§ 1 DEFINITIONS

1. Administrator – JiW Kancelaria Prawno-Patentowa Sp. z o.o., ul. Słomińskiego 19 lok. 522, 00-195 Warszawa, KRS: 0000858521.
2. Personal data – information about a natural person who is identified or can be identified by one or more specific factors determining their physical, physiological, genetic, mental, economic, cultural or social identity, including the IP address of the device, internet identifier and information collected via cookies and other similar technologies.
3. Cookies – so-called “cookies”, IT data, in particular text files, which are stored in the end device of the User of the Website and are intended for use on the Website. Cookies usually contain the name of the website from which they originate, the time of their storage in the end device and a unique number.
4. Privacy Policy – this Privacy Policy.
5. Cookie Policy – part of the Privacy Policy relating to Cookies.
6. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
7. Website – website operated by the Administrator at https://www.jarzynka.eu
8. Online store – online store operated by the Administrator at https://www.jarzynka.eu
9. User – any natural person visiting the Website or using one or more of the services or functionalities described in the Privacy Policy;
10. Client – any User who has an account on the Website.

§ 2 PROCESSING OF PERSONAL DATA

The Administrator collects data to the extent necessary to provide individual services offered in connection with the User’s use of the Website.

§ 3 PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

The personal data of the User is processed by the Administrator:

1. in order to fulfill orders placed in the online store – the legal basis for processing is the Client’s consent to the processing of personal data for the purpose of fulfilling the order and the necessity of processing to perform the contract (Art. 6(1)(a) and (b) of the GDPR);
2. in order to establish and pursue claims or defend against claims – the legal basis for processing is the legitimate interest of the Administrator (Art. 6(1)(f) of the GDPR), which consists in protecting its rights;
3. in order to enable Users to contact him using the contact form on the Website – the legal basis for processing is the User’s consent to the processing of personal data in order to contact him and the necessity of processing to perform the contract (Art. 6(1)(a) and (b) of the GDPR).

§ 4 COOKIE POLICY

1. The entity placing Cookies on the User’s end device and obtaining access to them is the Administrator.
2. Cookies are used for:
   1. adapting the content of the Website to the User’s preferences and optimizing the use of the Website; in particular, these files allow the User’s device to be recognized and the Website to be displayed accordingly, adapted to his individual needs,
   2. creating statistics that help to understand how Users use the Website, which makes it possible to improve its structure and content.
3. The following third-party cookies are used on the Website:

1. Google Analytics and Google Tag Manager,
2. Google Ads,
3. Hotjar,
4. Facebook Ads,
5. YouTube.

Details regarding individual third-party cookies are described below.

Google Analytics – details

The Google Analytics tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA is used. Actions in this area are carried out on the basis of a legitimate interest, consisting in creating statistics and analyzing them in order to optimize the website.

In order to use Google Analytics and Google Tag Manager, a special tracking code has n implemented in the website’s code. The tracking code uses cookies from Google LLC for the indicated services. At any time, the User may block the Google Analytics and Google Tag Manager tracking code by installing a browser extension provided by Google.

Google Analytics automatically collects information about the User’s use of the website. This information is usually transmitted to Google servers, which may be located around the world and stored there.

Due to the activated IP address anonymization, the User’s IP address is shortened before being transmitted. Only in exceptional cases is the full IP address transmitted to Google servers and shortened there. The anonymized IP address transmitted by the User’s browser via Google Analytics is generally not linked to other Google data.

Within the scope of Google Analytics, the Administrator has access only to Anonymous Information.

The Google Analytics and Google Analytics 360 services have n certified according to the independent ISO 27001 security standard. ISO 27001 is one of the most recognized standards in the world and certifies compliance with the relevant requirements by the systems supporting Google Analytics and Google Analytics 360.

The User can find details about how Google uses data from websites and applications that use Google services at this link.

Hotjar – details

The Hotjar tool is used to better understand the User’s needs and optimize the website in terms of the User’s experience of using it, which constitutes a legitimate interest. The tool is provided by a third-party, i.e. Hotjar Limited, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta.

Hotjar records each visitor to the website and allows replaying a video recording of his movements on the website, as well as generating so-called heat maps. Within the Hotjar tool, it is not possible to access information that would allow the identification of the User, because Hotjar does not record the process of filling out forms. The information to which the Administrator has access within Hotjar includes, in particular:

1. information about the operating system and web browser used by the User,
2. subpages that the User browses on the website,
3. time spent on the website and its subpages,
4. transitions between individual subpages on the website,
5. the source from which the User comes to the website,
6. places where the User clicks with the mouse.

In order to use Hotjar, a special tracking code has n implemented in the website’s code. The tracking code uses cookies from Hotjar Limited. The information collected in the cookies is stored by Hotjar in a pseudonymized user profile. Neither Hotjar nor the Administrator uses this information to identify the User.

The User may object to Hotjar creating a user profile, storing information about the use of the Website and using Hotjar cookies here: https://www.hotjar.com/legal/compliance/opt-out.

The User can find details about the processing of data within Hotjar in Hotjar’s privacy policy: https://www.hotjar.com/legal/policies/privacy.

Google Ads – details

The remarketing features available in the Google Ads system, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, are used. Actions in this area are carried out on the basis of a legitimate interest, consisting in marketing its own products or services.

When visiting the Online Store, a remarketing cookie from Google is automatically placed on the User’s device, which collects information about the User’s activity on the site. Thanks to this information, it is possible to display advertisements in the Google network that are more targeted to the User’s interests. For example, if the User views a particular product, this information will be noted by the remarketing cookie, which will allow the User to be shown an advertisement for that product or any other that is deemed appropriate.

By using Google Ads, the Administrator uses only Anonymous Information.

By using Google AdWords, the Administrator can only define groups of recipients to which it would like the advertisements to be directed. Based on this, Google decides when and how to present the advertisement to the User.

Further processing of information only takes place when the User consents to Google linking the browsing history to the User’s account and using information from the User’s Google account to personalize advertisements displayed on websites. In this case, Google will temporarily combine the collected information with other data it has in order to create target groups. In this case, Google will temporarily combine the collected information with other data it has in order to create target groups.

If the User does not want to receive personalized advertisements, he can manage his advertising settings directly on the Google website: https://adssettings.google.com.

The User can find details about how Google uses data from websites and applications that use Google services on the website: https://policies.google.com/technologies/partner-sites.

Facebook Ads – details

The Custom Audiences features available in the Facebook Ads system, provided by Meta Platforms, Inc., 1601 Willow Road Menlo Park, CA 94025 USA, are used to direct targeted advertising messages to specific groups of users. Actions in this area are carried out on the basis of a legitimate interest, consisting in marketing its own products or services.

When visiting the Online Store, a Facebook pixel is automatically placed on the User’s device, which collects information about the User’s activity on the site. This information is usually transmitted to Facebook servers, which may be located around the world, in particular in the United States of America.

The information collected in the Facebook pixel is anonymous, i.e. it does not allow the identification of the User. Depending on the User’s activity on the site, he may be assigned to a specific group of recipients, but in no way is the identification of individual people belonging to these groups carried out.

The Facebook pixel may track and record, among other things, the following User behaviors:

1. viewing the content of a specific page,
2. going to the checkout in the online store,
3. completing a purchase in the online store,
4. filling out a specific form, e.g. subscribing to a newsletter.

Facebook may combine the collected information with other information about the User collected as part of his use of the Facebook service and use it for its own purposes, including marketing purposes. Such actions by Facebook are no longer dependent on the Administrator, and information about them can be found directly in Facebook’s privacy policy. From his Facebook account, the User can also manage his privacy settings. Useful information in this regard can be found here.

YouTube – details

Widgets from YouTube, which allow playing videos available on the YouTube service, are embedded on the website. The YouTube service is provided by Google LLC.

In the embedded video mode, no cookies are stored on the User’s device and Google does not collect any information about the User, unless the video is played. According to information provided by YouTube, this means that no cookies are stored on the User’s device and Google does not collect any information about the User until the video is played.

When the video is played, YouTube stores cookies on the User’s device and receives information that the User has played the video from a specific website, even if he does not have a Google account or is not currently logged in. If the User is logged in to his Google account, Google may directly associate the visit to the Website with the User’s account.

The purpose and scope of data collection and its further processing and use by Google, as well as the possibility of contact and the User’s rights in this regard and the possibility of making settings to ensure the protection of his privacy, are described in Google’s privacy policy. The purpose and scope of data collection and its further processing and use by Google, as well as the possibility of contact and the User’s rights in this regard and the possibility of making settings to ensure the protection of his privacy, are described in Google’s privacy policy.

If the User does not want Google to associate data collected during video playback directly with his profile, he must log out of his account before playing the video. The User can also completely prevent the loading of plugins on the page by using appropriate browser extensions, e.g. blocking scripts. The User can also completely prevent the loading of plugins on the page by using appropriate browser extensions, e.g. blocking scripts.

The information collected in the cookies related to the videos embedded on our websites from the YouTube service is used by Google to ensure the proper and safe functioning of the widget, to analyze and optimize the services provided by YouTube, as well as for personalization and advertising purposes.

By playing videos available on the YouTube service, the User uses the services provided electronically by Google LLC. Google LLC is an independent, separate entity providing electronic services. Details on the principles of using YouTube, including data protection, can be found in the documents provided directly by YouTube:

1. terms and conditions: https://www.youtube.com/t/terms,
2. privacy policy: https://policies.google.com/privacy

§ 5 PERIOD OF PROCESSING PERSONAL DATA

1. The period of processing Personal Data by the Administrator depends on the type of service provided and the purpose of processing. As a rule, Personal Data is processed for the duration of the service, until the withdrawal of the expressed consent or the submission of an effective objection to the processing of Personal Data in cases where the legal basis for its processing is the legitimate interest of the Administrator.
2. The period of processing Personal Data may be extended if processing is necessary to establish and pursue any claims or defend against claims, and after that time only to the extent that it is required by law. After the expiration of the processing period, the Personal Data is irrevocably deleted or anonymized.

§ 6 USER RIGHTS

1. The User has the right to access the content of Personal Data and request its rectification, deletion, restriction of processing, the right to data portability and the right to lodge a complaint with the supervisory authority responsible for the protection of Personal Data.
2. The User also has the right to object to the processing of data, which is carried out on the basis of the legitimate interest of the Administrator.
3. To the extent that the User’s data is processed on the basis of consent, this consent may be withdrawn at any time by contacting the Administrator.

§ 7 RECIPIENTS OF PERSONAL DATA

1. In connection with the provision of services, Personal Data will be disclosed to external entities, including in particular IT service providers that enable the proper use of the Website.
2. If the User consents, his Personal Data may also be disclosed to other entities for their own purposes, including marketing purposes.
3. The Administrator reserves the right to disclose selected information about the User to the competent authorities or third parties who submit a request for the provision of such information, based on an appropriate legal basis and in accordance with applicable law.

§ 8 TRANSFER OF PERSONAL DATA OUTSIDE THE EEA

1. The level of protection of Personal Data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Administrator transfers Personal Data outside the EEA only when it is necessary and with the assurance of an appropriate level of protection, primarily by:
   1. cooperation with entities processing Personal Data in countries for which the European Commission has issued a decision stating that an appropriate level of protection of Personal Data is ensured;
   2. using standard contractual clauses issued by the European Commission;
   3. using binding corporate rules approved by the competent supervisory authority.
2. The Administrator informs about the intention to transfer Personal Data outside the EEA at the time of its collection.

§ 9 SECURITY OF PERSONAL DATA

1. The Administrator continuously conducts risk analysis to ensure that Personal Data is processed by it in a secure manner – ensuring, above all, that access to data is granted only to authorized persons and only to the extent necessary for the tasks they perform. The Administrator ensures that all operations on Personal Data are recorded and carried out only by authorized employees and contractors.
2. The Administrator takes all necessary measures to ensure that its subcontractors and other cooperating entities also provide a guarantee of applying appropriate security measures in every case when they process Personal Data on behalf of the Administrator.

§ 10 CONTACT WITH THE ADMINISTRATOR

Contact with the Administrator is possible in writing, at the address: JiW Kancelaria Prawno-Patentowa Spółka z ograniczoną odpowiedzialnością, ul. Słomińskiego 19 lok. 522, 00-950 Warszawa, or by e-mail, at: kancelaria@jarzynka.eu

§ 11 FINAL PROVISIONS

1. The Administrator reserves the right to make changes to the Privacy Policy, with all changes taking effect no earlier than the date of their publication on the Website.
2. The Privacy Policy comes into force on January 15, 2024.