Privacy Policy

Personal data protection

The online shop http://www.northedgeeurope.com (hereinafter referred to as "our website") belongs to NOVADIS group s.r.o. Plovární 478/1, Plzeň 30100 and identification number 10684191 (hereinafter referred to as "we"). We pay great attention to the protection of personal data and handle this data very carefully. Below you will find out what data we process about our mostly visitors, whether we process it on the basis of their consent or on the basis of another legal ground, for what purposes we process this data and also for how long we keep it with us.

What personal data do we process?

Personal data we process

We primarily process the data that you provide to us through our website.

Personal data required for the performance of the purchase contract

The most common data that visitors provide us with is the data obtained through the order form. In this form, the fields are divided into two types.

Mandatory, which are necessary for the creation of the purchase contract and the subsequent implementation of the purchase contract. Simply put, we need this information to be able to process your order. This includes name, surname, delivery details, billing details, email and telephone. In this case, the email and phone are used to send you confirmation that your order has been successfully received, to deliver your payment confirmation, to send you an EET receipt if required, to keep you informed of the progress of your order and to communicate with you about your order.

Optional, you can fill it in voluntarily. They help us to specify your requirements and also help us to process your order better and more efficiently, but they are not necessary for the actual processing.

User account

To enjoy the benefits of a user account, you must first register on one of our sites. This will create a place where we will store all your personal data, delivery and billing addresses, settings, loyalty program memberships, shopping lists, favorites, tracked products (watchdog), product ratings, completed feedback from surveys and other similar data.

Provision of third party data

If you provide us with data about a third party, it is your responsibility to inform that person and to ensure that they agree to these privacy terms.

This situation occurs, for example, when you order some goods but need to delegate the delivery to another person who will take over the shipment. At that point, you need to inform that person of this fact and ensure that they agree to the privacy policy.

You must be able to prove the third party's consent at any time within 48 hours of our request. This is in cases where a third party asks us to prove consent to the processing of their personal data.

Activity on our site and content creation

In order to be active on our site and to post or create any content such as reviews, comments, discussion posts, mark reviews as beneficial, etc. you must be registered and logged in in most cases. This content is then linked to your user account and therefore your profile photo, first and last name may be visible for these posts. By linking to your user account, you have the ability to edit or delete some content. You are solely responsible for the content you post and the activity under your account, so we do not recommend sharing any of your personal information publicly through content that you do not want to be publicly available. For example, we do not recommend highlighting your allergies in reviews or otherwise sharing information about your health. We are not responsible for this conduct.

Details of the readership of our messages that we send to you

For example, if we send you an email, we record the time you opened the message, the device on which you opened the message and other technical parameters about that device.

Automatically processed personal data

During your visit to our site, we collect information such as your IP address, your browser settings to help us determine your language preference, the pages you visit including the date and time of your visit, what links you click on so we can tailor the content to make it more interesting to you and offer you products and content you will appreciate.

Customer line

If you call any of our numbers listed on our website, your call may be monitored for the purpose of improving customer support or monitoring your requests. If the call is being recorded, you are always automatically notified at the start of the call.

Cookies

This site uses cookies.

For what purpose do we process your personal data?

Purchase of goods

Most often we process your data in order to comply with the purchase contract, i.e. to successfully execute your order and deliver it successfully. For this purpose, we may pass your data to third parties, such as the carrier, so that it knows which address to deliver your package to.

Customer care

We are constantly striving to improve our customer care and in order to be able to respond to your suggestions and problems as quickly as possible, we need adequate documentation, i.e. your data and maximum information related to you.

Marketing

We divide them into two types:

Email Marketing - We only send you any commercial communications by email based on your consent or our legitimate interest in the business relationship. You can unsubscribe from these communications at any time, either directly in the marketing communication or by logging into "My Account" and clicking on "Email Communication Settings". We try to send you as few messages as possible and only those that we believe will interest or at least please you. You can object to this processing (info@northedgeeurope.com).

Telemarketing and SMS - We only send you any commercial communications by SMS based on your consent or our legitimate interest in the business relationship. You can opt out of receiving these communications at any time, either directly in the marketing communication or by logging into "My Account" and clicking on "Mobile Communication Settings". We try to send you as few messages as possible and only those that we believe will interest or at least delight you. In rare cases, you may be contacted by someone from the marketing department or customer support via a call. You can object to this processing (info@northedgeeurope.com).

Content customisation

We would hate to recommend something that doesn't make sense to you because we use the data we collect about you to personalize the content and offerings on our site and in marketing communications. For example, we use the products you frequently visit, your previous orders (your order history), etc. In this way, we achieve that we can recommend products that are more likely to make you happy than pointlessly randomly trying them on.

Statutory regulations

We are required by law to record some of your personal data. This is mainly data related to purchase contracts and other similar data, due to possible inspections by public authorities and other legitimate reasons.

On what legal basis do we process your personal data?

Execution and conclusion of the purchase contract

If you purchase goods from us or complete an order, a purchase contract is created. In order to be able to successfully fulfil it, we need your personal data for this purpose, which is described in the section "What personal data do we process?" including a list of what data is involved.

Legitimate interest

In addition, we process your data on the basis of legitimate interest to improve our services to better target them and offer you more relevant content.

Consent obtained

In order for us to send you marketing or commercial communications, we must do so on the basis of your consent. The exception to this is where you have made a purchase with us, as we have a legitimate interest in sending you these communications on the basis of that purchase. Of course, you have the right to opt out of these communications and, for example, directly in the business communication (email) at the bottom of the footer or you can set up the sending of communications in the preference centre after logging in to my account.

In the event that you provide us with consent outside of the order, you also have the right to withdraw it at any time in the same way as above, of course.

If you do not know how to unsubscribe, please contact us at (info@northedgeeurope.com), our goal is not to spam you unnecessarily if you do not want our messages.

Who do we pass your personal data to?

In some cases, we need to transfer your personal data to third parties, but these third parties will comply with data protection terms that match ours in key respects and do not restrict your rights. These cases are as follows:

Delivery - In order for the carrier you choose to deliver your shipment, they need to know where and to whom. Thus, in order to fulfill the purchase contract, we give the carrier your name and surname (or the name and surname of the person who will receive the shipment), delivery information, your phone number, to which the carrier will send you information about the delivery, or call you to clarify the delivery, and if you have ordered the shipment on delivery, we also give the total amount to be paid to the carrier. Carriers only need this data for delivery and are not entitled to use this data in any other way, i.e. they are obliged to delete this data immediately after delivery.

Contract outlets - For our contract outlets (service ), which are operated by third parties, similar rules apply as for conventional delivery of goods. In order to fulfil the purchase contract, we transmit to the operator of the dispensing point basic personal data (names, surnames) and order data (order no., order value), which the operator sees in the information system operated by us. These data are necessary to realize the successful delivery of the shipment to the customer. The handover takes place through the reporting of a secret password (e.g. at the company Packeta.com) for pick-up by the customer to the operator of the dispensing point, who enters the password into the information system and, after pairing, allows the operator to hand over the parcel to the customer. If the customer has lost the password, it is possible to issue the parcel at his request after verification of identity with an ID card; if the name on the ID card matches the name on the parcel, the operator can issue the parcel after copying the ID number into the information system. The operator of the dispensing point does not have retroactive access to this data and the data serves only as proof of delivery of the consignment. If the customer requests this option or accepts the offer, he automatically gives his consent to store this information in the information system operated by us.

Payment by card and payment buttons - For cashless online payments, payment methods are connected to the payment gateway of Shoptetpay s.r.o., which provides secure technology for accepting credit cards and online bank transfers. Payment card numbers and e-banking passwords are entered through Shoptetpay s.r.o.'s secure and trusted channel.

Commercial Communications - We send most of our commercial communications through a third party service that is bound by its confidentiality. Here we pass on to the service the content of the communication and the contact to which the communication should be sent. The content of the communication may contain some of your personal data, but the service has no right to deal with this content in any way beyond service interventions.

Service and Complaints - We also pass on personal data to our suppliers of goods or to the service centre when a complaint is requested.

How long do we keep your personal data?

We divide personal data into two groups, according to which the retention period is determined.

Mandatory - This is the data that the law tells us how long we must keep it. This data cannot be deleted even if you request it. This is mainly data linked to the purchase contract (e.g. for tax documents this period is set at a minimum of 10 years). As part of our ability to meet your requirements and provide you with quality customer support, we also retain your contact details until the conclusion of the business relationship and until the warranty on the goods you have purchased has expired, plus an additional 2 months.

Optional - This is any data that we use to improve our services, target our communications, etc. You have the right to request the deletion of this data at any time. We also keep this data for the duration of the business relationship, or 26 months from your last activity. Upon expiry, we automatically delete this data, including your user account.

You don't have to worry about missing out and not knowing it. We'll send you 2 notifications before each account deletion with the option to keep your account and extend it again for another 26 months. Our primary concern is not to waste your personal information.

How do we secure your personal data?

We primarily store personal data and collected data on our servers, which are adequately secured. We continuously improve this security and monitor access to this data.

We use encrypted transmissions for your browser's communication with our server to ensure that no one can intercept this communication and that your data is safe.

We store passwords to user accounts in encrypted form and therefore in the event of a breach of access to our database, the attacker will not have your password in a readable form.

What rights do you have when processing personal data?

Just as we have certain rights regarding the processing of personal data, you have rights that you can exercise at any time.

Right of access to the personal data we process about you

You have the right to ask us for a list of all the personal data we process about you. We can generate this list for you after proper verification of your identity. If you wish to receive it, please send your request to the following email address (info@northedgeeurope.com)

Right to rectification of personal data

If you discover that we are recording personal data about you that is incorrect, you have the right to ask us to correct it. We will be very pleased to receive such suggestions and will be happy to correct them as soon as possible. Again, just contact us by email (info@northedgeeurope.com).

Right to erasure of personal data

You have the right to request the deletion of all personal information that we process about you, except for those that we are required by law to retain or that are used for the performance of a pending purchase contract and without this data we would not be able to successfully conclude. Please contact us by e-mail (info@northedgeeurope.com) to request deletion of your personal data.

Right to object to the processing of personal data

If you feel that we are processing personal data unlawfully, you can object to this. We process some data within the scope of our legitimate interest and we will be happy to specify these reasons to you, just write to us by email (info@northedgeeurope.com) and specify what data we collect that you are asking us to defend.

Right to lodge a complaint about the processing of personal data

We would be happy for you to send any objections or questions about privacy directly to us so that we can provide you with immediate assistance or support in resolving your matter. Just email us (info@northedgeeurope.com). However, the application of the procedures set out above in no way restricts your right to lodge a complaint with the Data Protection Authority.

GDPR

The Buyer acknowledges that for the purposes of concluding the purchase contract, its subsequent performance (processing of the order, ensuring the removal and delivery of the goods) and the possible resolution of rights arising from defective performance (complaints), the Administrator will process and store, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (hereinafter referred to as GDPR), his personal data in the following scope: name, surname, address, e-mail and telephone number, optionally the name of the company.

The legal basis for the processing of personal data in accordance with Article 6(1)(b) GDPR is the performance of a contract to which the purchaser is a party.

Buyer's rights in relation to personal data

The Buyer further notes that according to Articles 15 to 21 of the GDPR he has the right to:

(a) access to personal data, which consists of the right to obtain confirmation from the controller as to whether or not personal data concerning him or her are being processed and, if so, the right to obtain access to those personal data and to the information defined in Article 15 of the GDPR;

b) to correct inaccurate personal data concerning him/her, and, taking into account the purposes of the processing, the purchaser has the right to complete incomplete personal data, including by providing an additional declaration pursuant to Article 16 GDPR;

c) to erasure ("right to be forgotten"), which consists in the controller erasing without undue delay the personal data concerning the purchaser as soon as they are no longer necessary for the purposes of the performance of the contract, unless there is another legal ground for their further processing;

d) to restrict the processing of personal data in the cases defined in Article 18 of the GDPR;

e) to data portability under the terms of Article 20 of the GDPR;

f) object to the processing of personal data pursuant to Article 21 GDPR.

Upon request, the administrator shall provide the purchaser with information on the measures taken in any event within one month of receipt of the request.

In case of doubts about the processing of personal data, the buyer has the right to contact the Office for Personal Data Protection, which is the supervisory authority in this area, and file a complaint with it.

The Privacy Policy is valid and effective as of March 1, 2021