Privacy policy

§ 1. Who is responsible for your data

1. The controller of your personal data is Jacek Szkonter, an entrepreneur trading as JACEK SZKONTER PRZEDSIĘBIORSTWO PRODUKCYJNO-HANDLOWO-USŁUGOWE "JAMAR", entered in CEIDG, ul. Objazdowa 15, 43-100 Tychy, Poland, NIP 6540007807, REGON 271020225 ("we").

2. This policy covers the data we collect in the shop and on the jamarbox.com website, through the forms, and in email and phone contact with us.

§ 2. What data we collect and where it comes from

1. Shop orders: name, email address, phone number, delivery and invoice address, and if you buy for a business, the company name and NIP or EU VAT number; details of the order and payment (without card details — we never receive them).

2. Account: email address, password (stored encrypted), saved addresses and order history.

3. Contact form and correspondence: name, email address, phone number (if you give it), company name (if you give it) and your message.

4. Quote form: name, email address, phone number (if you give it), company name and industry, project description and the files you send. Files may contain personal data, such as names printed on a packaging design — please send only what we need for the quote.

5. Complaints: order number, name, email address, a description of the problem, photos and what you would like us to do.

6. Withdrawal from a contract: name, email address, order number and date, the products concerned, your reason (if you give one), and the date and time the statement was sent.

7. Newsletter: your email address and when and how you subscribed. only if a newsletter is live

8. Client testimonials: if you agree to us publishing your opinion about working with us — the text, your name, role and company.

9. Using the website: the web server logs technical data about connections, such as IP address, date and time, the page visited and browser details. Cookies needed for the website to work store, for example, your cart, login status and your choice in the cookie banner. Analytics data (Google Analytics) is collected only if you agree to it in the cookie banner.

§ 3. Why we use your data, on what basis and for how long

Each purpose has its own legal basis under the GDPR (Regulation (EU) 2016/679).

§ 4. Do you have to give us your data

1. Giving us your data is voluntary.

2. Without the data needed for an order (name, email, address, a phone number for the carrier) we cannot accept and deliver it. A NIP is needed if you want an invoice to a business — tax law requires it.

3. In the forms, required fields are marked with an asterisk; without them we cannot answer your message, prepare a quote or handle your request. You can also send a complaint or a withdrawal by email or post.

4. Consent to the newsletter, to publishing a testimonial and to analytics cookies is voluntary; refusing has no effect on buying or on our other services.

§ 5. Who receives your data

1. We share data only when it is needed for the purposes in § 3. Companies that process data on our behalf (processors) do so under a data processing agreement and only on our instructions.

2. The recipients are:

   1. website hosting and email — ADMIN.NET.PL Tomasz Rzepka Arkadiusz Nowara S.C., ul. Bitwy pod Monte Cassino 5/198, 33-100 Tarnów, Poland (the MyDevil service, mydevil.net) — a processor;

   2. Google Analytics — Google Ireland Limited, Dublin, Ireland — a processor, only if you accept analytics cookies;

   3. payment provider — TODO — for online payments;

   4. carriers — TODO — name, delivery address, phone and email, needed to deliver the parcel;

   5. invoicing software — confirm;

   6. accounting office — TODO — sales documents;

   7. newsletter provider — if a newsletter tool is chosen;

   8. people and companies who help us maintain the website and shop — TODO — as far as technical support requires;

   9. public authorities — where the law requires it (for example, the tax office).

3. Complianz, the plugin that shows the cookie banner, runs on our server. According to its maker (Complianz B.V., the Netherlands), it does not send visitors' data to them.

4. We do not sell personal data.

§ 6. Transfers outside the European Economic Area

1. Google may also process Google Analytics data in the United States. The transfer is based on the European Commission's adequacy decision (the EU–US Data Privacy Framework, Implementing Decision (EU) 2023/1795 of 10 July 2023) and on the Commission's standard contractual clauses.

2. The other recipients process data in the European Economic Area. check the payment provider and newsletter tool once chosen

§ 7. Your rights

1. You have the right to:

   1. access your data and get a copy;

   2. have inaccurate or incomplete data corrected;

   3. have your data deleted, unless the law requires us to keep it;

   4. restrict how we use it;

   5. take the data we process on the basis of a contract or your consent to another controller (data portability);

   6. object when we rely on our legitimate interest;

   7. withdraw your consent at any time — this doesn't affect what we did before.

2. To use any of these rights, write to rodo@jamarbox.com. We answer without undue delay and within one month at the latest. In exceptional cases (for example, many complex requests) we may extend this by two more months — if so, we tell you within the first month and give the reason.

§ 8. Complaints to the supervisory authority

1. If you think we use your data unlawfully, you can complain to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, Poland — uodo.gov.pl (opens in a new tab).

2. If you live or work in another EU country, you can also complain to the supervisory authority there.

§ 9. Automated decisions and profiling

We do not make decisions about you based solely on automated processing that have legal effects on you or affect you in a similarly significant way. We use Google Analytics data as aggregate statistics.

§ 10. Cookies

1. Which cookies we use, what for and for how long is explained in the Cookie policy.

2. You can change your choice at any time with the "Cookie settings" link in the footer.

§ 11. Changes to this policy

When we change this policy, we update the date at the top of this page; previous versions are listed under "Previous versions". If a change affects your rights or adds new purposes, we also tell account holders by email.