5. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS

When processing personal data, NOCCA endeavors to minimize the transfer of such data outside the European Economic Area (the EEA). However, during the operation of the Website, NOCCA engages global service providers who may transfer personal data outside the EEA. In these instances, NOCCA ensures compliance with the GDPR conditions for such processing and carries out the transfer solely based on the presence of a European Commission adequacy decision in accordance with Article 45 of the GDPR (for instance, the adequacy decision regarding the EU-US data protection framework) or relies on standard contractual clauses as per Article 46 (2) of the GDPR. 

6. AUTOMATED INDIVIDUAL DECISION MAKING AND PROFILING

Throughout the operation of the Website, no automated decision-making including profiling occurs pursuant to Article 22 of the GDPR.

7. COLLECTION OF PERSONAL DATA

NOCCA primarily processes personal data that are directly provided by customers in connection with the ordering and purchase of Products.

In addition, NOCCA may collect certain information automatically from a customer’s device or browser, but only if the data subject has granted consent for such processing (e.g. analytical information relating to the use of the Website).

Please note that without providing the personal data necessary for the conclusion and performance of the Contract, customers will not be able to order Products via the Website.

8. DATA SUBJECT RIGHTS

The rights of data subjects in relation to the protection of personal data are primarily governed by Articles 12 to 22 of the GDPR, as amended. 

As a data subject, you have the following rights:

 

• Right to withdraw consent – You may withdraw your consent to the processing of personal data at any time.

• Right of access – You have the right to obtain confirmation as to whether your personal data are being processed. If so, you have the right to access such data, to receive information about their processing, and to obtain one copy of the data (additional copies may be subject to a reasonable administrative fee).

• Right to rectification – You have the right to request the rectification of inaccurate personal data concerning you without undue delay.

• Right to erasure (“right to be forgotten”) – You may request the deletion of your personal data without undue delay, provided that the conditions laid down in Article 17 GDPR are met.

• Right to restriction of processing – You may request the restriction of processing of your personal data in the cases provided for in Article 18 GDPR.

• Right to data portability – You have the right to receive the personal data you have provided to the Seller in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller, provided the conditions of Article 20 GDPR are met.

• Right to object – You may object, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of legitimate interests, including profiling. If you do not wish to receive marketing communications, please inform the Seller by email or unsubscribe using the link provided in the footer of each marketing communication. Upon receipt of your request, the Seller will immediately cease sending any marketing communication.

• Rights in relation to automated decision-making – You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

• Right to judicial remedy – You have the right to seek protection of your rights before a competent court pursuant to Article 78 GDPR.

• Right to lodge a complaint – You may lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR. In the Slovak Republic, the competent authority is the Office for Personal Data Protection of the Slovak Republic, Park One Building, Námestie 1. mája 18, 811 06 Bratislava, tel.: +421 2 3231 3214, e-mail: statny.dozor@pdp.gov.sk.

 

You may exercise your rights using the contact details of the Seller provided in Section I of this Privacy Notice. Please note that the Seller is entitled to request verification of your identity before responding to your request.

​

9. CHANGES TO NOTICE

NOCCA reserves the right to modify and change this privacy policy. Any modifications to this privacy policy will take effect upon being posted on the Webpage or within the Application.