Company that is the manager of the online store:
MCK PUFFS s.r.o.
Mierova 29
821 05 Bratislava, Slovenska republika

1) About the Privacy Policy

Purpose of the Privacy Policy of the company that manages the online store. MCK PUFFS s.r.o. (hereinafter referred to as the “Company”) adopts and publishes the General Terms and Conditions of the Online Store, which also include the Privacy Policy (hereinafter: the “Privacy Policy”). inn-vape.com (hereinafter referred to as the “Website”) and is owned and operated
MCK PUFFS s.r.o. The rules are published and adopted with the purposes and basis of the processing of personal data by the company and the rights of individuals in this area.
The company offers special care for the security of your personal data. All personal data provided is treated confidentially and is used only for the purpose for which it was provided. We manage your personal data with the utmost care, in accordance with applicable law and the highest
standards of their treatment. We take care of the security of your personal data, among other things, with appropriate organizational measures, work procedures and advanced technological solutions, as well as external experts in order to protect your personal data as effectively as possible. We use an appropriate level of protection and reasonable physical, electronic and administrative measures to protect the data collected against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of personal data or unauthorized access to personal data transferred, stored or otherwise. processed.

At the same time, this Privacy Policy further clarifies the consent you have given to the processing of your personal data.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC, the Privacy Policy “General Data Protection Regulation”), the following information is covered:

  • contact information of the company,
  • the purposes, bases and types of processing of different types of personal data of individuals,
  • retention time of individual types of personal data,
  • the rights of individuals with regard to the processing of personal data,
  • the right to lodge a complaint regarding the processing of personal data,
  • the validity of the Privacy Policy.

2) Personal data collected by the company

If you are only a visitor to the website, we collect information about you only by using cookies. If you are
user of services or subscriber of services provided by the company, we also collect other personal information about you
the information we need to perform the services you have ordered or you use. You personal
the data are:

  • name and surname
  • contact email address
  • contact phone
  • IP address
  • Name of the bidder
  • information for issuing an offer according to your demand (your address, tax number).

3) Personal data controller

The controller of personal data processed in accordance with this Privacy Policy is MCK PUFFS s.r.o.

4) Categories of individuals whose personal data are processed

This Privacy Policy is intended for anyone who has subscribed to and / or used our services or submitted an inquiry, as well as for those who visit our website.

5) Purposes of processing and bases for data processing
5.1. Contract processing:

As part of the exercise of contractual rights and fulfillment of contractual obligations of the company that processes your personal data for the following purposes: purchase in the online store, individual identification, preparation of the offer, conclusion of a distance contract to provide ordered services, notification of any changes, additional details and instructions for the use of services, for resolving any technical problems, objections or complaints, billing for services and for other purposes necessary for the implementation or conclusion of a contractual relationship between the company and the individual.
When billing for services, based on tax regulations, we obtain and process your address for the correct issuance of the invoice. For the timely delivery of the ordered goods by our selected provider, we also process your data on telephone number, address and e-mail address.

5.2. Processing by law:

Based on the legitimate interest, we use your personal data to detect and prevent fraudulent use and misuse of services, further in the framework of ensuring the stable and secure operation of our system and services, as well as for the purposes of implementing information security measures,
meeting service quality requirements and detecting technical failures of systems and services.
Based on the legitimate interest, we also use your personal data for the purposes of possible executions, judicial and extrajudicial recovery.
In accordance with the General Regulation, in case of suspected abuse, the company may process data on individuals to an appropriate and proportionate extent for the purpose of identifying and preventing possible fraud or abuse and may, if appropriate, pass this information to other providers, business partners, police , the public prosecutor’s office or other competent authorities. In order to prevent future abuses or fraud, data on the history of identified abuses or fraud in connection with the individual, which includes data on the subscription relationship and, for example, IP address, may be stored for five years after the termination of the business relationship.

5.3. Processing on the basis of consent for the processing of personal data:

The processing of data may also be based on your consent, which you provided to the company at the entry page, where you, as a visitor to the website, confirmed the age requirement of 18 years and older.
Consent may, for example, relate to the communication of offers, benefits and improvements to the services provided by the company. The purpose of such information is to bring the services as close as possible to your needs and desires and to increase their useful value to you. The notification is made through the channels you have chosen in the consent. You may revoke the notification at any time, as defined in the Privacy Policy.
You can withdraw or change your consent at any time in the same way as you gave it or in another way as defined by the Privacy Policy, while the company reserves the right to identify the customer. The change of consent can also be arranged via e-mail to info@inn-vape.com or with a written request sent to the company’s registered office.
Withdrawal or change of consent only applies to data processed on the basis of your consent. Your last consent given to us is valid. The possibility of revoking consent does not constitute a right of withdrawal in the individual’s business relationship with the company.
In the absence of revocation, data for which your consent has been given will be processed until revoked.

6) Restrictions on the transmission of personal data

If necessary, we will authorize other companies and individuals to perform certain works that contribute to our services. In such a case, the company may also provide personal data to such carefully selected external processors who will enter into a personal data processing agreement with the company.
data or substantially the same agreement or other binding document (hereinafter: “Processing Agreement”). We will provide or make available such data to external processors only to the extent required for a specific purpose. This data may not be used by an external processor for any other purpose, provided that it meets at least all the standards for the processing of personal data provided for by applicable law. External processors are contractually obliged by the company to respect the confidentiality of your personal data.

On the basis of a reasoned request, the company also provides personal data to the competent state authorities, which have a legal basis for this. Companies d.o.o. will e.g. respond to requests from courts, law enforcement and other national authorities, which may include national authorities from another EU Member State.

7) Period of retention of personal data

The retention period is determined by the category of the individual data. The data shall be kept for no longer than is necessary to achieve the purpose for which they were collected or further processed, or until the expiry of the limitation periods for the fulfillment of obligations or legally
prescribed retention period. Accounting data and related contact data on individuals may be kept for the purpose of fulfilling contractual obligations until the full payment of the service or until the expiration of the statute of limitations in relation to an individual claim, which may amount to one to five years. Invoices are kept for 10 years after the end of the year to which the invoice relates in accordance with the law governing value added tax.
Other data obtained on the basis of your consent are kept for the duration of the business relationship and for 2 years after the termination, unless the law provides for a longer retention period. If the individual who gave consent for the processing of personal data has not entered into a business relationship with
us, his consent is valid for 2 years from its submission or until its revocation.
At the end of the retention period, the data shall be deleted, destroyed, blocked or anonymised, unless otherwise provided by law for each type of data.

8) Rights of Individuals with regard to the processing of personal data

We guarantee the exercise of your rights in relation to the processing of your personal data without undue delay. We will decide on your request within one month of receiving your request. In case of complexity and a large number of requirements, the deadline can be extended by a maximum of two additional ones
months. If we extend the deadline, we will notify you of any such extension within one month of receiving the request, together with the reasons for the delay.
We accept requests regarding the exercise of your rights to the e-mail address info@inn-vape.com or by post to the address of the companyMCK PUFFS s.r.o. Mierova 29, 821 05 Bratislava, Slovenska republika.

Where you submit your request by electronic means, we will provide you with the information by electronic means whenever possible, unless you request otherwise. Where there is a legitimate doubt as to the identity of the data subject, we may request the provision of additional information necessary to confirm the identity of the data subject.
If the data subject’s requests are manifestly unfounded or excessive, in particular because they are repetitive, the company may:

  • charge a reasonable fee, taking into account the administrative costs of the intervention
    information or communication or the implementation of the required action, or
  • refuse to act on the request.

We grant you the following rights in relation to the processing of your personal data:

(i) the right of access to data
(ii) the right of rectification
(iii) the right to erasure (the “right to be forgotten”)
(iv) the right to limit processing
(v) the right to data portability
(vi) the right to object

(i) the right of access to data

You always have the right to know whether personal data is being processed in relation to you and, if so, access
to personal data and the following information:

  • processing purposes,
  • the types of personal data processed,
  • users or categories of users to whom personal data have been or will be disclosed,
  • the envisaged retention period of personal data or, if that is not possible,
  • the criteria used to determine that period,
  • the existence of a right to require the controller to correct or delete
  • personal data or to restrict the processing of your personal data, or the
  • existence of a right to object to such processing,
  • the right to lodge a complaint with the supervisory authority, where
  • personal data are not collected from you, all available information regarding their source

(ii) the right to rectification

You have the right to correct inaccurate personal data concerning you without undue delay and, taking into account the purposes of the processing, the right to supplement incomplete personal data, including the submission of a supplementary statement.

(iii) the right to erasure (the “right to be forgotten”)

You have the right to have our personal data deleted without undue delay when one of the following reasons applies:

  • where personal data are no longer needed for the purposes for which they
  • were collected or otherwise processed,
  • however, when you revoke the consent on the basis of which the processing is taking place, there is no other legal basis for the processing,
  • when you object to the processing of data and there are no overriding legitimate reasons for processing it,
  • where personal data have been processed unlawfully,
  • when personal data must be deleted in order to fulfill a legal obligation in accordance with EU law or the Slovenian legal order.

(iv) the right to restrict processing

You have the right to restrict the processing of your personal data when one of the following cases applies:

  • when you dispute the accuracy of the data, for a period that allows us to verify the accuracy of personal data,
  • the processing is illegal and you oppose the deletion of personal data and instead request a restriction on their use,
  • we no longer need your personal data for the purposes of processing, but you need it to assert, enforce or defend legal claims,
  • if you have lodged an objection to processing based on the legitimate interests of the Society until it has been verified that our legitimate reasons outweigh your reasons
  • Where the processing of your personal data has been restricted in accordance with the preceding paragraph, such personal data, with the exception of their storage, shall be processed only with your consent,
  • whether to enforce or defend legal claims or to protect the rights of another natural or legal person.

We are obliged to inform you before the lifting of the restriction on the processing of your personal data.

(v) the right to data portability

You have the right to receive your personal data provided to us in a structured, commonly used and machine-readable form, and the right to pass this data on to another controller without being hindered by the association when processing is based on your consent. and processing is performed
by automated means. At your request, where technically feasible, personal data may be transferred directly to another controller.

(vi) the right to contract

When we process your data on the basis of a legitimate interest for marketing purposes, you may object to such processing at any time.
We will cease processing your personal data unless we demonstrate compelling reasons for the processing that outweigh your interests, rights and freedoms, or for asserting, enforcing or defending legal claims.

9) The right to lodge a complaint regarding the processing of personal data

Any complaint regarding the processing of your personal data can be sent to the e-mail address info@inn-vape.com or by mail to the company Mierova 29, 821 05 Bratislava Slovenskej republika.

In the event that we do not decide on your request within the legal deadline or reject your request, you have the option of filing a complaint with the Information Commissioner.
You also have the right to lodge a complaint directly with the Information Commissioner if you believe that the processing of your personal data violates Slovenian or EU regulations in the field of personal data protection. If you have exercised your right of access to data and after receiving the decision you believe that the personal data you received is not the personal data you requested or that you did not receive all the requested personal data, you can file a reasoned complaint before filing a complaint with the Information Commissioner. at the Society within 15 days. We need to decide on your complaint as a new request within five working days.

10) Final provisions

Anything not covered by this Privacy Policy is subject to applicable law.
MCK PUFFS s.r.o. reserves the right to change this Privacy Policy. We will inform you about the change by publishing it on the official website www.inn-vape.com 30 days before its entry into force.
In case of questions about the Privacy Policy or about the information we hold about you, write to us at the e-mail address info@inn-vape.com

Validity of the Privacy Policy
This Privacy Policy is published on the company’s website www.inn-vape.com and enters into force on 11.10.2021

MCK PUFFS  s.r.o.