General information on the processing of personal data (hereinafter only “personal data”)

By consenting to the processing of personal data on the portal www.triplefivecoffee.com, you provide consent, a serious and freely given, specific, informed and unambiguous expression of will of the person concerned (buyer) in the form of a clearly confirming act pursuant to Regulation (EU) 2016 / 679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and also in accordance with the provisions of Act no. 18/2018 Coll., Of 29 November 2017 on the Protection of Personal Data and on the amendment of certain Acts in the valid wording to the controller (hereinafter referred to as “GDPR and ACT”).

Triple five roasters s.r.o.
Turbínova 1, hala 1, Bratislava, 83104, SK
Registered under: OR OS BA I, odd. Sro, Insertion  88617/B
IČO: 47117311

e-mail: contact@triplefivecoffee.com
telephone: +421 948 072218
(hereinafter only “processor”)

Purpose of Personal Data processing 

If you have provided us your personal data, they will be used for the following purposes:

E-shop – for the conclusion and fulfilling of a purchase contract concluded via www.triplefivecoffee.com between the controller and the buyer, for payment processing, delivery of goods, eventually, for other related operations (e.g. complaints and other legal obligations related to the consumer rights).  For purposes of order processing, you have provided us with your personal data such as your name, surname, address, e-mail, telephone number and payment details.  E-mail and telephone numbers also serve as means of communication. The confirmation of your order will be sent to you e-mail address so you can follow its status.

We process personal data on a legal basis (Article 6/1 / b on the GDPR and the ACT). Processing of personal data is necessary for the contract fulfilling where the data subject (buyer) is a contract party, or for taking action before concluding the contract at the request of the data subject (buyer) (point. 2. 1), this is a contractual requirement

 

Marketing – for marketing purposes if you have granted your consent by ticking the box when submitting the order. Under marketing purposes, we understand sales support, marketing offers, newsletters, SMS notifications about products and news. If the customer does not wish to receive these offers, he can unsubscribe from them directly in the account or by clicking on the link in the newsletter.

The controller processes the Personal Data based on the consent of the data subject (Article 6/1 / and the GDPR and the ACT).

 

Registration 

The buyer can register on the website www.triplefivecoffee.com. However, it is possible to buy goods also without registration.

In case, you decide to purchase goods as a registered user, we will process your personal data as follows:

Your account is secured with a password.  By signing into your account, you get access to your orders, you can edit your personal data and set up sending of newsletters. Please secure your password, the controller is not responsible for its abuse.

By creating your account at www.triplefivecoffee.com, you agree that the personal data entered in your account will be evaluated and collected for the purposes of using the services. You also grant consent to evaluate your shopping behaviour; it means to evaluate which products you have bought or displayed. Upon successful registration, you grant consent to allocate this purchase behaviour to your customer’s account, so we could offer you more personalized content (e.g. special offers and information).

If you have changed your mind and you no longer want to be registered; you can simply delete your registration in your account.  You can continue to buy our products also as a guest without registration.

 

Third parties 

Your personal data can be provided to third parties.  Upon processing your order and fulfilling the purchase contract, your data is provided to the third parties like transporters, couriers, banks etc.  The personal data are processed only for the purpose of fulfilling the contract and only for the necessary period stated in paragraph 6 “Period for processing”.

 

Under 16 

The e-shop controller, in connection with the offer of services provided by an information company, processes personal data, based on the consent of the concerned person, legally, if the concerned person is older than 16. This online shop is not directly intended for children under 16.

 

The controller does not process personal data of persons younger than 16 years.  Upon each registration / sign up, an affidavit of the buyer is required. This online shop is not intended for people under 16.

 

Period for personal data processing 

In accordance with these conditions, the buyer agrees to the processing of personal data for up to 10 years from the date when consent was granted upon accomplishing the purpose of contract fulfilling (2.1).

In accordance with these conditions, the buyer agrees to the processing of personal data for up to 3 years from the date when consent was granted upon fulfilling the purpose of marketing activities (2.2)

Third country transfer 

The controller uses third-party applications, through which the functionality of the online store and sending of marketing announcements are ensured. These applications are operated in the USA or in the EU and they guarantee adequate protection in accordance with the decision of the European Commission within the principles of GDPR.

 

Automated profiling 

The controller processes personal data in paper and electronic form.

To improve marketing campaigns, the controller uses automated profiling. By profiling, we segment the offer (s) for you that may be of interest to you and are more advantageous.  In the case of profiling, we use the following tools: Facebook

The consent is not required for the basic collection of statistical data, e.g. when using the Google Analytics tracking code.

 

IP address 

An IP address is a set of numbers that uniquely identifies a device on a computer network.
From the point of view of personal data protection, an IP address can be designated as data related to an identifiable person.

 

The IP address becomes personal data when:

• The IP address is personal data if it is being processed by the internet connection provider together with another identification (name, email,)
• Static IP addresses used by individuals are considered as personal data,
• Dynamic IP addresses shall be considered as personal data when the online service provider processes also other identifiers considered as personal data (e.g. name, surname, mail, etc.).

 

Secure data transfer

Your personal data is securely transmitted thanks to encryption. The encryption system SSL (Secure Socket Layer) is often used for secure communication with web servers. Personal data in our systems, as well as the website, are secured by appropriate technical and organizational measures against loss, destruction, alteration, and further dissemination of data through unauthorized persons.

If you are also registered on our website www.triplefivecoffee.com, only you have access to your account, so make sure you treat this information confidentially. The controller is not responsible for unauthorized handling or misuse of the password.

 

Rights of the data subject (the buyer) 

Within the meaning of GDPR, the buyer shall have right (i) to rectify, (ii) to erase, (iii) do data portability, (iv) to object, (v) to withdraw consent, (vi) to have access to the information.

 

Right to rectification 

The buyer shall have the right to obtain from the controller without undue delay the rectification of inaccurate or incomplete personal data concerning him or her.

Right to erasure

The buyer shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay. The controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
• where a data subject has withdrawn his or her consent or objects to the processing of personal data concerning him or her, or where the processing of his or her personal data does not otherwise comply with this Regulation
• the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2); – this refers to the direct marketing, including profiling
• the personal data have been unlawfully processed
• the personal data must be erased for compliance with a legal obligation in the European Union or Slovak Republic law to which the controller is subject
• the personal data have been collected in relation to the offer of information society services referred to in Article 8(1). The data subject is under 16.

Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

 

Right to data portability

The buyer shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller – seller, where technically feasible, and where:

• the processing is based on consent of the data subject pursuant to the contract and pursuant to the consent of the data subject, which is not valid if its granting excludes specific law for individual processing
• the processing is carried out by automated means.

Right to object 

Where personal data are processed for direct marketing purposes, the buyer shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. At the latest,  at the time of the first communication with the data subject, the rights shall be explicitly brought to the attention of the buyer and shall be presented clearly and separately from any other information. The buyer may exercise his or her right to object by automated means using technical specifications.

 

Withdrawal of consent 

The buyer t shall have the right to withdraw his or her consent with processing of his or her personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the buyer shall be informed thereof. The buyer may withdraw the consent the same way as he gave it.

 

Right to access the personal data

The buyer shall have the right to obtain confirmation from the controller whether his or her personal data are being processed or not. If the controller is processing such data, the buyer shall have the right to access these personal data as well as the following information:

• the purposes of the processing
• the categories of personal data concerned – in our case, common personal data, the controller does not process the specific category of the personal data
• the recipients or categories of recipient to whom the personal data have been or will be disclosed, namely, recipients from the third countries or international organisations, if possible
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
• the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
• the right to lodge a complaint with a supervisory authority,
• where the personal data are not collected from the data subject, any available information as to their source
• the existence of automated decision-making, including profiling, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

At this request, the controller is obliged to provide relevant information within 30 days from the receipt of the request.  That period may be extended by further 60 days where necessary. We will inform you about any postponement.

Where requests from a buyer have repetitive character, the controller may charge a reasonable fee taking into account the administrative costs. The controller is obliged to provide the personal data to the buyer in the same way as he or she has requested them if not asked otherwise.

The controller reserves the right to verify the identity of the buyer.  The verification is based on providing additional information, e.g. By using control questions. The verification is important having regard to the information about personal data processed by the controller and to the protection of the personal data.

Buyer’s right to lodge a complaint to initiate the personal data protection proceeding

The buyer shall have the right to lodge a complaint to initiate the personal data protection proceedings pursuant to the § 100 of the Act, if his or her rights are directly concerned. The complaint shall contain the following information: information about who initiates the proceeding, identification of the entity against which the complaint is addressed, the subject of the complaint, identifying the rights that might have been infringed during personal data processing, evidence supporting the arguments stated in the complaint.

Copy of the document shall be published on the website of The Office for Personal Data protection of Slovak Republic, Hraničná 12, 820 02 Bratislava.  The office shall review the complaint within 30 days and shall decide within 90 days from the day proceeding is initiated. In the reasonable cases this period may be extended.

Cookies

In accordance with § 55 par. 5 of the NRSR Act no. 351/2011 Coll. on electronic communications, as amended, we would like to inform you about the use of cookies and draw your attention to the possibility of changing the settings of your Internet browser in case the current settings for the use of cookies do not suit you.

 

The following policy contains information on how the controller uses cookies and similar technologies (hereinafter referred to as “cookies”).

 

What are cookies?

Cookies are small text files that can be sent to the Internet browser when you visit the site and that a website stores on your device –  your computer, mobile device or tablet.  The cookies files are stored into the folder of your web browser files.  Cookies usually contain the name of the website they are coming from, the validity and the value.  When you revisit the site, the web browser reloads cookies files and sends this information back to the site, which initially created the cookies.  Cookies we use do not harm your computer.

Types of cookies 

We use cookies to optimize and constantly improve our services, to adjust our services to your interests and needs and improve their structure and content.

Cookies used on the site www.triplefivecoffee.com can be temporary or persistent.  We use several types of cookies.

 

Essential cookies  

These cookies enable the website to work properly and to use basic website functions, such as secured areas or online payments.   Basic cookies are e.g. remembered log-in, access to the secured areas without repeated log in, pre-filling of the forms, etc.   We cannot offer basic services without these cookies.  By rejecting these cookies, the website might not work as intended.

Operational cookies 

Cookies of this type are used to collect statistical information on your behaviour on our website.  The technical information informs us where you have clicked on the website, which website you have visited previously, etc.  These cookies serve for analysis and improvement of the content, performance and design of our website.   By rejecting these cookies, our website might not work as intended.

 

Third party cookies 

The website www.triplefivecoffee.com might contain links and integrated content from other websites.  Therefore, while using our website, cookies not being subject to the controller’s check might be created.  This is the case, for example, if the website you are viewing uses a third-party analysis or marketing automation tool (such as Google tools) or displays content from a third-party website, e.g. YouTube or Facebook. This results in the acceptance of cookies from these third-party services. The controller cannot have control over the storage or access to these cookies. To learn how these third parties use cookies, read the privacy and cookie policy of these service providers.

 

I do not want to use cookies. How to change it? 

You can set up the cookies used on www.triplefivecoffee.com in your web browser. Most Internet browsers are initially set up to automatically accept cookies. You can change these settings by blocking cookies or setting up notifications if cookies are to be sent to your device.

Instructions for changing cookies can be found in the section “help” of each browser. If you use different devices to access the site (e.g. computer, smartphone, tablet), we recommend that you adapt each browser on each device to your cookie preferences.

You can delete cookies in the browser individually or all at once, either directly (if known where they are stored) or via the browser.

 

Final Provisions  

This information shall enter into force and take effect from 01.01.2019.

The controller reserves the right to amend these conditions in the event of the change of personal data processing in the company and in the event of a legislative change.