Who we are
Suggested text: Our website address is: http://travelsetbottles.com.
Based on Articles 23 and 24 of the Personal Data Protection Act (“Official Gazette of RS”, No. 87/2018) and the General Data Protection Regulation (hereinafter: GDPR) and in connection with by collecting personal data when ordering and purchasing products sold by Hedera Vita doo (hereinafter: Controller) on the website www.travelsetbottles.com (hereinafter: site), Kan-System, as a data controller, provides the following information on the processing of personal data :
1) Identity of the person responsible for data processing
Legal entity:
Kan-System doo Kikinda
Address:
Mokrinski drum bb, 23300 Kikinda, Srbija/Serbia
Social Security number:
21595268
Legal representative:
David Kanački director
2) Legal basis for data collection and processing
The legal basis for the collection and processing of personal data is the free consent of the person who, by providing his data on the site, is considered to have given his consent.
If a person registers another person and his personal data, it is the responsibility of that person to ensure that the person who is registered is familiar with this Information and accepts it.
3) Purpose of data collection and processing
Personal data is collected because it is needed in the process of registration, ordering and delivery of products ordered through the website www.travelsetbottles.com. No special categories of data are collected or processed.
The specified data will be used and in the process of submitting complaints on products purchased through the site.
4) Data collected and processed name and surname; e-mail; delivery address; phone number.
5) Purpose and method of data use
The Operator processes your personal data exclusively on the basis of your consent and the law, with the aim of: executing the rights and obligations arising from the business relationship between you and the Operator in order to fulfill its contractual obligations, which specifically relate to the delivery of ordered products through the site; Fulfilling the obligations prescribed by the regulations of the Republic of Serbia and the GDPR, which refer to the storage of documentation that proves the existence of a contractual relationship; Fulfilling the obligations prescribed by the Personal Data Protection Act and the GDPR related to the processing of personal data.
6) Persons using data
Personal data in the records of registered persons on the website are used by employees who are authorized by the Controller to receive and prepare for sending orders, employees authorized to make complaints, as well as persons who are authorized to decide on submitted complaints. The aforementioned persons will be familiar with your data only to the extent necessary for the performance of their duties.
The operator will enable competent authorities, other persons and services to access data from the records of registered persons on the site who, in accordance with the applicable regulations of the Republic of Serbia, have the right to access such data. Likewise, the Controller can provide this data upon a request sent through an official channel by a court or other body competent for resolving disputes related to the violation of personal data or in connection with complaints.
7) Revocation of consent for data processing and legal consequences of revocation
Any consent to the processing of your personal data that you have given to the Controller can be revoked at any time. From that moment on, the Controller will not process your personal data that was based on consent, but this will not affect the legality of data processing that was performed on the basis of consent before its withdrawal. If the data is revoked during the procedure for solving a submitted complaint, in that case, the procedure is suspended and it is considered as if the complaint was not even submitted.
8) Rights of persons in connection with data processing
The person whose data is processed by the Controller has the right to request from the Controller: to inform him truthfully and completely about the processing of his data; the right to notification, inspection and/or copy of the data related to it, as well as rights based on the performed inspection of the data (correction, addition, update, deletion of data, as well as termination and temporary suspension of processing).
A person has the right to delete data in the event that: the purpose of the processing is not clearly defined; that the purpose of processing has been changed, and the conditions for processing for that changed purpose have not been met; that the purpose of the processing has been achieved, i.e. the data are no longer needed to achieve the purpose; that the method of processing is illegal; that the data belongs to the number and type of data whose processing is disproportionate to the purpose; that the information is incorrect and cannot be replaced by correct information through correction; that the data is processed without consent or authorization based on the law and in other cases when the processing cannot be carried out in accordance with the provisions of the law.
9) Unauthorized data processing
The operator will not process data if: the natural person has not given consent for processing, i.e. if the processing is carried out without legal authorization; for a purpose different from that for which it was determined, regardless of whether it is based on the consent of the person or legal authorization for processing without consent; the purpose of the processing is not clearly defined, if it has been changed, is illegal or has already been achieved; is the person to whom the data refer determined or determinable even after the purpose of the processing has been achieved; the method of processing is illegal; is data that is processed unnecessary or unsuitable for the purpose of processing; are the number or type of data processed disproportionate to the purpose of processing; the information is untrue and incomplete, that is, when it is not based on a reliable source or is outdated.
10) Length of data storage
The controller stores your personal data until the expiration of the legal retention period, i.e. until there is a legitimate interest in it for a maximum of 10 years, i.e. valid consent or consent. The controller will not store your personal data longer than is necessary and legal by processing them exclusively for the purposes of which data he collected.
11) Rights belonging to the person in case of unauthorized processing
In case of unauthorized data processing, the person has all the rights from the Personal Data Protection Act, the implementation of which is supervised by the Commissioner for Access to Information of Public Importance and Protection of Personal Data.
12) Data security
The operator will appropriately protect personal data from misuse, destruction, loss, unauthorized changes or access, that is, the company will take all necessary technical, personnel and organizational data protection measures, in accordance with established standards and procedures, which are necessary for the data protect against loss, destruction, unauthorized access, change, publication and any other abuse, as well as to establish the obligation of persons employed in processing to keep data confidential.
Personal data will be treated as confidential information and the Operator will take appropriate necessary measures to protect it in accordance with regulations.
13) Protection of confidential transaction data
When entering payment card data, confidential information is transmitted via public
network in a protected (encrypted) form using SSL protocol and PKI system, as currently
state-of-the-art cryptographic technologies.
Data security during purchases is guaranteed by the payment card processor, Banca Intesa ad
Belgrade, so the complete billing process is done on the bank’s website. Not a single one
at the moment, the payment card information is not available to our system
14) Contact for questions regarding the processing of personal data
The contact person for questions regarding the processing of personal data is:
David Kanački, director
Email: travelsetbottles@gmail.com
Phone: +381677052417
Working hours: 09.00-17.00 (CET/CEST), weekdays