PRIVACY POLICY

PRIVACY POLICY OF THE ONLINE STORE "CAMPS"

§ 1 General provisions

1.  What is the purpose of the Privacy Policy of the Camps Online Store?
2. Who is the controller of personal data?
3. What is the purpose of processing personal data?
4. How is personal data processed?
5. Who can be the recipient of personal data and are they transferred outside the EEA (European Economic Area)?
6. What are the rights of those whose personal data is processed?
7. How are personal data secured ?
8. How long are personal data processed?
9. Is it possible to change the privacy policy ?
10. Since when has the privacy policy been in effect?

1 What is the purpose of the Camps Online Store Privacy Policy?

This privacy policy (hereinafter referred to as the "Privacy Policy") contains information regarding the processing of personal data collected in connection with the use of the Camps Online Store maintained on the website. https://obozy.proskos.com by JUMBALL Sp. z o.o. with its registered office in Białystok, 71 Żurawia Street, 15-540 Białystok, KRS: 0000879490, NIP: 9662146411, REGON: 387972708. The Privacy Policy is for informational purposes and does not impose obligations on the Customers. The processing of personal data is carried out in accordance with the Regulation of April 27, 2016 on the protection of natural persons in relation to the processing of personal data and on the free flow of such data and the repeal of Directive 95/46/EC. ("RODO") and other current data protection laws.

2 Who is the controller of personal data? §

The administrator of the customer's personal data is Jumball Spółka z ograniczoną odpowiedzialnością with its seat in Białystok (15-540), 71 Żurawia Street (hereinafter: "Organizer"), entered in the Register of Entrepreneurs of the National Court Register kept by the District Court Poznań Nowe Miasto, VIII Economic Department of the National Court Register under KRS number: 0000879490, having REGON: 387972708, NIP: 9662146411 ("Administrator").

The Administrator can be contacted at the following e-mail address: [email protected] or at the telephone number 668675147 from Monday to Friday from 9 a.m. to 3 p.m. (charge as for a standard call according to the price list/tariff of the relevant operator).

3. what is the purpose of processing personal data?

The Customer's personal data may be processed for various purposes depending on which functionalities of the Online Store the Customer will use. For example, they may be processed for the purpose of concluding and fulfilling concluded sales or service contracts, for communication, analytical marketing or statistical purposes, as well as other relevant obligations of the Administrator, imposed by generally applicable laws.

Personal data may also be processed as information about the Customer's activity while browsing the Website.

The scope of services offered by Jumball sp. z o.o. z/s in Bialystok and the functionality of the Online Store is defined in the Terms of Service available on the Website. 

Personal data enables identification of the Customer, and consequently, if personal data is required, the Customer has the right to refuse to provide such data. Refusal to provide personal data in such a case may result in the Customer's inability to use a particular service for which such data is required.  

4 How is personal data processed?

Personal data is processed in the following sample functionalities:

•  WEBSHOP ACCOUNT

When registering an Account with the Online Store, the Customer provides personal information, in particular, name, surname, e-mail address, telephone number, address - street number, house number, apartment number, postal code, city, country, delivery address, business or registered office address if different from the delivery address, or identity document number, PESEL number if required, bank account number, NIP number or company name for non-consumers. 

Providing personal data is voluntary, but necessary and required to complete the registration of an Account in the Online Store. 

The processing of the above data is carried out for the purposes:

1. Maintaining an Account, placing orders without the need to fill out forms each time, accessing order history, as well as other services offered by the Online Store based on Article 6(1)(b) RODO ( the necessary legitimate interest of the Administrator).
2. marketing or statistical activities undertaken by the Administrator, presentation of advertisements and discount codes, promotions tailored to the customer based on profiling of both the Administrator and the Administrator's partners and so-called third parties - based on Article 6(1)(f) RODO ( the necessary legitimate interest of the Administrator).
3. to protect and assert claims that may arise in connection with the use of the Account functionality, conclusion of contracts, as well as for other purposes that are necessary due to the legitimate interest of the Administrator or a third party based on Article 6(1)(f) of the RODO (necessary legitimate interest of the Administrator). 

The personal data provided is processed for the duration of the Customer's possession of the Account, however, if the Customer is not active after 3 years from the last activity, the data may be deleted.

The personal data provided, in the scope of marketing activities, are stored until the Customer objects, except when the Administrator is required by law to store and process them for a longer period or the Administrator's legitimate interests, or in case of possible claims for the period of limitation of these claims indicated by law. 

The indicated longer retention period for personal data applies in such cases. 

• ORDER

When placing an order at the Online Store, without registering an Account, as well as with its registration, the Customer provides personal data, in particular name, surname, e-mail address, telephone number, address - street number, house number, apartment number, postal code, city, country, delivery address, business or registered office address if different from the delivery address, or identity document number, PESEL number if required, bank account number, NIP number or company name for Customers who are not Consumers. 

Provision of personal data is voluntary, but necessary and required to complete the order.

The processing of the above data is carried out for the purposes:

1. execution of the order and performance of the concluded contract - in particular, confirmation of its submission of the shipment of goods and contact with the Customer - based on Article 6(1)(b) of the RODO (the necessity of processing to perform the contract connecting the Customer with Jumball sp. z o.o. ).
2. marketing or statistical activities undertaken by the Administrator, presentation of advertisements and discount codes, promotions tailored to the customer based on profiling of both the Administrator and the Administrator's partners and so-called third parties - based on Article 6(1)(f) RODO ( the necessary legitimate interest of the Administrator).
3. Protection and enforcement of claims that may arise in connection with the use of the
   from the functionality of the Account, conclusion of contracts, and for other purposes that are necessary due to the legitimate interest of the Administrator or a third party based on Article 6(1)(f) RODO.(necessary legitimate interest of the Administrator).
4. Issuing and storing invoices and accounting documents, as well as processing complaints and returns within the time and form stipulated by law - legal basis: Article 6(1)(c) RODO (necessary to fulfill a legal obligation incumbent on Jumball sp. z o.o.).
5. research by the Administrator of satisfaction with purchases made, sending surveys for this purpose when placing an order to an e-mail address as to the quality of service - legal basis Article 6(1)(f) RODO (necessary legitimate interest of the Administrator).

In order to execute the order, personal data will be processed for the period of execution of the contract, as well as for the time required by law (tax, financial, accounting, among others). 

The personal data provided, in the scope of marketing activities, are stored until the Customer objects, except when the Administrator is required by law to store and process them for a longer period or the Administrator's legitimate interests, or in case of possible claims for the period of limitation of these claims indicated by law. 

A longer retention period for personal data applies in such cases.

• CONTACT FORM 

Personal data provided by the Customer via the Contact Form may be stored and processed for contact purposes and for:

1. to respond to the Client's messages before or during the execution of the contract - based on Article 6(1)(f) of the RODO (legitimate interest of the Administrator) and Article 6(1)(b) of the RODO (necessity of processing to perform the contract connecting the Client with Jumball sp. z o.o.).
2. marketing or statistical activities undertaken by the Administrator, presentation of advertisements and discount codes, promotions tailored to the customer based on profiling of both the Administrator and the Administrator's partners and so-called third parties - based on Article 6(1)(f) RODO (necessary legitimate interest of the Administrator)
3. Protection and enforcement of claims that may arise in connection with the use of the
   with the functionality of the Account, conclusion of contracts, as well as for other purposes that are necessary due to the legitimate interest of the Administrator or a third party based on Article 6(1)(f) of the RODO ( the necessary legitimate interest of the Administrator)

Provision of personal data is voluntary, but necessary and required to communicate with the customer.

Personal data will be processed and stored until the termination of communication with the Customer Personal data provided, in the scope of marketing activities, are stored until the Customer objects, except when the Administrator is required by law to store and process them for a longer period or the Administrator's legitimate interests, or in case of possible claims for the period of limitation of these claims indicated by law. 

A longer retention period for personal data applies in such cases. 

•  ADVERTISEMENTS

Personal data provided by the Customer in connection with the submission of a complaint, such as, in particular, name, surname, home address, delivery address, registration numbers, bank account number, telephone number, are stored and processed for contact purposes and further communication, and are or may also be processed for the following purposes:

1. processing, bookkeeping and settlement of processed complaints - legal basis: Article 6(1)(c) of the DPA ( necessity due to the law).
2. Establishing, defending and asserting claims that may arise within the framework of the relationship between the Customer and the Administrator and other purposes that are necessary for the realization of the legitimate interests of the Administrator or a third party - legal basis: Article 6(1)(f) RODO (necessary legitimate interests of the Administrator)
3. Exercise of rights and obligations under the concluded sales contract (Article 6(1)(b) RODO (necessity of processing to perform the contract linking the Customer with Jumball sp. z o.o.).

Provision of personal data is voluntary, but it is necessary and required to communicate with the customer, as well as to process a complaint. Personal data will be processed until the complaint is resolved, or if the law so provides, or the period of limitation of claims is indicated by a legal provision for a longer period to file a complaint, specified by law, in particular the Civil Code, or for other purposes arising from the realization of the legitimate interests of the Administrator. The longer period for storing personal data in such cases is applicable, not more than 5 years counting from the end of the calendar year in which the sales contract was concluded. 

• NEWSLETTER

Personal data provided in connection with signing up for the Newsletter on the form, such as e-mail address, telephone number, thereby expressing consent and desire to receive the Newsletter are processed for the following purposes:

1. Performance of the contract for Newsletter services - legal basis: Article 6(1)(b) RODO(necessity of processing to perform the contract linking the Customer with Jumball sp. z o.o.).
2. marketing, analytical or statistical activities undertaken by the Administrator, presentation of advertisements and discount codes, promotions tailored to the Customer based on profiling (e.g. the Customer's purchase history or behavior on the website) of both the Administrator and the Administrator's partners and so-called third parties - based on Article 6(1)(f) RODO (the Administrator's legitimate interest).
3.  Protection and enforcement of claims that may arise in connection with the use of the
   from the functionality of the Account, conclusion of contracts, and for other purposes that are necessary due to the legitimate interest of the Administrator or a third party based on Article 6(1)(f) RODO (legitimate interest of the Administrator).

Provision of personal data is voluntary, but necessary and required to subscribe to the Newsletter. Personal data will be processed until the use of the Newsletter, or if the law so provides, or the period of limitation of claims is indicated by a legal provision for a longer period in connection with the provision of services, specified by law, in particular the Civil Code, or for other purposes arising from the implementation of the legitimate interests of the Administrator. The longer storage period for personal data applies in such cases. Data will be archived for a period of 2 years in order to demonstrate the Customer's consent 

The Newsletter customer may cancel the service at any time and withdraw consent to the processing of personal data for this purpose, which does not affect the processing of data prior to the withdrawal of consent.

• SOCIAL MEDIA 

Personal Data that the Customer leaves by visiting Jumball sp. z o.o.'s social media profiles, such as, in particular, FACEBOOK or INSTAGRAM (including but not limited to comments, likes, web IDs, email addresses, instant messaging) is or may be processed for the following purposes:

1. Responding to questions, comments, building relationships with customers and visitors to social media profiles - based on Article 6(1)(f) of the DPA (legitimate interest of the Administrator),
2. marketing or statistical activities undertaken by the Administrator, presentation of advertisements and discount codes, promotions tailored to the customer based on profiling of both the Administrator and the Administrator's partners as well as so-called third parties activities on the profile, effective running of the profile, by informing about promotion of events, activities of services and goods) by the Administrator or the Administrator's partners as well as so-called third parties - based on Article 6(1)(f) of the RODO i.e. (the Administrator's legitimate interest) 
3. Protection and enforcement of claims that may arise in connection with the use of the
   from social profiles, as well as for other purposes that are necessary due to the legitimate interest of the Administrator or a third party based on Article 6(1)(f) of the RODO (legitimate interest of the Administrator)

Providing Personal Data is voluntary, but necessary to fully use the functionality of Jumball sp. z o.o.'s social media profiles.

In connection with the use of Jumball sp. z o.o.'s social media profiles, other operators also process visitors' personal data for their own purposes and purposes, which are not covered by this Policy, are contained in the privacy policies of these operators.

At any time, visitors to a social profile can delete their comments, as well as unsubscribe from the profiles, as well as from the social media account. 

Personal data will be processed until the use of social profiles of Jumball sp. z o.o. and, if the law so provides or the period of limitation of claims is indicated by a legal provision for a longer period in connection with the provision of services, as defined by law, in particular the Civil Code, or for other purposes arising from the implementation of the legitimate interests of the Administrator. The longer storage period for personal data applies in such cases.

5. who can be the recipient of personal data and are they transferred outside the EEA (European Economic Area)?

Personal data collected and processed by the Administrator may be transferred to external entities, partners, including, in particular, suppliers, freight forwarders, IT support entities, legal service providers, marketing agencies, couriers, ICT service providers, carriers or intermediaries who carry out shipments of Orders, entities that handle electronic payments or offer to conclude a consumer credit agreement, companies that service software, etc., and other entities that cooperate with or provide services to the Administrator. These entities shall process the transferred data only at the Administrator's direction to the extent agreed upon with the Administrator, on the basis of a personal data processing agreement, with the consent of the person whose data is being processed, or when such transfer results from the provisions of applicable law. 

When undertaking advertising activities, the Administrator uses the services of third parties that use cookies or similar technologies on the Online Store and cookies.

Personal data may be transferred outside the EEA to the Administrator's partners, in which case, however, this is done on the basis of a decision of the European Commission finding an adequate level of protection for personal data (Article 45 RODO) or standard contractual clauses adopted by the European Commission, or binding corporate rules approved by the competent supervisory authority (Article 46 RODO). In the case of transfers to countries outside the EEA, Jumball sp. z o.o. will oblige partners to ensure an adequate level of protection by taking additional safeguards for the security of personal data. 

Within the framework of the powers and rights vested in them, state authorities such as, in particular, the Police, the Prosecutor's Office, the Courts, the Bailiffs or the President of the OCCP, within the limits of the law and on the basis of relevant regulations, have the right to demand from the Administrator access to and transfer of personal data to them. 

6 What are the rights of those whose personal data are processed?

The person whose personal data is processed has the following rights:

1. The right of access to his personal datah (including, e.g., receiving information on which personal data are processed or copies thereof, information on the purpose of processing, recipients of personal data, profiling).
2. Right to request rectification and restriction of processing If, for example, personal data are incorrect, their processing is not lawful. Then the Administrator shall verify them and limit processing for the verification period of up to one month. 
3. The right to withdraw consent to the Administrator  at any, time for the processing of personal data, which does not affect their processing done legally before the withdrawal of consent,
4. Right to portability of personal data, which he or she has provided to the Administrator and which are processed by automated means and the processing is carried out on the basis of consent or on the basis of a contract, e.g. to another administrator, if technically possible. 
5. Right to object against the processing of its personal data carried out for the purpose of pursuing the legitimate interests of the Controller or a third party, if there are no other valid legitimate grounds for processing overriding the interests of the Client. If personal data is processed for direct marketing purposes, the Customer has the right to object at any time to the processing of personal data concerning him/her for such marketing, including profiling, to the extent that the processing is related to such direct marketing,
6. The right to file a complaint with the President of the Office for Personal Data Protectionif the processing of data is carried out unlawfully . Information about the rules for filing a complaint is contained at https://uodo.gov.pl/pl/p/skargi.
7. The right to request immediate deletion of personal data concerning the person to whom it pertains. Having regard to the law and the legitimate interest of the Administrator, this right may be subject to limitations. 

7. How are personal data secured ?

The Administrator shall apply technical and organizational measures to ensure the protection of the processing of personal data in accordance with the risks, and in particular shall protect such data from being disclosed to unauthorized persons, from being processed in violation of applicable laws, and from being altered, damaged or lost, and from being altered, lost, damaged or destroyed. 

An example of a technical measure to prevent alteration, obtaining by unauthorized persons of personal data sent electronically is encryption of data used for authorization of the Customer using the Online Store or access to the Customer's Account after providing only an individual Login and Password. 

Links to other websites

The Online Store may contain links to other websites. The Administrator encourages you to read the regulations and privacy policies applicable to other websites. This Policy applies only to the Administrator's designated activities.

8. how long are personal data processed?

Pursuant to Article 5(1)(e) of the RODO, personal data must be kept in a form that permits identification of the data subject for no longer than is necessary for the purposes for which the data are processed; personal data may be kept for longer periods.

1. In the case of collection of personal data for the purpose of fulfilling an order or concluding a Contract (Article 6(1)(b) RODO) - personal data are kept for the duration of the contract or until the end of the period for asserting possible claims, that is, as a rule, the limitation periods for claims, which are calculated from the end of the calendar year in which the event (conclusion of the contract) giving rise to the claim arose, 
2.  In the case of collection of personal data for the purpose of fulfilling legal obligations (Article 6(1)(c) of the DPA for the period of performance of obligations and tasks under the various laws.

As a rule, this is 5 years from the end of the fiscal year in which the Administrator obtained the customer's personal data. 

1. In the case of collection of personal data for purposes arising from the legitimate legitimate interests of the Controller (Article 6(1)(f ) RODO, the data will be kept as long as the data subject carries out activities or undertakes activities that overlap with the scope of the Controller's activities, or until the Client raises an objection. 
2. In the case of collection of personal data on the basis of the Client's consent (Article 6(1)(a) RODO), the data will be stored until the consent is withdrawn or further processing does not fulfill the purpose for the Administrator, or for the data subject. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

9. is it possible to change the Privacy Policy?

The Administrator may change the Policy in the future. Each time it will post a notice of such a change within the Online Store website and in the Application. With each change, the new version of the Policy will appear with a new date.

10. when has the privacy policy been in effect?

This version of the Policy is effective as of 04/03/2024.