General The general terms and conditions of the POP SHOP SLOVENIA online store have been compiled in accordance with the Consumer Protection Act (ZVPot), the Personal Data Protection Act (ZVOP-1) and the Electronic Communications Act (ZEKom-1).
Ultimo Imperio s.p. (company and controller) processes and protects your personal data in accordance with the legislation in the field of personal data protection. The company will use personal data exclusively for the purposes for which the personal data was given and will in no case disclose it to unauthorized persons. Your data may be disclosed to others only at the request of a state authority on a given legal basis.
Data storage The company only keeps your data for as long as is necessary for the purposes for which the personal data is processed, unless another retention period is specified by law.
The company keeps the data of customers that are necessary for the performance of services for five years from the fulfillment of the contract on a contractual basis. The company processes your personal data for the purposes of direct advertising only with the consent given, until your cancellation. The company can advertise its activity and inform individuals about the novelties and offers of the company also on the basis of the legitimate legitimate interests of the company, which are better quality provision of services and advertising.
The company keeps personal data on the issued invoice in accordance with the law for ten years after the end of the year to which the invoices relate.
The information you provide to Ultimo Imperio s.p. with your consent, you can cancel at any time. Revocation does not affect the lawfulness of the processing of personal data on the basis of consent prior to its revocation.
Your rights In accordance with the General Regulation on Personal Data Protection and the law governing the protection of personal data, the company grants the following rights to the individual:
the right to request information from the company as to what data is being processed in relation to it; the right to obtain from the company a certificate as to whether his personal data are being processed; the right for the company to correct inaccurate personal data concerning him without undue delay; the right of the company to delete personal data concerning him without undue delay, unless the basis is law; the right of the company to restrict the processing of personal data, unless the basis is law; the right to receive personal data concerning him which he has provided to the undertaking in a structured, commonly used and machine-readable form, and the right to pass on such data to another controller or to require the undertaking to provide such data directly. the right to object at any time to the processing of personal data concerning him, unless the basis is a contract or law.
Exercise of those rights and remedies The individual exercises these rights free of charge at ULTIMO IMPERIO s.p. The company may request the data of an individual in order to confirm his identity. The company must decide on the individual's request without undue delay, no later than one month after receiving the request. This period may be extended, if necessary, by a maximum of two additional months, taking into account the complexity and number of requests. The company must notify the individual of the extension, and the individual can appeal the extension. In the event of manifestly unfounded or excessive requests from the data subject, especially if the requests are frequently repeated, the undertaking may refuse to act on the request with a specific justification.
The data subject may at any time request in writing or in another agreed manner that the controller permanently or temporarily ceases to use or otherwise process his personal data for the purpose of direct marketing. In the case referred to in the previous sentence, the controller shall stop processing personal data for the purpose of direct marketing within 15 days at the latest and shall notify the individual who submitted this request in writing or in another agreed manner within a further five days.
If, after receiving the decision of the controller, the individual considers that the personal data received is not the personal data requested or that he has not received all the requested personal data, he may file a reasoned objection to the controller within the deadline before filing a complaint with the Information Commissioner. fifteen days. The operator must decide on the objection as a new request within five working days. If the controller does not decide on the request of the individual within the time limit, the individual may file a complaint against the silence with the Information Commissioner.
In the procedure of appeal against the decision of the controller, the Information Commissioner decides according to the rules of the general administrative procedure. In cases that cannot be resolved otherwise, the Information Commissioner decides on the appeal with a decision. No appeal is allowed against the decision, but an administrative dispute is admissible.
Contractual processing of personal data The company may entrust individual tasks related to the processing of personal data to the processor by contract. The contract is in writing or in an equivalent electronic form and complies with the requirements of the General Regulation on Personal Data Protection, the provisions of the law governing the protection of personal data and other regulations governing the protection of personal data.
Privacy policy
Orders & delivery of products
Purpose & Legal Basis If you decide to make a purchase through sales channels, where you make a purchase at a distance, we need to deliver certain of your data, without which we can not fulfill our obligations, namely the delivery of your order.
We process the data collected for this purpose on the basis of a contractual relationship (purchase) that you made in one of the distance sales channels at Ultimo Imperio s.p.
Retention of personal data Personal data related to orders and delivery of products is kept by Ultimo Imperio s.p. 10 years after the period to which the last customer order relates, in accordance with the provision on retention of invoices pursuant to Article 86 of the Value Added Tax Act (ZDDV-1), unless there is another legal basis for further processing of personal data.
Types of personal data For this purpose, we process the following personal data:
Name, Surname, Address, Postal Code, City; Contact details (e-mail) for the purpose of notifying of any changes to the order (delivery deadline, delivery notice, etc.).
Product returns, complaints
Purpose & Legal Basis Applicable law guarantees customers that they can exercise certain rights in connection with the assertion of material defects, warranty claims, return of products for no reason, etc. and the possibility to exchange the product for another or to use other return options (including a refund).
We process the data collected for this purpose on the basis of the contractual relationship (purchase) you made with Ultimo Imperio s.p., as otherwise we cannot provide you with a new product (replacement) or refund the purchase price.
Retention of personal data Personal data related to orders and delivery of products is kept by Ultimo Imperio s.p. 10 years after the period to which the last customer order relates, in accordance with the provision on retention of invoices pursuant to Article 86 of the Value Added Tax Act (ZDDV-1), unless there is another legal basis for further processing of personal data.
Types of personal data For this purpose, we process the following personal data:
Name, Surname, Address, Postal Code, City; Contact details (e-mail); Purchase history and invoices issued by Ultimo Imperio s.p ..
Communication with you
Data processed for this purpose shall be kept in accordance with the first two purposes, unless there is no other legal basis for the processing.
Types of personal data For this purpose, we process the following personal data:
Name, Surname, Contact details (e-mail); Status of consents; History of communication with you.
Statistical data processing for the purposes of internal analysis and preparation of strategies
Ultimo Imperio s.p. on the basis of a legitimate interest, uses data from past purchases, according to your demographic data and data on communication with you, for the purposes of internal analysis and preparation of strategies, regarding:
* Monitor sales in various sales channels, including purchase time, frequency and value; * Checking the correctness of data in the system; * Monitoring responses to outgoing messages, based on which investment and advertising are adjusted; * Monitoring of sales data (products sold, average value of the cart, repurchases, first purchase, number of products on order); * Monitoring of data on shopping points * (number of members, value of shopping points). * Analysis of customers of certain products and customization of advertising. * Most analyzes are performed on the basis of anonymous and pseudomosed data, except when personal data is required for the purpose of processing (eg verification of data accuracy). Such processing allows us to adjust our advertising and business inputs to past trends, thus enabling you to get the best products, at the best price.
If you do not want such processing, you can request the deletion of your personal data at any time.
Retention of personal data As long as personal data is stored, for other purposes. Upon expiration of these, personal data is used only in anonymised form.
Types of personal data For this purpose, we process the following personal data:
Name, Surname, Address, Postal Code, City; Contact details (e-mail); Status of consents; Purchase history.
Customized marketing communications
Purpose & Legal Basis Ultimo Imperio s.p. collects the consent of individuals for the purpose of customized communication regarding discounts, offers, news, events and other content through various communication channels (eg e-mail, e-mail, addressed mail-catalogs, social networks, notifications via browser, information on the website.
This processing does not involve any automatic profiling that would have legal or similar consequences for the individual.
Retention of personal data Personal data for this purpose are processed until the revocation of consent, and kept for a maximum of one year after the revocation of consent, unless there is another legal basis for processing.
Types of personal data For this purpose, we process the following personal data:
Name; Surname; Title; E-mail; Purchase history and responses to transmitted past communications (e.g. opening email, clicking on links, purchasing).
It depends on the information in the last three indents, what offers you will receive, how often we will communicate with you and in what way.
At any time, an individual may decide that he no longer wishes to receive such communication with us by submitting a written request via e-mail shop@pop-shop.si, by phone 041 512 565 or by sending us a mail to Ultimo Imperio sp, Zaloška 24 , 1000 Ljubljana.
Customer notification of an unfinished online order
Purpose & Legal Basis Ultimo Imperio s.p. to potential buyers who have added selected products to their cart but have not completed their purchase, periodically sends an email in connection with their purchase with the aim of completing the purchase and making it based on the legitimate interest of Ultimo Imperio s.p ..
Types of personal data For this purpose, we process the following personal data:
Name, Surname, Address, Postal Code, City; Contact details (e-mail); The contents of a shopping cart left by a potential buyer when ordering online. Retention of personal data The controller processes this personal data until the purpose for which it is kept is realized.
Enforcement, litigation, inspections
Purpose & Legal Basis For the purpose of conducting enforcement of unpaid but taken over products, litigation and inspections, Ultimo Imperio s.p. certain personal data obtained in accordance with the purposes set out above.
In the case of enforcement, the legal basis is a contract (purchase) between Ultimo Imperio s.p. and the legal right to enforcement. In the case of litigation and inspections, however, Ultimo Imperio s.p. responsible for processing personal data in accordance with the law.
Retention of personal data Ultimo Imperio s.p. keeps personal data for this purpose until the expiry of the statutory deadline.
Types of personal data Only those personal data processed by Ultimo Imperio s.p. collected for the above purposes and which are necessary to fulfill the purpose.
Prize games
Ultimo Imperio s.p. processes personal data for the purpose of conducting prize games. As these differ from each other, data on the purpose, storage and other details regarding the processing of personal data are included in the conditions of participation in the prize draw.
In parts not provided otherwise in the rules of the sweepstakes organized by Ultimo Imperio s.p., this privacy policy also applies to the processing of personal data in sweepstakes.
Diary entries
Purpose & Legal Basis The purpose of these procedures is to ensure network and information security, ie. enable the detection and prevention of unauthorized access, which may jeopardize the availability, integrity and confidentiality of stored or transmitted personal data and the security of related services accessed through these networks and systems. Ultimo Imperio s.p. it processes this data to protect the interests of individuals / website visitors.
Retention of personal data Ultimo Imperio s.p. keep personal data until the purpose for which they are collected is achieved, but not longer than one year.
Types of personal data For this purpose, the operator processes the IP address and browser version data.
Transmission of your personal data to third parties
Ultimo Imperio s.p. will not pass on your data to third parties unless:
* Police, inspection, judicial authorities and other institutions that have a legal basis for requesting information.
Minors
Ultimo Imperio s.p. intentionally does not process the personal data of minors who would be aware that they are minors. Such a restriction does not affect the effect of concluding a contract of minors, in accordance with the applicable legislation in the Republic of Slovenia.
Security of personal data
Ultimo Imperio s.p. constantly take care of the security of your personal data, in accordance with the assessments of the risks that unauthorized access could cause loss, destruction, falsification, manipulation or disclosure.
Individuals' rights regarding the processing of personal data
Every individual has the rights regarding the processing of personal data determined by the applicable legislation. If you wish to exercise any of the rights listed below, please let us know via e-mail shop@pop-shop.si and send mail to the company's address: Ultimo Imperio s.p., Zaloška cesta 24, 1000 Ljubljana or via telephone number 041 512 565.
For the purpose of identification in the exercise of your rights, the operator reserves the right to request additional information from you, and at the same time we may refuse to take action in the event that we cannot reliably identify you.
In accordance with applicable law, we will respond to you as soon as possible, and no later than one month after receiving the request.
Withdrawal of consent If the legal basis for the processing of personal data is consent, you can write to us at any time or call us. In accordance with your wishes, we will arrange the necessary so that the processing of your personal data will no longer be used for this purpose.
Access to personal data You can check with us at any time whether we process any personal data about you and also obtain information about what data we process about you and for what purpose.
Correction of personal data If we process incorrect personal data about you, you can request that the data be corrected at any time. The same applies to supplementing incomplete data.
Deletion of personal data (right to forget) Every individual has the right to request the deletion of personal data. In the cases specified by the GDPR, Ultimo Imperio s.p. the right not to delete the data (eg if there is a legal obligation of the manager - keeping accounts).
Restriction on the use of personal data If there is one of the following reasons, you always have the right to request that we restrict the processing of your personal data:
Accuracy of data (the limit refers to the period that allows us to check the accuracy of the data); Illegality of processing (insofar as the individual objects to the deletion of personal data); We no longer need your information, and you oppose the deletion of it for the purpose of enforcing, enforcing or defending legal claims; Objection to the lawfulness of the processing until it is verified that the legitimate reasons of the provider outweigh your reasons.
Bleaching contract At any time, if the processing is carried out on the basis of legitimate interests pursued by the controller or a third party, you can lodge an objection and we will stop using your personal data for this purpose, unless we prove compelling legitimate reasons for processing over your interests. rights and freedoms or to assert, enforce or defend legal claims.
The supervisory body responsible for the field of personal data protection in Slovenia is the Information Commissioner of the Republic of Slovenia ("IP RS"). You can submit a complaint regarding the processing of your personal data at any time via the communication channels published on their website https://www.ip-rs.si.
Changes to this policy
Ultimo Imperio s.p. wishes to respect internationally recognized principles and legislation on personal data. To this end, and based on your feedback, we will update this privacy policy to ensure that it is error-free and contains relevant information about your rights and processing activities, and that it complies with applicable laws and best practices.
We may change it from time to time to keep pace with new legal and market advances and opportunities. If we make significant changes, we will notify you on our websites through notifications or send you an updated policy to your email address. In any case, an updated policy will always be posted on this website.
Release Date: 01. 03. 2020
Cookies What are cookies Cookies are files that websites create during a visit. They store site settings, profile information, and other information. There are two types of cookies: Domain cookies are set with the domain of the website in the address bar. Third-party cookies are from other domain sources that have various elements embedded in the site, such as ads or images.
Mandatory cookies Essential cookies: These cookies are crucial as they allow you to move around the website and use the features of the website or to provide the services you have requested. For example, to store products that you have added to the online shopping cart. We do not need your permission to use these cookies.
LIST OF COOKIES AND VALIDITY:
form_key: A security measure that appends a random string to all form submissions to protect the data from Cross-Site Request Forgery (CSRF). Validity: session. mage-cache-sessid: The value of this cookie triggers the cleanup of local cache storage. When the cookie is removed by the backend application, the Admin cleans up local storage, and sets the cookie value to true. Expiration: session. mage-cache-storage: Local storage of visitor-specific content that enables ecommerce functions. Expiration: session. Expiration: 1 day. mage-cache-storage-section-invalidation: Forces local storage of specific content sections that should be disabled. Expiration: 1 day. mage-messages: Tracks error messages and other notifications that are shown to the user, such as the cookie consent message, and various error messages. The message is deleted from the cookie after it is shown to the shopper. Expiration: 1 year. mage-translation-file-version: Tracks the version of translations in local storage. Used when Translation Strategy is configured as Dictionary (Translation on Storefront side). Expiration: 1 day. mage-translation-storage: Stores translated content when requested by the shopper. Used when Translation Strategy is configured as “Dictionary (Translation on Storefront side)”. Expiration: 1 day. plg_system_eprivacy: Remember the status of agreeing to cookies. Validity: 3 months. private_content_version: Appends a random, unique number and time to pages with customer content to prevent them from being cached on the server. Expiration: 1 day. product_data_storage: Stores configuration for product data related to Recently Viewed / Compared Products. recently_compared_product: Stores product IDs of recently compared products. Expiration: 1 day. recently_compared_product_previous: Stores product IDs of previously compared products for easy navigation. Expiration: 1 day. recently_viewed_product: Stores product IDs of recently viewed products for easy navigation. Expiration: 1 day. recently_viewed_product_previous: Stores product IDs of recently previously viewed products for easy navigation. Expiration: 1 day. section_data_ids: Stores customer-specific information related to shopper-initiated actions such as display wish list, checkout information, etc. Expiration: session. store: Tracks the specific store view / locale selected by the shopper. Expiration: 1 year. PrestaShop: Configuration setting that improves performance when using Varnish static content caching. Expiration: 14 day.
Analytical cookies Cookies are used for various purposes. With the help of cookies, the interaction between the user and the website is faster and easier. There are also cookies that do not have a direct impact on the user (eg tracking page statistics - Google Analytics).
LIST OF COOKIES AND VALIDITY:
_ga: Google Traffic Analytics traffic measurement. Validity: 2 years.
_gat: The cookie does not store user data, it is used to limit the frequency of hits when measuring page traffic with Google Analytics. Validity: 10 minutes.
_gid: A randomly generated unique number is used to calculate data about visits to our site using Google Analytics. Validity: 24 hours.
Social networks Facebook plugin; to increase the participation of our users through social networks, sales analysis, user segmentation and user re-targeting.
LIST OF COOKIES AND VALIDITY:
datr: operation of facebook plugin. Validity: 3 months.
locale: facebook plugin operation. Valid for 7 days.
fr: operation of facebook plugin. Valid for 3 months.
sb: facebook plugin operation. Valid for 2 years.
wd: operation of facebook plugin. Valid for 7 days.
Manage and delete cookies Each user of web browsers has the right and possibility to delete all cookies from the device independently. You can find specific instructions and steps from the developer of the browser you are using. For easier orientation, we attach links to certain popular web browsers.
Google Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en_US
Mozilla Firefox: https://support.mozilla.org/en/kb/delete-cryptics-page-page
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Information of the EU directive Review of the e-Privacy Directive documentation: https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:32002L0058
Overview of the GDPR Directive dossier: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679
Company contact details ULTIMO IMPERIO s.p. Zaloška 24 1000 Ljubljana Slovenia EU T: +386 (0) 41 512565 E: shop@pop-shop.si