Within this document, we would like to acquaint you with all the important information
regarding the processing of personal data in the operation of the online store
www.divinecosmetics.eu.
The operator of the online store www.divinecosmetics.eu and also the controller and
processor of personal data is the company

DINO Slovakia, spol. s.r.o., Kamenice 5308/15,902 01 Pezinok,
IČO: 36216291,
DIČ: 2020049053,
IČ DPH: SK2020049053,
registered in the commercial register of the Bratislava III
District Court Section: Sro,
Insert number: 147577/B

(hereinafter referred to as "DINO Slovakia").

Below, you will find answers primarily to the following questions.

• Whom can you contact regarding the processing of personal data?
• For what purpose does DINO Slovakia process personal data?
• What personal data does DINO Slovakia process, and what authorization does it have
for this?
• Where does DINO Slovakia obtain personal data?
• To whom else does DINO Slovakia disclose personal data?
• How will you find out that DINO Slovakia processes your personal data, and what
rights regarding the protection of personal data can you exercise?

The company DINO Slovakia approaches the processing of personal data responsibly and, in
particular, ensures their security, all in accordance with generally binding legal regulations.

1. Whom can you contact regarding the processing of personal data?
First and foremost, you can always contact the company DINO Slovakia directly, which is the
controller of personal data processed in connection with its business, especially in the
operation of the online store www.divinecosmetics.eu.

Delivery address: DINO Slovakia, spol. s.r.o., Kamenice 5308/15, 902 01 Pezinok Email:
orders@divinecosmetics.eu All contact information can be found on the website
www.divinecosmetics.eu.

2. Does the company DINO Slovakia have a responsible person?
Yes, the company DINO Slovakia, spol. s.r.o., has appointed a responsible person for the
protection of personal data. You can contact the responsible person at the email address
orders@divinecosmetics.eu.

3. For what purpose does DINO Slovakia process personal data?
3.1 We process personal data for the purpose of providing you with our services.
To complete a purchase agreement with you, i.e., for you to make purchases on our e-shop
www.divinecosmetics.eu, we need to know your identification and contact details without
exception. For this purpose, we do not require your consent to process this personal data; the
legal basis in this case is the fulfillment of the contract (and possibly taking measures before
concluding the contract). We also process your personal data for the purpose of further
fulfilling the services we provide. This particularly applies to cases involving the return or
complaint of goods.

3.2 We also process personal data for marketing purposes:
In some cases, we require your consent to send commercial information, for example, when
you participate in a marketing event and provide consent to receive commercial notifications.
Another typical example of such processing of personal data is customer registration within
the VIP program, where members are provided with various benefits and informed about
interesting promotions and offers. We also process your personal data for the purpose of
conducting marketing activities, evaluating, concluding, delivering any winnings, etc.
Consent is not required for this processing because the action cannot be fulfilled without
processing personal data. Personal data will be processed only for the duration of the specific
marketing event.

3.3 Customers to whom we have provided our services, i.e., those who have purchased goods
on the e-shop www.divinecosmetics.eu, may receive commercial notifications via email or the
provided phone number (e.g., in the form of a newsletter). For this, we do not need your
consent, as it is a legitimate interest of DINO Slovakia. We will process your personal data in
this way for a period of three years. However, we do not wish to bother anyone who does not
wish to receive such notifications. It is possible to unsubscribe from commercial notifications
with one click on the link located at the end of the notification.

3.4 For the purpose of improving our services or in the event of a future dispute, we record
telephone calls within our customer center. These recordings are stored for a period of six
months and then deleted. We also retain online chat communication for the same period. In
the case of a call related to a purchase agreement or a call with a customer who has entered
into a purchase agreement with us, or if there has been a resolution of any dispute between the
caller and us during the phone call, we are authorized to retain the recording of the telephone
call for a duration that is justified given the situation.

3.5 We are authorized to process your personal data for the purpose of protecting our rights
and legitimate interests, typically in the case of any dispute. In this case, we do not need your
consent to process personal data.

3.6 The processing of certain personal data is directly required by law, e.g., we are obligated
to retain tax documents for a legally specified period.

3.7 We also process so-called Cookies, which are short text files generated by a web server
and stored on a computer through a browser. There are two types: first, cookies necessary for
the functioning and analysis of the website (transmission of electronic communication via an
electronic communication network; dissent cannot be expressed using these cookies).
Secondly, there are cookies that evaluate certain personal aspects related to a specific
individual. The processing period in this case is three years. For remarketing purposes,
cookies are transferred to other processors with a maximum expiration period of 540 days. If
consent for advertising cookies is withdrawn, it is not technically possible to immediately
remove the already transferred cookies from the processor. The removal of cookies from the
processor will occur automatically after the expiration period. An immediate solution to
prevent remarketing activities by the processor is to delete cookies from the browser.

4. What personal data does DINO Slovakia process, and what authorization does it
have for this?
We process only the absolutely necessary basic data, including identification data (name and
surname, IP address, residential or business address, and delivery address, if applicable,
business ID, VAT ID) and contact details, i.e., your email and your phone number.
Furthermore, we process data about your purchases or services provided, including any
communication, especially related to complaints, product returns, or the exercise of your
rights.

5. What authorization do we have to process your personal data?
The processing of personal data is always based on one of the legal reasons for each
processing purpose.

5.1 In most cases, the processing of personal data is necessary for the conclusion and fulfillment of the contract. In this case, we do not need your consent for processing.

5.2 In some cases, we process personal data based on our legitimate interest. This includes 
sending commercial notifications or when DINO Slovakia asserts a claim or protects its rights
and legitimate interests.

5.3 Another legal reason for processing personal data is a legal obligation imposed on us by
generally binding legal regulations.

5.4 In some cases, the processing of personal data is based on your consent, allowing us to
provide various benefits to our registered customers or for the purpose of evaluating the
quality of our services.

6. To whom else does DINO Slovakia transfer personal data?
DINO Slovakia carefully considers and assesses whether the transfer of personal data to
another recipient is necessary, particularly whether the potential recipient can ensure adequate
protection of the transferred personal data. The transfer of personal data occurs solely based
on a written contract for the processing of personal data.

DINO Slovakia transfers personal data to:

6.1 Payment service providers and payment processors to ensure the transfer of financial funds;

6.2 Service, postal, and shipping providers;

6.3 Some personal data may be transferred to relevant public authorities upon request. The
recipients are not authorized to process these data for any other purpose or disclose them to
any other person without the consent or instructions of DINO Slovakia, unless they have a
legal reason to do so.

7. Do we transfer your data to another country outside the European Union?
We do not provide your personal data to a country outside the European Union (or the
European Economic Area, i.e., the EEA) where an adequate standard of personal data
protection is not ensured. The transfer of personal data beyond the borders of the European
Union is not intended.

8. Are you interested in what personal data we process about you?
In that case, you can contact us at any time with a request for details about the processing of
personal data, and we will provide you with detailed information free of charge or provide
you with a copy of the processed data. This is your right to access personal data. However, we
must inform you that in the case of repeated or unfounded requests, we are entitled to request
payment for the associated costs or refuse to provide information.

9. What other matters can you contact us about?

9.1 You have the right to rectify personal data, i.e., you can contact DINO Slovakia with a
request for correction if the data held by DINO Slovakia about you are inaccurate,
incomplete, or outdated.

9.2 You have the right to erase personal data, i.e., you can contact DINO Slovakia with a
request to erase your personal data processed by DINO Slovakia. For data to be erased, it
must meet one of the following conditions:
a/ the data are no longer necessary for the purpose for which they were processed,
b/ you have withdrawn your consent to the processing of the data,
c/ the data have been unlawfully processed,
d/ the data must be erased to fulfill a legal obligation, e/ the data were collected in connection
with the offer of information society services.

9.3 You have the right to restrict the processing of personal data, i.e., you can contact
DINO Slovakia to restrict the processing of your personal data. Processing can be restricted in the
following cases: a/ you dispute the accuracy of your personal data, or b/ the processing of the
data is unlawful, but you oppose the deletion of such personal data, or c/ you request the
processing of personal data to assert your claims, even though the purpose for which
DINO Slovakia processed the data has already been fulfilled, or d/ you have objected to processing,
and it has not yet been verified whether the legitimate interests of DINO Slovakia prevail over
your legitimate interests.

9.4 You have the right to data portability, i.e., you can contact DINO Slovakia to have your
personal data provided to you in a structured, commonly used, and machine-readable format
or to have this data transferred directly to another controller. Data transfer can only take place
if the processing is based on a concluded contract or your consent, and it involves automated
processing.

9.5 You can revoke the consent you have given for the processing of personal data at any time.

9.6 If you exercise any of the rights regarding personal data, DINO Slovakia has the right to
request proof of your identity. Requests for access to personal data must be sent from the
applicant's email address. If the request is submitted in a different form or from a different
email address, DINO Slovakia has the right to request additional verification by responding to
the verification email. If the applicant does not prove their identity within 14 days of sending
the verification email, their request for the exercise of rights will not be accepted. In justified
cases, DINO Slovakia reserves the right to request more precise verification of the identity of
the data subject, for example, through an officially certified signature or through a data box
(this situation may arise if DINO Slovakia reasonably believes that the request for access to
personal data is not made by the data subject and may involve a leak of personal data).

10. When is it possible to object to the processing of personal data?
You have the right to object, especially in the following cases: (a) You can object to the
processing of personal data carried out by DINO Slovakia based on its legitimate interest. In
this case, your personal data will no longer be processed unless DINO Slovakia proves that its
legitimate interest takes precedence over your interests. (b) You can object to the processing
of personal data for direct marketing purposes. In this case, your personal data will no longer
be processed.

11. How long will we process your personal data?
The processing period for personal data is specified for each processing purpose in this
document. The duration for which we will process your personal data is further determined by
our obligations arising from the contract we have concluded with you and other obligations
imposed on us by law, such as the obligation to archive legally prescribed documents. In some
cases, the processing period for personal data depends on the duration of your consent to
processing. In any case, data that is not necessary for the given purpose or for which we do
not have a legal basis for processing is destroyed.

12. What can you do if you believe that DINO Slovakia is processing your personal data unlawfully?
You have the right to lodge a complaint with the supervisory authority, which is the Office for
Personal Data Protection.

If any of your questions were not answered above, you can contact us using the contact
details provided above.