Information on the Processing of Personal Data
(pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data — hereinafter the „GDPR“)
This document explains how our company processes your personal data in connection with the sale of goods, in particular Westieri beds, Bedis by Westieri, bed linen, and other accessories belonging to Westieri beds, from the initial inquiry through final assembly and delivery and any subsequent complaint.
1. Identification of the Data Controller
- Company name: Westieri Slovakia s.r.o.
- Registered office: Hurbanova Ves 122, 903 01 Hurbanova Ves, Slovakia
- Company ID (IČO): 48 190 535
- Registration: Commercial Register of the Bratislava III City Court, Section: Sro, Insert No. 104742/B
- Contact details: https://www.westieri.eu/kontakt/
(hereinafter the „controller“)
2. Purposes of Processing, Legal Basis, and Retention Period
We process your personal data only to the extent necessary for the following purposes:
| Purpose of processing | Legal basis | Retention period |
|---|---|---|
| Preparation of a price quote | Pre-contractual measures under Art. 6(1)(b) GDPR | Until the quote is accepted or declined, maximum 1 year |
| Order and conclusion of the purchase contract | Performance of a contract under Art. 6(1)(b) GDPR | For the duration of the contractual relationship and thereafter for the duration of the applicable limitation periods |
| Manufacture, delivery, and assembly of the bed | Performance of a contract under Art. 6(1)(b) GDPR | Until delivery and assembly are completed |
| Handling of complaints | Compliance with a legal obligation under Art. 6(1)(c) GDPR | 5 years from the conclusion of the complaint procedure, for the protection of the controller’s legal claims |
| Accounting and tax records | Compliance with a legal obligation under Art. 6(1)(c) GDPR | 10 years pursuant to applicable law |
| Sending commercial communications to existing customers | Legitimate interest of the controller under Art. 6(1)(f) GDPR | Until an objection is raised or the recipient unsubscribes |
| Sending commercial communications to prospective customers | Consent under Art. 6(1)(a) GDPR | For the period stated in the consent, maximum 1 year |
3. Scope of Personal Data Processed
We process only the data you provide to us yourself:
- Identification data: first name, surname, title.
- Contact data: e-mail address, phone number, home address or delivery and assembly address.
- Order data: custom bed dimensions, chosen materials, mattresses, accessories, and other specifications.
- Payment data: bank account number in the case of payment by transfer or a refund.
- Communication data: the content of our mutual communication via e-mail or the contact form.
4. Processing Operations
To fulfil the purposes listed above, we mainly carry out the following operations:
- collection and recording of data,
- storage and retention of data,
- organising and structuring data in internal systems,
- using data for manufacturing, logistics, and communication,
- disclosing data to recipients,
- restriction of processing,
- erasure and disposal of data after the retention period has elapsed.
Data may be processed both electronically and in paper form.
5. Recipients of Personal Data
We take a responsible approach to protecting your personal data and do not disclose it to third parties. However, it is sometimes necessary, in order to achieve the purpose of processing or to comply with legal requirements, to disclose your personal data to designated recipients or processors. We disclose your personal data only to the extent necessary and only to the recipients listed here:
| Name of recipient/processor | Role | Purpose of processing | Scope of personal data |
|---|---|---|---|
| WESTIERI MANUFACTURING s.r.o. Company ID (IČO): 52 935 736 Bežovce 181, 072 53, Slovakia | Processor | Manufacture of ordered goods | Customer identification data: first name, surname, title; order data: order number, custom bed dimensions, chosen materials, mattresses, and other specifications |
| Eva Vartášová Company ID (IČO): 51136171 Jána Hollého 699/57 07101 Michalovce, Slovakia | Processor | Bookkeeping and compliance with tax obligations | Identification data: first name, surname, title; contact data: e-mail address, phone number, home address or delivery and assembly address; order data: custom bed dimensions, chosen materials, mattresses, accessories, and other specifications; payment data: bank account number in the case of payment by transfer or a refund. |
| Public authorities | Recipient | Exercise of public authority | Everything listed above that is necessary to comply with a legal obligation |
We have appropriate data processing agreements in place with all processors.
6. Transfer of Data Outside the European Union
The controller does not transfer personal data to third countries outside the EU/EEA or to international organisations, with the exception of certain data relating to browsing the controller’s website. Further information on such data transfers can be found in the document „Policy on the Collection and Processing of Personal Data via Cookies and Other Online Technologies and Services“.
7. Automated Decision-Making and Profiling
No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place in connection with the processing of personal data.
8. Rights of Data Subjects
As a data subject, you have the following rights:
- Right of access — you have the right to obtain confirmation as to whether we process your personal data, and to obtain a copy of it.
- Right to rectification — you may request the correction of inaccurate or incomplete data.
- Right to erasure — you may request the erasure of your data if it is no longer needed for the purpose of processing, or if its processing is not necessary to comply with obligations imposed on the controller by law or under law.
- Right to restriction of processing — in certain cases you may request that the handling of your data be restricted.
- Right to data portability — you may obtain your data in a structured, machine-readable format.
- Right to object — in particular against processing based on legitimate interest or for direct-marketing purposes.
- Right to withdraw consent — where processing is based on consent.
- Right to lodge a complaint — with the Office for Personal Data Protection.
9. Contact Details of the Supervisory Authority
Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR)
Galvaniho Business Centrum II
Galvaniho 7/B
821 04 Bratislava, Slovakia
Website: dataprotection.gov.sk
10. Security of Personal Data
We have adopted appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.
In particular, we use:
- secure access to systems,
- encrypted communication (SSL/TLS),
- restricted access for authorised persons,
- regular backups,
- contractual confidentiality and data-protection obligations for our partners.
11. Cookies, Web Technologies, and Online Services
Our website may use technical, preference (functional), analytics, and marketing cookies.
Technical cookies are necessary for the website to function correctly. We use preference, analytics, and marketing cookies only with your consent, given through the cookie banner.
We may also collect the personal data of prospective customers through other web technologies, electronic forms, and social networks. We only collect personal data in this way with the consent of the data subject.
More detailed information on the use of cookies and the collection of personal data through online services can be found in the separate document „Policy on the Collection and Processing of Personal Data via Cookies and Other Online Technologies and Services“.
12. Final Provisions
Providing your personal data is voluntary, but necessary for preparing a price quote, concluding a contract, and manufacturing and delivering a custom-made bed.
Without the necessary data, it is not possible to conclude a contract or fulfil an order.
The controller is entitled to update this document as appropriate, in connection with changes to legislation or to the way personal data is processed.
