Privacy policy

1. INFORMATION ON THE PROCESSING OF PERSONAL DATA

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), we provide you with the following information regarding the processing of personal data.

2. WHO IS THE DATA CONTROLLER

This Privacy Policy describes the policies of Eastern Design s.r.o., Tomášíkova 150/6, 040 01 Košice – mestská časť Sever, Slovenská republika, IČO: 53034309, email: hello@easternconf.com, on the collection, use and disclosure of your information that we collect when you use our website www.easternconf.com (“the Service”). By accessing or using the Service, you are consenting to the collection, use and disclosure of your information in accordance with this Privacy Policy. If you do not consent to the same, please do not access or use the Service.We may modify this Privacy Policy at any time without any prior notice to you and will post the revised Privacy Policy on the Service. The revised Policy will be effective 7 days from when the revised Policy is posted in the Service and your continued access or use of the Service after such time will constitute your acceptance of the revised Privacy Policy. We therefore recommend that you periodically review this page. 

3. SCOPE OF PERSONAL DATA AND SECURITY

We limit the personal data we process to what is necessary for providing the high-quality services you expect from us, fulfilling our legal obligations, and protecting our legitimate interests. We process the personal data of our customers and potential customers who have given their consent. The categories of personal data we process include:

• Contact data, which is your email.

• Information about the products and services you have purchased or are considering purchasing. For example, data from orders, invoices, payments, or shopping cart data.

• Information about your use of our online service, how you behave when you visit, the pages you read, the links you click on, the way you navigate through each page. This data also includes information about your device (technical parameters, operating system, screen resolution, browser used), information about the IP address of your device and the geographic location derived from it, as well as data obtained through cookies and similar technologies. 

• Data about reading our newsletter. Whether you have received the messages, the time you opened the messages, the content that interested you, the links in the messages that you clicked on, and data collected through cookies and similar technologies.

• Records of email communications or other communications with you in electronic or written form.

• Transaction data, in particular information about your payments and payment methods.

We protect your personal data using effective security technologies and organizational measures. All data is encrypted, protected by new generation firewalls and regularly backed up. Only professionally trained employees and vetted contractors have access to it.More information about the technical and organizational security measures we have put in place is available on request.

4. PURPOSES AND LEGAL BASIS OF PROCESSING

We process your personal data primarily to enable you to make a convenient purchase and to deliver the ordered goods to you. We process your personal data in accordance with the law, based on the following legal bases:Processing on the basis of the data subject's consent pursuant to. Article 6(1)(a) of the GDPR

• For the purposes of organizing consumer competitions in which you may voluntarily participate if you meet the conditions for participation in a particular competition. Processing for the performance of a contract pursuant to. Article 6(1)(b) of the GDPR

• For the purpose of ordering and delivery of goods (preparation and execution of distance sales contracts).

• For the purposes of commercial communication, in the context of the preparation and execution of commercial contracts, when ordering goods, their delivery, as well as the provision of related information.

• For the purpose of providing data for the delivery of goods by courier. The companies used by us to provide services pursuant to Act No. 324/2011 Coll. on postal services subsequently process your data as a third party and for the time necessary for the delivery of parcels.

Processing on the basis of a legal obligation pursuant to. Article 6(1)(c) of the GDPR

• For the purpose of complaint handling, pursuant to Act no. 250/2007 Coll. on consumer protection, Act No. 102/2014 Coll. on consumer protection in the distance or off-premises sale of goods.

• For the purpose of keeping accounting and tax records, pursuant to Act No. 431/2002 on Accounting, Act No. 222/2004 Coll. on VAT and Act No 595/2003 on income tax.

• For the purposes of network and information systems security, pursuant to Act No. 69/2018 Coll. on cyber security and pursuant to Article 32 of the GDPR.

• For the purpose of handling requests from data subjects related to the exercise of rights under the GDPR.

‍Processing on the basis of a legitimate interest pursued by us as a controller pursuant to. Article 6(1)(f) of the GDPR

• For the purpose of verifying customer satisfaction, in connection with the progress of the last purchase.

• For the purposes of communication via social networks, in connection with your interaction on content published by us via our fan page, website, newsletter, blog, etc.

• For the purposes of maintaining legal records relating to proving, defending and pursuing legal claims.

5. CATEGORIES OF RECIPIENTS

Your personal data may be disclosed to the following categories of recipients during processing:COURIER AND TRANSPORT COMPANIESSlovenská pošta, a.s., with registered office at Partizánska cesta 9, 975 99 Banská Bystrica, ID: 36 631 124EVENT MANAGEMENT AND TICKETING SERVICETito.io: When you register for an event, Tito.io collects and processes personal data necessary for managing your registration and participation.

• Name
• Email address
• Payment information
• Event participation details

Tito.io processes your data in accordance with their privacy policy and GDPR requirements. For more information, please refer to Tito’s Privacy Policy.MARKETING TOOLSWe use various analytical tools to better understand how our services are used and to improve user experience. These tools collect information such as:

• IP addresses
• Browser types
• Pages visited
• Time spent on pages
• Referring pages

Google Analytics: Helps us analyze website traffic and user behavior. (Google’s Privacy Policy)Hotjar: Provides insights into user interactions through heatmaps and session recordings. (Hotjar’s Privacy Policy)Facebook Pixel: Tracks conversions from META ads, optimizes ads, and builds targeted audiences. (META's Privacy Policy)MAILING SERVICESMailchimp: By providing us with your email address, you consent to the transfer and storage of your data by Mailchimp, which is a third-party service provider. Mailchimp processes your data in accordance with their privacy policy and GDPR requirements.Mailchimp collects and processes the following types of data:

• Email addresses
• Name
• Interaction data (e.g., open rates, click rates)

For more information on how Mailchimp handles your data, please refer to Mailchimp’s Privacy Policy.Furthermore, law and legal offices, accounting offices, auditors and tax advisors, experts and forensic experts, collection companies and bailiffs, courts and law enforcement agencies.

6. RETENTION PERIOD OF PERSONAL DATA

If we process your data on the basis of consent, we will process it for the duration of your consent, but for a maximum period of 10 years. After this period, we will discard it. This period may be shorter, for example:

• 6 months to 3 years in the case of displaying behavioral advertising, depending on the type of advertising system.
• In the case of cookies, 24 months from the date of the last visit.

If we process your data on the basis of the performance of a contract, we will process it for the duration of the contract and for 5 years after its termination.If we process your data on the basis of a legal obligation, we will process it for the period specified by the relevant legislation.

• In the case of accounting, this period is 10 years.

• In the case of claims, this period is 2 years from the claim.

• In the case of cyber security, this period is 12 months.

If we process your data on the basis of a legitimate interest pursued by us as a controller we will process it for the time strictly necessary to achieve the purpose of the processing.

• In the case of proving, defending and pursuing legal claims, until the time after which they will be time-barred. (for civil disputes 3 years)

‍

7. YOUR DATA PROTECTION RIGHTS

We are ready to exercise your rights when processing your personal data.

• You have the right of access to your personal data, as well as the right to know for what purpose it is processed, who the recipients of your personal data are, and what is the duration of the processing.

• You have the right to rectification, if your personal data is incorrect or has changed, please contact us, we will correct it.

• You have the right to have your personal data erased if it is incorrect or processed unlawfully.

• If your personal data is processed on the basis of consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent given prior to its withdrawal.

• You have the right to restrict processing if you wish, we will only process the data for the most necessary lawful reasons or not at all.

• You have the right to data portability, if you wish to transfer the data to another controller, we will provide it to you in the appropriate format, unless other technical or legal obstacles prevent this.

• You have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, ID No.: 36 064 220, tel. no.: +421 2 3231 3220, https://dataprotection.gov.sk/uoou/

8. WHERE AND HOW YOU CAN EXERCISE YOUR RIGHTS

You can exercise your rights by writing to Eastern Design s.r.o., Tomášíkova 150/6, 040 01 Košice – mestská časť Sever, Slovenská republika, or by email: hello@easternconf.com.We will respond to your request free of charge within 30 days. If your request is complex or if we receive a large number of requests, we may extend this period by an additional 60 days. If an extension is necessary, we will inform you of the extension and the reasons for it.If your request is manifestly unfounded or excessive, particularly if it is repetitive, we may charge a reasonable administrative fee to cover the cost of providing this service.