Privacy Policy

1. DATA CONTROLLER:

We value the privacy of all individuals and respect their right to data protection. The Data Controller proceeds with the processing of personal data in accordance with Act No. 18/2018 Coll., on the protection of personal data and on the amendment and supplementation of certain laws of the data subjects Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), (hereinafter referred to as “the Act”).

In connection with our activities, we process personal data for various purposes. In most cases, the processing of personal data is necessary pursuant to a specific regulation or international treaty to which the Slovak Republic is bound.

The controller processes personal data only on lawful legal grounds: – the performance of a contract or pre-contractual measures; – the performance of our legal obligation under a special regulation; – the performance of a task carried out in the public interest; – the fulfilment of our legitimate interests, unless these interests are overridden by the legitimate interests of the data subject; – where necessary for the protection of the life, health or property of the data subject or of another natural person. In other cases, we process the personal data of data subjects only with the consent of the data subject, which the data subject may withdraw at any time.

2 PURPOSES AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA:

Where there is a contractual relationship between the data subject and the Data Controller, the Data Controller shall process the personal data of the data subjects on the basis of the legal title of the contract, exclusively to the extent necessary for the performance of the purposes of the contract.

For the purpose of resolving complaints, dealing with shortcomings and inquiries, the Controller processes the personal data of the data subjects on the basis of the legal title of legitimate interest or consent of the data subject, exclusively to the extent of name, surname, address, e-mail, telephone number, the processing of which is necessary to achieve the aforementioned.

If the data subject voluntarily communicates his or her personal data to the Data Controller without prior intervention of the Data Controller, the Data Controller will process these personal data to the extent necessary on the basis of the legal title of legitimate interest (in particular, for the purpose of assessing the data subject’s request and providing the data subject with a response).

The personal data is processed by the Hildegard Plants website for the following purposes:

  • invoicing for the services provided
  • sending email offers of Hildegard Plants products
  • contact on social networks
  • drawing up a contract, debt recovery

The Hildegard Plants website will not disclose personal data to third parties, with the exception of – our company does not have intermediaries.

Contests held on social networks:

Some competitions may take place in the form of data sharing, in particular comments, via the data subjects’ profiles on social networks (e.g. the data subject’s response to the fun page of the Operator via his/her profile on the social network Facebook or Instagram). In this case, the Operator will process the personal data of the data subjects, in particular the login name, for the purpose of the data subject’s participation in the competition and the eventual announcement/publication of the winner of the competition (on the Operator’s profile page on the social network) and contacting him/her to hand over the prize (via direct messages on the social network). The legal basis for the processing of personal data for the purposes is the consent of the data subject in the form of voluntary participation in the competition. For the purpose of handing over the prize to the winners, the controller may also process other personal data in the range of first name, surname and residence which are necessary to achieve the purpose of handing over the prize on the legal basis of the data subject’s consent. The data subject may withdraw the consent at any time at the following address
contacts of the Data Controller. The Controller will process these personal data for the period necessary to achieve the purpose of the competition or until the data subject’s consent is withdrawn. After withdrawal of consent, the Controller will no longer process the personal data for the purpose to which the withdrawal of consent relates. However, the Controller may continue to process the data subject’s personal data to a limited extent on the legal basis of legitimate interest after the withdrawal of consent, for the period of time strictly necessary to demonstrate the lawfulness of the processing of personal data or to assert legal claims or to comply with obligations arising from generally binding legal regulations (as a rule, for a period of 3 years from the withdrawal of consent to the processing of personal data).

3. RETENTION PERIOD OF PERSONAL DATA:

All personal data shall be processed only to the extent necessary for the fulfilment of the purposes set out in clause 2 of these Terms and Conditions and only for the period necessary for the achievement of those purposes, but no longer than the period specified by or in accordance with the relevant legislation.

Personal data processed by the Data Controller on the basis of the data subject’s consent shall be processed until the consent is withdrawn; however, the Data Controller may also process some of these data after the consent is withdrawn, if it has the right to do so for another of the following reasons

Scroll to Top