Business name: CYPRUS PROPERTIES s. r. o.
Billing address and registered office: Farská 1342/50, 949 01 Nitra
Company registration number: 54423651
VAT number: 2121656262
Legal form: limited liability company
Entry in the Commercial Register: District Court Nitra, section Sro, file no. 56591/N
What personal data do we process
Personal data that you provide to us
Personal data that we obtain otherwise than directly from you
As part of joint marketing campaigns, we may also process your personal data for the purposes of marketing campaigns, or for the purposes of proper performance of the contract, and we may combine them.
In the event that your personal data is sold to another entity, we will inform you in advance, including the name of the person to whom we are selling the personal data. Also, if someone sells your personal data to us, they must inform you in advance.
Personal data of third parties that you provide to us
If you provide us with personal data of third parties, it is your obligation to inform the person concerned and to secure their consent to these terms and conditions of personal data protection.
Personal data that we process automatically
When you visit our website, we may collect certain information about you, such as your IP address, date and time of access to our website, information about your internet browser, operating system or language settings. We may also process information about your behavior on our websites, i.e. e.g. which links on our websites you visit and which goods are displayed to you.
If you access our websites from a mobile phone or similar device or through one of our mobile applications, we may also process information about your mobile device (data about your mobile phone, any application crash logs, etc.).
Camera systems at our premises
We also automatically process recordings from cameras at our premises, including our self-service mailboxes.
Our brick-and-mortar premises and self-service mailboxes are monitored by camera systems with online transmission and recording. We have cameras at our premises both for prevention and to clarify possible illegal activity. The operator of the camera system is us, SANN s.r.o..
Versions for mobile phones and mobile applications
If you access our websites from a phone, tablet or similar device, we optimize them for these devices. In such a case, we process your personal data in a similar way as in the case of access from a computer.
We may also use the data collected in this way to send you tailored commercial communications. If you do not wish this, you can easily unsubscribe from receiving commercial communications altogether. Similarly, you may be shown personalized content directly on our websites. Even in this case, you have the option to prohibit such personalization.
Why we collect and process your personal data
We process your personal data for the following reasons:
Purchase of goods and services: first of all, we process your personal data to properly process and deliver your order. If any problems arise, we know who to contact thanks to your personal data.
Customer care: if you contact us with a question / problem, we need to process your data to answer / resolve it. In some cases, personal data may also be transferred to third parties (e.g. the carrier of the goods or the service center).
User account: thanks to the personal data you provide us with in your user profile, a number of useful functions become available to you (e.g. if you provide your phone number, we can easily inform you when your order will be delivered). You can change the data you have entered at any time, with the exception of the e-mail address used to access your user account.
Marketing activity:
E-mail marketing: We send you e-mail commercial communications based on your consent. You can easily unsubscribe from commercial communications by adjusting the settings of your user profile or using our contact form. If you create multiple user profiles in which you provide the same contact details (e.g. you have several accounts for different e-mail addresses, but the phone number will be the same on all accounts), it is not possible for technical reasons to unsubscribe from commercial communications for all user profiles based on automated processes. In this case, to unsubscribe from commercial communications for all user profiles, you must contact us by phone or via the contact form.
Telemarketing: We make marketing calls for the purpose of offering our goods and services and related marketing communications. The legal basis for processing your phone number is either your consent or at least our legitimate interest in conventional direct marketing. You can object to this processing
Push notification: the mobile application sends so-called push notifications
fications, i.e. short messages to your phone. You can easily adjust the receipt of these notifications in your phone settings.
Marketing competitions: in some cases, the winner of the competition may be photographed or filmed, mainly to increase the transparency of our marketing competitions. We carry out this processing of personal data based on our legitimate interest, which consists in increasing the credibility of marketing competitions in the eyes of other competitors and in increasing the attractiveness of these competitions. You can object to this processing.
Improving our services: using your order history and behavior on the website, we can offer more relevant offers of other goods, e.g. accessories for purchased products. In certain places, we therefore display products that are directly for you and meet your needs and interests. To optimize elements on the website and outside the website (personalized advertising on third-party websites), we may also use tools for testing different variants (so-called A/B testing), Google Analytics, Facebook Analytics, etc.
Customer reviews of goods and services: after you purchase goods or services from us, you may be asked to rate them. You can also enter a rating on your own initiative.
If you contact us by phone, we will record your phone call after prior notice. Such recordings are used to control the quality of the services provided by our employees.
Exercise of rights and legal claims and inspections by public authorities: we may also process your personal data because we need them to exercise our rights and legal claims (e.g. if you have an unpaid claim against us). We may also process your personal data because we need them for the purposes of inspections carried out by public authorities and for other similarly important reasons.
Purchase with 0% VAT: We require the documents required for a purchase with 0% VAT, namely a certificate of registration for value added tax, a verified extract from the relevant register and, if applicable, the identity card of the tradesman/manager, in order to prevent illegal activity.
Fulfillment and conclusion of the contract
We need a large part of your personal data in order to be able to conclude a purchase or other contract with you regarding the goods or services that you want to purchase from us. Once the contract is concluded, we process your personal data in order to properly deliver the purchased goods to you, or to properly provide you with the purchased services. Based on this legal reason, we primarily process billing and delivery data.
Legitimate interests
We also use your personal data to provide you with relevant content, i.e. content that is interesting to you. Based on legitimate interest, we mainly process personal data that we process automatically and cookies.
For the same legal reason, we can send you as our customers e-mail and SMS messages, so-called push notifications via mobile application and call. The processing of your personal data on this legal basis also takes place during monitoring carried out via cameras at our individual operations.
If you are listed as a so-called authorized person of our corporate customer, your orders and other negotiations will be attributed to this corporate customer. If you do not wish this, please fill in a different e-mail address when ordering than the one listed for the authorized person of this corporate customer, or you can ask us to delete it from the authorized persons of this corporate customer.
When we process your personal data on the basis of this legal reason, you can object to this processing.
Consent
For the purposes of sending commercial communications (e-mail marketing) and telemarketing, we process your personal data based on your consent. If you do not give us your consent and you are our customer, we may send you commercial communications (or call you as part of telemarketing) even without your consent. In any case, you can simply prohibit such marketing communication from us by (a) using this contact form or (c) contacting us at the phone number listed in the contact information on our website www.nacyprus.sk
If you give us your consent to the processing of personal data, you can withdraw it at any time via our contact form.
Transfer of personal data to third parties
In these cases, we transfer your personal data to third parties:
Delivery of goods: the carrier you have chosen would never be able to deliver the ordered goods to you if we did not provide them with the data on where and to whom the goods should be delivered. We will transfer this data to the carrier according to how you fill it in the order. The data transmitted in this way includes, in particular, your name and surname, delivery address, telephone number at which the carrier can contact you and, if the goods have not been paid for in advance, the amount that must be paid upon receipt of the goods. The carrier is in relation to the personal data provided to it.
we hand over, authorized to process them only for the purpose of delivering the goods and then delete the personal data immediately.
Delivery of goods that are stored for us by a contractual partner: if you order goods from us that are in the warehouse of our contractual partner, we must pass on your personal data to this contractual partner, who will process the order, in order to complete the order. The data thus transferred includes in particular your name and surname, delivery address, phone number at which the carrier can contact you and, if the goods have not been paid in advance, the amount that must be paid upon receipt of the goods. This contractual partner must then pass on the said personal data to the carrier who will deliver the goods, because otherwise the carrier would not be able to deliver the goods to you. Both the contractual partner who stores the goods for us and the carrier are obliged to use this personal data only for the purpose of storing / delivering the goods and then delete it immediately.
Payment cards: our company does not have data about the payment cards you use to pay with us (unless it is stored, see the next paragraph below). Only the secure payment gateway Global Payments s.r.o. and the relevant banking institutions have access to your payment card data. When paying by payment card from a computer, communication with the payment gateway server takes place via a so-called iframe (i.e. the payment gateway page is displayed directly on our website without the need for further redirection).
Commercial communications: in the case of sending commercial communications (e.g. by e-mail or via SMS message) or telemarketing, we may use a third party for mailing or telephone calls. This entity is bound by a duty of confidentiality and may not use your personal data for any other purpose.
Evaluation of products or services via Heureka.sk: In the case of sending purchase evaluation questionnaires, your data (e-mail address, information about the purchased goods/services) may be provided to the operator of the Heureka.sk portal (Heureka Group a.s.).
State authorities: in the event of enforcing our rights, your personal data may be transferred to a third party (e.g. a lawyer). If the law or a state authority (e.g. the Slovak Police) obliges us to transfer your personal data to them, we must do so.
Complaints: for a quick and effective resolution of your complaint, it is possible that the service center will need additional information about the defect, its manifestations or other relevant information. For this purpose, we provide the service center to which you send the product you are complaining about with the data you provided on the receipt of the complaint (i.e. primarily your name and surname, address, phone number, email).
How long do we process your personal data?
First of all, we will process your data for the entire duration of the contractual relationship between us.
In the case of processing personal data for which consent has been granted, your personal data will generally be processed for a period of 7 years, or until such consent is revoked.
In the event that you subscribe to receive business messages, we will process your personal data for a period of 7 years, or until you express your disagreement with their further sending.
We would also like to point out that we must process those personal data that are necessary for the proper provision of services, or for the fulfillment of all our obligations, whether these obligations arise from the contract between us or from generally binding legal regulations, regardless of your consent, for the period specified by or in accordance with the relevant legal regulations (e.g. for tax documents, this period is at least 10 years).
We process data obtained through a user account or other similar means for the duration of the use of our services and then usually for 5 years after their cancellation. Subsequently, only basic identification data and information about the reason for which the user account was cancelled or data forming part of operational backups are usually stored for a reasonable period.
Cookies: we delete cookies including user behavior after 30 days, with the proviso that older data is available in anonymized form in Google Analytics.
Recordings of telephone calls from are stored for a short period of time, but for a maximum of 1 year, unless it is necessary for us to keep the recordings for a longer period due to legitimate interest (e.g. in the event of suspicion of data misuse, fraud, etc.)
We store camera recordings as standard for 90 days. However, if illegal activity occurs in the monitored area, we may contact the police and hand over the recordings to the relevant authority (police, court, etc.). In this case, the records are not deleted after 90 days, but for evidentiary reasons we keep them until the legal conclusion of the case.
Security of personal data
Your personal data is safe with us. In order to prevent unauthorized access and misuse of your personal data, we have implemented appropriate measures of both a technical and organizational nature.
All communication between your device and our web servers isencrypted. Your login details are password protected and all your data is stored only on servers in secure data centers with limited, carefully controlled and audited access.
Password security
We do not have your passwords in the system at all, nor do we store them in a database. We only work with specially calculated password keys.
Personal data of persons under 16 years of age
Our online store is not intended for children under 16 years of age. A person under 16 years of age may use our online store only if his/her legal representative (parent or guardian) gives consent.
What rights do you have in relation to the protection of your personal data?
In relation to your personal data, you have in particular the right to withdraw your consent to the processing of personal data at any time, the right to correct or supplement your personal data, the right to request restriction of their processing, the right to object or complain to the processing of your personal data, the right to access your personal data, the right to request the transfer of your personal data, the right to be informed of a breach of the security of your personal data and, under certain conditions, the right to delete some of the personal data that we process in relation to you (the so-called “right to be forgotten”).
Correction and supplementation
You have control over your personal data primarily through your user account. Here you can delete or change basic information about yourself and change settings regarding the sending of commercial communications (or unsubscribe from commercial communications), etc.
Alternatively, you can contact us via the contact form.
Correction
If you believe that the personal data we process about you is incorrect, you can contact us via the contact form. However, to speed up the correction of your personal data and for your comfort, we recommend that you edit your personal data in your user profile.
Access (portability)
You can ask us to send you an overview of your personal data.
At the same time, you have the right to access the following information regarding your personal data:
What are the purposes of processing your personal data
What are the categories of personal data affected
Who, apart from us, are the recipients of your personal data
The planned period for which your personal data will be stored
Whether you have the right to request that we correct or delete your personal data or restrict their processing or object to such processing
Information on the source of personal data, if we did not obtain it from you
Erase
You can also request that we delete data about you (however, deletion will not affect data on documents that we are required to retain by law (e.g. invoices or credit notes). If we need your personal data to determine, exercise or defend our legal claims, your request may be rejected (e.g. when we register an unpaid debt against you or in the event of ongoing complaint proceedings).
Please note that information about your payment card is not stored in the case of payment without saving a payment card our company, but with the payment gateway provider (third party). Therefore, this data cannot be deleted by us and it is necessary to contact the payment gateway through which you made the payment. Only basic payment card information is stored in our company if you store your payment card with us.
With the exception of the cases mentioned above, you have the right to deletion in the following cases:
Personal data are no longer necessary for the purposes for which they were processed
You have withdrawn your consent on the basis of which the data were processed and there is no other legal ground for their processing
You have objected to the processing of personal data and you believe that when assessing the objection it will become clear that in a specific situation your interest prevails over our interest in the processing of these personal data
Personal data is processed unlawfully
The obligation to delete is established by a special legal regulation
This concerns personal data of children under 16 years of age
Objection
We process some of your personal data on the basis of our legitimate interest (see the section of these terms and conditions entitled “We process personal data on these legal bases”). If there are specific reasons on your side, you can object to the processing of your personal data. You can raise this objection using the contact form.
Restriction of processing
If (a) you dispute the accuracy of your personal data, (b) your personal data are processed unlawfully, (c) we no longer need your personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of legal claims, or if (d) you have raised an objection in accordance with the previous point, you have the right to restrict the processing of your personal data.
In such a case, we may only process your personal data with your consent (with the exception of the storage or backup of the personal data in question).
