In accordance with the applicable Personal Data Protection Act, Electronic Communications Act, and the General Data Protection Regulation ("GDPR"), the company LITTLE THINGS, online sales, Sara Rajačič s.p. provides you with rights regarding the protection of personal data, which are detailed below.
Data Controller
The controller of your personal data is the company LITTLE THINGS, online sales, Sara Rajačič s.p., Cesta 24. junija 76, 1231 Ljubljana - Črnuče.
Responsible person in the company (legal representative): Sara Rajačič
Contact address of the data protection officer: Sara Rajačič, Cesta 24. junija 76, 1231 Ljubljana - Črnuče, email: shop@littlethings.si
1. General
The merchant undertakes to protect the confidentiality of personal data and the privacy of users of the online store. The collected personal data will be used by the merchant exclusively to provide the services it offers. The merchant respects the confidentiality of personal data and the privacy of users of the online store, therefore, it will do everything necessary to protect them from any violations and abuses. Personal data of users is one of the areas to which the merchant pays particular attention, given the sensitive nature of this area.
The data controller will handle all acquired personal data in accordance with national and international regulations, as well as in accordance with the European General Data Protection Regulation 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
2. Data Protection
The merchant uses appropriate technological and organizational means to protect the transmission and storage of personal data, orders, and payments. The sales contract (order) is electronically stored on the provider's server. The merchant will use personal data exclusively for the purpose of fulfilling the order and other activities directly related to the order and necessary communication to complete the order.
3. Use of Personal Data
For the purpose of providing the services it offers, the merchant collects, manages, processes, and stores the following user data:
• name and surname;
• delivery addresses;
• company or legal entity name (if the user is a legal entity);
• tax number of the legal entity (if the user is a legal entity);
• email address (username);
• contact phone number;
• country of residence;
other data voluntarily entered by the user in the "order notes" forms in the online store;
We are not responsible for the accuracy of the data entered by the user. All mentioned data is stored on the server www.littlethings.si for 2 years from the date of purchase.
4. Statement on the Confidentiality of Personal Data and User Privacy
In accordance with the regulations governing the protection of personal data, the merchant is committed to protecting the personal data of users of its online store. The merchant will not, under any circumstances, disclose personal or other user data to a third party without the explicit permission of the user or allow a third party to access the personal or other data of the user, unless required by state authorities, if such obligation is specified by law, or in good faith that such action is necessary for legal proceedings or other state authorities and for the protection and realization of the legitimate interests of the merchant.
5. Implementation of Privacy Policy
All employees, whether regular or freelance, at the merchant who have access to personal and other user data are aware of the duty to protect personal and other data and are required to comply with these provisions on the confidentiality of personal data and user privacy of the online store. The duty to protect personal and other data applies indefinitely, even after the termination of the relationship with the merchant.
6. Customer Consent to the General Terms and Conditions
By using the services on the website www.littlethings.si and by directly clicking on the box "I agree to the terms and conditions" before making a purchase, the user undertakes to voluntarily, explicitly, and unequivocally accept the General Terms and Conditions and allow the processing of their personal data exclusively for the purposes of this order, in accordance with the General Terms and Conditions and consumer protection regulations (including the European General Data Protection Regulation 2016/679) and international codes for online and electronic business.
7. Customer Consent to the Use of Their Personal Data for Marketing Purposes
By registering and/or placing an order on the website, the customer expressly consents to the merchant using the obtained personal data (name, address, email address, and any other data provided by the customer to the provider for the purpose of fulfilling the contract - order) for direct marketing purposes through all advertising channels used by the merchant and for the purposes of related statistical and market analysis, marketing profiling, and segmentation.
Each customer can revoke consent for the processing of personal data (given either online or through another sales channel) at any time by notifying via email: shop@littlethings.si or by clicking on the unsubscribe link within each marketing message.
The provider will respect the customer's request and will promptly process the withdrawal of consent for the purpose of direct marketing through the respective or all advertising channels and inform the customer within the next five days. The customer will not incur any costs in this process.
USER RIGHTS REGARDING THE PROTECTION OF PERSONAL DATA
1. Right to Access Information
The user of the website www.littlethings.si, in accordance with the law, has the right to obtain information about the processing of their personal data and the right to access and receive a copy of such data upon their written request.
2. Right to Rectification
The user whose personal data is processed has the right, taking into account the purpose of the processing, to have incomplete or inaccurate personal data concerning them completed or corrected.
3. Right to Erasure
The merchant undertakes to enable the erasure and forgetting of personal data of users. The request must be addressed with a proposal for the erasure of personal data.
4. Right to Data Portability
Upon explicit written request by the user, the merchant enables the transfer of their personal data to others, if technically feasible and complementary to the merchant's software.
5. Right to Restriction of Processing
The merchant undertakes to grant the customer, whose personal data is processed, the right to request a restriction of processing when one of the cases under the European General Data Protection Regulation 2016/679 applies.
6. Right to Object
The merchant acknowledges the right of the customer, whose personal data is processed, to object and has the right, based on reasons related to their particular situation, to object at any time to the processing of personal data concerning them based on points (e) or (f) of Article 6(1) of the European General Data Protection Regulation 2016/679.