PRIVACY POLICY

Welcome to SELONCE’s Privacy Policy!

Please note that this Privacy Policy applies to personal data that is collected and processed by SELONCE LTD, having its registered seat at Ulica skofa Maksimilijana Drzecnika 6 – 2000 Maribor – Slovenia, registered within the Maribor’s District Court, under the number 8527334000 (EU VAT number: SI29095875) on 9th of October in 2019 (“SELONCE”, “we”, “our” or “us”).

SELONCE, as a data controller, collects and processes personal data relating to interactions on the Website. This Privacy Policy describes how SELONCE uses and protects any information that you give us.

We believe in full transparency, which is why we keep our Privacy Policy simple and easy to understand. However, if you have any concerns, please contact us at support@selonce.com.

We strongly urge you to read this Privacy Policy and make sure that you fully understand and agree with it. If you do not agree to this Privacy Policy, please do not access or otherwise use the Website.

Any capitalized but undefined term in this Privacy Policy shall have the meaning given to it in the Definitions section of the General Terms of Sale .

1. DEFINITIONS

 

When we say “you”, “your” or “Data Subject” we mean any natural person that shares personal data with us via Website.

When we say “processing” we mean any operation or set of operations which is performed on personal data or sets of personal data. This includes activities such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

When we say “personal data” or “data” we mean any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, either directly or indirectly. Therefore, data about a company or any legal entity is not considered to be personal data but registering on behalf of a legal entity may include sharing personal data. For example, the information in relation to one-person companies may constitute personal data where it allows the identification of a natural person. The rules also apply to all personal data relating to natural persons in the course of professional activity, such as the employees of a company or organization, business e-mail addresses like “firstname.surname@company.com”. This Privacy Policy does not apply to information from which no individual can reasonably be identified (anonymized information).

When we say “Site” or “Website” we mean a website located at https://SELONCE.com/, and subdomains (selonce.si, selonce.hr, selonce.sr, selonce.hu, selonce.it, selonce.at, selonce.eu, selonce.net) which is in the ownership of SELONCE.

When we say “Terms and Conditions” we mean SELONCE’s Terms and Conditions.

When we say “Data Processors” or “processor” we mean any natural or legal person who processes the data on behalf of the Data Controller. In addition, we may use the services of various service providers to process your data more effectively. In such cases, they are either our processors or sub-processors.

When we say “cookies” we mean small pieces of data stored on your device (computer or mobile device). This information is used to track your use of the Website and to compile statistical reports on website activity. For further information about the use of cookies and how you can manage them, please read our Cookie Policy.

When we say “consent” we mean your explicit consent on the processing of personal data. Persons who are 16 years of age or older may give free consent to the processing of their personal data.

When we say “GDPR” we mean the General Data Protection Regulation 2016/679.

 

2. DATA CONTROLER

 

SELONCE is a company registered under the laws of the Slovenia, which, as a controller, determines the purposes and means of the processing of personal data. Controller is responsible for your personal data.

 

3. WHAT DATA DO WE COLLECT ABOUT YOU AND WHEN?

 

We may collect and receive information about you in various ways:

i. Information you provide through the use of the Service (for example, by creating the account on SELONCE).
ii. Information you decide to provide through getting in touch with us via ’Contact us’ form on the Website.
iii. Information we collect using cookies in accordance with our Cookie Policy.

Some information we collect automatically when you use our website:

 

Technical data

 

The information we collect automatically may include information like your IP address, device type, unique device identification number, browser type, broad geographic location (e.g. country or city-level location) and other technical information, as well as information on how to use our Services (e.g., the pages you viewed, the time you viewed it, and what you clicked on). Some of this information may be collected using cookies and similar tracking technology, as explained further in our Cookie Policy.

We use analytic tools to help us measure traffic and usage trends for the Service. These tools collect information sent by your device or our Service, including the web pages you visit, add-ons, and other information that assists us in improving the Service. We collect and use this analytics information with analytics information from other Users so that it cannot reasonably be used to identify any particular individual User.

 

Your Usage Data

 

We collect and record data and sessions about how you are accessing and using the Website. Such information may include personal data.

 

Mobile Device Data

 

We collect limited data from your mobile device in order to provide the Service and analyze our performance. Such data includes your mobile device type, mobile device id, and the date and time stamps of Service use. In addition, we deploy tracking technologies within the Service to help us gather aggregate, non-personal statistics.

4. NO INFORMATION ABOUT PERSONS UNDER THE AGE OF 16

 

The Website is solely intended for those who are at least 16 years old. By using the Service, you represent that you are of that age. If you are not at the required age, please stop using the Website immediately.

If you believe we have processed data of a person who is younger than 16, please contact us at support@selonce.com.

 

5. WHY DO WE PROCESS PERSONAL DATA AND FOR HOW LONG?

DATA WE COLLECT

PURPOSE LEGAL BASIS

 

RETENTION

 

 

Email address, password

Creating an User Account on the Website according to the General Terms of Sale.

 

Processing is necessary for the performance of the Agreement (as defined in of General Terms of Sale). Without providing an email address, password, the User may not create the User Account.

Until the account is deleted in accordance with the General Terms of Sale.

 

First name, Last name, email address, Full address (including billing address, shipping address), Payment details (card number, PayPal). Optional data: phone number

The data is processed for the purpose of assigning the order to you as well as for the delivery of the goods and, if necessary, sending you an invoice, together with the processing of payment and clarification of possible legal claims. If you order media on concessionary terms, we also process your data in order to check if the preconditions for this are met. Processing is necessary for the performance of a contract with you and for compliance with legal obligations to which we are subject.

We process optional data based on your consent. If you do not provide us with this information, we will still be able to provide you the Service.

Data collected solely for the purpose of providing sales transactions or providing other services is retained for 24 months from the date of the last transaction or from the expiry of the statutory complaint period, whichever date is later.

Name, billing address, delivery address, telephone number, email address, bank account number, payment card number, personal name of the payment card holder, expiry date of the payment card, payment card control number , as well as other information regarding the issue that you contacted us about and you decide to provide

In some situations, you may need to contact our Customer Service team via the Site, via email or telephone (for example, to replace products, return products, etc.). In such situations, we will process your personal data so that we can assist you, in order to resolve the issue you have. Processing is necessary to comply with legal obligations or to assist Customers. Processing is also based on a legitimate interest, as we use the information to provide you with the information you require from us or that may be helpful to you regarding requests or questions you have directed to the Customer Service.

Data collected solely for the purpose of providing Customer Service is retained for 24 months from the date you have contacted Customer Service.

Name, email, date of birth

For the most loyal customers, SELONCE has organized a loyalty program, which offers a number of different benefits (welcome voucher, birthday voucher, special promotions, promo codes etc.). The rights and obligations regarding membership of the loyalty program are described in the. For SELONCE to be able to issue vouchers and promo codes and to keep track of loyalty program users, we collect your information when accessing the loyalty program. Processing is necessary for the performance of the contract. If you do not provide us with this information, we will not be able to identify you and we will not be able to grant you the benefits.

Information relating to Loyalty program Users is retained until termination of the loyalty program membership.

Technical Data

Mobile Device Data

 

To manage and operate the Website and Services keeping them updated and relevant,

to measure your interest and improve our Services,

to ensure that content on the Website is presented most effectively for you and your computer or mobile device.

Your consent – unless providing personal data is necessary to provide a Service or part thereof, the provision of your personal data is not a statutory or a contractual requirement and you may refuse to disclose any data.

You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent prior to such withdrawal.

We keep the information until you withdraw your consent.

Additional Data

i.e., data you decide to share with us.

If you send us an inquiry at support@selonce.com  or update your account details, otherwise request support, we will collect data you decide to share with us. Processing of personal data is either necessary to provide a Service or part thereof, or the processing is based on your consent.

If the processing is based on your consent, we keep the information until you withdraw your consent or for two years, whichever date comes first.

Email address

 

 

 

 

We use your e-mail address to send you the newsletter. This newsletter allows us to inform you of the new features of the Service, updates, as well as other news relevant to the company.

 

Processing is based on your consent. You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent prior to such withdrawal. You may unsubscribe from receiving a newsletter from us. If you wish to do so, simply follow the instructions found at the end of each e-mail.

We may use your email for this purpose until you unsubscribe or until you delete your User Account.

Email address

When signing in you may choose to participate in our marketing surveys. We collect your email address for conducting marketing surveys for the needs of SELONCE’s business and surveys on satisfaction with products and services. Processing is based on your consent. You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent prior to such withdrawal. You may unsubscribe from participating in marketing surveys. If you wish to do so, simply follow the instructions found at the end of each e-mail.

We may use your email for this purpose until you unsubscribe.

Email address, date of birth, gender, purchasing details

When signing in or accessing the loyalty program, you may agree to the monitoring of your behavior patterns by SELONCE and sending you personalized offers on products and services based on the behavior patterns observed by SELONCE. This means that you may give us your consent to process data about your past purchases, your gender or your age, and send you information about other products we believe you might be interested in based on that information. Processing is based on your consent. You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent prior to such withdrawal. You may unsubscribe from receiving personalized offers and monitoring of your behavior. If you wish to do so, simply follow the instructions found at the end of each e-mail.

We may use your email for this purpose until you unsubscribe.

Information necessary for identification

To allow Data Subjects from EEA to exercise their rights in accordance with this Privacy Policy, as defined in Section 11. Processing is necessary for compliance with a legal obligation which Controller is subject to.

We keep this information for a period of one year.

 

 

6. WHAT WE DO NOT DO?

 

SELONCE will never:

  • Sell any kind of personal information or data;
  • Disclose this information to marketers or third parties not specified in Section 8;
  • Process your data in any way other than stated in this Privacy Policy.

 

7. PERSONAL DATA SECURITY

 

We take administrative, technical, organizational and other measures to ensure the appropriate level of security of personal data we process. Upon assessing whether a measure is adequate and which level of security is appropriate, we consider the nature of the personal data we are processing and the nature of the processing operations we perform, the risks to which you are exposed by our processing activities, the costs of the implementation of security measures and other relevant matters in the particular circumstances.

Some of the measures we apply include access authorization control, information classification (and handling thereof), protection of integrity and confidentiality, data backup, firewalls, data encryption and other appropriate measures. We equip our staff with the appropriate knowledge and understanding of the importance and confidentiality of your personal data security.

 

8. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

 

SELONCE utilizes external processors for certain processing activities. We use information audits to identify, categorize and record all personal data that is processed outside the company, so that the information, processing activity, processor and legal basis are all recorded, reviewed and easily accessible.

We have strict due diligence procedures and measures in place and review, assess and background check all processors prior to forming a business relationship. We obtain company documents, certifications, references and ensure that the processor is adequate, appropriate and effective for the task we are employing them for.

We audit their processes and activities prior to contract and during the contract period to ensure compliance with the data protection regulations and review any codes of conduct that oblige them to confirm compliance.

This is the list of processors with whom we share your personal data:

PROCESSOR

 ROLE

SEAT

Sendinblue Company, SAS E-mail services based on Cloud France
Google, Inc. Analytics and Marketing USA
Braintree Company Payment provider USA
Facebook, Inc. Analytics and Marketing USA
Instagram Analytics and Marketing USA
Zapier, Inc Task automation USA
Space Invoices Creation of invoices Slovenia
Appolo Creation of Invoices Slovenia
Freshdesk Customer Support USA
Fully d.o.o. Delivery Slovenia

We may also share your personal data with our outside accountants, legal counsels, and auditors.

 

9. INTERNATIONAL TRANSFER OF YOUR PERSONAL DATA

 

We may transfer your personal data to countries other than the one you reside in. In these cases, we will transfer your personal data only:

  1. To the countries within the EEA;
  2. To the countries which do not form the EEA but are considered to ensure an adequate level of protection;
  3. To the countries which do not belong to those specified under item 1. and 2, but only by applying the appropriate safeguard measure in accordance with the GDPR.

For instance, if we are to transfer personal data to the recipient in the USA (which is likely to occur as explained in Section 8), we will make sure that the recipient participates in the EU/US Privacy Shield Framework.

 

10. HOW LONG DO WE KEEP YOUR DATA?

 

The period for which we store your personal data depends on a particular purpose for the processing of personal data, as explained in detail in Section 5. We retain personal data for as long as we reasonably require it for legal or business purposes. In determining data retention periods, we take into consideration the applicable law (see Article 8 of the General Conditions of Sale), contractual obligations, and the expectations and requirements of our Users. When we no longer need personal information, or when you request us to delete your information, where this is legal, we will securely delete or destroy it.

However, as an exception to the retention periods in Section 5 the data may be processed to determine, pursue, or defend claims and counterclaims.

 

11. YOUR RIGHTS

 

As a Data Subject in the EEA, whose personal information we hold, you have certain rights under the GDPR. This part of the Privacy Policy aims to give you a general understanding of these rights. In relation to each of the rights noted below, we provided a reference to the specific provision of the GDPR from which that right arises.

 

Right of Access (Article 15 GDPR)

 

You can send us a request for a copy of the personal data we hold about you.

We have ensured that appropriate measures have been taken to provide such in a concise, transparent, intelligible and easily accessible form, using clear and plain language. Such information is provided in writing free of charge. It may be provided by other means when authorized by the Data Subject and with prior verification as to the subject’s identity.

Information is provided to the Data Subject at the earliest convenience, but at a maximum of 30 days from the date the request was received. Where the retrieval or provision of information is particularly complex or is subject to a valid delay, the period may be extended by two further months where necessary.

 

Right to Correction of Your Personal Data (Article 16 GDPR)

 

If the personal data we have about you is incorrect, you have the right to request that we correct those data. Where notified of inaccurate data by the Data Subject, we will rectify the error within 30 days and inform any third party of the rectification if we have disclosed the personal data in question to them.

 

Right to Be Forgotten or Right to Erasure (Article 17 GDPR)

 

You have the right to request from us that your personal data is deleted in certain circumstances including:

  • The personal data are no longer needed for the purpose for which they were collected;
  • You withdraw your consent (where the processing was based on consent);
  • You object to the processing and no overriding legitimate grounds are justifying us processing the personal data;
  • The personal data have been unlawfully processed; or
  • To comply with a legal obligation.

However, this right does not apply where, for example, the processing is necessary:

  • To comply with a legal obligation; or
  • For the establishment, exercise or defense of legal claims.

 

Right to Restriction of Processing (Article 18 GDPR)

 

If the accuracy of the personal data is contested, you consider the processing is unlawful but you do not want it erased, we no longer need the personal data but you require it for the establishment, exercise or defense of legal claims or you have objected to the processing and verification, you can exercise your right to the restriction of processing.

 

Right to Withdraw the Consent (Article 13(2)c) GDPR)

 

If you have provided your consent to the collection, processing and transfer of your personal data, you have the right to fully or partly withdraw your consent. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose(s) to which you originally consented unless there is another legal ground for the processing.

 

Right to Lodge a Complaint

 

If you have any concerns or requests in relation to your personal data, please contact us at support@selonce.com and we will respond as soon as possible but not later than within 30 days.

If you are unsatisfied with how we process your data, you may contact the competent supervisory authority.

In case you believe that we are processing your personal data in violation of the GDPR, you have the right to lodge a complaint with the supervisory authority located in the EEA where you reside or work or where the alleged infringement took place.

 

12. CHANGES TO PRIVACY POLICY

 

We reserve the right to change Privacy Policy from time to time at our sole discretion. If we make any changes, we will publish the new rules on this web page and, if we have your e-mail, we will notify you directly.

Where you have previously consented to our Privacy Policy, your continued use of the Website after we make changes is deemed to be acceptance of the updated rules.