Privacy Policy

1. webpixelstudio.org – hereinafter referred to as the “website” – is the website of Botanie s.r.o., which serves for the presentation, advertising, sale, and provision of services offered by this company.
2. The operator of the website is Botanie s.r.o., with its registered office at Budatínska 16, 851 04 Bratislava, Company ID: 53 092 295, registered in the Commercial Register of the Municipal Court Bratislava III, File No. 145754/B. The operator is the responsible entity and serves as your contact point for exercising requests under the GDPR, while also fulfilling its information obligations under Articles 13 and 14 of the GDPR through these Privacy Policy Terms.
3. A Data Protection Officer operates on the website and serves as your contact point for answering any questions regarding personal data protection or handling requests from data subjects. Contact details of the Data Protection Officer: contact@webpixelstudio.org
4. A website user is considered to be a person who uses the website’s services for personal and non-commercial purposes. The user is the person referred to in this document by the terms “your,” “you,” and “yours,” and to whom these Privacy Policy Terms apply.
5. Personal data (hereinafter referred to as “Personal Data”) means any information relating to an identified or identifiable natural person. Such a person is one who can be identified directly or indirectly, particularly by reference to a generally applicable identifier or to one or more characteristics or attributes forming their physical, physiological, psychological, mental, economic, cultural, or social identity. Personal data includes information that allows us to identify your email address, name, shipping address, phone number, usernames, and any identifying identity.
6. GDPR (General Data Protection Regulation) is Regulation (EU) 2016/679 of the European Parliament and of the Council, which governs and replaces previous data protection legislation.
7. When processing personal data, we primarily follow the EU General Data Protection Regulation (“GDPR”), Articles 12 to 22 (http://eur-lex.europa.eu/legal-content/SK/TXT/HTML/?uri=CELEX:32016R0679&from=EN), which also governs your rights as a data subject, as well as the relevant provisions of the Personal Data Protection Act, Sections 78 and 79 of Act No. 18/2018 Coll. (https://www.slov-lex.sk/pravne-predpisy/SK/ZZ/2018/18/20180525), and other applicable legal regulations relating to personal data processing and privacy protection.
8. By visiting the website, registering on the website, or contacting us, you indicate that you understand and agree to the collection, use, and transfer of your information (including your personal data) under the conditions set out in these Privacy Policy Terms. If you do not accept or do not wish to be bound by these Privacy Policy Terms, do not use the website or our services.

These terms apply to the website webpixelstudio.org.

1. Information that you provide to us directly.
2. If you fill out a contact form on the website or contact us via email, you may provide us with your Personal Data. You provide such data when subscribing to services, participating in discussion forums or other social media features on the website, or when reporting a problem with the website. The Personal Data you provide may include your name, address, email address, phone number, and username.
3. If you fill out a contact form for receiving messages via a newsletter, you may provide certain Personal Data about yourself, including your name, contact details, and email address.
4. Information collected indirectly through the use of the website.

5. We may collect information about your applications, browsers, devices, IP address, or location. We may collect information about the services you use and how you use them, for example when you visit different sections of our portal or applications and what choices you make within those services. We may also automatically collect certain technical information, such as:

   a) Device information
   We may collect information about specific devices (such as device type, hardware model, operating system version, unique device identifiers, and mobile network information if you access the website via a mobile device).

   b) Log information
   When you use our services or view content we provide, we may automatically collect and store certain information in server logs. This information may include:

   • details about your use of the website, such as navigation paths and search queries
   • internet protocol (IP) address
   • device event information such as crashes, system activity, hardware settings
   • browser type, browser language
   • date and time of your request
   • referral URL
6. Personal Data provided by third parties.
7. You may also subscribe to our services using your social media profile. If you choose this option, we will automatically collect selected Personal Data about you from your social media account. The Personal Data we collect depends on your privacy settings on those platforms and may include your name, profile picture, age range, gender, language, country, and other public information.
8. We may collect data from social network providers (e.g., Google, Facebook). We have access to information you provide directly as well as information obtained through these social networking services, depending on your privacy settings on those platforms.
9. You provide your Personal Data voluntarily. You are responsible for your Personal Data, including its accuracy, completeness, and truthfulness. The operator is not liable for any damages that may arise to you or any third party in connection with incorrect, incomplete, or false Personal Data provided.
10. To the extent that this information can directly or indirectly identify you, especially in combination with other information, it will be treated as Personal Data and will be subject to these Privacy Policy Terms.
11. We will only share anonymized statistical data about your activities and browsing patterns on the website that cannot be used to identify any individual user.

1. The processing of personal data is necessary for us in order to:

• provide our services and products;
• fulfill our legal and contractual obligations;
• protect our legitimate interests, as well as those of our clients and other persons.

2. If you are our subscriber, contractual partner, client, competition winner, or visitor to our website, we may process your personal data for the following purposes:
3. Sending marketing communication (newsletter)

• Consent pursuant to Article 6(1)(a) GDPR
• Legitimate interest pursuant to Article 6(1)(f) GDPR in connection with Section 62(3) of the Electronic Communications Act

We obtain consent for sending newsletters, for example, through our website or via paper forms. You may unsubscribe from newsletters at any time by clicking “unsubscribe” at the bottom of each marketing email.

4. Targeting and personalization of advertising content

• Consent pursuant to Article 6(1)(a) GDPR
• Legitimate interest pursuant to Article 6(1)(f) GDPR

We consider targeting and personalization of online advertising to be our legitimate interest, which we pursue by trying to better understand users of our website who may be potential customers of our business partners or of us directly. We also aim to better understand trends and user expectations when using the website.

This processing may include, for example: general analysis of customer behavior for improved marketing strategies and decisions or more personalized targeted advertising; targeted promotion of products or services; analysis of the effectiveness of various marketing campaigns (e.g. Google Analytics); segmentation of users into groups for more personalized direct marketing communication (where conditions for direct marketing are met).

In accordance with Recital 47 of the GDPR, direct marketing purposes may be considered a legitimate interest. Where applicable law requires your consent for processing electronic communications metadata related to the use of your devices or web browser (e.g. certain types of cookies), we allow you to provide informed consent in a clear manner.

5. Increasing awareness of the website in the online environment

• Legitimate interest pursuant to Article 6(1)(f) GDPR or Article 9(2)(e) GDPR

If we operate our own social media profiles (e.g. Facebook, YouTube, Instagram, Twitter), we rely on our legitimate interest in increasing awareness of the website online. Data processing may also occur through interactions with social media icons and plugins (such as Facebook, Twitter, YouTube) integrated into our website, or through communication via online applications when you send messages, suggestions, comments, or digital content related to the operation of the website.

6. Organization of consumer competitions

• Performance of a contract pursuant to Article 6(1)(b) GDPR

Our consumer competitions are governed by terms and conditions and/or competition rules, which are binding and contractual in nature. By participating in a competition, you accept the relevant terms and/or rules, and all processing necessary for organizing such competitions is carried out on the legal basis of contract performance.

1. As a rule, we limit any cross-border transfers of personal data to third countries outside the EU and/or the European Economic Area unless necessary. However, some of our subcontractors or the above-mentioned recipients of personal data may be established in, or their servers may be located in, the United States of America (USA). The USA is generally considered a third country that does not ensure an adequate level of data protection.

However, companies certified under the EU–US Privacy Shield framework approved by the European Commission are considered to provide an adequate level of protection. Any transfer of personal data outside the EU and/or the European Economic Area is carried out in strict compliance with the GDPR.

In the case of the Controller, cross-border transfers of personal data to third countries that do not guarantee an adequate level of data protection occur particularly when using services of various recipients of personal data, especially in the categories of:
a) social network operators (e.g. Facebook, Instagram),
b) website analytics providers (e.g. Facebook, Google),
c) statistical analytics providers (e.g. Google),
d) providers of long-term storage, digitization, and secure disposal of paper records and media containing personal data.

In all of the above cases, cross-border transfers of personal data to the USA are carried out in accordance with the European Commission’s decision establishing the Privacy Shield framework. Verification of a data recipient’s certification is available here: https://www.privacyshield.gov/list

2. In general, where cross-border transfers of personal data are necessary, we ensure that third-party recipients are either certified under the Privacy Shield, that standard contractual clauses approved by the European Commission are used, or that other appropriate safeguards are implemented.

1. We retain personal data only for as long as necessary for the purposes for which it is processed. In general, retention periods are determined by legal regulations. Where no specific legal requirement applies, we determine the retention period for your Personal Data in relation to specific purposes through internal policies or a records retention schedule.
2. The general retention periods for personal data for the purposes defined by us are as follows:

• Public information via mass communication media
• Sending marketing communication (newsletter)
  Until an objection is raised or consent is withdrawn.
• Targeting and personalization of advertising content
  Until an objection is raised or until the advertising campaign ends.
• Increasing awareness of the website in the online environment
  Until an objection is raised, or up to 3 years from the publication of a comment on social media or in an online discussion.

3. Organization of consumer competitions

• Until the proper completion of the competition and settlement of all obligations arising from it. Personal data of winners may be processed for a longer period, including for the publication of their photograph and for tax purposes (Prize register – proof of prize handover – 3 months after the prize is awarded).

4. The above retention periods represent general timeframes for processing Personal Data for the specified purposes. In practice, we may delete or anonymize personal data even before these periods expire if the data is no longer necessary for the stated purposes. Conversely, in certain specific situations, we may retain your Personal Data for longer than stated above if required by law or based on our legitimate interest.

If you would like more information about specific retention periods for your Personal Data, please do not hesitate to contact our Data Protection Officer. The end of one processing purpose does not preclude the continued processing of your Personal Data for another purpose that still exists and for which such processing remains necessary.

1. We most often obtain your Personal Data directly from you. In such cases, the provision of personal data is voluntary and does not represent a contractual or legal obligation. You may provide us with your Personal Data in various ways, for example: by communicating with us; registering on the website; participating in a competition organized by us; engaging in website activities on social media; or by completing and submitting a contact form with your comments or questions.
2. We may also obtain your Personal Data from a company in connection with which we process your personal data. This most commonly occurs when we enter into or negotiate a contractual relationship with that company or its terms. If the collection of Personal Data relates to a contractual relationship, it is usually a requirement necessary for concluding the contract. Failure to provide Personal Data may have negative consequences for the organization you represent, as it may prevent the conclusion or performance of the contractual relationship. If you are a member of a statutory body of an organization that is our contractual partner or with which we are negotiating a contractual relationship, your Personal Data may be obtained from publicly available sources and registers.
3. Any personal data obtained accidentally is not further systematically processed for any of the defined purposes of personal data processing.

1. The right to request access to the Personal Data we process about you under Article 15 of the GDPR. This right includes the right to obtain confirmation as to whether we process your personal data, the right to access such data, and the right to obtain a copy of the Personal Data we process about you, where technically feasible.
2. The right to rectification and completion of Personal Data under Article 16 of the GDPR if we process inaccurate or incomplete Personal Data about you.
3. The right to erasure of your Personal Data under Article 17 of the GDPR.
4. The right to restriction of processing of Personal Data under Article 18 of the GDPR.
5. The right to data portability under Article 20 of the GDPR, where the processing of Personal Data is based on consent or on the performance of a contract.
6. The right to object under Article 21 of the GDPR where processing is based on legitimate interest, public interest, or for direct marketing purposes, including profiling.
7. The right to object to automated individual decision-making under Article 22 of the GDPR.
8. You also have the right to lodge a complaint at any time with the Office for Personal Data Protection of the Slovak Republic (www.dataprotection.gov.sk) or to bring a claim before a competent court. In any case, we recommend resolving any disputes, questions, or objections primarily through communication with us.

Protection of personal data is not a one-time matter for us. The information we are required to provide to you regarding our processing of Personal Data may change or be updated. For this reason, we reserve the right to modify and amend these Privacy Policy Terms at any time and to any extent.

If we make a material change to these Privacy Policy Terms, we will notify you of this change, for example by a general notice on the website on this subpage.

01.05.20126