GDPR and privacy

Information on the processing of personal data and cookies

OPERATOR'S DECLARATION ON THE PROCESSING OF PERSONAL DATA

Kingray, s.r.o. with its registered office at Ružová 728/2, 050 01 Revúca IČO: 45396736 as the operator of the website www.kingray.eu (hereinafter referred to as the “operator”) that it has taken appropriate technical and organizational measures to ensure the protection of the rights of data subjects declaring the lawful processing of personal data . The operator has also put in place a transparent system for recording security incidents and any questions from the data subject as well as other persons.

Individual information can also be obtained by telephone at 00421918 988 998, by email: info@kingray.eu in person at Ružová 728/2, 050 01 Revúca, or at the operator's website: https://www.kingray.sk/ s / personal-data protection

Below we provide information on the processing and protection of personal data in accordance with the Regulation of the EP and the Council of the EU no. 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / EC (General Data Protection Regulation) and Act of the Slovak Republic no. 18/2018 Coll. on Personal Data Protection and on Amendments to Certain Acts (hereinafter referred to as the “Personal Data Protection Act”).

Operator

Kingray, s.r.o.

Ružová 728/2,

050 01 Revúca

IČO: 45396736

We process your data for our own purposes as an Operator. This means that we determine the purposes for which we collect your personal data, determine the means of processing and are responsible for their proper execution.

List of our intermediaries and recipients who process your personal data

When visiting our website https://www.kingray.eu/, when registering a user account and sending marketing materials - newsletters, when filling out the contact form, your data is also processed by another entity that is in the position of intermediary or recipient:

EVici webdesign s.r.o., Petra Bezruče 139, 747 91 Štítina, Czech Republic, ID: 28598661, type of service: creation of eshop upgates

Všeobecná úverová banka, a.s., Mlynské nivy 1, 829 90 Bratislava 25, type of service: payment gateway

Slovenská pošta, a.s.Partizánska cesta 9, 975 99 Banská Bystrica 1, type of service: transport company

Direct Parcel Distribution SK s.r.o., Technická 7, 821 04 Bratislava, ID: 35834498, type of service: transport company

Leadhub s.r.o., IČ: 044 66 683, with its registered office at Štefánikova 16/29, Smíchov, 150 00 Prague 5, type of service: electronic means containing tools for mass e-mailing

Ui 42 spol s.r.o., Sibírska 62, 831 02 Bratislava, ID: 35713003, type of service: web applications, online performance marketing

Balíkobot, s.r.o., IČ: 06283799, Revoluční 16, 110 00 Praha 1, type of service: Technology for faster dispatch of consignments

Purpose of personal data processing

On behalf of Kingray, s.r.o. as an operator, we obtain from you only the data we really need to provide a full service - sales of electronic devices, biolamps, health and beauty devices, nutritional supplements, cosmetics and cosmetic aids, in providing client and product support, or in handling any complaints. The purposes of personal data processing in individual process steps are:

When communicating with clients by telephone, in person, in the form of electronic / paper mail or via an online contact form, we process data in accordance with Art. 6 par. 1 letter f) GDPR Regulations - of legitimate interest in order to respond to your request / suggestion or question regarding the services and products provided, when it is necessary to verify the relevance of the request, or to make any subsequent contact with you as an affected person. 

In case of showing interest in our services, when creating an order for products / services by phone, in person, in the form of electronic / paper mail or direct purchase through the online store https://www.kingray.eu/, we process data in accordance with Art. 6 par. 1 letter b) GDPR regulations - where data processing is necessary to carry out the necessary measures according to your requirements as the customer before concluding and confirming the order, ie during the pre-contractual relationship process - e.g. identification of the client during the creation, definition or modification of the order, determination or change of the address and time of delivery, or addition of other necessary data for closing the order.

After confirmation of the order, ie after the establishment of a contractual relationship between Kingray, s.r.o. and by you as the affected person to the customer / client, during the necessary cooperative communication with the client, when informing about changes in the order status, during the final personal delivery, or when preparing and issuing a tax document (invoice) we process data in accordance with Art. 6 par. 1 letter b) GDPR Regulations - where data processing is necessary for the fulfillment of the contractual relationship to which you, as the affected person, are the client

Through the website of Kingray, s.r.o. you have a chance

 voluntarily create and register a user account, through which it is possible to implement simplified online shopping and registration of all purchases, or register an email address as a customer of product news - newsletters, where we process data in accordance with Art. 6 par. 1 letter a) GDPR Regulations - on the basis of the consent granted to the processing of your personal data for the purpose of creating and maintaining a user account, or for the purpose of sending current news in the form of newsletters to the provided email address

List of personal data processed


Information needed to send a message via the online contact form

- Email address

Data when registering for the newsletter - product news

- Email address

Data required for user account registration

- Name and surname

- Email address

- Address of permanent residence or other correspondence address for delivery of the consignment

- Telephone number

- Personal password

Data required for order execution

- Name and surname

- Email address

- Address of permanent residence or other correspondence address for delivery of the consignment

- Telephone number

Billing information

- Name and surname

- Address of permanent residence or other correspondence address for invoicing purposes

account number / IBAN

Contact details in case of delivery

- Name and surname

- Address of permanent residence or other correspondence address for delivery of the consignment

- Telephone number - for the purpose of confirming the date, time and place of delivery, or in the event of execution

changes in the order

- E-mail address - for the purpose of sending an electronic order confirmation and changing the status of the order, as well as an emergency means of communication if the customer is not available at the telephone number.

Time of processing and storage of your personal data

Your personal data that we have processed or are processing in accordance with Art. 6 par. 1 letter b) GDPR Regulations - in fulfillment of the obligations of Kingray, s.r.o. towards customers and clients, we further process in order to meet our legal obligations in the field of taxes and accounting, which result from generally binding legal regulations (eg keeping individual accounting records of your confirmed orders and invoicing for the purpose of delivery of selected goods to your contact address in pursuant to Act No. 431/2002 Coll., on Accounting, as amended, for cases of proving the fulfillment of tax obligations pursuant to tax legal regulations, Act No. 595/2003 Coll., on Income Tax, Act No. 563 / 2009 Coll., On tax administration, etc.), we must keep for the period specified by the relevant legal regulations. In any case, we follow the principle of minimizing the retention of personal data in accordance with Art. 5 par. 1 letter e) of the GDPR Regulations and therefore your personal data, which is not subject to archiving according to special legal regulations, will be deleted or anonymised.

Personal data processed in accordance with Art. 6 par. 1 letter a) GDPR Regulations - on the basis of your consent to the processing of personal data for the purpose of creating and maintaining a user account, or for the purpose of sending current marketing news, we process data for 5 years, or until the consent is revoked. In the case of the end of the data processing period, we make contact in writing or by e-mail, when it is possible to renew the consent to the processing of personal data for a defined purpose and extend it for the following processing period. In the event of non-consent to the renewal and extension of the purpose of processing, or failure to respond to the contact made, we will no longer process your personal data - ie. we automatically remove the data from the records, technically delete the electronic data from the systems and physically shred them.

Personal data processed in accordance with Art. 6 par. 1 letter f) GDPR Regulations - on the basis of a legitimate interest obtained in response to a request / suggestion submitted by you or a question regarding services provided and products supplied, when it was necessary to verify the relevance of the request or subsequently transferred to a pre-contractual or contractual relationship are deleted immediately.

As the Operator, we will ensure the deletion of personal data without undue delay after: all contractual relations between you and our Company have been terminated; and / or

- all your obligations to our Company have expired; and / or

- all your complaints and requests have been processed; and / or

- all other rights and obligations between you and our Company have been settled; and / or

- all the processing purposes provided for by law or the processing purposes for which you gave us your consent have been fulfilled, if the processing took place with the consent of the person concerned; and / or

- the period for which the consent was given has expired or the person concerned has withdrawn his consent; and / or

- the request of the data subject for the deletion of personal data has been complied with and one of the reasons justifying the request has been complied with; and / or

- the decisive legal fact for the termination of the purpose of the processing has occurred and at the same time the protection retention period defined with regard to the principle of minimizing the retention period of personal data has expired;

- and at the same time the legitimate interest of our Company does not persist, all obligations of our Company stipulated by generally binding legal regulations which require the storage of personal data of the data subject (especially for archiving purposes, tax control, etc.) or which would not be possible without their retention fulfill.

In no case do we further systematically process any personally obtained personal data for any purpose defined by us. If possible, we will inform the data subject to whom the personal data obtained by chance belong to their accidental acquisition and, depending on the nature of the case, we will provide him with the necessary cooperation leading to the restoration of control over his personal data. Immediately after these necessary actions aimed at resolving the situation, we will immediately dispose of all accidentally obtained personal data in a safe manner.

If you are interested in further information about the specific retention period of your personal data, please contact us via the contact details provided on our website.

Disclosure of data

Our company does not publish the obtained data in any case.

Cross - border transfer of personal data

Cross-border transfer of personal data does not take place.

Rights and obligations of the person concerned
The customer is obliged to provide only complete and true data.
The customer undertakes to update his data in the event of a change, at the latest before the execution of the first order following the change.
The customer undertakes that if he provides personal data of a third party (name, surname, telephone number), he does so only with his consent and the person concerned is acquainted with the procedures, rights and obligations that are listed on this site.
As our client and affected person, you have the right to decide on the handling of your personal data to a specified extent. You can exercise the rights below:
- Personally at the contact point of our company Kingray s.r.o., Ružová 728/2, 050 01 Revúca
- Through our customer line: 0918 988 991
- By e-mail: info@kingray.sk
- In writing to the address of the Operator: Kingray s.r.o., Ružová 728/2, 050 01 Revúca

We will try to respond to you as soon as possible, but we will always reply to you within 30 days of receiving your request. Applicable legal regulations and the GDPR Regulation, resp. The law provides you with in particular:

Right of access - You have the right to ask us to confirm whether your personal data is being processed and, if so, to obtain a copy of this data and the additional information resulting from Art. 15 Regulations, resp. § 21 of the Act. In the event that we collect a large amount of data about you, we may require you to specify your request for a range of specific data that we process about you.

Right of correction - In order for us to constantly process only current personal data about you, we need you to notify us of the change as soon as possible. In the event that we process incorrect data about you, you have the right to request their correction.

Right of cancellation - If the conditions of Article 14 of the Regulation, resp. § 23 of the Act, you can request the deletion of your personal data. You can therefore request deletion, for example, if you have revoked your consent to the processing of personal data and there is no other legal basis for the processing, or if we process your personal data illegally or the purpose for which we processed your personal data and does not process compatible purpose. However, we will not delete your data if it is necessary to prove, assert or defend legal claims.

Right to restriction of processing - If the conditions of Article 18 of the Regulation, resp. § 24 of the Act, you may require us to restrict the processing of your personal data. You can therefore request a restriction, for example, while you object to the accuracy of the data being processed or if the processing is illegal and you do not want us to delete the data, but you need the processing to be restricted while you exercise your rights. We continue to process your data if there are grounds for proving, asserting or defending legal claims.

Right of portability - If the processing is based on your consent or performed for the purpose of fulfilling a contract concluded with you and at the same time performed by automated means, you have the right to receive from us your personal data obtained from you in a commonly used machine-readable format. If you are interested and it is technically possible, we will transfer your personal data directly to another operator. This right may not be exercised in respect of processing performed for the performance of a task carried out in the public interest or in the exercise of official authority.

Right to object to processing - If we process your axis data in order to perform a task performed in the public interest or in the exercise of public power entrusted to us, or if the processing is performed on the basis of our legitimate interests or the legitimate interests of a third party, you have the right to object to such processing. Based on your objection, we will restrict the processing of personal data and we will not continue to process personal data and we will delete your personal data unless we establish serious legitimate reasons for the processing which outweigh your interests, rights and freedoms or grounds for proving, asserting or defending legal claims. You have the right at any time to object to the processing of personal data for direct marketing purposes, including profiling, to the extent that it relates to such direct marketing. After objecting, we will no longer process your personal data for this purpose.

The right to file a complaint - If you believe that the processing of your personal data is in conflict with the Regulation, resp. By law, you have the right to lodge a complaint with one of the competent supervisory authorities, in particular in the Member State of your habitual residence, the place of work or the place of the alleged infringement. For the territory of the Slovak Republic, the supervisory body is the Office for Personal Data Protection, with its registered office at: Hraničná 4826/12, 820 07 Bratislava, Slovak Republic, web: www.dataprotection.gov.sk, tel .: +421 / 2/3231 3220.

Right to withdraw consent - If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time. Withdrawal of consent shall not affect the processing already carried out. If at any time you later decide that you are interested in receiving business and marketing offers about our products and services from us again, you may re-grant your revoked consent (or objection) at any time by any of the above forms of contact.

Contact details of the Office and the responsible person

Office for Personal Data Protection of the Slovak Republic

Address:

Hraničná 12

820 07, Bratislava 27

Slovak republic

ID: 36 064 220

Filing office:

Monday - Thursday: 08:00 - 15:00

Friday: 08:00 to 14:00

Telephone consultations in the field of personal data protection:

Tuesday and Thursday from 8:00 to 12:00 +421 2 323 132 20

Secretariat of the President of the Office +421 2 323 132 11

Office Secretariat +421 2 323 132 14

Fax: +421 2 323 132 34

Speaker:

mobile: 0910 985 794

e-mail: mluvca@pdp.gov.sk

E-mail :

a) in general: dozor@pdp.gov.sk
b) for the provision of information pursuant to Act no. 211/2000 Coll .: info@pdp.gov.sk
c) website: webmaster@pdp.gov.sk
d) for submitting requests for the provision of information pursuant to Act no. 211/2000 Coll. on free access to information, use the online form.
e) email address through which the Office will provide you with advice in the field of personal data protection. It is intended for children, youth, students, teachers, parents who suspect that their personal data has been misused: ochrana@pdp.gov.sk

A sample proposal to initiate proceedings on personal data protection can be found on the Office's website (https://dataprotection.gov.sk/uoou/sk/content/konanie-o-ochrane-osobnych-udajov).

Website security

The website https://www.kingray.eu/ uses an encrypted SSL connection for any user connection and transmission of any data, which prevents access of third parties to the transmitted data during their transmission on the Internet and modification of such data by third parties. The operator's databases containing personal data are protected by encryption and non-public access data in accordance with the latest technical standards.