Privacy Policy

1. Ensuring Privacy

The controller of the website https://manoard.com is: PREDUZEĆE ZA PROIZVODNJU, TRGOVINU I USLUGE CMI EXPORT-IMPORT DRUŠTVO SA OGRANIČENOM ODGOVORNOŠĆU BEOGRAD (ZVEZDARA) - branch in Slovenia (hereinafter: “controller”, “provider” or “CMI”). At CMI, we value your privacy and therefore continuously strive to ensure the highest level of protection of your personal data. This Privacy Policy is intended only for users of the website https://manoard.com (hereinafter: “manorad.com”) and defines the rights and obligations of the controller and processors in the management and processing of users’ personal data.

When using our website manorad.com or when doing business through telecommunication services, the controller is obliged to process your data in accordance with the currently applicable European legislation, namely the General Data Protection Regulation (GDPR), and in accordance with the applicable national legislation of the Republic of Slovenia, namely the Consumer Protection Act (ZVPot-1), the Personal Data Protection Act (ZVOP-2), the Electronic Commerce Market Act (ZEPT) and the Electronic Communications Act (ZEKom-2).

The purpose of this Privacy Policy is to explain for what purposes your personal data will be obtained, how it will be used, and what rights the user has in relation to the data stored by the controller. In the case of data on the basis of which the user can be identified, the controller assures the user that such data will be used in accordance with this Privacy Policy. The controller undertakes not to sell, lend or otherwise disclose users’ personal data to third parties, except in cases determined by law.

2. Data Controller

The controller of personal data of users of the website manorad.com is: PREDUZEĆE ZA PROIZVODNJU, TRGOVINU I USLUGE CMI EXPORT-IMPORT DRUŠTVO SA OGRANIČENOM ODGOVORNOŠĆU BEOGRAD (ZVEZDARA) - branch in Slovenia, Dunajska cesta 136, 1000 Ljubljana, email address: shop@manoard.com.

3. Data Processors

For the purposes of processing personal data, the controller has authorised the personal data processors listed below. A personal data processor is a party that processes personal data on behalf of the controller. The processor may process only those personal data and only for those purposes for which it has documented instructions from the controller.

The personal data processors of the website manorad.com process users’ personal data in accordance with applicable legislation, on the basis of an existing contractual relationship that regulates all areas of processing.

The processors of personal data of users of the website manorad.com, which process personal data on behalf of the controller, are:

  • Accounting service DATA SKUPINA d.o.o.
  • Google Ireland, Ltd., Adwords service (SEM advertising, search engine advertising)
  • Google Ireland, Ltd., Analytics service (website analytics management)
  • Google Ireland, Ltd., My Business service
  • Google Ireland, Ltd., Google+ services

4. Principles Regarding the Processing of Users’ Personal Data

Both the controller and the processors acting on its behalf respect the general principles of processing personal data of users of the website manorad.com, namely:

  • we process users’ personal data lawfully, fairly and transparently;
  • we collect personal data for purposes that are predetermined, explicit and lawful, and we do not further process personal data for other purposes, except in the case of processing for scientific or historical research purposes and for statistical purposes, under certain conditions;
  • we process personal data to the minimum extent necessary for the purposes for which it is processed;
  • we ensure that the personal data we process is accurate and regularly updated, and we correct or delete inaccurate data;
  • we store personal data only for as long as necessary for the purposes for which it is processed;
  • we ensure appropriate security of personal data, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage, through appropriate technical and organisational measures.

5. Collection and Protection of Users’ Personal Data

The controller of the CMI online store is obliged, in accordance with the Personal Data Protection Act (ZVOP-2) and the General Data Protection Regulation, to protect the personal data of its users.

The website manorad.com allows users to purchase products as a “guest” or as a “registered user”. Users who are at least 16 years old on the day of registration may register.

Registration

On our website, you can register and create a user account, allowing you to purchase products on our website as a registered user.

When entering the website, the user clicks on the icon “ ”, through which they can create their user profile. By clicking on this icon, the user is shown the options to register through the manorad.com website or through the “shop” interface. In both cases, the user enters their email address, to which they receive a 6-digit confirmation code. The code can be used only once and is valid for 15 minutes from the receipt of the email. After receiving the confirmation code, the user enters it on the website and thereby creates a user profile and accesses their profile.

By registering or activating a registered user account, the controller collects the following personal data from you, which the user provides to the controller voluntarily:

  • email address.

All data voluntarily provided by the user is collected exclusively for the purpose of registration on the website, meaning for the purpose of creating a user account, and for any communication related to the user account.

After registering a user account, the user has access to two tabs:

  • the “Orders” tab, where data about your orders is stored;
  • the “Profile” tab, in which the user can enter the following data:
    • user’s email address;
    • first and last name;
    • user’s address, postal code and city;
    • telephone number.

This data is stored and used for the purpose of purchasing products on the website manorad.com. The provider is not responsible for the accuracy of the data entered by the user.

If you make purchases through your user account, data about your orders is stored in the user account under the “Orders” tab.

The provider undertakes not to disclose user data to unauthorised persons and to protect users’ personal data in accordance with the provisions of the Personal Data Protection Act (ZVOP-2) and the General Data Protection Regulation.

The provider will not disclose the received data to third parties, except to contractual contractors with whom the provider has concluded a personal data protection agreement and who are contractually bound to the same personal data protection standards as the provider.

The user always has the right to free access, copying, supplementation or correction of the personal data provided and held by us, as well as the deletion of personal data relating to them. In the event of deletion, processing or use of your personal data, please contact us at shop@manoard.com or send your request in writing to: CMI DOO BEOGRAD - branch in Slovenia, Dunajska cesta 136, 1000 Ljubljana.

Regarding the Protection of Children’s Personal Data

All users under the age of 15 may provide us with personal data through our website or otherwise only with the permission, consent or approval of the holder of parental responsibility for the child, meaning one of the parents or guardians.

In accordance with applicable legislation, the provider may not accept orders from someone whom it knows or suspects to be under the age of 15 without the express permission of their parents or guardians. Without the express permission of their parents or guardians, the provider may not accept any personal data concerning minors. Likewise, the provider may not disclose data received from minors to third parties, except to parents or guardians.

Taking into account the available technology, the provider will make reasonable efforts in such cases to verify whether the holder of parental responsibility for the child has given consent.

Ordering and Purchasing Products

The website manorad.com allows users to purchase products 24 hours a day, every day of the year. Registration is not required to purchase our products, as the user enters personal data at checkout.

The products are presented in detail in the offer available on the provider’s website. On the website, the provider specifies the characteristics and price of the product, any discounts and promotions, and the rights of buyers. Before confirming the order, the buyer is informed of the user terms and agrees to them when placing the order. The buyer is aware that by confirming the terms and ordering the product, the sales contract is deemed concluded.

Registered or unregistered users may make a purchase on the website, and for this purpose the controller collects the following data from you:

  • email address;
  • first and last name;
  • address;
  • country;
  • telephone number.

The data collected when purchasing products is collected for the purpose of fulfilling our contractual obligations and exercising rights arising from the contractual relationship, including resolving any complaint claims and delivering the purchased product. The legal basis for processing this data is our contractual relationship with you. Processing this data is necessary for making a purchase on our website and is carried out on the basis of entering into a contractual relationship with us. If the provider does not wish to provide the required data, the provider cannot ensure the purchase of products.

Product Purchase Procedure

The user selects the desired product or several products on the website, and the selected products are stored in the “cart”. When the user finishes selecting products, they choose the “Checkout” option in the “cart” tab. The purchase can be made as a registered user or as a guest.

To complete the purchase, the user must fill in a form in which they enter the following data:

  • email address;
  • country;
  • first and last name;
  • address, including address, apartment number if applicable, postal code and city;
  • telephone number.

The user then selects the delivery method. Delivery options are displayed after all previous data has been entered, especially after entering the address to which the user wants the provider to send the order.

After the user enters the data and selects the delivery method, the user must enter payment details to complete the purchase. The provider offers only the option of advance payment, on the basis of which the user enters the following data into the form:

  • payment card number; the provider cooperates with the following payment organisations: MasterCard®, Visa, Amex, UnionPay, BA Maestro;
  • expiry date of the payment card;
  • card security code, visible on the back of the card;
  • first and last name of the payment card holder.

The user may also enter their telephone number for a faster checkout process.

Before confirming the purchase by clicking the “pay now” icon, and by entering their telephone number, the user agrees to the creation of a “Shop” account and to the general terms and conditions and privacy policy.

Order Confirmation

After authorisation of the order, the user receives a message in their email inbox that the order has been successfully authorised and placed. You will be informed about further steps regarding the order by email.

When the user places an order, they are redirected to a website with a message that the order has been accepted. The distance sales contract between the buyer and the provider is concluded when the user or buyer confirms the order. It is concluded exclusively in the Slovenian language.

The entered email address of the user will receive an order confirmation with all information regarding the type and quantity of selected products, the final price and the delivery date. Accepted orders are considered irrevocable and will be processed. By placing an order, the buyer confirms agreement with the general terms of use and accepts them unconditionally in full.

The order, together with the issued invoice, is stored in the provider’s archive for 10 years in physical form. In the electronic commerce system, the provider is not responsible for any loss caused by interruption, modification, removal or unavailability of electronic commerce services.

Facebook, YouTube and Instagram

The controller of the website manorad.com allows users to contact the provider directly through the controller’s accounts on social networks such as Facebook and Instagram, using the functions offered by these social networks, namely commenting, sending messages and chatting. All information received by the controller from users on this basis will be processed by the controller and processors exclusively for the purpose of handling the user’s question, request or information.

The controller explicitly and additionally points out that it has no influence over the scope, nature and purpose of the processing of your personal data carried out by the provider of the social network service. Therefore, we refer you to the privacy policies of the social network service providers.

The privacy policies are available at the links below:

6. Data Retention Period

The controller and processors assure users of the website manorad.com that users’ personal data is stored only for as long as is strictly necessary to fulfil the purpose for which each item of personal data was collected and further used. After the retention period has expired, the controller and processors effectively and permanently delete your personal data or anonymise it so that identification of the user is no longer possible.

Personal data that the controller and processors process on the basis of law is stored for the period prescribed by legislation. All personal data that the controller and processors process for the performance of a contractual relationship with the user is stored for the period necessary for the execution of the contract and further for the duration of the limitation period for claims arising from the concluded contract, except in the case of a dispute related to contractual relationships.

All contractual documentation, including invoices, credit notes, confirmed offers, orders and similar documents, is stored for up to 10 years. In cases where different statutory retention periods apply to documentation, such as accounting and tax data, the retention period for these documents is 10 years, and the processing of such data is limited during this time.

All personal data that the controller and processors receive on the basis of the user’s consent, for example for newsletter subscriptions and similar cases, is stored for up to 10 years or until the user withdraws consent. The controller undertakes to check the existence of the purpose of personal data processing at regular intervals, and will delete the data before the expiry of the 10-year period or before the withdrawal of the user’s consent only if the purpose of personal data processing has already been achieved or if required by law.

7. Data Retention Period

The controller of personal data of the website manorad.com undertakes to carefully protect all obtained personal data and not to disclose it to unauthorised third parties without the user’s express consent, except in cases where the data is requested from the controller by competent state authorities that have a legal basis for such a request, and in cases where there is suspicion of abuse in business by a user of the website manorad.com.

In addition, the controller informs all users of the website manorad.com that your personal data may be entrusted to our business partners, contractual processors, who process the entrusted personal data of users exclusively on behalf of the controller and within the limits of the controller’s authorisation, and in accordance with the purposes defined in this Privacy Policy. The processors carefully protect the received personal data and store it for as long as necessary to achieve the purpose for which the data was collected, and they may not use it for their own purposes.

The controller undertakes not to disclose or transfer users’ personal data to a third country outside the European Union or to an international organisation without an adequate level of personal data protection.

8. Users’ Rights

Every user of the website manorad.com has the following rights when using the website:

Right to Withdraw Consent

Every user who has given express consent to the processing of personal data, regardless of the purpose, has the right to withdraw their consent at any time, without affecting the lawfulness of the personal data processing that was carried out on the basis of consent before its withdrawal.

Withdrawal of consent for the processing of personal data has no negative consequences or sanctions for the user. However, after the withdrawal of consent for the processing of personal data, it is possible that the controller may no longer be able to provide the user with one or more of its services, if such services cannot be provided without personal data.

Right of Access to Personal Data

Every user of the website manorad.com has the right to obtain information from the controller as to whether personal data relating to them is being processed, as well as access to personal data and certain information relating to the processing itself, namely the purposes of processing, categories of personal data, users, retention periods or criteria for determining such periods, the existence of the right to rectification or erasure of data, the right to restriction and objection to processing, and the right to lodge a complaint with a supervisory authority, the source of the data if the data was not collected from you, the existence of automated decision-making, including profiling, the reasons for it, and the significance and consequences of such processing for you, as well as other information in accordance with Article 15 of the General Data Protection Regulation.

Right to Rectification of Personal Data

Every user of the website manorad.com has the right to request that the controller correct inaccurate personal data relating to the user without undue delay. Taking into account the purposes of processing, the user has the right to have incomplete data completed, including by providing a supplementary statement.

Right to Erasure of Personal Data (“Right to Be Forgotten”)

Every user of the website manorad.com has the right to request that the controller delete personal data relating to them without undue delay. On the basis of such a request, the controller must delete the user’s personal data without undue delay where one of the following reasons applies:

  • the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • the user withdraws the consent on which the processing is based and there is no other legal basis for the processing;
  • the user objects to the processing and there are no overriding legitimate grounds for processing;
  • the personal data has been processed unlawfully;
  • the personal data must be erased in order to comply with legal obligations under EU law or the law of a Member State applicable to the provider;
  • the personal data has been collected in relation to the offer of information society services.

Right to Restriction of Processing

Every user of the website manorad.com has the right to request that the controller restrict processing where one of the following cases exists:

  • the user disputes the accuracy of the data, for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and the user requests restriction of the processing of personal data instead of deletion;
  • the controller no longer needs the personal data for the purposes of processing, but the user needs it for the establishment, exercise or defence of legal claims;
  • the user has lodged an objection regarding the processing of personal data, pending verification of whether the legitimate grounds of the controller override the reasons of the user to whom the personal data relates.

Right to Data Portability

Every user of the website manorad.com has the right to request to receive the personal data relating to them, which they have provided to the controller, in a structured, commonly used and machine-readable format, and has the right to transmit this data to another controller without hindrance from the controller, where:

  • the processing is based on consent or on a contract; and
  • the processing is carried out by automated means.

At the same time, when exercising the right to data portability, every user has the right to have personal data transmitted directly from one controller to another, where technically feasible.

Right to Object to Processing

Where the processing of personal data is based on the legitimate interests of the controller, every user has the right, on grounds relating to the user’s particular situation, to object at any time to the processing of personal data. In such a case, the controller and processors will continue to process the user’s personal data only if they demonstrate compelling legitimate grounds for the processing that override the user’s interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

Right to Lodge a Complaint with a Supervisory Authority

In cases where the user suspects that the processing of their personal data violates legislation in the field of personal data protection, they have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, Republic of Slovenia, or by telephone at 00 386 (0)1 230 97 30, or by email at gp.ip@ip-rs.si.

In the event of a complaint, the controller may, for the purpose of reliable identification when exercising rights related to personal data, request additional data from the user. The controller may reject the user’s request only if it proves that it cannot reliably identify the individual.

The controller undertakes to respond to the user’s request, by which the user exercises their rights regarding personal data, without undue delay and no later than one month from receipt of the user’s request.

9. Additional Information

For any additional information regarding these General Terms of Use, users may contact CMI DOO BEOGRAD - branch in Slovenia by regular mail at CMI DOO BEOGRAD - branch in Slovenia, Dunajska cesta 136, 1000 Ljubljana, or by email at shop@manoard.com.

10. Publication of Changes to the Privacy Policy

The controller of the website manorad.com undertakes to publish any changes to the Privacy Policy on this website. By using the website manorad.com, the user confirms that they accept and agree to the entire content of the Privacy Policy.