Privacy Policy

These personal data processing principles explain how we process personal data during the sale of goods within our company, BIOnum s. r. o., with its registered office at Na barine 2978/15, 841 03 Bratislava - Lamač borough, Slovak Republic, Company ID: 52 281 281, registered in the Commercial Register of the District Court Bratislava I, Section Sro, File No. 136292/B, through waxopack.com.

The protection of your personal data is important to us. We process your personal data in accordance with relevant legal regulations, especially EU Regulation No. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "Regulation" or "GDPR") and Act No. 18/2018 Coll. on personal data protection, as amended (hereinafter referred to as "Personal Data Protection Act") and in accordance with these personal data processing principles.

For what purposes do we process your personal data?

We process personal data for the following purposes:

Sale of our goods and related services;
Fulfillment of statutory accounting and tax obligations;
Marketing communication in the form of sending current offers (newsletters);
Organization of consumer competitions;
Operation of our website;
Operation of social media profiles;
Publication of references;
Securing our potential legal claims.

What are the legal bases for processing your personal data?

Sale of our goods and related services Art. 6 (1) (b) of the Regulation – performance of a contract and pre-contractual relations; or Art. 6 (1) (f) of the Regulation – our legitimate interest in properly delivering ordered goods in cases where the data subject is not simultaneously a party to the contract.
Fulfillment of statutory accounting and tax obligations Art. 6 (1) (c) of the Regulation in connection with Act No. 595/2003 Coll. on Income Tax, as amended, Act No. 431/2002 Coll. on Accounting, as amended, and other relevant legal regulations – fulfillment of legal obligations.
Marketing communication in the form of sending current offers (newsletters) Art. 6 (1) (f) of the Regulation – our legitimate interest in conducting direct marketing to our customers; or Art. 6 (1) (a) of the Regulation – provided consent of the data subject.
Organization of consumer competitions Art. 6 (1) (a) of the Regulation – provided consent of the data subject.
Operation of our website Art. 6 (1) (f) of the Regulation – our legitimate interest in operating and improving the functionality of our website; or Art. 6 (1) (a) of the Regulation – provided consent of the data subject (in the case of non-essential cookies).
Operation of our social media profiles Art. 6 (1) (f) of the Regulation – our legitimate interest in operating and improving the functionality of our social media profiles; or Art. 6 (1) (a) of the Regulation – provided consent of the data subject.
Publication of references Art. 6 (1) (a) of the Regulation – provided consent of the data subject.
Securing our potential legal claims Art. 6 (1) (f) of the Regulation – our legitimate interest in securing and enforcing our potential legal claims.

In what position do we process your personal data?

We process your personal data on our behalf, and therefore we are in the position of a data controller.

To whom do we disclose your personal data?

We disclose personal data to other persons only to the necessary extent. Personal data may be provided to the following categories of recipients and public authorities:

IT service providers;
Providers of accounting, tax, and legal services;
Payment service providers;
Postal and courier service providers;
Social media providers;
Suppliers of other services necessary to achieve the processing purposes;
Tax office;
Slovak Trade Inspection;
Courts, law enforcement authorities, bailiffs;
Other authorized entities in accordance with relevant legal regulations.

To which countries do we transfer your personal data?

We do not intend to transfer your personal data across borders to third countries outside the European Economic Area (EU, Iceland, Norway, and Liechtenstein). In the event that personal data were to be transferred to third countries, we would, of course, ensure an adequate level of protection for your personal data. Personal data may be transferred as part of the operation of our social media profiles. More detailed information on the processing of personal data for this purpose can be found in the Social Networks section.

How long do we store your personal data?

We will store personal data for the duration of the purpose of personal data processing, i.e., at least for the duration of the contractual relationship and to the necessary extent until the expiration of limitation periods for asserting any legal claims and for the archiving period determined by relevant legal regulations, but always for at least the duration of all proceedings concerning legal claims.

In the case of personal data processed based on consent, personal data will be processed for a maximum period of granted consent, and granted consent can be revoked at any time. In the case of consumer competitions, consent is granted for the duration and evaluation of the competition.

If you no longer wish to receive our current offers (newsletters), it is sufficient to unsubscribe using the dedicated button always located at the end of the email. Your personal data will be processed for this purpose until you unsubscribe or until consent is revoked or processing for this purpose is objected to by other means.

From where do we obtain your personal data?

In most cases, we obtain personal data directly from you. The provision of your personal data is voluntary, but failure to provide personal data may affect our ability to provide the goods or services you request. In the case of references, data may be obtained from Google reviews or Facebook reviews.

What measures do we take to protect your personal data?

We process your personal data in accordance with relevant legal regulations, especially the Regulation and the Personal Data Protection Act. We use the latest technologies for secure data storage and transfer and regularly pay attention to the professional knowledge of our staff.

What rights do you have as a data subject?

As a data subject whose personal data is processed, you have the following rights in connection with the processing of your personal data:

the right to request access to your personal data and information about processing from us (including confirmation of processing);
the right to rectification of inaccurate personal data and completion of incomplete personal data;
the right to erasure of personal data or restriction of processing (especially if the purpose of processing has ceased, consent has been revoked, or if unlawful processing occurs; erasure of personal data is possible only after the expiration of statutory or contractual retention periods);
the right to object to processing based on our legitimate interests (we will not further process your data unless we demonstrate compelling legitimate interests for processing personal data that override your rights or interests; if you object to processing personal data for direct marketing purposes, we will not further process personal data for this purpose);
the right to data portability;
if processing is based on consent, the right to withdraw your consent at any time, while the lawfulness of personal data processing based on the granted consent remains preserved until the moment of withdrawal of consent;
the right to lodge a complaint with the supervisory authority, i.e., the Office for Personal Data Protection of the Slovak Republic (proceedings pursuant to §100 of the Personal Data Protection Act).

If you wish to exercise your rights, you can contact us using the contact details below. We will only charge a fee for providing information in cases regulated by the Regulation or the Personal Data Protection Act (e.g., in case of a clearly unfounded request or a repeated request). To obtain information, you must identify yourself as the data subject or prove that you are authorized to receive information concerning a third party.

Cookies – Conditions for using cookie files

1. What are cookies? Cookies are small text files that our website (waxopack.com) stores on your computer or mobile device when you browse it. Cookies can be temporary (deleted after closing the browser) or permanent (remain on your device for a predefined period). Without your consent, we use cookies only if necessary to ensure the proper functioning of our website. In other cases, cookies are used solely based on your consent, which you can grant and modify at any time via our cookie banner.

2. What cookies do we use?

2.1. Essential and functional cookies We must use some cookies for our website to function properly. They ensure basic functions such as security, identity verification, network management, and remembering your preferences. Therefore, your consent is not required for them.

Service: E-shop system (waxopack.com)
Purpose: Maintaining a secure session, proper functioning of the shopping cart, and remembering your cookie settings preferences.
Type and validity: Temporary first-party cookies (deleted after closing the browser) and permanent cookies (store preferences for future visits).

2.2. Analytical cookies These files help us understand visitor behavior on our website and discover potential errors. Cookies simply evaluate how you interact with our website (the collected data does not directly identify you personally). They are used only based on your consent.

Service: Web analytics (e.g., Google Analytics)
Purpose: Tracking site traffic and internal research on how we can improve functionality and services for our customers.
Type and validity: Permanent third-party cookies.

2.3. Marketing cookies We use these cookies to track the effectiveness of advertising campaigns so we can provide you with more relevant services and better ads tailored to your interests. They are used only based on your consent.

Service: Advertising networks and social platforms (e.g., Meta/Facebook, Google, YouTube)
Purpose: Personalizing ad content, connecting with social networks, and measuring the performance and reach of campaigns.
Type and validity: Permanent third-party cookies.

3. Managing cookies on your device You can change your cookie preferences granted on our website at any time by clicking the "Cookie Settings" link at the bottom of our page. In addition, you have the option to manage cookies directly in your browser:

Deleting cookies from your device: You can delete all cookies already on your device in your browser. This will remove all cookies from all visited websites. However, please note that you may also lose some saved information (e.g., saved items in the cart, login details).
Managing cookies for a specific website: For more detailed information about cookies for a specific website, check the privacy and cookie settings in your default browser.
Blocking cookies: Most modern browsers can be set to prevent all cookies from being stored on your device. However, you may have to manually adjust some settings every time you visit a site/page. Furthermore, some services and website functions may not work properly at all (e.g., logging into a profile or completing an order).

Social Networks

We operate profiles on social networks under the name WaxoPack. In this case, we have only limited authorization to process your personal data, and it is necessary to familiarize yourself with the personal data protection conditions of the specific social network operator.

Facebook and Instagram Personal data for Facebook and Instagram social networks is processed by Meta Platforms Ireland Limited. The terms of personal data processing can be found at https://www.facebook.com/policy and at https://help.instagram.com/519522125107875/?helpref=hc_fnav.

Within our profiles on these social networks, personal data may be processed for various purposes, and depending on the purpose of processing, we may be in a different position in relation to the operator of these social networks:

Management of our profile – in this case, we are in the position of controller and the social network operator in the position of processor. For this purpose, we may use services provided by the social network operator, such as "data file customs audiences" for audience management in advertising campaigns or "measurement and analytics" for measuring the performance and reach of advertising campaigns. This processing will occur if you interact with our profile or our campaigns. The following legal safeguards apply to the processing of personal data: https://www.facebook.com/legal/terms/dataprocessing
Statistical data – for the purpose of analyzing the traffic of our profiles on social networks (website traffic statistics), the social network operator provides us with statistical data in anonymized form. In this case, we are joint controllers with regard to the processing of personal data. More information on the processing of personal data for this purpose can be found here: https://www.facebook.com/legal/terms/page_controller_addendum.

Our website features a Facebook icon and an Instagram icon. If you click on these icons while you are simultaneously logged into your Facebook or Instagram account, the social network operator may associate your visit with your user account. The social network operator stores the obtained data about you and uses it for its own advertising, market research, and/or customization of its services and tools. We recommend that you always log out after using social networks. For more information regarding the processing of personal data by the social network operator and your rights, it is necessary to familiarize yourself with their processing conditions (listed above).

YouTube We also have a profile on YouTube, and we publish our videos via YouTube on our website. Our website also features a YouTube icon. The operator of YouTube is Google Ireland Limited. By visiting our website, playing a video, or clicking an icon, the social network operator may store the obtained data about you and use it for its own advertising, market research, and/or customization of its services and tools. If you have a user profile on YouTube and do not wish to be associated with your profile, you must log out before activating the YouTube button. For more information regarding the processing of personal data by the social network operator and your rights, it is necessary to familiarize yourself with its processing conditions at https://policies.google.com/privacy.

When can these principles be changed?

We reserve the right to amend these personal data processing principles at any time as needed, in accordance with current legislation and factual circumstances. The current personal data processing principles are available on our website.

Contact

In case of any questions or comments, do not hesitate to contact us via email or post:

E-mail: info@vcelobal.sk
Tel: +421 908 666 412
Address: Na barine 2978/15, 841 03 Bratislava-Lamač