PRIVACY POLICY
1 This Privacy Policy sets out the rules for the processing of personal data obtained through the online shop www.jww4u.com(hereinafter referred to as the "Online Shop").
2. The owner of the Online Shop and at the same time the data controller is JWW4U LTD 43 Roma Road, Birmingham, England, B11 2JH hereinafter referred to as JWW4U.
3. Personal data collected by JWW4U through the Online Shop shall be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), also referred to as RODO.
4. JWW4U takes special care to respect the privacy of Customers visiting the Online Shop.
§ 1 Type of data processed, purposes and legal basis
(1) JWW4U collects information concerning natural persons performing a legal action not directly related to their activity, natural persons conducting a business or professional activity on their own behalf, and natural persons representing legal persons or organisational entities which are not legal persons and to which the Act grants legal capacity, hereinafter collectively referred to as Customers.
(2) Customers' personal data are collected in the event of:
(a) registration of an account in the Online Shop, in order to create and manage an individual account. Legal basis: necessary for the performance of the contract for the provision of the Account service (Article 6(1)(b) RODO);
(b) placing an order on the Online Shop, for the performance of the sales contract. Legal basis: necessity for the performance of the sales contract (Article 6(1)(b) of the DPA);
(c) subscribing to a newsletter (Newsletter), for the purpose of performing a contract the subject of which is a service provided electronically. Legal basis - consent of the data subject for the performance of the contract for the Newsletter service (Art. 6(1)(a) RODO);
(d) use of the contact form service on the Online Shop for the performance of the contract for the provision of the service by electronic means. Legal basis: necessary for the performance of the contract for the provision of the contact form service (Article 6(1)(b) RODO);
(e) use of the post an opinion service, for the performance of the contract for the service provided electronically. Legal basis - necessary for the performance of the contract for the provision of the service to post an opinion (Article 6(1)(b) RODO).
(3) When registering an account with the Online Shop, the Customer shall provide:
(a) e-mail address;
(b) first and last name.
(4) When registering an account with the Online Shop, the Customer independently sets an individual password to access his/her account. The Customer may change the password, at a later time, according to the principles described in §5.
(5) When placing an order in the Online Shop, the Customer shall provide the following data:
(a) e-mail address;
b) address data:
a. postal code and town;
b. country (state);
c. street with house/flat number.
c) name and surname;
d) telephone number.
(6) In the case of Entrepreneurs, the above data shall be further extended by:
(a) the business name of the Entrepreneur;
b) Tax Identification Number.
(7) In the case of using the Newsletter service, the Customer provides only his/her e-mail address.
(8) When using the contact form service, the Customer only provides his/her e-mail address.
(9) When using the service to post a review, the Customer shall only provide his/her nickname, nickname or first name.
(10) When using the Store's Website, additional information may be collected, in particular: the IP address assigned to the Customer's computer or the external IP address of the Internet provider, domain name, browser type, access time, operating system type.
11. navigational data may also be collected from Customers, including information about links and references they choose to click on or other actions they take in the Internet Shop. Legal basis - legitimate interest (Article 6(1)(f) RODO) to facilitate the use of services provided electronically and to improve the functionality of these services.
12 For the purpose of establishing, investigating and enforcing claims, certain personal data provided by the Customer as part of the use of the functionality on the Online Shop may be processed, such as name, surname, data on the use of the services, if the claims arise from the manner in which the Customer uses the services, other data necessary to prove the existence of the claim, including the extent of the damage suffered. Legal basis - legitimate interest (Article 6(1)(f) RODO) to establish, assert and enforce claims and to defend against claims in proceedings before courts and other state authorities.
(13) The provision of personal data to JWW4U is voluntary, in connection with the conclusion of sales contracts or the provision of services via the Store's Website, with the proviso, however, that the failure to provide the data specified in the forms in the Registration process prevents the Registration and establishment of a Customer Account, and in the case of placing an order without the Registration of a Customer Account, it will prevent the placement and processing of the Customer's order.
§ 2 To whom is data shared or entrusted and how long is it stored
(1) The Customer's personal data is transferred to the service providers used by JWW4U in the operation of the Online Shop. The service providers to whom personal data is transferred, depending on the contractual arrangements and circumstances, are either subject to JWW4U's instructions as to the purposes and means of processing such data (processors) or determine the purposes and means of processing themselves (controllers).
(a) Processors. JWW4U uses suppliers who process personal data exclusively at the instruction of JWW4U. These include, but are not limited to, providers of hosting services, accounting services, providers of marketing systems, systems for analysing traffic on the Online Shop, systems for analysing the effectiveness of marketing campaigns;
(b) Administrators. JWW4U uses providers who do not act solely on instructions and determine themselves the purposes and uses of Customers' personal data. They provide electronic payment and banking services.
2 Location. The service providers are based in Poland and in other countries of the European Economic Area (EEA).
(3) Customers' personal data shall be stored:
(a) Where the basis for the processing of personal data is consent then the Customer's personal data shall be processed by JWW4U for as long as the consent is not revoked, and after revocation of the consent for a period of time corresponding to the period of limitation of claims that JWW4U may raise and that may be raised against it. Unless a specific provision provides otherwise, the limitation period is six years, and three years for claims for periodic benefits and claims relating to the conduct of business.
b) Where the basis for data processing is the performance of a contract, then the Customer's personal data shall be processed by JWW4U for as long as is necessary for the performance of the contract, and thereafter for a period corresponding to the period of limitation of claims. Unless a special provision provides otherwise, the limitation period is six years, and for claims for periodic performance and claims related to the conduct of business - three years.
(4) If a purchase is made from the Online Shop, personal data may be transferred to a courier company for the purpose of delivering the ordered goods.
(5) In the event that the Customer chooses to pay via paypal.com or stripe.com, his/her personal data shall be forwarded to the extent necessary to process the payment to Paypal.com or Stripe.com.
(6) Navigation data may be used to provide better service to Customers, to analyse statistical data and to adapt the Online Shop to Customers' preferences, as well as to administer the Online Shop.
7th If the Customer subscribes to a newsletter (Newsletter), JWW4U will send electronic messages containing commercial information about promotions and new products available in the Online Store to his/her e-mail address.
(8) If a request is made, JWW4U shall make personal data available to authorised state authorities, in particular to organisational units of the Prosecutor's Office, the Police, the President of the Office for Personal Data Protection, the President of the Office for Competition and Consumer Protection or the President of the Office of Electronic Communications.
§ 3 Cookie mechanism, IP address
(1) The Online Shop uses small files, known as cookies. These are stored by JWW4U on the end device of the person visiting the Online Shop, if the Internet browser allows it. A cookie usually contains the name of the domain from which it originates, its "expiry time" and an individual random number identifying the cookie. The information collected through cookies of this type helps to customise the products offered by JWW4U to the individual preferences and actual needs of visitors to the Online Shop. They also give the possibility to develop general statistics of visits to the presented products in the Internet Shop.
(2) JWW4U uses two types of cookies:
(a) Session cookies: when the session of a particular browser ends or the computer is switched off, the stored information is deleted from the memory of the device. The mechanism of session cookies does not allow any personal data or any confidential information to be collected from Customers' computers.
b) Permanent cookies: these are stored in the memory of the Customer's terminal equipment and remain there until they are deleted or expire. The mechanism of permanent cookies does not allow any personal data or any confidential information to be retrieved from the Clients' computer.
(3) JWW4U uses its own cookies for:
a) authenticating the Customer in the Internet Shop and ensuring a Customer session in the Internet Shop (after logging in), thanks to which the Customer does not have to re-enter his/her login and password on each sub-page of the Internet Shop;
b) analyses and research, as well as audience auditing, and in particular to create anonymous statistics which help to understand how the Customers use the Internet Shop's Website, which enables improving its structure and content.
4 JWW4U uses external cookies for:
(a) the presentation of the Reliable Regulations Certificate via the rzetelnyregulamin.pl website (external cookie administrator: Rzetelna Grupa sp. z o.o. with its registered office in Warsaw).
(5) The cookie mechanism is safe for the Customers' computers of the Internet Shop. In particular, it is not possible for viruses or other unwanted software or malware to get into Customers' computers via this method. Nevertheless, Customers have the option in their browsers to limit or disable access of cookies to their computers. If this option is used, the use of the Online Shop will be possible, except for functions that by their nature require cookies.
(6) Below we show how you can change the settings of popular web browsers regarding the use of cookies:
(a) Internet Explorer browser;
b) Microsoft EDGE browser;
c) Mozilla Firefox browser;
(d) Chrome browser;
(e) the Safari browser;
(f) Opera browser.
7 JWW4U may collect Customers' IP addresses. An IP address is a number assigned to the computer of a person visiting the Online Shop by an Internet Service Provider. The IP number allows access to the Internet. In most cases, it is assigned to the computer dynamically, i.e. it changes each time the computer connects to the Internet. The IP address is used by JWW4U to diagnose technical problems with the server, to create statistical analyses (e.g. to determine from which regions we record the highest number of visits), as information useful in administering and improving the Internet Shop, as well as for security purposes and the possible identification of unwanted automatic programmes overloading the server for browsing the Internet Shop content.
(8) The Internet Shop contains links and references to other websites. JWW4U is not responsible for the privacy protection rules applicable to them.
§ 4 Rights of data subjects
(1) Right to withdraw consent - legal basis: article 7(3) RODO.
a) The customer has the right to withdraw any consent that he/she has given to JWW4U .
b) The withdrawal of consent has effect from the moment of withdrawal.
c) The withdrawal of consent does not affect the processing lawfully carried out by JWW4U prior to its withdrawal.
d) The withdrawal of consent does not entail any negative consequences for the Customer, but may prevent further use of services or functionalities that JWW4U can lawfully provide only with consent.
(2) Right to object to the processing of data - legal basis: article 21 RODO.
a) The Customer has the right to object at any time - for reasons related to his/her particular situation - to the processing of his/her personal data, including profiling, if JWW4U processes his/her data based on a legitimate interest, e.g. marketing of JWW4U products and services, keeping statistics on the use of particular functionalities of the Online Shop and facilitating the use of the Online Shop, as well as satisfaction surveys.
b) Opting out, in the form of an e-mail, from receiving marketing communications concerning products or services will imply the Customer's objection to the processing of his/her personal data, including profiling for these purposes.
c) If the Customer's objection proves to be valid and JWW4U has no other legal basis for processing the personal data, the Customer's personal data will be deleted, against the processing of which, the Customer has objected.
(3) The right to erasure ("right to be forgotten") - legal basis: article 17 of the RODO.
a) The Customer has the right to request the erasure of all or some of his/her personal data.
b) The Customer has the right to request the erasure of personal data if:
a. the personal data are no longer necessary for the purposes for which they were collected or for which they were processed;
b. he/she has withdrawn specific consent, to the extent that the personal data was processed based on his/her consent;
c. has objected to the use of his/her data for marketing purposes;
d. the personal data is processed unlawfully;
e. the personal data must be erased in order to comply with a legal obligation under Union law or the law of a Member State to which JWW4U is subject;
f. the personal data was collected in connection with the offering of information society services.
(c) Despite a request for erasure of personal data, in connection with the lodging of an objection or withdrawal of consent, JWW4U may retain certain personal data to the extent that the processing is necessary for the establishment, assertion or defence of claims, as well as for compliance with a legal obligation requiring processing under Union law or the law of a Member State to which JWW4U is subject. This applies in particular to personal data including: name, surname, e-mail address, which data are stored for the purpose of handling complaints and claims related to the use of the services of JWW4U, or additionally the residential address / mailing address, order number, which data are stored for the purpose of handling complaints and claims related to concluded sales contracts or the provision of services.
4 The right to restrict the processing of data - legal basis: article 18 RODO.
a) The customer has the right to request the restriction of the processing of his personal data. The submission of a request, until it is considered, prevents the use of certain functionalities or services, the use of which will involve the processing of the data covered by the request. JWW4U will also not send any communications, including marketing communications.
b) The Customer has the right to request the restriction of the use of personal data in the following cases:
a. when he or she questions the correctness of his or her personal data, in which case JWW4U shall restrict the use of his or her personal data for the time necessary to verify the correctness of the data, but for no longer than 7 days;
b. when the processing of the data is unlawful, and instead of deleting the data, the Customer requests that the use of the data be restricted;
c. when the personal data are no longer necessary for the purposes for which they were collected or used but are needed by the Customer in order to establish, assert or defend claims;
d. when he/she has objected to the use of his/her data, in which case the restriction shall be for the time necessary to consider whether, due to the particular situation, the protection of the Client's interests, rights and freedoms outweighs the interests pursued by the Administrator in processing the Client's personal data.
5. right of access - legal basis: article 15 of the RODO.
(a) The Customer has the right to obtain confirmation from the Controller as to whether it is processing personal data and, if so, the Customer has the right:
a. Obtain access to his/her personal data;
b. obtain information about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of that data, the intended period of storage of the Customer's data or the criteria for determining that period (where it is not possible to determine the intended period of processing), the Customer's rights under the RODO and the right to lodge a complaint with a supervisory authority, the source of that data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of that data outside the European Union;
c. obtain a copy of your personal data.
6. right to rectification of data - legal basis: article 16 RODO.
a) The Customer has the right to request from the Administrator the immediate rectification of personal data concerning him/her that is inaccurate. Taking into account the purposes of the processing, the Data Subject Customer has the right to request the completion of incomplete personal data, including by providing an additional statement, by addressing the request to the email address in accordance with §6 of the Privacy Policy.
(7) Right to data portability - legal basis: article 20 RODO.
a) The Customer has the right to receive his/her personal data that he/she has provided to the Administrator and then send it to another personal data controller of his/her choice. The Customer also has the right to request that the personal data be sent by the Administrator directly to such controller, insofar as this is technically possible. In this case, the Administrator will send the Customer's personal data in the form of a file in csv format, which is a commonly used, machine-readable format that allows the data received to be sent to another personal data controller.
(8) In the event of the Client's assertion of an entitlement arising from the above rights, JWW4U shall either comply or refuse to comply with the request immediately, but no later than within one month of receipt. However, if - due to the complicated nature of the request or the number of requests - JWW4U is not able to fulfil the request within one month, it will fulfil the request within another two months informing the Client in advance - within one month of receiving the request - of the intended extension of the deadline and the reasons for it.
(9) The Customer may lodge complaints, queries and requests to the Administrator regarding the processing of his/her personal data and the exercise of his/her rights.
(10) The Customer has the right to request JWW4U to provide a copy of the standard contractual clauses by directing the request in the manner indicated in §6 of the Privacy Policy.
(11) The Customer shall have the right to lodge a complaint with the President of the Office for the Protection of Personal Data, with regard to infringement of its data protection rights or other rights granted under the RODO.
§ 5 Security management - password
(1) JWW4U provides Customers with a secure and encrypted connection when transmitting personal data and when logging into the Customer Account on the Website. JWW4U uses an SSL certificate issued by one of the world's leading companies for the security and encryption of data transmitted over the Internet.
(2) In the event that a Customer with an account on the Online Store has lost their password in any way, the Online Store shall allow a new password to be generated. JWW4U does not send a password reminder. The password is stored in an encrypted form in such a way that it cannot be read. In order to generate a new password, it is necessary to provide an e-mail address in the form available under the link "Forgot your password?", provided at the log-in form for the account in the Online Shop. The Customer will receive an e-mail message to the e-mail address provided during registration or saved in the last account profile change, containing a redirect to the dedicated form made available on the Online Shop Website, where the Customer will have the opportunity to set a new password.
(3) JWW4U never sends any correspondence, including electronic correspondence, requesting login details and in particular the password to access the Customer's account.
§ 6 Changes to the Privacy Policy
(1) The Privacy Policy is subject to change, of which JWW4U will inform Customers 7 days in advance.
(2) Questions related to the Privacy Policy should be addressed to: office@jww4u.com.