Privacy and cookie policy

Personal data controller and contact information

This policy applies to the processing (use) of any personal data carried out by GlobalPharmacia Group d.o.o. (the controller) or carried out on behalf of the controller.

Information about the controller:

GlobalPharmacia Group d.o.o.
Poklukarjeva ulica 27, Ljubljana, 1000 Ljubljana
Tax number SI: 88507114
Registration number: 9037934000
Phone: +386 6 971 9709
E-mail: info@heka-supplements.com

What personal data do we process?

• Basic contact information (name, surname, telephone number, e-mail address);
• Information about the use of our websites (clicks on links, time spent) and information regarding the response to our e-mail messages (whether the message was opened, which links you clicked on);
• Information we need to fulfill the contract and deliver the purchased goods (subject of purchase, price, delivery address, delivery time, method of payment, date of payment, information about complaints, information about the invoice issued, etc.).

Legal bases for the processing of personal data

We may process your personal data on the following legal bases:

• when it is necessary to fulfill our legal obligations (e.g. issuing invoices for purchased goods);
• when the processing of your personal data is necessary for the conclusion and performance of a contract you have concluded with us or because you requested an offer from us;
• when you have given consent to the processing of your personal data for a specific purpose of processing, and you always have the right to withdraw the given consent;
• when we have a legitimate interest in processing your personal data

Purposes of personal data processing

We may use your personal data for one or more of the following purposes:

• communicating with you regarding the provision of our services and responding to your inquiries;
• conclusion of a contract and fulfillment of obligations arising from the concluded contract;
• marketing communication (sending e-mails, regular mail and SMS messages);
• marketing communication based on customized or individualized offers and messages;
• for the enforcement of any legal claims and dispute resolution;
• for statistical analyses on the sale of our goods and on the use of our websites;

How long do we keep your personal data and what happens to it afterwards?

We keep basic personal data for as long as you have the status of our registered user.
We keep personal data that we process on the basis of your consent permanently or until revoked.
We keep data on issued invoices for 10 years from the date of issue.
After the expiry of the retention period, we delete or anonymize personal data.

Who has access to your personal data?

We do not pass on your personal data to third parties, except to contractual processors who are obliged to protect the data.

You have the following rights regarding your personal data:

• access to personal data;
• correction of inaccurate data;
• deletion of personal data;
• restriction of processing;
• data portability;
• objection to processing.

Procedure for exercising rights

• You can address requests in writing to the controller’s contact.
• You will receive a response within one month at the latest.