advertising) cookies are stored for 13 months.

The right of the Data Subject to request from the Data Controller access to the Personal Data concerning the Data Subject, the right to rectification of the Personal Data, the right to erasure of the Personal Data or the right to restriction of the processing of the Personal Data, the right to object to the processing of the Personal Data, as well as the right to portability of the Personal Data (Article 13(2)(b) of the GDPR Regulation and Article 19(2)(b) of the Act ):

The data subject has the following rights in relation to the Controller in relation to the OU:

1. Right to request access to personal data relating to the Data Subject: the Data Subject has the right to obtain confirmation from the Data Controller as to whether the Data Subject’s personal data is being processed and, if so, the right to obtain access to that personal data and information about
  - the purpose of the processing of personal data,
  - the category of personal data processed,
  - the identification of the recipient or the category of recipient to whom the personal data have been or are to be disclosed, in particular the recipient in the third country or international organisation, if applicable,
  - the period of retention of the personal data; if this is not possible, information on the criteria for determining it,
  - the right to require the controller to rectify, erase or restrict the processing of personal data relating to the data subject, or to object to the processing of personal data,
  - the right to institute proceedings under section 100
  - the source of the personal data, unless the personal data were obtained from the data subject,
  - the existence of automated individual decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and Article 28(1) and (4) of the Act (in these cases, the controller shall provide the data subject with information, in particular, on the procedure used, as well as on the significance and the envisaged consequences of such processing of personal data for the data subject).

The controller shall provide a copy of the OA being processed. For any additional copies requested by the Data Subject, the Controller may charge a reasonable fee corresponding to the administrative costs. Where the Data Subject has made a request by electronic means, the information shall be provided in a commonly used electronic form, unless the Data Subject has requested otherwise.

The information must be provided immediately and at the latest within 1 month. The controller shall have the right to extend the processing time for the request by a further 2 months if the request is complex or frequent. However, it must notify the Data Subject within 1 month of the reason for the extension of the processing period.

In the event of an unreasonable or excessive request, the Operator shall have the right to charge a fee proportionate to the cost or to refuse the request. It must explain the reason for the refusal and the right of the Data Subject to lodge a complaint with the supervisory authority.

1. Right to rectification of personal data: the data subject has the right to have incorrect personal data concerning him or her rectified by the Controller without undue delay. With regard to the purpose of the processing of personal data, the Data Subject has the right to have incomplete personal data completed.

1. Right to erasure of personal data or right to restriction of processing of personal data: the data subject has the right to have the Controller erase the personal data concerning him or her without undue delay. The Data Controller is obliged to erase the personal data without undue delay if the Data Subject has exercised the right to erasure pursuant to the preceding sentence, if
  - The PI is no longer needed for the purpose for which it was collected or otherwise processed,
  - The data subject withdraws his or her consent to the processing of personal data and there is no other legal basis for the processing of personal data
  - The data subject objects to the processing of personal data and there are no overriding legitimate grounds for the processing of personal data,
  - OUs are processed illegally,
  - the reason for deletion is the fulfilment of an obligation under the GDPR Regulation, the Act, a special regulation or an international treaty by which the Slovak Republic is bound, or
  - OUs were obtained in the context of offering information society services.

The preceding two sentences shall not apply if the processing of personal data is necessary

to exercise the right to freedom of expression or the right to information,
to fulfil an obligation under the GDPR Regulation, the Act, a special regulation or an international treaty to which the Slovak Republic is bound, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller,
for reasons of public interest in the field of public health,
for archiving purposes, scientific purposes, historical research purposes or statistical purposes where the law is likely to render impossible or seriously impede the achievement of the purposes of such processing, or
to assert a legal claim.

The data subject has the right to have the Controller restrict the processing of the Personal Data if

The data subject objects to the accuracy of the Personal Data during a period allowing the Data Controller to verify the accuracy of the Personal Data,
the processing of the Personal Data is unlawful and the Data Subject objects to the erasure of the Personal Data and requests instead that their use be restricted,
the controller no longer needs the PII for the purpose of processing the PII, but the Data Subject needs it to assert a legal claim, or
The Data Subject objects to the processing, pending verification whether the legitimate grounds on the part of the Controller outweigh the legitimate grounds of the Data Subject.

If the processing of personal data has been restricted, except for storage, the Data Controller may only process the Personal Data with the consent of the Data Subject or for the purpose of asserting a legal claim, for the protection of individuals or for reasons of public interest.

1. Right to object to the processing of personal data: if personal data is processed for direct marketing purposes, the Data Subject has the right to object at any time to the processing of his or her personal data, including profiling. If the Data Subject objects to processing for direct marketing purposes, the Data Controller may no longer process his or her personal data for these purposes.

1. Right to data portability: the data subject has the right to obtain the personal data concerning him or her that he or she has provided to the Data Controller in a structured, commonly used and machine-readable format, and has the right to transfer such data to another controller. The right of portability must not adversely affect the rights and freedoms of others. This right shall apply if:
  - the processing is based on consent or contract; and
  - the processing is carried out by automated means

The data controller has a time limit of 1 month for the transfer of data, which may be extended by 2 months if the transfer is complex. He must inform the Data Subject thereof and justify why the time limit has been extended. In the case of steps to transfer by the Data Controller, he must inform the Data Subject why he has not done so and of the Data Subject’s right to lodge a complaint with the supervisory authority.

The right of the Data Subject to withdraw consent to the processing of Personal Data at any time (Article 13(2)(c) of the GDPR Regulation and Article 19(2)(c) of the Act ): The data subject has the right to withdraw consent to the processing of personal data concerning him or her at any time. Withdrawal of consent shall not affect the lawfulness of the processing of Personal Data based on consent prior to its withdrawal. The data subject may withdraw consent in the same way as he or she gave consent.
The right of the Data Subject to file a petition under Section 100 of the Act or a complaint to the supervisory authority under Article 77 of the GDPR (Article 13(2)(d) of the GDPR Regulation and Article 19(2)(d) of the Act ): Without prejudice to any other administrative or judicial remedies, the Data Subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement, if he or she considers that the processing of personal data concerning him or her is in breach of the GDPR.

The data subject has the right to file a petition with the Office for Personal Data Protection to initiate personal data protection proceedings. The purpose of the proceedings is to determine whether the rights of natural persons have been violated in the processing of their personal data or whether there has been a violation of the GDPR Regulation, the Act or a special regulation in the area of personal data protection and, if deficiencies are found, to impose, if reasonable and expedient, corrective measures or a fine for a violation of the GDPR Regulation, the Act or a special regulation in the area of personal data protection.

The application for initiation of proceedings must contain:

the name, surname, correspondence address and signature of the applicant,
identification of the person against whom the application is directed, stating his name, surname, permanent residence or name, registered office and identification number, if any,
the subject matter of the request, indicating the rights allegedly infringed by the processing of personal data,
evidence in support of the claims made in the application,
a copy of the document or other evidence proving the exercise of the right under the Act or a special regulation, if such right has been exercised by the Concerned Person, or a statement of the reasons worthy of special consideration for not exercising the right in question, if the application has been submitted by the Concerned Person.

A template for the initiation of the procedure will be published on the website of the Office for Personal Data Protection.

The existence of automated individual decision-making, including profiling (Article 13(2)(f) of the GDPR Regulation and Article 19(2)(f) of the Act ):

The controller does not use automated individual decision-making or profiling.

Bratislava, 3. 11. 2021

Hemp Farm Trade s. r. o.