Privacy Policy - Merchants

v.1.0.

Notice to individuals under Article 13 of the General Data Protection Regulation (GDPR) regarding the general processing of personal data by Appoteka d.o.o.

v.1.0.

THE CONTROLLER OF YOUR PERSONAL DATA IN CONNECTION WITH THE “SHOPAMINE” ONLINE SERVICE AND OTHER INTERACTIONS WITH APPOTEKA D.O.O. IS:

APPOTEKA, razvoj spletnih aplikacij, d.o.o.

company reg. no.: 3497623000

Kamniška 41-1000 Ljubljana-Slovenia

www.shopamine.com

privacy@shopamine.com

acting as the owner and supplier of the Shopamine Service (hereinafter: we, us, our”, “Appoteka d.o.o.” or “Controller”). An authorized person for the protection of personal data has been appointed and is available at privacy@shopamine.com

Introduction

This document sets out how we (Appoteka d.o.o.) process the personal data of individuals that visit our site, register a user account for the use of our Shopamine service or engage with our company in other ways (i.e. sign up to our newsletter, participate in hiring procedures, etc.). It also includes information on what data we process and what legal basis we use for doing so, how we process such data and to what end, who we share the data with, how long we keep it and what rights you may have as an individual.

Appoteka d.o.o. is a web application development company that primarily provides users with its own cloud-based web service for creating, hosting and modifying online websites and ecommerce stores - Shopamine (www.shopamine.com) as well as the associated hardware and software needed to run the service (hereinafter: “Shopamine service”, “Shopamine” or “Service”).

For this purpose, Appoteka d.o.o. receives, collects and processes a certain information, which includes personal data as defined by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “General Data Protection Regulation” or the “GDPR).

This document describes the processing of personal data of individuals visiting (or interacting in a way that personal data is entered/exchanged with the company like signing up to newsletters, open job postings, etc.) (hereinafter: “data subjects”, “individuals) and regarding which Appoteka d.o.o. is thereby acting as a data controller.

Unless otherwise stated, the terms in this data processing notice (e.g. personal data, processing, controller, processor, etc.) have the same meaning as the terms used in the GDPR. This data processing notice may be updated from time to time in order to better reflect changes in data protection or for other operational and legal reasons.

If we change this notice significantly, we will publish the news on our website or send a notification within the Service, or may notify all affected parties via email.

My data has been processed by a “Merchant” who hosts his online store on the Shopamine platform. What rights do I have in relation to the Shopamine service provider - Appoteka d.o.o. and where can I get more information on who the Merchant is and how he processes my data?

The nature of the business model of Appoteka d.o.o. and its cooperation with Shopamine users, namely businesses and sole traders who have set up a user account and use the Service to produce, upload and maintain their own website or ecommerce store through the Service (hereinafter: “Merchants”) means, that Appoteka d.o.o. may act as the processor of certain “End Customer” personal data (i.e. when you visit or buy from online stores that are hosted on the Shopamine platform, Shopamine stores and processes this data in order to provide its clients (Merchants) the various necessary features of the Service).

The dedicated Notice to individuals under Article 14 of the General Data Protection Regulation (GDPR) regarding the processing of personal data of visitors/End Customer on websites that have been created with the Shopamine Service can be found here and further provides all of the relevant data processing information for these situations.

If, as an individual, you want to obtain information about the processing of your data by an individual Merchant as the controller of your personal data (e.g. a Shopamine user to whom you have entrusted your personal data to so that he may process it for his own purposes, such as selling and delivering you a product that you have purchased through his Shopamine staged website), we advise you to look for the privacy policy of such Merchant, whereby it should be available in the footer of each Merchant website/ecommerce store.

You can also contact us at privacy@shopamine.com and (should you provide sufficient information or evidence, as the case may be) we shall help you with identifying which Merchant is acting as the data controller in relation to your data.

The data of an individual Merchant (i.e. when he is acting as the data controller), as well as other information on the processing of personal data in connection with the Service, must always be available to you at the time you entrust your personal data to a specific Merchant (i.e. when you make a purchase on store developed on the Shopamine platform). According to the GDPR, the transmission of this information as well as the responsibility for the processing thus performed is the responsibility of the individual Merchant (i.e. store/website owner).

Please continue reading this document in order to find out how we (Appoteka d.o.o.) process your personal data as a data controller when you interact with us, our website (i.e. set up an account) or engage with us in other ways (i.e. sign up for our newsletter or open job posting). 

1. Review of databases and types of personal data, categories of data subjects, data retention timescales and purposes/types of processing, that Appoteka d.o.o. performs in the name of each individual Merchant for the provision of the Service

In accordance with the GDPR, personal data means any information relating to an identified or identifiable natural person (i.e. data subject), whereby an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Appoteka d.o.o. processes the following personal data in accordance with the listed purposes:

PERSONAL DATA AND LEGAL BASISTYPES OF DATACATEGORIES OF DATA SUBJECTSDATA RETENTION PERIOD

PURPOSES OF PERSONAL DATA PROCESSING AND

TYPES OF PROCESSING*

Data on employees/representatives of the Merchant (obtained when you set up you Free Sign up or other type of account)

 

Legal basis: Contractual (i.e. the Master Service agreement and the Data Processing Agreement)

 

Names, surnames, email addresses (business or personal), signature, residency information, credit card information and other data that might be legally required to enter into the Master Service Agreement, communicate and issue invoices to a Merchant.Data of employees or representatives of the Merchant for setting up the user account / invoicing / recordkeeping and administration related activities.

Until the expiry of the retention periods (see below in How long do we store or process your personal data?) or fulfillment of the purpose of processing individual personal data, whereby this typically means until the relevant contract is in place.

*Appoteka d.o.o. may keep the data for another 15 days after deletion / termination of the main user account of the Merchant or our termination of the contract with the Merchant (in order to be able to destroy the stored data from all data carriers and its own servers as well as the servers of its service providers during this period).

- Necessary for offering the Service to the Merchant and pursuing the contractual rightsof Appoteka d.o.o. (i.e communication with the Merchant, invoicing, etc.): collection, recording, organization, structuring, cloud storage, storage (back-up), deletion, making available, segmentation, transmission.

- Manual (by Appoteka d.o.o. or its subprocessors): storage (back-up),

adaptation, alteration, retrieval, deletion, making available, segmentation, transmission.

- Situational (i.e. executing Data Subject rights, etc.): disclosure by transmission, dissemination or otherwise making available, restriction, erasure, destruction, storage (back-up).

- Feature based (i.e. when the Controller requests that certain features use the data (i.e. if the Merchant wants the data of his employees to be entered into a CRM system of Appoteka d.o.o.): combination, profiling, segmentation, storage (back-up), making available, transmission.

Data on individuals who send us inquiries / general communications (e.g. via our contact forms or through the messaging chat service on our website).

 

Legal basis: Negotiating the conclusion of a contract

Names, surnames, email addresses (business or personal), and other data that such individuals might choose to disclose to us.Individuals that are open to hearing from us based on the fact that they reached out to us through one of our official channels with a question or request.Until the expiry of the retention periods (see below in How long do we store or process your personal data?) or fulfillment of the purpose of processing individual personal data, whereby we typically store such data for a period of 2 years from last communication.

- Necessary for offering replying/communicating with the individual in order to reply to his request/question: collection, recording, organization, structuring, cloud storage, storage (back-up), deletion, making available, segmentation, transmission.

- Situational (i.e. executing Data Subject rights, deleting the data etc.): disclosure by transmission, dissemination or otherwise making available, restriction, erasure, destruction, storage (back-up).

Newsletter subscribers / marketing

 

Legal basis: Consent*

 

*To withdraw consent, the data subject can send a free-form email to privacy@shopamine.com or follow the unsubscribe link typically included in all of our marketing emails. 

Names,

email addresses (business or personal), and other data that such individuals might choose to disclose.

Individuals that are open to receiving our newsletter and other marketing materials. These situations generally occur when such individuals (or persons acting on their behalf) add their email to our newsletter / marketing list whereby we collect explicit consent in such cases.Until the expiry of the retention periods (see below in How long do we store or process your personal data?) or fulfillment of the purpose of processing individual personal data, whereby we typically store these data until receiving a consent withdrawal or data deletion request from the individual.

- Necessary for offering replying/communicating with the individual in order sent the individual our newsletter or marketing materials: collection, recording, organization, structuring, cloud storage, storage (back-up), deletion, making available, segmentation, transmission.

- Situational (i.e. executing Data Subject rights, deleting the data etc.): disclosure by transmission, dissemination or otherwise making available, restriction, erasure, destruction, storage (back-up).

 

Marketing communication with existing clients

 

Legal basis: Legitimate interest*

 

*To object to the processing justified by our legitimate interests, the data subject can send a free-form email to privacy@shopamine.com or follow the unsubscribe link typically included in all of our marketing emails. 

Names,

email addresses (business or personal), and other data that such individuals might choose to disclose.

Under certain conditions (and locally applicable legislation) we may be allowed to send marketing communication to clients (i.e. employees of Merchants) that already use our services based on our legitimate interests.Until the expiry of the retention periods (see below in How long do we store or process your personal data?) or fulfillment of the purpose of processing individual personal data, whereby we typically store these data until receiving a consent withdrawal or data deletion request from the individual.(Same as above).

Job posting candidate data

 

Legal basis: Negotiating the conclusion of a contract

Names, surnames, email addresses,

residency information, prior work experience,

curriculum vitae information and other data that might be legally required in order to carry out a candidate selection process.

Individuals that have responded to our open job postings and shared with us the required data.

Until the expiry of the retention periods (see below in How long do we store or process your personal data?) or fulfillment of the purpose of processing individual personal data, whereby the data shall not be kept longer than needed in order to select a candidate.

We shall delete all unselected candidate data if the candidate does not explicitly choose otherwise.

- Necessary for coordinating and performing job interviews and evaluations : collection, recording, organization, structuring, cloud storage, storage (back-up), deletion, making available, segmentation, transmission.

- Situational (i.e. executing Data Subject rights, deleting the data etc.): disclosure by transmission, dissemination or otherwise making available, restriction, erasure, destruction, storage (back-up).

Website visitor data in relation to www.shopamine.com or other Appoteka d.o.o. websites

 

Legal basis: Consent (with the exception of Necessary cookies)

Data linked to online identifiers of Shopamine website visitors 

 

(Please see our Cookie Policy at www.shopamine.com/cookies for more information)..

Website visitors that visit www.shopamine.com or other Appoteka d.o.o. websitesand choose to place analytics or marketing cookies on their devices.

Until the expiry of the retention periods (see below in How long do we store or process your personal data?) or fulfillment of the purpose of processing individual personal data, whereby the individual involved may also request that we delete the data.

(Please see our Cookie Policy at www.shopamine.com/cookies for more information).

(Please see our Cookie Policy at www.shopamine.com/cookies for more information).

1.2 Processing your personal data on the basis of “negotiating the conclusion of a contract” or a “contract” already in place

We may process certain personal data of individuals on the basis of a concluded contract (as indicated in the table above), whereby this typically includes a contract for offering you our services, (such as the Master Service Agreement) or when we negotiate with such individuals regarding the possible conclusion of a contract (i.e. when you reach out to us and ask us about our products and services via our official communication channels).

1.3. The legal basis for the processing of your data may also be set out in legislation

Appoteka d.o.o. may occasionally process personal data for the purposes of complying with legal and other lawful requirements, especially those governing personal data processing. For example, when a court, inspector or other holder of public authority orders Appoteka d.o.o. to provide him with access to the back-end of the Service, whereby the inspector may also have access to databases.

1.4. Based on the “legitimate interests” of Appoteka d.o.o. and when processing is necessary to “protect the vital interests” of an individual

Certain personal data may be processed for the purpose of securing the legitimate interests of Appoteka d.o.o. (as indicated in the table above). This is the case, for example, when the processing of your data would be necessary, in the context of criminal or civil proceedings (e.g. when the database would have to be presented as evidence in criminal or civil proceedings, otherwise Appoteka d.o.o. would suffer a penalty or material and irreparable damages) as well as fraud detection and prevention, whereby in such cases we will always process only those data that are strictly necessary to pursue these legitimate business objectives.

To object to the processing justified by the legitimate interest, the data subject can send a free-form email to privacy@shopamine.com or follow the unsubscribe link typically included in all of our marketing emails.

Appoteka d.o.o. may also process personal data of individuals even in cases where processing is necessary to protect the vital interests of the individual (e.g. when an individual could suffer serious security consequences based on his interactions with Appoteka d.o.o. or its services).

1.4. Processing your personal data on the basis of “consent”

We may process your email and name or potential other data (as indicated in the table above or next to the relevant input field) on the basis of an individual's consent (i.e. entering your email and consenting to it being processed by us and our partners for sending marketing or newsletter materials).

To withdraw consent, the data subject can send a free-form email to privacy@shopamine.com or follow the unsubscribe link typically included in all of our marketing emails.

2. How long do we store or process your personal data?

The data retention period for which we keep your personal data depends on the legal basis and purpose of processing. Personal data is generally kept for as long as it is necessary to fulfill the purpose for which the data were collected, or as long as specific regulations require that we keep the data:

- Processing we perform on the basis of a concluded “contract”:until the relevant contract is in place* *Appoteka d.o.o. may keep the data for another 15 days after deletion / termination of the contract (such as the main user account of the Merchant or our termination of the contract with the Merchant) in order to be able to destroy the stored data from all data carriers and its own servers as well as the servers of its service providers during this period.

- Processing we perform on the basis of “negotiating for the conclusion of a contract”: up to 2 years after last communication.

- Processing we perform on the basis of “legitimate interests”: until such interests exist or until we receive a withdrawal of consent / an objection in relation to such processing.

- Processing we perform on the basis of “consent”: until such interests exist or until we receive a withdrawal of consent / an objection in relation to such processing. *To withdraw consent, the data subject can send a free-form email to privacy@shopamine.com or follow the unsubscribe link typically included in all of our marketing emails. 

After such periods pass or the purposes themselves expire, the data is deleted.

3. Who processes your personal data?

3.1. Certain employees of Appoteka d.o.o.

Your personal data is processed by individual employees of Appoteka d.o.o., that is acting as Appoteka d.o.o. and data processor. Employees of our company process only those personal data that are required for their work, but they can also share them with each other if their work tasks and the internal rules of our company allow them to do so. All employees are committed to confidentiality and the protection of personal data.

3.2. State authorities

In certain cases, as prescribed by applicable law, Appoteka d.o.o. must provide your personal data to the competent state authorities as well as EU/international authorities responsible for financial, tax or other types of lawful supervision. In these types of cases, Appoteka d.o.o. may be compelled to provide data to third parties if such an obligation to provide or disclose the data is imposed on Appoteka d.o.o. by law or on the basis of a valid legal right of a third party.

3.3. Contractual processing of personal data

In addition to the employees in our organization, employees of our contractual subprocessors may also process personal data as confidential and only within the scope of the contract on external processing of personal data, which has been concluded with such processors. The contractual subprocessors may only process personal data in accordance with the organization's instructions, and may not use the data to pursue any other interest.

The contractual subprocessors with which Appoteka d.o.o. cooperates and may share your data with for the provision of its services and other purposes (as indicated in the table above), are:

  • persons who cooperate with Appoteka d.o.o. and provide their relevant services (legal advice, external developers, etc.),
  • the data hosting provider (see section 3.4.),
  • accounting service providers,
  • IT system maintenance providers,

We shall not pass on your personal data to unauthorized third parties.

To obtain a detailed list of all contracted subprocessors you can reach out to us at privacy@shopamine.com.

3.4. Hosting provider

Hosting our services and storing data (see the table above for when this might apply), is offered by the following contractor as a contractual processor:

Scaleway S.A.S.

BP 438, F-75366 Paris Cedex 08

Paris Trade and Companies Register number: B 433 115 904

https://www.scaleway.com/en/privacy-policy/

Server location:

France

Data hosting provider (Data of employees or representatives of the Merchant for setting up the user account / invoicing / recordkeeping and administration related activities.)

XENYA inženiring, proizvodnja in trgovina, d.o.o.

Celovška cesta 172, 1000 Ljubljana

Company reg. no.:: 5591872000

Server location:

Slovenia

Data hosting provider (for all other cases where we may store data

3.5. Analytics provider

Analytics regarding the use of our service are provided by the following contractor as a contractual processor:

- Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, ZDA (service: Google Analytics https://www.google.com/analytics/terms/dpa/dataprocessingamendment_20130906.htm). Processing location: EEA (data is stored only on servers located within the EEA).

3.6. Transferring personal data to third countries and international organizations and measures to protect transferred data

As a rule, Appoteka d.o.o. does not export personal data to third countries (i.e. outside of the European Union, Iceland, Norway and Liechtenstein) and to international organizations. An exception to this is data hosting/engaging of US-based ICT providers (despite the fact that the data is hosted on Appoteka d.o.o.'s servers within the EEA), as hosting may lead to data processing that may be treated as a non-EEA data transfer (by the sub-processor or the relevant public authority, whereby in the USA, public authorities, agencies and other entities may gain access to the data in certain extremely rare cases). On the date of preparation of this notice (November 2022), the contracts that serve as a basis for the hosting/processing by USA based ICT providers, has been drawn up to include standard contractual clauses and an official USA Executive order is being put in place to further protect such data.

You can obtain more detailed information on specific data user categories as well as more information on our contractual processors and our data transfers by sending us your request to:

- the email address: privacy@shopamine.com

4. Processing of special categories of personal data

Appoteka d.o.o. shall not willingly collect, store or otherwise process any categories of personal data (unless this is being done as a processor in the provision of the Shopamine Service, whereby we kindly ask you to read more about this in sections 4.1. and 4.1. here).

5. What rights do you have in connection with your personal data and how can you exercise them?

In connection with this data processing notification or regarding the processing of your personal data by us as (Appoteka d.o.o. - the company behind the Shopamine platform that is acting as the data controller) and our contractual processors, you can contact us at any time and without hesitation via privacy@shopamine.com.

You can also contact us on the email mentioned above in order to send us your specific requests and for exercising your other rights, which relate to your personal data and applicable local legislation or the GDPR.

As a data subject, the GDPR gives you the opportunity to exercise the following rights with us - Appoteka d.o.o.:

5.1. Right of access to your personal data (Article 15 of the GDPR)

You have the right to obtain confirmation, whether personal data are processed in relation to you and, where applicable, request access to the personal data concerned together with the information referred to in Article 15 (1) of the GDPR:

When personal data is transferred to a third country or international organization, you, as the data subject, have the right to be informed of appropriate safeguards in accordance with Article 46 of the GDPR Regulation in respect of such transfer.

If you request the aforementioned, you must also be provided with a copy of the personal data processed in connection with you. For any further copies requested by you, we may charge you a reasonable fee based on our administrative costs.

Where the data subject submits the request by electronic means, and unless the data subject requests otherwise, the information shall be provided in a commonly used electronic form.

5.2. Right to rectification of personal data (Article 16 of the GDPR)

As a data subject, you also have the right to have inaccurate personal data corrected in connection with you without undue delay.

The data subject has the right to supplement incomplete personal data, including the submission of a supplementary statement, taking into account the purposes of the processing.

5.3. Right to erasure of personal data ("right to be forgotten") (Article 17 of the GDPR)

As a data subject, you have the right to have your personal data deleted without undue delay. We shall delete personal data without undue delay even when one of the following reasons applies:

a) personal data are no longer needed for the purposes for which they were collected or otherwise processed;

b) when the processing of personal data was carried out on the basis of your consent, which you have revoked;

c) if you have objected to the processing of personal data and there are no overriding legitimate reasons for the processing,

d) if personal data have been processed illegally;

e) if personal data need to be deleted in order to fulfill a legal obligation in accordance with Union law or national law,

f) if personal data have been collected in connection with the offer of the “information society” services (which was offered to a person under the age of 15 and was not agreed to by the guardian of such a person).

In accordance with Article 17 (3) of the GDPR, in certain cases you do not have the right to achieve the deletion of personal data that had been processed by us (e.g. when we may require a minimized set of the data for the resolution of civil law procedures involving you, etc.).

5.4. The right to revoke consent or partially revoke consent

If, as a data subject, you have consented to the processing of your personal data for one or more specific purposes (see point 1.3 of this notice), you have the right to revoke your consent at any time without affecting the lawfulness of the processing that had been carried out on the basis of said consent until its revocation.

You can limit or revoke/withdraw your consent for the processing of data at any time by contacting us at privacy@shopamine.com.

5.5. Right to limit processing (Article 18 of the GDPR)

As a data subject, you have the right to restrict the processing of your personal data when one of the following cases applies:

a) when, as a data subject, you dispute the accuracy of the data, for a period that allows the accuracy of the personal data to be verified;

b) where the processing is illegal and as a data subject, you oppose the deletion of personal data and instead request a restriction on their use;

c) where the client no longer needs personal data for the purposes of processing, but you, as the data subject, need them to assert, enforce or defend legal claims;

d) when, as a data subject, you lodge an objection to the processing and until it is verified that the legitimate reasons of the client as the controller prevail over your reasons (i.e. the reasons of the data subject).

Where the processing of personal data has been restricted, such personal data, with the exception of their storage, shall be processed only with the consent of the data subject or to assert, enforce or defend legal claims or to protect the rights of another natural or legal person due to important interests of the European Union or the nation in which the controller resides.

We may inform you about this before lifting the processing restriction.

5.6. Right to data portability

As a data subject, you have the right to receive personal data that relate to you and which you have provided to us in a structured, commonly used and machine-readable form, and you have the right to pass this information on to another controller without us being able to hinder you in doing so when:

(a) processing is based on consent or a contract; and

(b) processing is carried out with automated means.

As a data subject, in exercising this right of data portability, you have the right to transfer personal data directly from one controller (e.g. Appoteka d.o.o.) to another, where technically feasible.

5.7. Right to object to processing (Article 21 of the GDPR)

As a data subject, you have the right to object to the processing of personal data concerning you on grounds relating to your specific situation, where the processing is necessary for the performance of a task in the public interest or in the exercise of official authority, which has been granted to the controller or where the processing is necessary for legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data, in particular when the data subject is a child. The above also applies to the creation of profiles in such cases of processing.

In the event that you object, Appoteka d.o.o. shall stop processing personal data unless it can be proven, that the legitimate interests for processing outweigh the interests, rights and freedoms of you as a data subject, or that the processing is necessary for the enforcement, implementation or defense of legal claims.

When personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data relating to them for the purposes of such marketing, including the creation of profiles insofar as such direct marketing is concerned.

Where the data subject objects to the processing for direct marketing purposes, the personal data shall no longer be processed for those purposes.

As part of using information society services, you, as a data subject, can exercise your right to object to processing by automated means using technical specifications.

Where data are processed for scientific or historical-research purposes or for statistical purposes, you as the data subject have the right to object to the processing of data relating to you for reasons related to your particular situation, unless the processing is necessary for the performance of a task carried out due to reasons of public interest.

5.8. Right to lodge a complaint with a supervisory authority

If you believe that the processing of personal data performed in connection with you by us (Appoteka d.o.o.), violates personal data protection regulations, you may, without prejudice to any other (administrative or other) remedy, lodge a complaint with the supervisory authority, in particular in the country where you have your habitual residence, your place of work or where the infringement is alleged to have taken place (in Slovenia the relevant authority is):

- Informacijski pooblaščenec, Dunajska 22, 1000 Ljubljana, Slovenia, EU, email: gp.ip@ip-rs.com, phone: +38612309730, website: www.ip-rs.com.  
A list of other EU supervisory authorities and their contact information can be found here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.

6. Existence of automated decision making and profiling   
 

The service does not include automated decision making or profiling based on your personal data.

7. Processing of personal data of persons under 15 years of age 

We do not knowingly collect or otherwise process personal data of persons under 15 years of age. When we might have inadvertently collected, stored or otherwise processed such data (i.e. when it might have been transferred to us without notice) without the consent of the parent or guardian, we shall do everything necessary to delete all of the data.

The above-described persons or their parents or guardians may submit their requests for the deletion of such data to us at privacy@shopamine.com.

8. Who can you contact for further clarification regarding the processing of personal data in our organization and regarding your rights?

You can limit or revoke/withdraw your consent for the processing of data at any time by contacting us at:

- the email address: privacy@shopamine.com

Should you provide sufficient information (or evidence, as the case may be) we may also help you identify which subprocessor or Merchant is also processing your data.

9. Protection of personal data

Our company carefully stores and protects personal data through organizational, technical and logical procedures and measures to protect the data from accidental or intentional unauthorized access, destruction, alteration or loss, and unauthorized disclosure or other form of processing to which you have not expressly consented to.

To this end, we have also adopted appropriate internal processes and set up various measures (e.g. assigning, using and changing passwords, locking premises, offices, server and workstation locations, regularly updating software and upgrading security-critical components, physically protection of material containing personal data in specially designated places, training of employees, etc.). The organization also demands these security commitments from its contractual processors.

Our subprocessors also protect the data with their own security mechanisms and tools, whereby we can offer you such information upon receiving your request at privacy@shopamine.com.

10. Version and date of the last update of this notice

The text of this notice represents version 1.0 of this document. Feel free to reach out to us via our official channels should you require any previous version of this document that might be relevant to your needs.

This notice was last updated on the 28th November, 2022.

 

Version: 1.0.

Published: 28. 11. 2022

Last update: 28. 11. 2022


 

Appoteka d.o.o.

 

We automatically place necessary cookies on your device when you visit our website so that our website may be displayed and function properly. We may also place non-necessary analytical and marketing cookies on your device if you choose the “Accept All” option. These cookies collect and analyse different information about your interactions with our website and other websites for targeted advertising purposes.

Please click the Accept All button to agree to the use of all types of cookies or opt out of non-essential cookies by clicking Reject All. See our Cookie Policy to learn more.

×
Managing cookies on the Shopamine website
Mandatory cookies

are cookies that are essential for the proper functioning of the website, whereby the transmission of information in the communication network would not be possible without them. These cookies are also necessary in order for us to offer you the services, which are available on our website. They allow you to log in to the user profile, select the language, agree to the terms and conditions and identify the session of the user. We are not obliged to obtain consent for their use.

Analytical cookies

These cookies help us understand how our visitors use our website. They help us improve the user experience and identify user requirements and trends. We only use these cookies if you have explicitly consented to their use.

Advertising cookies

Third-party plug-ins and tools used as cookies enable various functionalities to work, help us analyse the frequency of visits and how the website is used. If an individual does not agree to the use of these cookies, they will not be installed, while it may however happen, that some interesting features of the website will not be available. We only use these cookies if you have explicitly consented to their use.

Social network cookies

These cookies make it possible for us to provide content for posts on social media and record your actions so that we may provide a more personal and enhanced user experience. We use these cookies only if you are logged into a Twitter, Facebook or Google user account when using the website.

1. General information about cookies 1.1. What are cookies?

Cookies are small text files that most modern websites store on the devices of their visitors, i.e. people who access certain websites on the Internet with their devices. The storing of cookies is under the complete control of the user, since users can easily configure their browser to restrict or disable the storage of cookies.

While visiting the website and its subpages and performing operations on the website, your computer, phone or tablet, automatically or after gaining your explicit consent, stores certain cookies through which various data can be recorded.

1.2. How do they work and why we use them?

Each visitor or shopper is assigned a cookie in order to identify him and ensure traceability at the beginning of each use of the online store. The servers provided to the company by the subcontractor automatically collect data on how visitors, shop owners or shoppers use the online store and store this data in the form of an activity log.

The servers store information about the use of the online store, statistics and IP numbers. Data on the use of the online store by shoppers can be used by the company for compiling anonymous statistics that help us improve the user experience as well as market products and / or services through an online store.

Indirectly and upon obtaining consent, the online store may also store external service cookies on the visitor's or shopper's device (e.g. Google Analytics) which are used to collect data on website visits. Regarding external services, the rules and general conditions on the processing of personal data, which are available at the links below, apply.

2. Permission to use cookies

If the settings of the browser with which you visit the website are such, that they accept all cookies, it means that you agree to their use. In case you do not want to use cookies on this website or you want to remove them, you may follow the procedure below. Removing or blocking cookies may result in suboptimal performance of this website.

3. Mandatory and optional cookies and your consent 3.1. We are not required to gain your consent for the use of mandatory cookies:

Mandatory cookies are cookies, that are essential for the proper functioning of the website, whereby the transmission of information in the communication network would not be possible without them. These cookies are also necessary in order for us to offer you the services, which are available on our website. They enable login into the user profile, language selection, agreeing to the terms and conditions and user session identification.

3.2. Cookies that are not necessary for the normal operation of the website, and for which we are obliged to obtain your consent (optional cookies):

Analytical cookies

These cookies help us understand how our visitors use our website. They help us improve the user experience and identify user requirements and trends. We only use these cookies if you have explicitly consented to their use.

Advertising cookies

Third-party plug-ins and tools used as cookies enable various functionalities to work, help us analyse the frequency of visits and how the website is used. If an individual does not agree to the use of these cookies, they will not be installed, while it may however happen, that some interesting features of the website will not be available. We only use these cookies if you have explicitly consented to their use.

Social network cookies

These cookies make it possible for us to provide content for posts on social media and record your actions so that we may provide a more personal and enhanced user experience. We use these cookies only if you are logged into a Twitter, Facebook or Google user account when using the website.

4. How to manage cookies?

You can manage cookies by clicking on the "Cookie settings" link in the footer of the website.

You can also control and change cookie settings in your own web browser.

In case you want to delete cookies from your device, we advise you to follow the described procedures, by doing so, you will most likely limit the functionality of not only our website but also most other websites, as the majority of modern websites use cookies.