Ensuring Privacy
At Candle United LLC, Dunajska cesta 136, 1000 Ljubljana (hereinafter: Candle United or “controller”), we value your privacy and therefore strive to provide the highest level of protection for your personal data. In providing our services through the online store candlemaster.eu or through telecommunications means, we assure you that your data is processed in accordance with applicable European legislation (General Data Protection Regulation-GDPR) and in accordance with the national legislation of the Republic of Slovenia (the relevant data protection law, electronic communications law, and electronic commerce law).
This Privacy Policy defines the purposes for which your personal data will be obtained, how they will be used, what your rights are regarding the data we hold about you, and how to exercise them. Candle United is committed to protecting your privacy. If we ask you for any data that can identify you while using this website, we assure you that they will be used in accordance with this Privacy Policy. We undertake not to sell, lend, or otherwise disclose your personal data to third parties, except as required by law. Candle United may occasionally change the content of this Privacy Policy. We ask you to periodically review the Privacy Policy to ensure that you agree with all changes.
Data Controller
The data controller of your personal data is Candle United LLC, Dunajska cesta 136, 1000 Ljubljana, email address: candlemaster.eu@gmail.com.
Types of Personal Data, Processing Purposes, and Legal Basis
Personal data is any information that identifies you as a specific or identifiable individual. An individual is identifiable when they can be directly or indirectly identified, especially by an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the individual’s physical, physiological, genetic, mental, economic, cultural, or social identity. Below, it is defined which personal data of individuals the controller collects in each use of the website.
All personal data you provide to us will be treated confidentially and used solely for the purposes for which they were provided. If there is a need for further processing of your data for another purpose, we will contact you in advance and request your prior written consent.
Visiting the website candlemaster.eu
The website operates in a way that certain data about the visit to the website is recorded on the web server hosting the website. This data includes the IP address, time of visit, request content (specific page), access status/HTTP status code, amount of data transferred each time, referrer URL, browser, and similar.
Such collected (personal) data is collected using cookies, where we will ask for your consent before installing more invasive cookies, while certain other data may be collected based on our legitimate interests. More about the cookie installation policy on our website can be found in the Cookie Policy.
The legal basis for processing the above data is our legitimate interest, namely to ensure the security of the network and information, i.e., to enable the detection and prevention of unauthorized access that could compromise the availability, integrity, and confidentiality of stored or transmitted personal data and the security of related services accessible through these networks and systems.
The retention period is limited to the achievement of the purpose for which the above data is collected.
Such collected (personal) data is processed separately and not linked to other personal data of users of our websites, and we do not conduct any profiling of your purchasing behavior.
Registration
You can register on our website to create a user account and make purchases of products on our website as a registered user.
To activate the user account, Candle United collects the following personal data from you, which you provide voluntarily:
– name and surname,
– company name and job title (optional),
– email address and password,
– telephone number,
– address.
All data you provide is collected for the purpose of registering on the website (creating a user account) and for any communication related to the user account. If you make purchases through the user account, data about your orders are also stored in the “My Account” tab. Furthermore, data on inventory monitoring are also stored if you mark the availability monitoring for a specific out-of-stock product and favorite products if you mark a particular product as a favorite.
The data is processed based on your consent, which is given for a specific period of 5 years or for the time envisaged by the relevant legislation. After the 5-year period expires, your user account will be deleted unless the consent is renewed. You can also revoke the consent or user account free of charge at any time by sending a withdrawal of consent for registration purposes via email to: candlemaster.eu@gmail.com or by sending it in writing to Candle United LLC, Dunajska cesta 136, 1000 Ljubljana.
Product Purchase
If you purchase certain products on our website as a registered or unregistered user, Candle United collects the following data from you:
– name and surname,
– address,
– company name (optional),
– email address and phone number
– order note (optional).
All data collected when purchasing products is gathered for the purpose of fulfilling our contractual obligations and enforcing rights from the contractual relationship, including handling any warranty claims and delivering the purchased product. The legal basis for processing this data is our contractual relationship with you. Since processing this data is necessary for the execution of a purchase, the processing can be carried out based on the fact that you are entering into a contractual relationship with us. If you do not wish to provide us with this data, we cannot guarantee the purchase of our products.
Based on the Electronic Communications Act, we may send notifications about our products and content to your email addresses if you do not opt out of receiving such notifications when purchasing a product. We do not use any (automatic) profiling, but only send you basic tailored messages that we believe may interest you based on your past interactions with us. We process this data for a period of 5 years or until revoked. You can object to the processing of your contact data for the purpose of such direct advertising at any time by sending an unsubscribe request via email to: info@candlemaster.eu or by providing it to us in writing at Candle United d.o.o. Dunajska cesta 136, 1000 Ljubljana, Slovenia.
Signing up for electronic newsletters
On our website, you can subscribe to receive current notifications and information about our promotions, offers, and news directly related to our activities. We send electronic newsletters occasionally and as needed.
This data is processed based on your explicit consent, which is given for a specific period of 5 years. After the expiration of the 5-year period, we will cease sending promotional messages unless consent is renewed. You can also freely revoke your consent at any time by sending an unsubscribe request via email to: info@candlemaster.eu or by providing it to us in writing at Candle United d.o.o. Dunajska cesta 136, 1000 Ljubljana, Slovenia.
Live chat and other communication with us
When you send specific questions/information to the contact details published on our website (postal address, email address, telephone number) or through live chat, we process your personal data solely for the purpose of preparing responses to your inquiries and providing the requested information.
For this purpose, we only collect the personal data that you voluntarily provide to us. All data collected through our websites or communicated to us in any other way (e.g., through telecommunication means) is collected for the purpose of providing services in our online store and for the purpose of our internal administration and business management.
Personal data that you provide to us during the execution of a contest is processed for the purposes of conducting the contest. The collected data is deleted after the contest, unless you give us your explicit consent to send promotional messages about our offers to the contact information provided when signing up for the contest.
You can unsubscribe from such advertising at any time for free by sending an unsubscribe request via email to: info@spleticna.si or by providing it to us in writing at Candle United d.o.o. Dunajska cesta 136, 1000 Ljubljana, Slovenia.
Facebook and Instagram Plugins
On our social media accounts, such as Facebook and Instagram, you can directly contact us through features like commenting, messaging, and chatting. The information you send us through these means will be processed solely for the purpose of addressing your comment, request, or question.
Based on legitimate interests, we have the right to manage our social media accounts and content we share on them, engage with visitors, and respond to your requests.
Additionally, our websites use Facebook and Instagram plugins. When you visit our website, a direct connection is established between your browser and Facebook’s and Instagram’s servers via the plugin. When using a service that uses plugins, data may be directly transferred from your device to the social network operator (Facebook and Instagram). We have no influence on the data collected by the plugin. If you are logged into these social networks, your use of the service may be linked to your account on these social networks. If you interact with the plugins, such as liking, following, sharing, or commenting, the data may be automatically displayed on your profile on the social network. Even if you are not logged into your social media account, plugins may still send your IP address to the social network operators. Please be aware of this when using our services.
We explicitly state that we have no control over the scope, nature, and purpose of the processing of your personal data carried out by the social network service provider. Therefore, we refer you to the privacy policies of the social network service providers.
The privacy policies are accessible at the following links:
Facebook: https://www.facebook.com/about/privacy/
Instagram: https://help.instagram.com/519522125107875/
Data Retention Period
We assure you that we only keep your data for as long as necessary to fulfill the purpose for which the individual data was collected and further used. After the retention period expires, we will effectively and permanently delete or anonymize your personal data so that your identification is no longer possible.
Data processed based on law will be kept for the period prescribed by law. Data processed for the performance of a contractual relationship with you will be kept for the period necessary to fulfill the contract and for the entire duration of the statutory limitation period for claims arising from such a concluded contract, except in the case of a dispute regarding the contractual relationship.
Contractual documentation (invoices, credit notes, confirmed offers, and orders, etc.) will be kept for up to 11 years. If there is a different legal retention period for certain data processed for the realization of sales contracts (e.g., accounting or tax data), the retention period is up to 10 years. During this time, data processing is restricted.
Personal data processed based on your consent, for example, in the case of sending electronic newsletters, will be kept for up to 5 years or until you withdraw your consent (whichever comes first). We commit to regularly reviewing the purpose of processing personal data. We will only delete the data before the expiration of the 5-year period or before the withdrawal if the purpose of processing personal data has already been achieved (e.g., if we stop sending promotional emails) or if required by law.
Data Subjects
Candle United respects the privacy of users of the candlemaster.eu website and we commit to carefully safeguarding the acquired personal data and not disclosing them to unauthorized third parties without your consent, except in cases where such data is requested by the competent state authority with a legal basis or in the event of suspected misuse by a user of this website.
Please be informed that specific tasks related to your data may be entrusted to our business partners (data processors). Data processors may process the entrusted data solely on our behalf and within the limits of our authorization (in a written contract or another legal act) and in accordance with the purposes defined in this Privacy Policy. The mentioned partners carefully protect the shared data and do not keep them in stock or use them for their own purposes.
Within the legal authorities, your personal data may be disclosed to:
– postal service providers, shipping service providers, and logistics/delivery services for the purpose of executing your order (delivery data such as name, address for delivery, telephone number, and email address are provided to the delivery service, e.g., GLS Slovenia);
– distributors, goods suppliers, and authorized service providers;
– accounting services, law firms, and other providers of legal and business advice;
– document and data carrier destruction service providers;
– information technology service providers for software service and maintenance;
– website administrator and manager;
– cloud computing service providers and email sending service providers;
– customer relationship management system providers.
We commit that neither we nor other users will transfer or transmit your personal data to a third country outside the European Union and/or the European Economic Area or to an international organization without an adequate level of protection.
Personal Data Protection
We are committed to ensuring the security of your personal data. To prevent unauthorized access or disclosure, we have implemented appropriate physical, electronic, and managerial procedures to securely store and protect the data collected online.
The candlemaster.eu website uses an SSL security system (Secure Socket Layer) and 128-bit encryption for data transmission. This technology provides the most effective protection, also used by the most successful banks to protect all online banking data. You can recognize the use of encrypted data transmission on the website by the locked padlock symbol usually located at the bottom of your browser status bar.
The user is also responsible for safeguarding personal data by ensuring the security of their username and password and by using appropriate software (antivirus) protection for their computer.
You always have the right to free information to verify the accuracy of your stored data. If you wish, you can contact us via email at info@candlemaster.eu or send your request by mail to Candle United d.o.o., Dunajska cesta 136, 1000 Ljubljana. After providing the information, all corrections, closures, or deletions – if in accordance with the law – will be carried out.
Freedom of Choice
You control the information you provide to us. If you choose not to provide certain data, you may not be able to access certain areas or functions on our websites, and in such cases, we may not be able to respond to your inquiries or enter into a contractual relationship with you and consequently sell and deliver the desired products.
If you no longer wish to receive email newsletters, you can unsubscribe from receiving newsletters free of charge by sending an email to info@candlemaster.eu with the subject “Unsubscribe from newsletters” or by sending a written request to Candle United d.o.o., Dunajska cesta 136, 1000 Ljubljana, Slovenia. If your personal data (postal code, email address, address, telephone number, etc.) change, please notify us of the changes by email at info@candlemaster.eu or by mail to Candle United d.o.o., Dunajska cesta 136, 1000 Ljubljana, Slovenia.
Children’s Consent
Children under 15 years of age may provide us with personal data through our websites (or otherwise) only with the permission (consent or approval) of the person holding parental responsibility for the child (one of the parents or guardians).
We commit to never knowingly collect personal data from individuals known to be under 15 years of age. We will not use or disclose such data to unauthorized third parties without the permission of the person holding parental responsibility for the child. This does not affect the rules of Slovenian contract law regarding the validity, formation, or effect of contracts concerning children.
Considering available technology, the controller will reasonably strive to verify whether the person holding parental responsibility for the child has given or approved the consent in such cases.
Your Rights
Candle United informs you that as an individual, you have the following rights:
Right to Withdraw Consent
If you, as an individual, have consented to the processing of your personal data (for one or more specific purposes), you have the right to withdraw this consent at any time without affecting the lawfulness of the processing based on the consent before its withdrawal.
Withdrawing consent for the processing of personal data for an individual has no negative consequences or sanctions. However, after withdrawing consent for the processing of personal data, the controller may no longer be able to provide individual or multiple services if they are services that cannot be provided without personal data.
Right to Access Personal Data
As an individual, you have the right to obtain confirmation from the controller as to whether personal data concerning you are being processed and, where that is the case, access to personal data and certain information (on the purposes of the processing, the types of personal data, users, storage periods or criteria for determining periods, the existence of the right to rectify or erase data, the right to restrict and object to processing, the right to lodge a complaint with a supervisory authority, the source of data if the data were not collected from you, the existence of automated decision-making, including profiling, the reasons for it, and the significance and consequences of such processing for you, and other information in accordance with Article 15 of the GDPR).
Right to Rectification of Personal Data
As an individual, you have the right to have the controller correct inaccurate personal data concerning you without undue delay. Considering the purposes of the processing, you have the right to have incomplete data completed, including by providing a supplementary statement.
Right to Erasure of Personal Data (“Right to be Forgotten”)
As an individual, you have the right to have the controller erase personal data concerning you without undue delay. The controller must erase the data without undue delay where one of the following grounds applies:
(a) the data are no longer necessary for the purposes for which they were collected or otherwise processed,
(b) you withdraw your consent, and there is no other legal basis for processing,
(c) you object to the processing, and there are no overriding legitimate grounds for the processing,
(d) the data have been processed unlawfully,
(e) the data must be erased to comply with a legal obligation under EU law or the law of a member state applicable to the provider.
Right to Restrict Processing
As an individual, you have the right to request the controller to restrict processing when one of the following conditions applies:
(a) If you contest the accuracy of the data for a period that allows the controller to verify the accuracy of the data,
(b) If the processing is unlawful and you request restriction of processing instead of deletion,
(c) If the controller no longer needs the data for processing purposes, but you need them for the establishment, exercise, or defense of legal claims,
(d) If you have objected to the processing until it is verified whether the legitimate grounds of the controller override your grounds.
Right to Data Portability
As an individual, you have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format, and you have the right to transmit those data to another controller without hindrance from the controller, where:
(a) the processing is based on consent or a contract and
(b) the processing is carried out by automated means.
In exercising the right to data portability, you have the right to have personal data transmitted directly from one controller to another, where technically feasible.
Right to Object to Processing:
If data processing is based on our legitimate interests, you have the right, based on reasons related to your particular situation, to object to the processing of your personal data at any time. In this case, we will continue to process your personal data only if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
Right to Lodge a Complaint with a Supervisory Authority
If you suspect that there are violations of personal data protection laws in the processing of your data, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia, at Dunajska cesta 22, 1000 Ljubljana, Slovenia, phone number: 00 386 (0)1 230 97 30, email: gp.ip@ip-rs.si.
An individual can address all requests related to the exercise of rights regarding personal data in writing to the company Candle United d.o.o. at Dunajska cesta 136, 1000 Ljubljana.
For the purposes of reliable identification in the exercise of rights related to personal data, the controller may request additional information from the individual, and action can only be refused if it can prove that the individual cannot be reliably identified.
Upon a request from an individual asserting their rights regarding personal data, the controller must respond without undue delay and no later than one month from receiving the request.
Publication of Changes
Any changes to our Privacy Policy will be posted on this website. By using the websites, the individual confirms acceptance and agreement with the entire contents of this Privacy Policy.
Updated: 15.01.2024.
