Privacy Policy
I. Basic Provisions
1. The controller of personal data pursuant to Art. 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: "GDPR") is:
- Online shop: www.healthygarden.shop (hereinafter: "e-shop")
- Operator: Nico distribution s.r.o.
- Company ID (IČ): 096 27 014
- VAT ID (DIČ): CZ09627014
- Registered office: Lannova 2061/8, Nové Město, 110 00 Praha 1 (CZ)
- File No.: C 339223, registered with the Municipal Court in Prague
(hereinafter the "controller").
2. Contact details of the controller:
- Email: info@healthygarden.shop
3. Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
4. The controller has not appointed a data protection officer.
II. Sources and Categories of Personal Data Processed
1. The controller processes personal data that you have provided to it, or personal data that the controller has obtained as a result of fulfilling your order.
2. The controller processes your identification and contact details and data necessary for the performance of the contract.
III. Legal Basis and Purpose of Processing of Personal Data
1. The legal basis for the processing of personal data is:
- the performance of a contract between you and the controller pursuant to Art. 6(1)(b) GDPR,
- the controller's legitimate interest in providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Art. 6(1)(f) GDPR,
- your consent to processing for the purposes of providing direct marketing (in particular for sending commercial communications and newsletters) pursuant to Art. 6(1)(a) GDPR in conjunction with Section 7(2) of Act No. 480/2004 Coll., on certain information society services, where no order for goods or services has been placed.
2. The purpose of processing personal data is:
- processing your order and exercising the rights and obligations arising from the contractual relationship between you and the controller; when placing an order, the personal data required for its successful processing (name and address, contact details) must be provided. Providing personal data is a necessary requirement for concluding and performing the contract – without providing personal data it is not possible to conclude the contract or for it to be performed by the controller,
- sending commercial communications and carrying out other marketing activities.
3. The controller does not carry out any automated individual decision-making within the meaning of Art. 22 GDPR.
IV. Data Retention Period
1. The controller retains personal data:
- for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and to assert claims arising from such contractual relationships (for a period of 15 years from the termination of the contractual relationship),
- until consent to the processing of personal data for marketing purposes is withdrawn, for a maximum of 5 years, where the personal data are processed on the basis of consent.
2. Upon expiry of the retention period, the controller shall erase the personal data.
V. Recipients of Personal Data (Sub-processors of the Controller)
1. The recipients of personal data are persons:
- involved in the delivery of goods/services or the processing of payments under the contract,
- providing e-shop operation services and other services related to the operation of the e-shop,
- providing marketing services.
2. The controller does not intend to transfer personal data to a third country (a country outside the EU) or to an international organisation.
VI. Cookies
Our website uses cookies to improve your browsing experience. Cookies are small text files stored in your browser. Below you will find a detailed overview of all the cookies we use.
Necessary Cookies
These cookies are necessary for the basic functionality of the website and are stored automatically. They cannot be disabled.
| Name | Description | Duration |
|---|---|---|
| ADD_TO_CART | Used by Google Tag Manager | 1 year |
| GUEST-VIEW | Stores the order ID that guests use to view the order status | 1 year |
| LOGIN_REDIRECT | Stores the destination page that was loading before the customer was redirected to log in | 1 year |
| MAGE-MESSAGES | Tracks error messages and other notifications displayed to the user | 1 year |
| MAGE-TRANSLATION-STORAGE | Stores translated content at the customer's request | 1 year |
| MAGE-TRANSLATION-FILE-VERSION | Tracks the version of translations in local storage | 1 year |
| PRODUCT_DATA_STORAGE | Stores product data configuration related to recently viewed/compared products | 1 year |
| RECENTLY_COMPARED_PRODUCT | Stores the IDs of recently compared products | 1 year |
| RECENTLY_COMPARED_PRODUCT_PREVIOUS | Stores the IDs of previously compared products for easy navigation | 1 year |
| RECENTLY_VIEWED_PRODUCT | Stores the IDs of recently viewed products for easy navigation | 1 year |
| RECENTLY_VIEWED_PRODUCT_PREVIOUS | Stores the IDs of previously viewed products for easy navigation | 1 year |
| STF | Records the time messages are sent by the SendFriend module | 1 year |
| X-MAGENTO-VARY | Improves performance when using Varnish cache for static content | 1 year |
| FORM_KEY | Security measure protecting forms against Cross-Site Request Forgery attacks | 1 year |
| MAGE-CACHE-SESSID | Triggers the clearing of local cache storage | 1 year |
| MAGE-CACHE-STORAGE | Local storage of visitor-specific content enabling e-commerce functions | 1 year |
| MAGE-CACHE-STORAGE-SECTION-INVALIDATION | Forces the local storage of specific content sections that are to be invalidated | 1 year |
| PERSISTENT_SHOPPING_CART | Stores the persistent cart key used to restore an anonymous customer's cart | 1 year |
| PRIVATE_CONTENT_VERSION | Prevents pages containing customer content from being cached on the server | 1 year |
| SECTION_DATA_IDS | Stores customer-specific information related to actions initiated by the customer | 1 year |
| STORE | Tracks the specific store view/language selected by the customer | 1 year |
| AGE_POPUP | Stores age verification settings | 1 year |
Marketing Cookies
These cookies are used to track visitors across websites for marketing purposes. They are stored only with your consent.
| Name | Description | Duration |
|---|---|---|
| CUSTOMER_SEGMENT_IDS | Stores the customer segment ID | 1 year |
| EXTERNAL_NO_CACHE | Indicates whether caching is enabled or disabled | 1 year |
| FRONTEND | Your session ID on the server | 1 year |
| LAST_CATEGORY | The last category you visited | 1 year |
| LAST_PRODUCT | The last product you viewed | 1 year |
| NEWMESSAGE | Indicates whether a new message has been received | 1 year |
| NO_CACHE | Indicates whether the use of cache is allowed | 1 year |
Functional Cookies
These cookies enable enhanced functionality and personalisation of the website.
| Name | Description | Duration |
|---|---|---|
| MG_DNT | Allows data collection to be limited if you have your own cookie consent management code | 1 year |
| USER_ALLOWED_SAVE_COOKIE | Used for the cookie restriction mode | 1 year |
| AUTHENTICATION_FLAG | Indicates whether the customer is logged in or logged out | 1 year |
| DATASERVICES_CUSTOMER_ID | Identifies the logged-in customer | 1 year |
| DATASERVICES_CUSTOMER_GROUP | Indicates the customer group (stored as an sha1 checksum) | 1 year |
| DATASERVICES_CART_ID | Identifies the customer's actions in the cart | 1 year |
| DATASERVICES_PRODUCT_CONTEXT | Identifies the customer's interactions with products | 1 year |
Statistics Cookies
These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. They are stored only with your consent.
| Name | Description | Duration |
|---|---|---|
| _ga | Used by Google Analytics | 1 year |
| _ga_* | Used by Google Analytics | 1 year |
| _gcl_au | Used by Google Analytics | 1 year |
| _tt_enable_cookie | Used by TikTok Pixel | 1 year |
| _ttp | Used by TikTok Pixel | 1 year |
| _fbp | Used by Facebook Pixel | 1 year |
| _fbc | Used by Facebook Pixel | 1 year |
VII. Customer Rights
1. Under the conditions set out in the GDPR, you have:
- the right to access your personal data pursuant to Art. 15 GDPR,
- the right to have your personal data corrected pursuant to Art. 16 GDPR, or to have processing restricted pursuant to Art. 18 GDPR,
- the right to erasure of your personal data pursuant to Art. 17 GDPR,
- the right to object to processing pursuant to Art. 21 GDPR,
- the right to data portability pursuant to Art. 20 GDPR,
- the right to withdraw your consent to processing in writing or electronically to the controller's address or email stated in Art. I of this Policy.
2. You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your right to the protection of personal data has been infringed.
VIII. Personal Data Security Measures
1. The controller declares that it has adopted all appropriate technical and organisational measures to secure personal data.
2. The controller has adopted technical measures to secure data storage systems and the storage of personal data in paper form.
3. The controller declares that only persons authorised by it have access to personal data.
IX. Final Provisions
1. By submitting an order via the online order form, you confirm that you have read this Privacy Policy and that you accept it in its entirety.
2. You agree to this Policy by ticking the consent box via the online form. By ticking the consent box, you confirm that you have read this Privacy Policy and that you accept it in its entirety.
3. The controller is entitled to amend this Policy. It will publish the new version of the Privacy Policy on its website and will also send you the new version of this Policy to the email address you provided to the controller.
This Policy takes effect on 09.05.2022.