Privacy policy

Basic Information

Data controller

We are the company Portelino s. r. o., registered office: Jozefa Adamca 9983/24, Trnava 917 01, company registration number: 56 394 918, registered in the Business Register of the Trnava County Court, section: Sro, file No.: 57145/T, and we are the controller of your data.

 

What Personal Data We Process

Personal Data You Provide to Us

We process the personal data that you provide to us.

Personal Data We Obtain Other Than Directly from You

As part of joint marketing campaigns, we may process your personal data for marketing purposes or for the proper performance of a contract, and we may combine it.

If your personal data is sold to another party, we will inform you in advance, including the entity to whom we are selling your personal data. If someone sells your personal data to us, they must also notify you in advance.

Personal Data of Third Parties You Provide to Us

If you provide us with personal data of third parties, it is your responsibility to inform the concerned party  and obtain their consent to this privacy policy.

Personal Data We Process Automatically

When visiting our website, we may collect certain information about you, such as your IP address, date and time of your access to our website, information about your internet browser, operating system, and language settings. We may also process information about your behavior on our website, such as which links you visit on our site and which products are displayed to you. However, the information about your behavior on the website is anonymized to ensure your maximum privacy, and therefore we cannot assign it to a specific user, i.e., a specific person.

If you access our website from a cell phone or similar device, or through any of our mobile applications, we may also process information about your mobile device (data about your cell phone, possible app crash logs, etc.).

Cookies

We also process cookies automatically.

 

Versions for Cell Phones and Mobile Applications

If you access our website from a phone, tablet, or similar device, we optimize it for these devices. In this case, we similarly process your personal data as when accessing from a computer.

 

Why We Collect and Process Your Personal Data

We process your personal data for the following reasons:

• Purchase of goods and services: first and foremost, we process your personal data to properly handle and deliver your order.  If any issues arise, your personal data helps us know who to contact.
• Customer care: if you reach out to us with any inquiries or issues, we need to process your data in order to respond or resolve the matter. In some cases, personal data may be shared with third parties (e.g., the delivery service).
• User account: with the personal data you provide in your user profile, we can offer a range of useful features (e.g., if you provide your phone number, we can easily inform you when your order will be delivered). You can change the data you’ve entered at any time, except for the email address, which is used to access your user account.
• Marketing:
• Email marketing: we send email business notifications to you based on your consent. You can easily unsubscribe from the notifications by adjusting the settings in your user profile. If you create multiple user profiles with the same contact details (e.g., you have several accounts with different email addresses, but the phone number is the same on all accounts), it is not possible, for technical reasons, to unsubscribe from business notifications across all profiles based on automated processes.
• Telemarketing: we conduct marketing calls for the purpose of offering our goods and services and related marketing communication. The legal basis for processing your phone number is either your consent or at least our legitimate interest in conventional direct marketing. You can object to this processing (see Contacts > Other > Personal Data > Objections).
• Marketing contests: in some cases, the contest winner may be photographed or filmed, primarily to increase the transparency of our marketing contests. This processing of personal data is carried out based on our legitimate interest, which lies in enhancing the credibility of marketing contests in the eyes of other contestants and increasing the attractiveness of these contests. You can object to this processing (see Contacts > Other > Personal Data > Objections).
• Improving our services: by using the history of your orders and your behavior on the website, we can offer more relevant product recommendations, such as accessories for purchased products. In certain places, we display products that are directly relevant to you and match your needs and interests. For optimizing website elements, we may also use tools for testing different variants (the so-called A/B testing), Google Analytics, Facebook Analytics, and so on.
• Customer ratings of products and services: after you purchase goods or services from us, you may be asked to rate them. Ratings can also be submitted on your own initiative.
• Call center: if you contact us through our call center (helpline), we will record your phone call after prior notification. These recordings are used for quality control of the services provided by our employees.
• Enforcement of rights and legal claims, and inspections by public authorities: we may also process your personal data because we need it to enforce our rights and legal claims (e.g., if you have an unpaid debt with us). Additionally, we may process your personal data as we need it for the purposes of inspections carried out by public authorities and other similarly important reasons.

Legal Grounds for Processing Personal Data

Contract Conclusion and Performance

A large portion of your personal data is necessary for us to enter into a purchase or other contract related to the goods or services you wish to buy from us. Once the contract is concluded, we process your personal data to properly deliver the purchased goods or provide the purchased services. Based on this legal ground, we primarily process billing and delivery information.

Legitimate Interests

We use your personal data to provide you with relevant content, meaning content that is of interest to you. Based on our legitimate interest, we process, in particular, personal data that we process automatically, as well as cookies.

For the same legal reason, we may send you emails and text messages as our customer. Your personal data is also processed under this legal basis when monitoring is conducted via cameras at our facilities.

To protect against the illegal distribution and access to the electronic book (or other electronic content) you purchased, your name, surname, and address are displayed in this electronic book.

If we process your personal data based on this legal ground, you may object to this processing (see Contacts > Other > Personal Data > Objections).

Consent

For the purposes of sending business notifications (email marketing) and telemarketing, we process your personal data based on your consent. If you do not grant us your consent and are our customer, we may still send you business notifications (or contact you via telemarketing) without your explicit consent. In any case, you can easily block such marketing notifications from us by adjusting the settings in your user profile.

We also ask for your consent when we need to verify your ability to repay the goods we provide to you, without having paid the full purchase price upfront.

If you grant us your consent to process your personal data, you can revoke it at any time via our website www.portelino.com.

Sharing of Personal Data with Third Parties

We share your personal data with third parties in the following cases:

• Delivery of goods: the carrier picked by you would never be able to deliver the ordered goods to you if we did not, among other things, provide them with the data on where and to whom the goods should be delivered.  We provide these details to the carrier based on the information you fill in your order. The data shared with the carrier primarily include your first and last name, delivery address, contact phone number, and if the goods have not been paid in advance, the amount due upon receipt. The carrier is authorized to process the personal data we provide only for the purpose of delivering the goods and must promptly delete the personal data once the delivery is completed.
• Delivery of goods stored by our contractual partner: if you order goods from us that are stored in the warehouse of our contractual partner, we must share your personal data with this partner, who will handle the order. The data shared with the carrier primarily include your first and last name, delivery address, contact phone number, and if the goods have not been paid in advance, the amount due upon receipt. This contractual partner must then share the aforementioned personal data with the carrier who will deliver the goods, otherwise, the carrier would not be able to deliver the goods to you. Both the contractual partner, who stores the goods for us, and the carrier, are obligated to use the personal data we share with them solely for the purpose of storing/delivering the goods and to delete them promptly afterward.
• Payment cards: our company does not have any information about the payment cards you use to pay with. Payment card details are only handled by the secure payment gateway and the relevant banking institution.
• If you have saved your payment card for faster future purchases at our online store, we only store basic data, such as a few of the first and last digits of the card number. If you wish to delete this data, simply go to your user profile settings and delete the payment card details.
• Business notifications: in the case of sending business notifications (e.g., via email or text messages) or telemarketing, we may use a third party for distribution or phone calls. This third party is bound by confidentiality and may not use your personal data for any other purpose.
• Public authorities: in the case of enforcing our rights, your personal data may be provided to a third party (e.g., a lawyer). If the law or a public authority (e.g., the police) requires us to share your personal data, we must comply.

How Long Do We Process Your Personal Data?

First and foremost, we will process your data for the entire duration of the contractual relationship between us.

If the processing of personal data is based on consent, your personal data will generally be processed for a period of 7 years or until you revoke your consent.

If you subscribe to business notifications, we will process your personal data for 7 years or until you opt out of further notifications. You can easily opt out on our website at www.portelino.com .

Additionally, please note that personal data that are necessary for the proper provision of services, or for fulfilling our obligations, whether these obligations arise from the contract between us or from applicable legal regulations, must be processed by us regardless of your consent, for the period stipulated by the relevant legal regulations or in accordance with them (e.g., for tax documents, this period is at least 10 years).

Data obtained through user accounts or other similar means are processed for the duration of the use of our services, and typically for 5 years after their deletion. Afterward, usually only basic identification data and information regarding the reason for the account deletion, or data forming part of operational backups, are retained for a reasonable period.

Data Security

Your personal data is safe with us. To prevent unauthorized access and misuse of your personal data, we have adopted appropriate technical and organizational measures.

We take the protection of your personal data very seriously. Therefore, we not only regularly check their security but continuously improve their protection. All communication between your device and our web servers is encrypted. Login credentials are hashed and all your data is stored only on servers in secure data centers with restricted, carefully controlled, and audited access.

We strive to use security measures that, considering the current state of technology, provide adequate protection. The adopted security measures are regularly updated.

Password Security

We do not have your passwords in the system, and we do not store them in the database. We only work with specially calculated password keys that are generated using a hashing function.

Personal Data of Individuals Under 16 Years Old

Our online store is not intended for children under the age of 16. An individual under 16 years of age may only use our online store if consent is provided by their legal guardian (parent or custodian).

Your Rights in Relation to Personal Data Protection

In relation to your personal data, you primarily have the right to revoke your consent to data processing at any time, the right to rectify or complete your personal data, the right to request the restriction of its processing, the right to object to or file a complaint against the processing of your personal data, the right to access your personal data, the right to request the transfer of your personal data, the right to be informed of any personal data security breaches, and, under certain conditions, the right to have certain personal data we process about you erased (the so-called "right to be forgotten").

Modification and Completion

You primarily control your personal data through your user account. Here, you can delete or modify basic information about yourself and adjust settings regarding the receipt of business notifications (or unsubscribe from them). etc.

Alternatively, you can contact us via our website at www.portelino.com .

Rectification

If you believe that the personal data we process about you are incorrect, you can contact us via our website at www.portelino.com . However, to accelerate the rectification of your personal data and for your convenience, we recommend updating your personal data in your user profile.

Access (Portability)

You can request that we send you an overview of your personal data through our website at www.portelino.com .

At the same time, you have the right to access the following information related to your personal data:

• The purposes of processing your personal data
• The categories of personal data concerned
• Who, besides us, are the recipients of your personal data
• The planned duration for which your personal data will be stored
• Whether you have the right to request rectification or erasure of your personal data, or to restrict their processing, or to object to such processing
• Information about the source of your personal data if we did not obtain them from you

Erasure

You may also request that we erase your data (however, erasure will not affect data on documents that we are required to retain by law, such as invoices or credit notes. If we need your personal data for the establishment, exercise, or defense of legal claims, your request may be rejected (for example, if we have an outstanding debt registered against you or in the case of an ongoing complaint procedure).

Please note that the primary information about your payment card is not stored by our company, but by our payment gateway. Hence, these data cannot be erased by us, and you will need to contact the payment gateway through which you made the payment.

Except for the cases mentioned, you have the right to erasure in the following situations:

1. Personal data are no longer necessary for the purposes for which they were processed
2. You have revoked your consent, based on which the data were processed, and there is no other legal basis for their processing.
3. You have objected to the processing of personal data and believe that, in evaluating the objection, it will be established that in the particular situation, your interest outweighs our interest in processing these personal data.
4. The personal data are processed unlawfully
5. A legal provision requires the erasure
6. The personal data concern children under the age of 16

You can exercise your right via our website at www.portelino.com.

Objections

Some of your personal data are processed based on our legitimate interest (for the terms and conditions, see the chapter titled "Legal Grounds for Processing Personal Data”).  If there are specific reasons on your part, you may object to the processing of your personal data. You can raise this objection via our website at www.portelino.com.

Restriction of Processing

If (a) you dispute the accuracy of your personal data, (b) your personal data are processed unlawfully, (c) we no longer need your personal data for processing purposes, but you need it for the establishment, exercise, or defense of legal claims, or (d) you have raised an objection as mentioned in the previous point, you have the right to request a restriction of the processing of your personal data.

In this case, we may only process your personal data with your consent (except for storage or backup of the personal data in question).

Complaints

If you believe that we are processing your personal data unlawfully, you have the right to file a complaint with the Office for Personal Data Protection. However, we would appreciate it if you address any issues with us first. You can always easily contact us through our contact form or via our website at www.portelino.com.

This Privacy Policy, including its components, has been in effect since October 1, 2024, and is available electronically at www.portelino.com.