Protection of Personal Data - GDPR

General Data Protection Regulation (GDPR)

Data we collect:
First name, surname, address, telephone number and email address
The legal basis for processing personal data in the case of an order is the contract (distance purchase), which means that the customer personally consents to the processing of data.
Personal data is processed for communication by email, SMS or telephone for the purpose of processing an order or responding to an individual's question or enquiry. Where consent has been given to receive information about new offers on www.yonidivinespa.com, personal data is processed for the purpose of sending information by email.

If you have consented to receiving news from the www.yonidivinespa.com online shop, we retain your email address permanently or until you withdraw your consent. Personal data entered when placing an order is retained for as long as www.yonidivinespa.com and the individual may assert legal claims against one another on the basis of the concluded contract, or for five years after the contract ceases to be valid.
After the retention period has expired, personal data is effectively and permanently deleted.

Providing personal data is voluntary. An individual is not obliged to provide it; however, without it they cannot receive goods, services, a response to their question or information about website news. The information that must be provided is stated on each online form.

We do not disclose individuals' personal data to unauthorised persons, except to those who perform specific data-processing tasks under a written agreement with the www.yonidivinespa.com online shop (YONI DIVINE SPA AAMA s.p.).


Contractors to whom we disclose personal data:

- Accounting service ()
- Parcel delivery services (Pošta Slovenije d. o. o., DPD)
Contracted processors may process personal data only within the instructions of the controller (www.yonidivinespa.com) and may not use it for other purposes. The www.yonidivinespa.com online shop and users of personal data do not transfer personal data to third countries (outside the countries of the European Economic Area—the EU Member States, Iceland, Norway and Liechtenstein) or to international organisations.

An individual has the following rights regarding personal data:
The right to request from YONI DIVINE SPA AAMA s.p. at any time:
- Confirmation as to whether personal data concerning them is being processed
- Access to personal data and the following information: purpose of processing, categories of personal data and recipients to whom the personal data has been or will be disclosed
- One free copy of personal data in a format chosen by the individual (where the request is submitted electronically and the individual does not request otherwise, the copy will be provided electronically). A reasonable fee based on administrative costs may be charged for additional copies requested by the individual.
- Rectification of inaccurate personal data


Restriction of processing where:

- the individual contests the accuracy of the personal data, for a period enabling the controller, www.yonidivinespa.com, to verify its accuracy.
- the processing is unlawful and the individual opposes deletion of the personal data and requests restriction of its use instead.
- the controller, www.yonidivinespa.com, no longer needs the data for processing purposes, but the individual requires it for the establishment, exercise or defence of legal claims.
- Erasure of all personal data (the right to be forgotten) where the conditions of Article 17 of the General Data Protection Regulation are met, particularly where the individual withdraws consent to the processing of personal data.
- Receipt of personal data in a structured, commonly used and machine-readable format, with the right to transmit that data to another controller without hindrance from the original controller
- The right to lodge a complaint against the controller with the Information Commissioner if the individual believes that the processing of their personal data infringes the General Data Protection Regulation. Anyone who believes that we have infringed their rights regarding protection of personal data may at any time lodge a complaint with the supervisory authority—the Information Commissioner of the Republic of Slovenia: Republic of Slovenia, Information Commissioner, Zaloška 59, 1000 Ljubljana, https://www.ip-rs.si


Withdrawal of consent:

Consent may be withdrawn at any time by sending a request to info@yonidivinespa.com. After consent is withdrawn, the controller, www.yonidivinespa.com, will effectively delete the data so that it can no longer be linked to the individual.
After consent has been withdrawn, we will no longer be able to provide services that require the personal data for which consent was withdrawn.
Individuals may submit all requests concerning the exercise of their rights regarding personal data electronically to info@yonidivinespa.com.
For reliable identification when rights concerning personal data are exercised, the controller may request additional information from the individual and may refuse to act only where it demonstrates that it cannot reliably identify the individual.

The controller, www.yonidivinespa.com, must respond to a request through which an individual exercises rights concerning personal data without undue delay and no later than one month after receiving the request.
The controller, www.yonidivinespa.com, implements appropriate organisational and technical measures to protect personal data, adapted to the risks posed by processing. These measures are set out in the personal-data protection policy.