Privacy policy and cookies

PokePower processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data and on the repeal of Directive 95/46/EC (hereinafter: General Regulation on data protection) and national regulations on personal data protection.

The PokePower online store uses appropriate technological and organizational means to protect the transfer and storage of personal data, orders and payments. The purchase agreement (order) is stored electronically on the provider's server.

PokePower is committed to the permanent protection of all user personal data. The provider will use personal data exclusively for the purposes of fulfilling the order (sending informative material, offers, invoices) and other necessary communication. Only authorized persons of our company have access to the data. The website provider reserves the right to disclose data when disclosure is required by law or when it is necessary to protect the legal rights of others.

Security and privacy

All provided data is protected against intrusion by third parties, which guarantees you worry-free and uninterrupted business with our company. PokePower provides all necessary technological and organizational solutions for complete purchase security.

The transfer of sensitive and transactional data on the website is carried out in secure mode using the SSL (Secure Sockets Layer) protocol. The data is encrypted and transmitted to our server in a protected form. The system thus prevents anyone from intercepting your personal and transaction data that you send to the online store.

The Stripe system takes care of secure authorizations and transactions with payment cards, as well as the mediation service. Card authorizations are performed in real time with immediate verification of data in the banking system.

We also ensure the safety of the purchase by taking into account all applicable legal obligations and recommendations of the Slovenian and international consumer association.

Types of personal data, basis and purpose of processing - only applies to registered users

For registration or To create a user account, the user must provide the PokePower online store with their personal data: first name, last name, e-mail address, password, and telephone number as optional data.

The PokePower online store will process customers' personal data for the purpose of:

• contacting the user for the needs of uninterrupted use of goods or services that are subject to these General Terms and Conditions,
• provision of goods or services that are subject to general terms and conditions and the conclusion of a contract with the user,
• user registration,
• user identity verification,
• execution and review of payment transactions, possible inconsistencies in the execution of payments and related abuses and other violations of these General Terms and Conditions.

The PokePower online store will process customer data for other purposes, provided that the user has given consent for such other data processing purposes:

• profiling of users for the preparation of customized offers of their goods and services through the use of e-mail address, SMS, MMS, telephone or classic mail,
• for direct marketing regarding offers of goods and services, promotional sales, benefits, and other changes or news,
• conducting market research on the quality of products and services and the need for additional products or services.

When a registered user makes an individual purchase in the online store, PokePower also processes data about the purchased products or services, regular price, discount price, savings, obtained or benefits used and other benefits obtained, availability of goods, time of purchase, payment methods, credits, data on collection at the point of sale and data on the time and place of collection, first and last name of the recipient (if this differs from the registered user who placed the order) , information about the time and place of delivery, the price to be paid, the means of payment and the order number. PokePower processes this data for the purpose of performing contractual obligations in the PokePower online store.

In the event that the individual does not give appropriate consent for this type of processing, the PokePower online store processes this data anonymously, in addition to the aforementioned purposes, also for the purpose of analyzing and studying shopping habits, for the purpose of optimizing the offer and costs, and increasing customer satisfaction.

Types of personal data, basis and purpose of processing - applies only to guests

In the case of a purchase as a guest, the latter must provide the PokePower online store with their personal data: first name, last name, phone number, address of permanent or temporary residence and email address.

The PokePower online store will process customers' personal data for the purpose of:

• contacting the guest for the needs of the uninterrupted provision of services that are subject to these business conditions,
• o provision of goods or services that are subject to these terms of business and the conclusion of the contract with the guest,
• about the implementation and review of payment transactions, possible inconsistencies in the execution of payments and related abuses and other violations of these terms of business.

In connection with making a purchase as a guest, PokePower also processes agreement with these terms of business. For the purpose of proving knowledge of these terms of business, PokePower processes confirmation, confirmation time and IP address.

When a guest makes an individual purchase via the online store, PokePower also processes data about the purchased products or services, regular price, discount price, savings, obtained or benefits used, availability of goods, time of purchase, methods of payment, credits, information on collection at the point of sale and information on the time and place of collection, first and last name of the recipient (if this differs from the registered user who placed the order), information about the time and place of delivery, price to be paid, means of payment and order number. PokePower processes this data for the purpose of performing contractual obligations in the PokePower online store.

Types of personal data, basis and purpose of processing - applies only to consumers

In order to comply with legal obligations relating to the consumer's right to withdraw from the contract, PokePower processes the following personal data based on the applicable Consumer Protection Act: name, surname, street, city and post office, telephone, e-mail, no. TRR, no. orders, date of receipt of goods, goods in respect of which he withdraws from the contract.

For the purpose of complying with legal obligations relating to the consumer's right to assert a complaint, PokePower processes the following personal data based on the applicable Consumer Protection Act: name, surname, street, city and post office, telephone, e-mail, no. TRR, no. order, date of receipt of the goods, date of discovery of the defect, date of return of the goods, date of claiming the complaint, description of the defect, request of the buyer.

Types of personal data, basis and purpose of processing - applies to all users

For the purposes of identifying the user in the cases from the previous points of these business conditions, the authorized contractual partner will be able to look at the personal document of the user, but will not record the data.

PokePower can process all the data in a pseudonymized form, as well as the evaluation of the experience in the PokePower online store given by the user, on the basis of legitimate interest, also for the purpose of analyzing and studying shopping habits, which it does with the aim of optimizing the offer and costs and to increase customer satisfaction .

User rights

The user can at any time request confirmation of whether PokePower is processing his personal data and to be informed about this personal data, he has the right to receive this personal data and the right to transmit it to another controller. The user can request the limitation of personal data processing, object to the processing of personal data and the automated adoption of individual decisions, including the creation of profiles, cancel the given consents for the processing of personal data that are forwarded on the basis of consent, request corrections or additions or deletion of personal data. He can exercise all the listed rights under the conditions and to the extent of Articles 15 to 22 of the General Data Protection Regulation.

Regardless of the enforcement of the right to deletion from the previous paragraph, personal data may be processed within the scope of any other legal bases, if there is another legal basis for the processing in accordance with Article 6 of the General Data Protection Regulation within this basis (e.g. it is not possible delete data processed by PokePower on the basis of tax legislation or other contract concluded by PokePower with the user, etc.).

The user can make a request for the enforcement of the rights from the first paragraph of this point with a written request sent to the address PokePower, online store, Domen Čamernik – Kramar sp, Justinova ulica 11A, 1219 Ljubljana – Šentvid.

When asserting the user's rights regarding objection to data processing, revocation of consent, requests to limit processing or deletion of personal data, which result in the prevention of notification of the user, PokePower will prevent notification no later than 15 days after receiving the objection or changing the user's settings. If the notification campaign was prepared before processing the objection or changing the settings, there is a possibility that the user will still receive the last notification. PokePower will ensure the enforcement of the remaining rights within the time limits required by applicable legislation in the field of personal data protection.

Users of personal data and export to third parties countries

PokePower handles personal data with particular care and prevents access by unauthorized persons. In some cases, due to individual cases of processing that PokePower does not carry out independently, the user's personal data must be forwarded to contractors - external processors who process the data on behalf of, for the account of, according to the instructions and under the control of the PokePower company (distribution partners, advertising agencies, printers , software owners, etc.).

In addition to external processors, PokePower also forwards the user's personal data to state authorities based on their reasoned written request for the needs of conducting a specific procedure and upon the user's request or on the basis of his written authorization.

Personal data processed by PokePower on the basis of these terms of business are, in principle, not exported to third countries (countries outside the EU and EEA), but some organizations or companies to whom, as our processors, we may disclose your personal data (e.g. maintainers of the software or application where the data is stored), based outside the European Union, in countries that may not have laws that protect the right to protect personal data in the same way as in the European Union or Slovenia. In these cases, we take care to ensure and implement appropriate measures to ensure the security of personal data and the fundamental rights and freedoms of individuals, in accordance with applicable national and EU regulations and these terms of business, by using the intended mechanisms, such as binding business rules, standard contractual clauses, approved certification mechanisms, etc.

Personal data retention period

Unless otherwise specified in these terms and conditions, PokePower processes personal data until the purpose of processing is fulfilled or within the limitation periods for obligations that may arise from the processing of this personal data. In cases where the retention period of personal data is determined by law, PokePower stores this personal data in accordance with the legal mandate. Personal data obtained on the basis of consents are kept until cancellation.

Until the fulfillment of the order, PokePower processes the following personal data of guests: name, surname, address of permanent or of temporary residence, telephone number and e-mail address. After completing the order, PokePower processes the personal data of the guests mentioned in the previous sentence only in relation to the individual order, which can only be accessed by knowing the account number and the order number.

The personal data of people who visit the PokePower online store and do not make a purchase will not be processed by PokePower and will be deleted immediately.