Privacy policy
PRIVACY POLICY
Company GALEX d.o.o., as a website operator myelixire.si and myelixire.com, respects your privacy and is committed to careful and permanent protection of all acquired user personal data.
We are committed to processing personal data in accordance with applicable Personal Data Protection Act, Electronic Communications Act and General Data Protection Regulation (GDPR).
Privacy Policy
Our values and guidelines regarding the protection of personal data
GALEX company d.o.orespects your privacy and is committed to carefully protecting all personal information obtained.
We are aware of our responsibility regarding the handling of your personal data, therefore we process all personal data in accordance with the applicable Personal Data Protection Act, the Electronic Communications Act, and the General Data Protection Regulation ("GDPR").
We respect your privacy and therefore we always ensure the protection of your personal data and follow the principles of secure personal data processing. We handle your personal data responsibly, fairly, transparently and legally. In this Privacy Policy, we present to you what personal data we process, what is the purpose of the processing, what will be their use and also what your rights are regarding the data we hold about you and how to exercise them.
We use appropriate data security measures to ensure that your personal data is not accessed by unauthorized persons, maintain its confidentiality and integrity, and prevent its loss, accidental destruction, etc., at all times during the processing of personal data. All data will be protected in accordance with personal data protection regulations. We always collect and process personal data in accordance with the law. All collected data is treated as confidential and is not sold to third parties. Under no circumstances will your data be disclosed to unauthorized persons and will not be used for purposes other than those for which it was collected.
The user is also responsible for protecting personal data, namely by ensuring the security of their username and password and appropriate software (antivirus) protection for their computer.
Personal data controller and joint controllers
The controller of your personal data, which is collected and processed in accordance with this Privacy Policy, is is Galex d.o.o., Tišinska Street 29g, 9000 Murska Sobota, email address: info@myelixire.com, phone: 02 5213 510.
Joint controllers
For certain aspects of the processing, we and the operators of certain social media platforms act as joint controllers, i.e. as joint controllers within the meaning of Article 26 of the General Data Protection Regulation (»GDPR"). Our company, GALEX d.o.o., namely manages the following social media pages:
· Facebook:[https://www.facebook.com/myelixire]
· Instagram:[https://www.instagram.com/myelixire]
That's why we are GALEX d.o.o. joint controller with Meta Platforms, Inc. (as the operator of the social network platform Facebook and Instagram).
In the case of online tracking methods used by social media platform operators, the platform operators and we act as joint controllers. Online tracking can take place regardless of whether you are logged in or registered on the respective social media platform. The legal basis for online tracking methods is your personal consent.
Further information on the recipients or categories of recipients and on the retention periods or criteria for determining the retention period of your personal data collected by the operators of social media platforms can be found in the privacy policies of the individual operators of the social media platforms (specified below). We have no influence on these. In the privacy policies of the individual operators of the social media platforms you can also find options regarding the exercise of your rights to disable online tracking methods. You can also contact the operators of the platforms using the contact details provided in the legal information of the respective platform operator.
In connection with the statistics offered to us by the individual social network platform provider, we can only influence and disable them conditionally. We would like to point out that we are careful not to provide any additional optional statistics to us by the social network platform provider.
It cannot be ruled out that the social network platform provider may use your profile data and online behavior data to analyze your habits, personal relationships, preferences, etc. GALEX d.o.o... cannot influence whether the social network platform provider processes or transfers your data to third parties.
Responsibility of platform operators
We have only limited influence on the management of personal data carried out by social media platform operators (e.g. management of followers and shared information). In areas where we have influence and where we can process personal data, we strive to ensure that the social media platform operator protects personal data appropriately, within the scope of the options available to us. In many areas, however, we cannot influence the processing of personal data carried out by the social media platform operator and we do not know exactly which data it processes.
The platform operator manages the entire IT infrastructure of the service, has its own provisions on the protection of personal data, privacy policy and its own user relationship with you (if you are a registered user of the social network service). In addition, the social network platform operator is solely responsible for all issues related to your user profile data on the social network, to which we, GALEX d.o.o., we don't have access.
More detailed information about the data processing carried out by social media platform providers and further objection options can be found in the privacy policies of the individual social media platform providers:
- Facebook: https://www.facebook.com/privacy/explanation
- Instagram: https://help.instagram.com/519522125107875
When using a particular social media platform, your personal data is usually processed by the respective social media platform operator, including on servers in third countries, in particular in the USA and the UK.
Purpose of processing personal data and legal basis for processing personal data
On the website myelixire.si and myelixire.com You can contact us via our online form to inquire about our services or to forward any questions to our company's email address. You can also contact us directly via email or regular mail or through telecommunications sources.
When you fill out our online form to request an inquiry, comment or question, the following fields are required: “name and surname”, “email” and “message”. You must also explicitly confirm your agreement to this privacy policy and terms and conditions.
By sending us an inquiry, comment or question via the contact form and entering your information You have expressed your agreement and awareness that your data will be stored for the purpose of record keeping and ensuring correct communication.
In general, our company stores data for the period necessary to achieve a specific purpose, to the extent reasonably necessary to ensure compliance with an applicable legal requirement or as recommended in accordance with applicable statute of limitations provisions, or until you withdraw your consent to the processing of your data. However, we will strive to immediately and irreversibly and permanently delete your data as soon as the need for data storage ceases, i.e. after the purpose for which it was collected has been fulfilled, or after the statute of limitations has expired.
We will treat all personal data you provide to us (name, surname, email) confidentially and use it only for the purposes for which you provided it. If there is a need to further process your data for any other purpose, we will inform you in advance and ask for your consent.
a) Fulfillment of the customer's order or implementation of the purchase contract with the customer
For the purposes of executing an order or fulfilling a purchase contract (including informing about the status of the order and delivery, carrying out complaint procedures in relation to claims due to material defects or under warranty, and the like). GALEX d.o.o. in the process of placing an order for products from the online store, collects and processes your following personal data: name and surname, place of residence, delivery address, telephone number, e-mail, other data necessary to complete the order (credit card information - number, bank, ...), data on payment habits.
We also collect the aforementioned data for the purpose of communicating with you when you send us communication messages or questions by telephone, email, regular mail or through the use of other communication channels (for example, via digital social media platforms).
Legal basis for the processing of the aforementioned data listed under this point a) is the law or GDPR (the controller has concluded a purchase contract with the buyer for the purchase of products from the online store or the controller is in business contact with a potential buyer for the purpose of answering a question from the potential buyer regarding the products).
b) Sending e-newsletters or carrying out direct marketing
For the purposes of conducting product surveys and sending e-newsletters, with which we send you news with tips about our products, new products, special offers or SALEh, prize games and the like, product surveys, information about customer satisfaction surveys and other marketing messages or for direct marketing purposes, GALEX d.o.o. collects and processes your following personal data: email, contact information (name and surname, address and telephone number).
Legal basis The processing of personal data for the purposes of sending e-newsletters or for the purposes of direct marketing and analysis, described in the previous paragraph, is subject to the individual's consent.
When you register to receive our newsletters or marketing messages via embedded frames on our social media pages, an analysis of user behavior is performed based on your consent, which primarily includes which areas of the individual website, mobile application or newsletter you visit and which links you open there. In this way, personalized user profiles are created that are assigned to your person and/or email address, so that we can better adapt potential advertising material, especially in the form of newsletters, the inclusion of advertisements on the website and printed advertisements or SMS messages, to your personal interests and so that we can improve the online offering.
The user has the option at any time to request a ban on the use of collected data for the purposes of e-newsletters or direct marketing and to revoke their use. The ban or revocation is effective in advance. The user unsubscribes from e-newsletters by unsubscribing from receiving e-newsletters or commercial messages on the website (a link to the unsubscribe page can be found at the bottom of each e-newsletter). The individual can also submit the request to the controller's address or in writing to the controller's e-mail address info@myelixire.com. UpraThe provider will appropriately prevent the use of personal data for direct marketing purposes within 15 days of receiving the request and will notify the user of this within a further five days via their email address. After unsubscribing, the individual's consent to the creation of a personalized user profile and to receiving e-newsletters based on it is considered revoked. We will delete your user data.
When subscribing to the newsletter on a social media site, we cannot influence whether the social media operator deletes your data. Therefore, please refer to the privacy policy of the relevant social media platform operator regarding deletion options.
c) Participation in prize competitions
You can participate in various prize competitions via our website, our e-newsletter or our social media pages. Unless otherwise specified for a particular prize competition or unless you have given us your explicit consent in more detail, we use the personal data you provide to us as part of your participation in the prize competition solely for the purpose of carrying out the prize competition (e.g. determining the winners, notifying the winners, sending the prize, announcing the winners). If you appear on the relevant social network under your real name or if you are recognizable through your profile photos, we cannot prevent other users from recognizing you.
For the purposes of participating in and conducting GALEX prize games d.o.o... collects and processes your following personal data: email, name and surname, address, telephone number, tax number (only in case of winning a prize).
Legal basis for the processing of data within the framework of prize competitions, the individual's consent is required. If you have given consent within the framework of the prize competition, you have the option to revoke this consent at any time and with future effect. The individual shall submit a request for revocation to the address of the controller or in writing to the controller's email address. info@myelixire.com.
d) Our presence and interSALE with users on social networks
The purpose of data processing within our social media pages is direct marketing (i.e. promotion, corporate communication, informing customers about offers, products, SALEme, prize games, various topics, company news, etc.) and interSALE with visitors to our social media pages and our response to relevant feedback, praise or criticism from individuals. For these purposes, we collect the following personal data from you: email, name and surname, address, telephone number, tax number (only in the case of a prize won).
We share your content on our page when this is a function of the social network platform and communicate with you via the social network platform. The data you enter on our social network pages, such as comments, videos, images, likes, public news, etc., are published by the social network platform and are never used or processed for other purposes. We reserve the right to delete your illegal content when necessary. This applies, for example, to controversial and illegal posts, hateful comments, obscene comments (explicitly sexually explicit content) or attachments (e.g. images or videos) that could violate copyright, personality rights, criminal law or the ethical principles of GALEX. d.o.o. or other regulations or codes.
Legal basis The processing of data within social networks requires the consent of the individual.
e) Notice about Online Cookies
GALEX operator d.o.o. processes personal data of website visitors www.myelixire.si and www.myelixire.com through web cookies to ensure a safe and improved user experience, smooth operation of the site and analysis of website visits.
In this policy, we use the term “cookies” to refer to cookies or other similar technologies covered by the EU Directive on Privacy and Electronic Communications. What are cookies?
Cookies are small text files that most websites store on users' devices that access the Internet in order to recognize the individual devices used by users when accessing the site. Their storage is under the full control of the browser used by the user - the browser can disable or restrict the storage of cookies if desired.
We use both persistent and session cookies on our sites.A persistent cookie consists of a text file that the web server sends to the web browser, which stores it and remains valid until the set expiration date, unless the user deletes it before the expiration date; more about them below. A session cookie is deleted when the user closes the web browser or when a certain time has elapsed (meaning that the session has expired), the latter include the following cookies: time, firstvisit, phpsessid and wppas_pvbl.
Why do we use cookies?
Cookies are of great importance for providing user-friendly online services. InterSALE Cookies make the interaction between the user and the website faster and easier. They help the website remember the individual's preferences and experiences, saving time and making browsing the website more efficient and enjoyable.
We also use cookies to learn more about how users use the content on our website and to help us improve the user experience when visiting the website. The data obtained is not processed at an individual level.
Information obtained through cookies on the website may be used for various purposes, including the following:
Required cookies: are crucial for the smooth operation of the website www.myelixire.si and www.myelixire.comWithout mandatory cookies, the website and portals would not function properly. Cookies are assigned and set when a visitor performs any interaction on the website (click, scroll, fill out a form, etc.) and confirms tracking by clicking the "OK" button.
Analytical cookies: Google Analytics is a service provided by Google LLC or Google Ireland Limited, depending on the location from which the website is accessed. www.myelixire.si and www.myelixire.com with "Google". Google uses the collected data to track and test the use of eggo.si, to prepare reports upon activation and share them with other Google services. With analytical cookies, the controller uses appropriate tools to analyze traffic and ensure the security of the website in order to improve the shopping experience. The analysis of visits to our websites is based on the processing of anonymized data. IP addresses are also collected, so each user is assigned a cookie at the beginning of their visit to the website that identifies and tracks shopping carts. You can place it on your computer www.myelixire.si and www.myelixire.com It also stores other cookies, such as: user identification number in encrypted form (to identify the user on the next visit), product ratings, and Google Analytics cookies (analysis of website visits). Session cookies are stored in the server's memory only for the duration of the visit and are deleted after one hour of inactivity, while persistent cookies are stored on the visitor's computer.
Cookies for personalized advertising and tracking: With them, the operator improves the user experience, as we use digital tracking to display the most relevant offers and products on social networks and other sites based on your shopping habits. The visitor accepts cookies by clicking on the "OK" button in the pop-up window.
How do I refuse and delete cookies?
If you prefer, you can also refuse or block cookies by changing your browser settings – for more information, see the “Help” function in your browser. Please note that most browsers automatically accept cookies. If you do not want cookies to be used, you may therefore need to actively delete or block them.
For information about the use of cookies in mobile phone browsers and details on how to refuse or delete such cookies, please refer to your mobile phone's user manual.
Please note that by refusing to use cookies, you will still be able to visit our websites, but some features may not work properly.
Data management
The controller of data collected using cookies is: Galex d.o.o., Tišinska Street 29g, 9000 Murska Sobota.
Users of personal data
In addition to the controller, the following persons also process your personal data on its behalf and for its account:
- companies that provide logistics and postal services or delivery services for products available for sale in the online store for the operator www.myelixire.si and www.myelixire.com;
- companies that provide the controller with technical support in the processing of personal data, such as manufacturers and maintainers of computer applications, websites and information services, developers and implementers of software solutions;
- companies engaged by the controller to provide services necessary for the performance of contracts, such as accounting services, printing houses, marketing, research and analytical companies, sending e-newsletters, external marketing agencies and event or prize game organizers, prize game sponsors and the like;
- competent tax authorities, pension and disability insurance institutions, health insurance institutions, etc., when required in accordance with regulations.
We share your content that you submit via the respective social media platforms on our site, when this is a function of the social media platform, and when we communicate via the social media platform. In this way, an indefinite number of third parties become aware of the content. Please note that on some social media sites, participation may also be possible directly on publicly accessible websites (e.g. on an electronic bulletin board or via comments) and that other users may also learn about your participation through your interaction with us. In addition, third parties are in such cases enabled to become aware of your personal data, including the identity of the prize recipient on the relevant social media. If you appear under your real name on the relevant social media site or if you are recognizable through your profile photos, we cannot prevent other users from recognizing you.
If you ask us a question via a social media platform, we will refer you to other, more secure channels of communication that ensure confidentiality, depending on the answer needed. You always have the option to send us confidential questions to our email address. info@myelixire.com.
Transfer of data to third countries
GALEX operator d.o.o. does not transfer your personal data to third countries (t.j. countries outside the EU) or international organisations.
Your use of a particular social media platform may result in the platform operator processing your data in a third country (based outside the European Union and the European Economic Area). For more information about the processing of your data in a third country to which GALEX d.o.o. has no influence, please refer to the data protection statements of the respective social network platform operators.
Personal data retention periods
The retention periods for your personal data vary depending on the purposes for which we collect and process your personal data. The retention periods are as follows:
- Personal data collected for the purpose of fulfilling an order or performing a contract: The data is stored until the expiry of the preclusive or limitation periods for exercising claims from concluded contracts, which in principle is 5 (years) from the due date of the claims. In the case of payments, the data is stored for 5 (five) years after the relevant tax or duties would have to be paid, or in the case of the introduction of a tax procedure, 10 (ten) years from the start of the limitation period in accordance with the ZDavP-2. All invoices are stored for 10 years after the end of the year to which the invoices relate.
- Personal data collected for e-newsletter or direct marketing purposes: The retention period is “until revocation” of consent, which can be given by the individual at any time. After six months, we will delete your data from the relevant email distribution lists. When subscribing to the newsletter on a social network site, we cannot influence the deletion of your data by the operator of the social network platform. Therefore, please check the privacy policy of the relevant operator of the social network platform regarding the retention period.
- Personal data collected for the purposes of our presence and interaction with users on social networks: All your public posts on our social media pages will remain posted on your timeline indefinitely, unless we delete them due to an update to the original topic, the illegality of the post or a violation of our guidelines, or if you delete the post yourself. Any personal data that you provide to us via a secure channel when you ask a question (encouragement, praise or criticism) will be deleted or anonymized no later than 90 days after we have finally answered you.
- Personal data collected for the purposes of prize competitions: After the end of the competition and the announcement of the winners, we delete the personal data of the participants within two months of the awarding of the prize. We store the data of the winners of prizes exceeding the value of EUR 42 for ten (10) years in accordance with the applicable tax legislation. When participating in the competition on a social network page (e.g. via a post or comment), we cannot influence the deletion of your data by the platform operator. Therefore, please check the privacy policy of the relevant social network platform operator regarding the retention period.
Your rights regarding personal data
The data subject may exercise the following rights in relation to their personal data: the right to access data, the right to rectification, the right to erasure (t.i. the right to be forgotten), the right to restriction of processing, the right to data portability, the right to object and the right to lodge a complaint with a supervisory authority. The rights may be restricted in accordance with Article 23 of the GDPR.
An individual can exercise their rights by sending a written request to the address GALEX d.o.o., Tišinska ulica 29 g, 9000 Murska Sobota, Slovenia, or at info@myelixire.com. UpraBefore granting the request, the controller verifies the identity of the individual exercising their rights under the personal data protection regulations, for security reasons and to prevent unauthorized disclosure or misuse of personal data.
a) right to access data
You have the right to request confirmation from us as to whether personal data concerning you are being processed, and if so, you may request access to your personal data and the following information: the purposes for which the personal data are being processed; the types of personal data being processed; the users or categories of users to whom the personal data concerning you have been or are being disclosed; the intended duration of the storage of the personal data concerning you, or if specific information on this cannot be obtained, the criteria for determining the storage period; the existence of the right to request the rectification or erasure of personal data concerning you, the existence of the right to restrict the processing of your personal data and the existence of the right to object to such processing; the existence of the right to lodge a complaint with a supervisory authority; all available information on the origin of the data, if the personal data are not obtained from the individual concerned; the existence of automated decision-making, including the creation of profiles referred to in Article 22(1) and (4) of the GDPR, and at least in such cases, meaningful information about the reasons for it as well as the significance and envisaged consequences of such processing for the individual concerned.
b) Right to rectification
You have the right to request that we rectify any inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data concerning you completed, including by providing a supplementary statement.
c) Right to erasure (“right to be forgotten”)
You have the right to request that we erase your personal data without undue delay where one of the following reasons applies:
- personal data are no longer necessary for the purposes for which they were obtained or otherwise processed;
- if you withdraw your consent or consent on which the processing of your personal data is based on consent and there is no other legal basis for the processing;
- if you object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate interests for the processing, or if you object to the processing pursuant to Article 21(2) of the GDPR;
- personal data has been processed unlawfully;
- the deletion of personal data is necessary to comply with a legal obligation;
- personal data were obtained in connection with the services offered by information companies in accordance with the first paragraph of Article 8 of the GDPR.
d) Right to restriction of processing
You have the right to request from us the restriction of the processing of your personal data where one of the following conditions applies:
- you dispute the accuracy of personal data;
- the processing is unlawful and you oppose the erasure of your personal data and instead request the restriction of their use;
- the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims, or
- you have filed an objection to the processing pursuant to Article 21(1) of the GDPR, pending verification of whether the legitimate interests of the controller override your reasons.
e) Right to data portability
You have the right to receive your personal data which we process in a structured, commonly used and machine-readable format and the right to transmit these data to another controller without hindrance from us, where the processing of your personal data is based on your consent and we carry out the processing by automated means.
When exercising your right to data portability, you have the right to have your personal data transferred directly from us to another controller, where technically feasible.
f) Right to object
Under the conditions of Article 21 of the GDPR, you have the right to object to the processing of your data on grounds relating to your particular situation. This right applies to the processing of personal data carried out by us for direct marketing purposes (including profiling).
g) Right to lodge a complaint with a supervisory authority
You always have the option to file a complaint with the competent supervisory authority if you believe that we are not processing your personal data in accordance with the regulations:
Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, e-mail address gp.ip@ip-rs.si; phone: 01 230 97 30, website: www.ip-rs.si
or to the responsible person of GALEX d.o.o. to the email address: info@myelixire.com. We must respond to your request to exercise your rights in relation to the personal data provided without undue delay and no later than one month from receipt of the request.
Contact person
For any questions regarding the personal data we manage, or to exercise your rights regarding your personal data in accordance with applicable regulations, or for any questions regarding our social media pages, you can contact us at the address below:
GALEX d.o.o.
Tišinska 29 g
9000 Murska Sobota
Slovenia
Or to the email address info@myelixire.com.
Privacy Policy Changes
We reserve the right to adjust this Privacy Policy from time to time to actual circumstances and legislation in the field of personal data protection, if necessary.Therefore, we ask you to check the current version before each submission of personal data so that you are aware of any changes and additions. For all changes that require your consent under applicable law, we will ask you for it in the prescribed form and manner.
WEBSITE TERMS AND CONDITIONS
Introduction
The website is owned by Galex. d.o.o., Tišinska ulica 29g, 9000 Murska Sobota. (hereinafter: the company).
Website content
All content on the website is of an informative nature and serves primarily to inform. The company undertakes to do everything in its power to ensure that the data on the website is true, reliable and of high quality. However, it is not liable for any typing errors or for delays or shortcomings in entering up-to-date data. The website will generally be accessible 24 hours a day, every day of the year. Due to technical or other reasons, the website may not be accessible without prior notice. Therefore, the company is not liable for periods of downtime.
Copyright protection
This website is the exclusive property of the company, therefore any misuse of data, images, texts and other information that are part of this website is prohibited. Any copying, distribution or other use of all the above information without the prior knowledge and permission of the company is prohibited. Some images on the website are used from the website freepik.com and unsplash.com.
Privacy protection
When you first visit a website, a “cookie” may be stored on your computer, which you can remove yourself or prevent from being stored by adjusting the appropriate settings. Cookies are small files that ensure better communication with the website and, for example, allow the website to manage your personal settings. It is important to know that through these files we cannot access your personal data or data on your computer, except for those that are publicly available (browser type, operating system type, etc.). The data you enter on the website is sent to us over the Internet in unprotected electronic form, and may therefore be available to third parties. To protect your identity and privacy, do not enter personal data that you do not want to be disclosed.
External links
In the event of a reference or connection to this website with others owned or operated by third parties, the company assumes no responsibility for the content or correct operation of these websites.
Change of conditions
The company reserves the right to change the general terms and conditions without prior notice. Changes will take effect immediately upon publication. In order to exercise these rights, please read the terms and conditions carefully each time you visit our website.
Competent court
Slovenian law shall apply exclusively to the interpretation and all legal issues related to the use of materials published on these websites. The court in Murska Sobota shall have jurisdiction over claims and disputes related to the use of said materials.
Conclusion
By entering the website, you agree that you are aware of and agree to all of the above terms and conditions and will abide by them.
This Privacy Policy is valid from 20.11.2024.