Who processes the data
The Vacation mode (Dovolenkový režim) add-on for Shoptet is provided and operated by Apptiary s.r.o., Tylova 1043/15, 831 04 Bratislava, Slovakia, company ID (IČO) 57 466 408 ("we"). Contact: [email protected].
This page applies to this add-on only. How we process data on the AddonHive website and in our other add-ons is described in the general AddonHive privacy policy.
Controller and processor
The e-shop operator is responsible for the data in its e-shop as the controller within the meaning of the GDPR. Personal data that the add-on processes on behalf of the e-shop operator (for example a name or phone number that you enter in the banner text) is processed only to the extent necessary to carry out your instructions, and the add-on acts as a processor for it. This processing is governed by the Data processing terms under Article 28 GDPR.
We process the e-shop contact e-mail and the installation data as a controller, because we need them to provide the add-on, to send summaries and for support.
What data the add-on stores
The identifier and address of the e-shop, its time zone and language.
The access token for the Shoptet API, which Shoptet issues to us at installation. It is encrypted in the database with the AES-256-GCM algorithm.
The e-shop contact e-mail, which the add-on takes over from Shoptet and to which it sends summaries when vacation is switched on and off, and reminders.
Your settings: the shift of delivery times, the strategy, the banner and cart notice text, the availabilities left unchanged and the scheduled vacation dates.
A record of the original delivery times and availabilities, which the add-on saves before vacation is switched on so that it can restore them when vacation is switched off. It contains no personal data.
Activity records of the add-on: when vacation was switched on and off, what changed, what was skipped and what failed.
The add-on does not read data about the e-shop customers or orders and has no access to it.
E-shop visitors
The banner in the e-shop loads only its own settings (text and colours). We store nothing about visitors, and the add-on sets no cookies in the e-shop. When a visitor closes the banner, the visitor's browser remembers this in localStorage; this information never reaches us.
Purpose and legal basis
We use the data so that the add-on works: so that it can change and restore values in the e-shop, display the banner and send you summaries and reminders. The legal basis is the performance of the contract with you (Article 6(1)(b) GDPR). We keep activity and security logs on the basis of our legitimate interest (Article 6(1)(f) GDPR).
Where and for how long
The data is stored in the EU (Hetzner Online GmbH, Helsinki data centre, Finland). Communication takes place exclusively over HTTPS, and we verify notifications from Shoptet by their signature.
We keep the technical envelope of a received Shoptet notification for 7 days as protection against duplicate processing.
We keep the record of the original values for at most 30 days after vacation is switched off and then delete it.
After the add-on is uninstalled, we delete all data of the e-shop, including the encrypted access token, the settings, the record of the original values and the history. If vacation was not switched on, we delete it immediately. If it was, the add-on can no longer restore the original values, because after uninstallation it has no access to the e-shop. It therefore sends you an e-mail with all the original values so that you can set them manually, and deletes the data right afterwards. In all cases the data is deleted no later than 24 hours after uninstallation. It remains in database backups until their automatic deletion, for at most 6 months. We use a backup only to restore the whole database after an outage, and after such a restoration we delete the data of uninstalled e-shops again immediately. Only an anonymous technical record remains, stating that the installation was deleted.
To whom we disclose the data
Processors: Hetzner Online GmbH (hosting, EU), Resend, Inc. (sending summaries and reminders to the e-shop contact e-mail; a company based in the USA, e-mails are sent through its EU region in Ireland, and any transfer to the USA is based on the standard contractual clauses of the European Commission), Cloudflare, Inc. (delivery of the banner settings to the e-shop, protection against attacks and R2 storage in the EU for encrypted database backups), Functional Software, Inc. (Sentry, error tracking, EU region, without personal data).
Shoptet receives only the changes that the add-on writes to the e-shop through its API on your instruction. We do not provide or sell data to any other party.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Write to [email protected]; we will reply within 30 days. You may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).
The terms of use of the add-on are set out in the document Add-on terms of service.