PRIVACY POLICY

www.jarwizz.com

The protection of the personal data you entrust to us is important to us, and we do everything we can to make you feel safe with us. The purpose of these Terms of Personal Data Processing is to explain to you how the personal data you provide to us when using our website www.jarwizz.com (hereinafter the "website") will be processed and protected. At the same time, we would like to inform you of your rights in connection with the processing of your personal data.

These Terms inform you of the general rules for processing personal data when using the website and accounts on social networks. Please note that the specific terms of processing your personal data depend on the purpose of the personal data processing.

DEFINITIONS

1.1. Controller - jarwizz s.r.o., registered office at Beňadovo 157, 029 63 Beňadovo, Slovak Republic, Company ID: 55 717 926, registered in the Commercial Register of the District Court Žilina, section Sro, insert number 83159 /L.

1.2. Personal data - information about a natural person identified or identifiable through one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity, including the device IP, location data, an online identifier and information collected through cookies and other similar technologies.

1.3. Policy - this Privacy Policy, which contains information about the processing of Personal Data on the Website.

1.4. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC.

1.5. Website - the websites managed by the Controller on the domain www.jarwizz.com, accessible through web browsers.

1.6. Store - the online store www.jarwizz.com available through the Website, through which the Controller carries out distance sales of goods.

1.7. User - any natural person visiting the Website or using one or more of the services or functions described in the Policy.

1.8. Device - means an electronic device through which the User gains access to the Website.

GENERAL INFORMATION

2.1. In connection with your use of the Website, we collect the data needed to provide the offered services as well as information about your activity on the Website. In this respect, we are the controller of your personal data and place great emphasis on its adequate protection. We ensure that our data processing procedures comply with the relevant legal provisions, in particular the GDPR. Our goal is to enable you to obtain complete information about how we process your Personal Data and to provide you with tools that allow you to exercise your rights. Below we provide information about how we process your Personal Data.

2.2. We process your personal data in accordance with the law and ensure that it is up to date and accurate. From time to time, we may therefore remind you to update it by sending a message to the email address you have provided or by displaying the relevant message on the Website after you have logged in to your account.

HOW CAN I CONTACT THE CONTROLLER?

3.1. If you have any questions about how we process your personal data, or if you wish to exercise your rights, write to us directly at the email address: info@jarwizz.com or at the address Beňadovo 157, 029 63 Beňadovo, Slovak Republic, or use the contact form via the link: https://jarwizz.com/#contact .

HOW DO WE OBTAIN YOUR PERSONAL DATA?

4.1. We obtain your Personal Data directly from you for the purpose of the proper provision of our services and the smooth functioning of our Website. You provide us with your data primarily through the contact form via the link: https://jarwizz.com/#contact. We also obtain your data when you use other services available on the Website, e.g. when you view the products offered in the Store.

IS PROVIDING PERSONAL DATA MANDATORY?

5.1. It is up to you whether and what personal data you provide to us - it is not mandatory. Please note, however, that in some cases providing Personal Data is necessary for the proper provision of the services we offer or is a condition for the conclusion and performance of a contract, as described in detail below.

HOW DO WE PROCESS YOUR PERSONAL DATA?

USE OF THE WEBSITE

6.1. If you use the Website, your Personal Data (including the IP address or other identifiers and information collected through cookies or other similar technologies) is processed by us:

6.1.1. for the purpose of providing electronic services to the extent of delivering to you the content collected on the Website - in this case the legal basis for processing is the necessity of processing for the performance of a contract (Art. 6(1)(b) GDPR);

6.1.2. for analytical and statistical purposes - in this case the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), consisting in carrying out analyses of Users' activity and their preferences in order to improve the functions used and the services provided;

6.1.3. for the purpose of any establishment and enforcement of claims or defence against claims - the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), consisting in the protection of its rights and business interests;

6.1.4. for the marketing purposes of the Controller and other entities, in particular relating to the presentation of behavioural advertising - the rules for processing Personal Data for marketing purposes are described in the MARKETING section.

6.2. Your activity on the Website, including your personal data, is recorded in system logs (a special computer program used to store a chronological record containing information about events and activities related to the information system used to provide our services). The information collected in the logs is processed primarily for the purpose of providing services. We process it for technical and administrative purposes, for the need to ensure the security of the information system and system administration, as well as for analytical and statistical purposes - in this respect the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR).

CONTACT FORM

6.3. We offer the option to contact us through a contact form. Using the form requires providing the Personal Data needed for us to contact you and respond to your enquiry. Providing the data marked as mandatory is necessary to receive and handle the enquiry, and if you do not do so, it will not be possible to process the enquiry. Providing other data (e.g. in the content of the enquiry) is voluntary.

6.4. Your Personal Data is processed:

6.4.1. for the purpose of identifying and handling your enquiry submitted through the provided form - the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), consisting in the need to resolve the reported matter and to conduct the correspondence addressed to it in connection with its business activities;

6.4.2. for analytical and statistical purposes - the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), consisting in maintaining statistics of enquiries submitted by Users through the Website in order to improve its functionality.

MARKETING

6.5. We process your Personal Data for the purpose of carrying out marketing activities, which may consist of:

6.5.1. displaying marketing content corresponding to your interests (behavioural advertising);

6.5.2. carrying out activities related to the direct marketing of goods and services (sending commercial information by electronic means and telemarketing activities).

6.5.3. For the purpose of carrying out marketing activities, we use profiling in some cases. This means that, thanks to the automated processing of data, we evaluate selected factors relating to you in order to analyse your behaviour or create a forecast for the future. This allows better adaptation of the displayed content to your individual preferences and interests.

BEHAVIOURAL ADVERTISING

6.6. Together with our trusted partners, we process your Personal Data, including Personal Data collected through cookies and other similar technologies, for marketing purposes in connection with targeting you using behavioural advertising (i.e. advertising that is tailored to your preferences). The processing of personal data in such a situation also includes profiling, the effect of which is only the display of advertising tailored on the basis of your Personal Data obtained by us and our partners.

6.7. The list of the Controller's trusted partners is provided below in the section "Information about the use of cookies" on the "Our Partners" tab.

DIRECT MARKETING

6.7. If consent is granted, we may use your data to send marketing content through various channels, i.e. by email (in the form of a newsletter), via MMS / SMS or by telephone. The legal basis for processing your Personal Data in this case is the legitimate interest of the Controller (Art. 6(1)(f) GDPR) in connection with your consent, consisting in the marketing of the offered goods and services. We carry out such activities only if you have granted your consent, which you can withdraw at any time. You can withdraw your consent at any time by clicking the link we send in every email containing commercial information, by contacting us at the email address: info@jarwizz.com or through the contact form. The withdrawal of consent does not affect the lawfulness of the data processing carried out before its withdrawal.

6.8. We may also carry out direct marketing through the traditional postal address you have provided. The legal basis for processing your Personal Data in this case is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), consisting in the marketing of the offered goods and services. You may object at any time to the processing of your Personal Data for this purpose. You can express your objection by contacting us at the email address: info@jarwizz.com or through the contact form.

GOOGLE ADS CUSTOMER MATCH

6.9. Marketing of the products and services we offer may also take place using Google Ads Customer Match. Google Ads Customer Match is a tool that allows the Controller to upload a hashed database of email addresses (a customer list) into Google tools in order to verify whether User accounts were created in Google services using the same email addresses (e.g. YouTube, Gmail, others). If a match of email addresses is confirmed, users of Google services may, after logging in, be shown the Controller's advertisements.

6.10. In order to increase the accuracy of measuring the effectiveness of our marketing activities using the Google Ads Customer Match described above, we will also use the tool provided by Google in the form of so-called "enhanced conversions". This tool allows the Controller to increase the accuracy of conversion measurement (i.e. the purchase of goods on the Store's website as a result of a redirect from another website). In order to use it, we upload conversion data from the Store's website in encrypted form (including data in the scope of email addresses) in a manner ensuring privacy protection, i.e. using a one-way encryption algorithm. Information about enhanced conversions can be found at this link: Enhanced conversions - Google Ads - Help.

PROCESSING OF DATA OF USERS VISITING THE CONTROLLER'S PROFILES ON SOCIAL NETWORKS

7.1. The Controller has public profiles on the social networks Facebook, Instagram, LinkedIn. In connection with this, it processes data left by persons visiting these profiles (among others, comments, likes, online identifiers).

7.2. The Personal Data of such persons is processed:

7.2.1. in order to enable them to carry out activities on the profiles;

7.2.2. for the purpose of effectively operating the profiles, presenting to Users of the portals information about initiatives and other activities of the Controller and in connection with the promotion of various types of events, services and products;

7.2.3. for statistical and analytical purposes;

7.2.4. where applicable, they may be processed for the purpose of enforcing claims and defending against claims.

7.3. The legal basis for processing the Personal Data is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), consisting in:

7.3.1. promoting its own brand and improving the quality of the services provided,

7.3.2. carrying out analyses of activity and preferences,

7.3.3. where necessary - enforcing claims and defending against claims.

The above information does not apply to the processing of personal data by the administrators of the social network pages.

TO WHOM WILL YOUR PERSONAL DATA BE TRANSFERRED?

8.1. We may transfer your Personal Data to entities with which we cooperate in providing the services we offer.

8.2. Depending on the delivery method you have chosen for the purchased or returned goods, we will provide the data needed for the delivery or return of the goods to one of the entities with which we cooperate at that time.

8.3. Depending on the payment method you have chosen for the purchased goods, we will provide the data needed to collect or make the payment to one of the entities with which we cooperate in the area of payment processing.

8.4. We also have the right to disclose selected information about our Users to the relevant authorities or third parties that have submitted a request for such information, on an appropriate legal basis and in accordance with applicable law.

FOR HOW LONG WILL YOUR PERSONAL DATA BE PROCESSED?

9.1. The period for processing your Personal Data depends on the type of service provided and the purpose of processing. Data is generally processed for the duration of the service or the fulfilment of the order, until consent is withdrawn or an effective objection is raised against the processing of the data in cases where the legal basis for processing the data is the legitimate interest of the Controller.

9.2. The data processing period may be extended if processing is necessary for the establishment and enforcement of any claims or for defence against claims, and after that period only when and to the extent required by law. After the processing period has elapsed, the data is irretrievably deleted or anonymised.

HOW DO WE PROTECT YOUR DATA?

10.1. In order to minimise the risk of data leakage, destruction and disintegration, we use a range of IT and organisational security measures. Security features include tools such as: firewall, antivirus and antispam security systems, internal processes, data processing and disaster recovery procedures, as well as a multi-level backup system.

10.2. Please remember that using the Internet always carries the risk of certain security incidents. We assure you, however, that thanks to the implemented procedures of regular reviews and updates of IT systems and active monitoring of critical points in the system, we try to reduce this risk as much as possible.

WHAT ARE YOUR RIGHTS RELATED TO THE PROCESSING OF YOUR PERSONAL DATA?

11.1. In connection with our processing of your Personal Data, you have the following rights:

11.1.1. the right to information about the processing of Personal Data - on this basis the Controller will provide you with information about the processing of your Personal Data, in particular about the purposes and legal grounds of processing, the scope of the data stored, the entities to which it is disclosed and the planned date for deleting the data;

11.1.2. the right to obtain a copy of the data - on this basis the Controller will provide you with a copy of your personal data that it processes;

11.1.3. the right to rectification - the Controller is obliged to remove any inconsistencies or errors in the processed Personal Data and to complete it if it is incomplete;

11.1.4. the right to erasure of data - on this basis you may request the deletion of data whose processing is no longer necessary to achieve any of the purposes for which it was collected;

11.1.5. the right to restriction of processing - if such a request is raised, the Controller will stop performing operations on your Personal Data - with the exception of operations you have consented to, and the storage of data in accordance with the adopted retention rules - or until the reasons for restricting the processing of the data cease (e.g. a decision of the supervisory authority is issued authorising further processing of the data);

11.1.6. the right to data portability - on this basis - to the extent that the data is processed in an automated manner in connection with a concluded contract or consent - the Controller provides the data you have supplied in a format that allows the data to be read by a computer. You may also request that this data be sent to another entity, provided that there are technical possibilities in this respect on the part of both the Controller and yourself;

11.1.7. the right to object to the processing of data for marketing purposes - you may object at any time to the processing of your Personal Data for marketing purposes, without having to justify such an objection;

11.1.8. the right to object to other purposes of data processing - at any time you may - for reasons related to your particular situation - object to the processing of your Personal Data that takes place on the basis of the legitimate interest of the Controller (e.g. for analytical or statistical purposes or for reasons related to the protection of property); an objection in this respect should contain justification;

11.1.9. the right to withdraw consent - if information is processed on the basis of your consent, you have the right to withdraw it at any time, which, however, does not affect the lawfulness of processing carried out before its withdrawal;

11.1.10. the right to lodge a complaint - if you believe that the processing of Personal Data violates the provisions of the GDPR or other provisions on the Protection of Personal Data, you may lodge a complaint with the supervisory authority for the processing of Personal Data competent for your usual place of residence, place of work or place of the alleged infringement.

11.1.11. the right to human intervention on the part of the controller, to express your own point of view and to contest decisions based solely on automated processing - This right ensures the protection of the individual in situations where a decision is made about them solely on the basis of automated data processing, such as through algorithms or artificial intelligence. In such cases, the individual has the right to request human intervention on the part of the controller, thereby ensuring that the decision is reviewed by a human. They also have the right to express their own point of view on the decision and the option to contest the decision or to request its change. This mechanism protects individuals from the possible negative consequences of decisions made without human control and is enshrined in Article 22 of the GDPR.

SUBMITTING REQUESTS RELATED TO THE EXERCISE OF RIGHTS

12.1. You may submit a request concerning all of the above rights to the following email address: info@jarwizz.com or to the address Beňadovo 157, 029 63 Beňadovo, Slovak Republic, or use the contact form via the link: https://jarwizz.com/#contact

12.4. We will try to respond to your request as soon as possible and answer your questions regarding the processing of your data. You will receive a response within 30 days from the day we receive your request. If it turns out that, due to the complexity of the request or the number of requests we have received, we are unable to provide you with information about the actions taken within this period - we will inform you of its extension.

12.5. If we have doubts as to whether it is you who is submitting a particular request, we may ask you a few additional questions to verify your identity. Providing this data is not mandatory, but failure to provide it will result in the refusal to comply with the request. To determine the exact content of your request, we may also need additional information.

12.6. A request may be submitted in person or through an authorised representative (e.g. a family member). For data protection reasons, we recommend using a power of attorney authenticated by a notary or an authorised legal adviser or representative, which will speed up the verification of the authenticity of the request.

12.7. If the request has been sent to us electronically, we will respond in the same form, unless the applicant requests a response in a different form. In other cases the response will be provided in writing. If the deadline for handling the request does not allow a response in writing and the scope of the applicant's data we process allows us to contact you electronically, the response will be provided electronically.

12.8. We store information about the request submitted and the person who submitted the request in order to ensure its fulfilment and so that we can establish, defend or pursue any claims of the data subjects. The register of requests is stored in a manner that ensures its integrity and the confidentiality of the data contained therein.

CHANGES TO THE PRIVACY POLICY

14.1. The Policy is continuously reviewed and, where necessary, updated.

27.01.2025