7. Information on personal data security and data processing
MOGA undertakes to respect the highest standards of personal data protection set by applicable law.
The controller for the personal data is Moga. The authorised person for the personal data protection is available at: [email protected].
The MOGA Benefits/Loyalty cardholder ensures that all personal information provided is accurate and that he/she is solely responsible for incorrect, incomplete or outdated information that would result in the loss of benefits related to the MOGA Benefits/Loyalty Card.
Moga does not pass on the collected personal data to third parties or unauthorised persons.
Purchase data, namely data on purchased items, payment amounts, date of purchase, benefits obtained, are collected for the purpose of recording and accounting for benefits on the MOGA Benefits/Loyalty Card, informing customers and direct marketing. MOGA will process all data provided by the cardholder in the Accession Treaty in accordance with the General Terms and Conditions, the applicable personal data protection law, and the General Data Protection Regulation (EU Regulation 2016/679). The personal data of the MOGA Benefits/Loyalty cardholder provided by the cardholder at the time of conclusion of the Accession Treaty will be kept for the entire duration of the Accession Treaty, and purchase data will be kept for 60 months from the date of purchase. If the Accession Treaty is terminated, the personal data obtained shall be permanently deleted.
Moga processes personal data of buyers for the purposes of implementing the MOGA Benefits/Loyalty Card, for informing buyers and for direct marketing.
The personal data of buyers who conclude the Accession Treaty shall be collected to the extent necessary for the performance of the treaty on the basis of Article 6 (1) (b) of the General Data Protection Regulation (EU Regulation 2016/679).
The data required for the conclusion of the Accession Treaty are:
- Name and surname
- Date of birth
- Address
- ZIP code
- Town
- Country
- E-mail
- Phone
and are marked with an asterisk on the Accession Treaty. Without providing this information, it is not possible to conclude the Accession Treaty.
Moga saves the personal data of the MOGA Benefits/Loyalty cardholder in the holder's account under the card identification number and processes them for the purpose of implementing the MOGA Benefits/Loyalty card. Insofar as it would be necessary to protect health, Moga will use the contact details of MOGA Benefits/Loyalty cardholders to inform buyers on the basis of the d indent of paragraph 1 of Article 6 of the General Data Protection Regulation (EU Regulation 2016/679).
Moga processes personal data of the MOGA Benefits/Loyalty cardholder for the purpose of direct marketing if the cardholder gives his/her consent. The cardholder gives the necessary consent in the Accession Treaty. If the cardholder gives or not his/her consent to the processing of personal data for the purpose of direct marketing this is not a condition for the validity of the Accession Treaty. For the purpose of direct marketing, Moga uses name, surname, address, e-mail and telephone (the latter provided that the cardholder specifies it). Moga shall not pass on this information to third parties or unauthorised persons. The consent to the processing of personal data for the purpose of direct marketing may be revoked at any time free of charge by the cardholder, and such revocation shall not affect the lawfulness of the data processing prior to the revocation. The cardholder submits the revocation at the cash register of the Moga Garden Centre at Zemljičeva ulica 21, 2000 Maribor or sends it by mail to: Moga d.o.o, Zemljičeva ulica 21, 2000 Maribor. Moga shall stop processing the data immediately, but no later than 15 days from the date on which it received a written statement of revocation of consent. With regard to direct marketing, the cardholder may at any time, free of charge, request that the controller permanently or temporarily ceases to process his/her data for the purpose of direct marketing. Moga does not perform buyer profiling and automated decision-making. If Moga is obliged to engage a contractual partner to perform an analysis of personal data, it will entrust the processing only to a verified contractual partner, with whom it will conclude an appropriate contract on the processing of personal data, which will ensure the cardholders the highest level of protection of their personal data.
The holder of the MOGA Benefits Card may at any time request access to the catalogue of the collections of his/her personal data processed by MOGA.
The holder of the MOGA Benefits/Loyalty Card has the right to request access to the personal data stored about him/her at any time, the right to request the correction of incorrectly stated data, their deletion, restriction of processing, and at the same time he/she has the right to object to the processing and to request the transfer of data to another controller, whereby he/she may specify that the data be sent to him/her or to a third party, all in accordance with Articles 15 to 22 included of the General Data Protection Regulation (EU Regulation 2016/679). All requests shall be submitted in writing at the cash register of the Moga Garden Centre at Zemljičeva ulica 21, 2000 Maribor or by mail to: Moga d.o.o., Zemljičeva ulica 21, 2000 Maribor, or by e-mail at: [email protected]. The cardholder's request will be met within one (1) month, which can be extended for further two (2) months for a relevant reason.
If the cardholder believes that there has been improper processing of his/her personal data, he/she has the right to file a complaint to: Information Commissioner, Dunajska cesta 22, 1000 Ljubljana.