No products in the cart.

Privacy Policy

HotNight Aphrodisiac Drink / Privacy Policy

I. DEFINITIONS

Personal data administrator, Administrator – HOT NIGHT s.r.o., Bučinová 8698/2, 82107 Bratislava – mestská časť Vrakuňa, Slovensko

Personal data – all information about a natural person identified or identifiable by one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, location data, internet identifier and information collected for via cookies and other similar technology.

Policy – this privacy policy.

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Store – online store run by the Administrator at www.hot-n.de/ www.hot-n.uk/ www.hot-n.es/ www.hot-n.pl

User – any natural person visiting the Store or using one or several services or functionalities described in the Policy.

 

II. DATA PROCESSING IN CONNECTION WITH THE USE OF THE STORE

1. In connection with the User’s use of the Store, the Administrator collects data to the extent necessary to provide the services offered, as well as information about the User’s activity in the Store. Detailed rules and purposes for processing personal data collected while using the Store by the User are described below.

 

III. OBJECTIVES AND LEGAL BASIS FOR DATA PROCESSING

USE OF THE STORE

  1. Personal data of all persons using the Store (including the IP address or other identifiers and information collected via cookies or other similar technologies) and who are not registered Users (i.e. persons without an account profile in the Store) are processed by the Administrator:

    1. in order to provide services electronically in the scope of making content collected in the Store available to Users, providing contact forms – then the legal basis for processing is the necessity of processing to perform the contract (art. 6 paragraph 1 letter t b of the GDPR);

    2. to support purchases made without registering in the Store – then the legal basis for processing is the necessity of processing to perform the contract (art. 6 paragraph 1 letter b of the GDPR);

    3. to handle complaints – then the legal basis for processing is the necessity of processing to perform the contract (art. 6 paragraph 1 letter b of the GDPR);

    4. for analytical and statistical purposes – then the legal basis for processing is the justified interest of the Administrator (art. 6 paragraph 1 letter f of the GDPR) consisting in conducting analyzes of Users’ activity as well as their preferences in order to improve the functionalities and services provided;

    5. in order to possibly determine and assert claims or defend against them – the legal basis for processing is the justified interest of the Administrator (art. 6 paragraph 1 letter f of the GDPR) consisting in the protection of his rights;

    6. for Administrator’s marketing purposes

 

REGISTRATION IN THE STORE

  1. Persons who register in the Store are asked to provide the data necessary to create and operate the account. In order to facilitate the service, the User may provide additional data, thereby agreeing to their processing. Such data can be deleted at any time. Providing data marked as mandatory is required to set up and operate an account, and failure to do so results in the inability to set up an account. Providing other data is voluntary.

  2. Personal data is processed:

    1. in order to provide services related to the operation and maintenance of an account in the Store – the legal basis for processing is the necessity of processing for the performance of the contract (art. 6 paragraph 1 letter b GDPR), and in the field of optional data – the legal basis for processing is consent (art. 6 paragraph 1 letter a of the GDPR);

    2. for analytical and statistical purposes – the legal basis for processing is the Administrator’s justified interest (art. 6 paragraph 1 letter f GDP) consisting in conducting analyzes of Users’ activities in the Store and how to use the account, as well as their preferences in order to improve the functionalities used ;

    3. in order to possibly determine and assert claims or defend against them – the legal basis for processing is the justified interest of the Administrator (art. 6 paragraph 1 letter f GDP) consisting in the protection of his rights

    4. for the Administrator’s marketing purposes – the rules for the processing of personal data for marketing purposes are described in the section under the heading MARKETING.

    5. If the User places in the Store any personal data of other people (including their name, address, telephone number or e-mail address), they can do so only if they do not violate the applicable law and personal rights of these people.

 

PLACING ORDERS

  1. Placing an order (purchase of a good or service) by a Store User is associated with the processing of his personal data. Providing data marked as mandatory is required to accept and process the order, and failure to do so results in the lack of its implementation. Providing other data is optional.

  2. Personal data is processed:

    1. in order to process the order placed – the legal basis for processing is the necessity of processing to perform the contract (art. 6 paragraph 1 letter b of the GDPR); in the scope of optional data, the legal basis for processing is consent (art. 6 paragraph 1 letter a GDP)

    2. in order to implement the statutory obligations incumbent on the Administrator, resulting in particular from tax and accounting regulations – the legal basis for processing is the legal obligation (art. 6 paragraph 1 letter c of the GDPR);

    3. for analytical and statistical purposes – the legal basis for processing is the Administrator’s justified interest (art. 6 paragraph 1 letter f GDP) consisting in conducting analyzes of Users’ activities in the Store, as well as their shopping preferences in order to improve the functionalities used;

    4. in order to possibly determine and assert claims or defend against them – the legal basis for processing is the Controller’s legitimate interest (art. 6 paragraph 1 letter f GDP) consisting in the protection of his rights.

 

CONTACT FORMS

  1. The Administrator provides the opportunity to contact him using electronic contact forms. Using the form requires providing personal data necessary to contact the User and answer the query. The User may also provide other data to facilitate contact or to handle the query. Providing data marked as mandatory is required in order to receive and service the query, and failure to do so results in the inability to service. Providing other data is voluntary.
  2.  Personal data is processed:

    1. in order to identify the sender and service his inquiry sent via the provided form – the legal basis for processing is the necessity of processing to perform the contract for the provision of the service (art. 6 paragraph 1 letter b of the GDPR);

    2. for analytical and statistical purposes – the legal basis for processing is the Administrator’s legitimate interest (art. 6 paragraph 1 letter f GDP) consisting in keeping statistics of queries submitted by Users via the Store in order to improve its functionality.

IV. MARKETING

MARKETING OBJECTIVES

  1. The Administrator processes Users’ personal data in order to carry out marketing activities that may consist of:

    1. displaying marketing content relevant to the User’s interests (behavioral advertising);

    2. sending e-mail notifications about interesting offers or content, which in some cases contain commercial information;

  2. In order to implement marketing activities, the Administrator uses profiling in some cases. This means that due to automatic data processing, the Administrator assesses selected factors regarding natural persons in order to analyze their behavior or create a forecast for the future.

BEHAVIORAL ADVERTISING

  1. The Administrator processes Users’ personal data, including personal data collected via cookies and other similar technologies, for marketing purposes in connection with directing behavioral advertising to Users (i.e. advertising that is tailored to the User’s preferences). The processing of personal data also includes User profiling. The use of personal data collected through this technology for marketing purposes is based on the legitimate interest of the Administrator and only on condition that the User has consented to the use of cookies. Consent to the use of cookies can be expressed through the appropriate configuration of the browser, and can also be withdrawn at any time, in particular by clearing the cookie history and disabling cookies in your browser settings.

  2. This consent may be withdrawn at any time.

 

DIRECT MARKETING

  1. If the User has agreed to receive marketing information via e-mail, the User’s personal data will be processed for the purpose of sending such information. The basis for data processing is the legitimate interest of HOT Night s.r.o. consisting in sending marketing information within the limits of consent given by the User (direct marketing). The User has the right to object to data processing for the purposes of direct marketing, including profiling. The data will be stored for this purpose for the duration of the legally legitimate interest of HOT NIGHT s.r.o., unless the User objects to receiving marketing information.

V. SOCIAL MEDIA

  1. The Administrator processes personal data of Users visiting the Administrator’s profiles kept in social media (Facebook). These data are processed only in connection with maintaining a profile, including to inform Users about the Administrator’s activity and to promote various types of events, services and products, as well as to communicate with users through the functionalities available in social media. The legal basis for the processing of personal data by the Administrator for this purpose is his legitimate interest (art. 6 paragraph 1 letter f GDPR) consisting in promoting his own brand and building and maintaining the brand-related community.

VI. COOKIES AND SIMILAR TECHNOLOGY

  1. Cookies are small text files installed on the device of the User browsing the Store. Cookies collect information that facilitates the use of the website – e.g. by remembering User’s visits to the Store and activities performed by him.

 

“SERVICE” COOKIES

  1. The Administrator uses the so-called service cookies primarily to provide the User with services provided electronically and to improve the quality of these services. Therefore, the Administrator and other entities providing analytical and statistical services to him use cookies, storing information or gaining access to information already stored in the User’s telecommunications terminal device (computer, telephone, tablet, etc.). Cookies used for this purpose include:

    1. cookies with data entered by the User (session ID) for the duration of the session (user input cookies);

    2. authentication cookies used for services that require authentication for the duration of the session (authentication cookies);

    3. cookies used to ensure security, e.g. used to detect fraud in the field of authentication (user centric security cookies);

    4. session cookies of multimedia players (e.g. flash player cookies), for the duration of the session (multimedia player session cookies);

    5. persistent cookies used to personalize the User interface for the duration of the session or a little longer (user interface customization cookies),

    6. cookies used to remember the contents of the basket for the duration of the session (shopping cart cookies);

 

“MARKETING” COOKIES

  1. The Administrator also uses cookies for marketing purposes, including in connection with targeting behavioral advertising to Users. For this purpose, the Administrator stores information or gains access to information already stored in the User’s telecommunications terminal device (computer, telephone, tablet, etc.). The use of cookies and personal data collected through them for marketing purposes requires the consent of the User. This consent may be expressed through the appropriate configuration of the browser, and may also be withdrawn at any time, in particular by clearing the cookie history and disabling cookies in the browser settings.

 

VII. PERIOD OF PROCESSING OF PERSONAL DATA

  1. We will process personal data for the duration of the contract and the time necessary to demonstrate performance of the contract, i.e. for the duration of the limitation period for claims.

 

VIII. USER’S ENTITLEMENTS

  1. Data subjects have the following rights:

    1. The right to information on the processing of personal data – the Administrator provides information on the processing of personal data, including primarily the purposes and legal grounds for processing, the scope of data held, entities to whom personal data is disclosed and the planned date of their removal;

    2. The right to obtain a copy of the data – the Administrator provides a copy of the processed data regarding the person making the request;

    3. Right to rectification – the Administrator removes any incompatibilities or errors regarding personal data being processed, and supplements or updates them if they are incomplete or have changed;

    4. The right to delete data (the so-called right to forget) – is the basis for requesting the deletion of data whose processing is no longer necessary to achieve any of the purposes for which it was collected;

    5. The right to limit processing – the Administrator ceases to carry out operations on personal data, with the exception of operations to which the data subject has consented and their storage, in accordance with the adopted retention rules, or until the reasons for limiting data processing cease (e.g. a decision will be issued supervisory authority authorizing further processing of data);

    6. The right to transfer data – to the extent that data is processed in connection with the concluded contract or expressed consent, the Administrator issues data provided by the person to whom they relate, in a format that can be read by a computer. It is also possible to request that the data be sent to another entity – provided that both the Administrator and another entity to which the data are sent have appropriate technical conditions enabling such transmission;

    7. The right to object to the processing of data for marketing purposes – the data subject may at any time object to the processing of personal data for marketing purposes, without the need to justify such an objection;

    8. The right to object to other purposes of data processing – the data subject may at any time object to the processing of personal data on the basis of the justified interest of the Administrator (e.g. for analytical or statistical purposes or for reasons related to the protection of property). An objection in this respect should contain a justification and is subject to the Administrator’s assessment;

    9. The right to withdraw consent – if the data are processed on the basis of consent, the data subject has the right to withdraw it at any time, which, however, does not affect the lawfulness of the processing carried out before the withdrawal of this consent;

    10. Right to complain – if it is considered that the processing of personal data violates the provisions of the GDPR or other provisions regarding the protection of personal data, the data subject may submit a complaint to the President of the Office for Personal Data Protection.

  2. An application regarding the exercise of the rights of data subjects, together with an indication of which request we make, can be submitted:

    1. in writing to the address of the seat of HOT NIGHT s.r.o., i.e. Bučinová 8698/2, 82107 Bratislava – mestská časť Vrakuňa, Slovensko;

    2. by email at the HOT NIGHT s.r.o email address: info@hot-n.com

  1. If the Administrator will not be able to determine the content of the request or identify the person submitting the application based on the application, he will ask the applicant for additional information.

  2. Answers to applications will be given within one month of receipt. If it is necessary to extend this period, the Administrator will inform the applicant about the reasons for such extension.

  3. The answer will be given to the e-mail address from which the application was sent, and in the case of applications sent by letter, by ordinary letter to the address indicated by the applicant, unless the content of the letter indicates the desire to receive feedback to the e-mail address (in this case you must provide an email address).

 

IX. DATA RECIPIENTS

  1. In connection with the provision of services, personal data will be disclosed to external entities, including in particular suppliers responsible for operating IT systems, entities such as payment operators, entities providing accounting, legal, auditing, consulting services, couriers (in connection with the implementation of the order);

  2. The Administrator reserves the right to disclose selected information about the User to competent authorities or third parties who submit a request for such information, based on an appropriate legal basis and in accordance with applicable law.

 

X. TRANSFER OF DATA OUTSIDE THE EEA

  1. The Administrator of personal data will not be transferred to a third country (outside the European Economic Area) and/or an international organization.

 

XI. SECURITY OF PERSONAL DATA

  1. The Administrator conducts risk analysis on an ongoing basis to ensure that personal data are processed by him in a secure manner – ensuring, first of all, that only authorized persons have access to the data and only to the extent that it is necessary due to that performed by no tasks. The administrator ensures that all operations on personal data are recorded and carried out only by authorized employees and colleagues.

  2. The Administrator shall take all necessary actions so that its subcontractors and other cooperating entities guarantee the application of appropriate security measures whenever they process personal data at the request of the Administrator.

 

XII. CONTACT DETAILS

  1. Contact with the Administrator is possible in writing to the address of the seat of HOT NIGHT s.r.o., i.e. Bučinová 8698/2, 82107 Bratislava – mestská časť Vrakuňa, Slovensko or by e-mail at the address HOT NIGHT s.r.o .: info@hot-n.com

 

XIII. CHANGING THE PRIVACY POLICY

  1. The policy is reviewed on an ongoing basis and updated as necessary.