1. THE CONTROLLER OF YOUR PERSONAL DATA
The controller for data collected through this Website is JOULE PROJECT S.R.L., a limited liability company registered in Romania, headquartered in Bucuresti, Sos. Virtutii nr.22, Camera1, BL.R10, sc.2, et5, ap55, sector 6, registered with the Trade Registry under no. J40/1227/2018, Sole Registration Code RO 38772059 (“JP”, the “Controller” or “we”).
2. TYPES OF INFORMATION COLLECTED, PURPOSE AND LEGAL BASIS
2.1. When you access our Website
The Website collects certain information automatically and stores it in log files. The information may include: the IP addresses or domain names of the computers utilized by you, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by you, the various time details per visit (e.g., the time spent on each page within the Website) and the details about the path followed within the Website with special reference to the sequence of pages visited, and other parameters about the device operating system.
We use this information to help us design our Website to better suit our users’ needs. We may also use your IP address to help diagnose problems with our server and to administer our Website, analyze trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences.
2.2. When you create an account on our Website
You have the possibility to create an account on our Website in order to better manage your purchases or your interaction with us.
For registration of an account, you must provide an email address and a password. After the registration, you will need to use your email address and password to sign into your account.
We process these data based on the contract concluded between us (acceptance of the Terms and Conditionsfollowed by the creation of an account is equivalent to concluding a contract). The data will be stored by us for the entire time your account is active and for an additional period of 30-days following deletion of the user account.
2.3. When you make a purchase on our Website
When visiting our Website, you have the possibility to purchase our jewelry and any other items presented in the Shop section of the Website. You can place an order as a guest or logged into a user account.
In order to place an order, you will need to provide us with your name, address for delivery, email address and phone number.
Once you have placed an order, you will receive by email a confirmation that your order was accepted, and your payment was processed.
Payment for orders made on our Website will be done via a payment processing service provider (Netopia). You will be directed to the Netopia’s platform and on this platform, you will find details on the terms and conditions for the use of the card payment functionality and the processing of related personal data carried out by the payment processor.
We process data related to your purchase based on the contract concluded between us (acceptance of the Terms and Conditions followed by the purchase of our products is equivalent to concluding a contract). The data are stored for 3 years, calculated as of the 1st of January of the following year, after each order placed. These data are necessary for our internal registries, for accounting and financial purposes and for monitoring our commercial activity and defending our rights in case of any claims.
2.4. When you contact us for any request
You may contact us through the details provided on the Website (by e-mail, telephone or by any other forms or means provided). We will process your contact details as well as any other information you choose to provide.
We process these personal data based on our legitimate interest, in order to answer your questions and requests. We will retain these data for a maximum period of 3 years calculated as of the 1st of January of the following year after the last interaction with you, or until your request to delete them (to the extent that the right to erasure applies).
2.5. When you subscribe to our newsletter
If you choose to subscribe to communications from us, we will keep you updated on our new collections, special offers or upcoming events. For this purpose, we will use the email address that you provided us. We process this data based on your consent (granted by subscribing to our newsletter). You can withdraw your consent at any time, by clicking the unsubscribe link/button at the end of our emails.
We will keep your email address in our database until you unsubscribe to our communications.
3. TRANSFERS OUTSIDE OF THE EUROPEAN ECONOMIC AREA
We generally process your personal data within the EEA and do not transfer or disclose your personal data to third parties outside the EEA. However, the data you provide to us may be disclosed to companies from countries outside the European Economic Area. In this case, we will take appropriate measures to ensure that your data is used in accordance with this Policy and that the necessary security measures are taken. Such measures include, as the case may be, the guarantee represented by an adequacy decision issued by the European Commission, or the conclusion of standard contractual clauses approved by the European Commission.
4. DISCLOSURE OF PERSONAL DATA
organizations which provide us relevant services for maintaining and developing this Website and its tools
other entities, where we or they have a prevailing legitimate interest in the disclosure or where we are required by law to make such a disclosure
other entities involved in our services, as communications agencies, couriers etc.
providers of information technology and support system, including email archiving, disaster recovery and cybersecurity and recovery services
other entities, such as public authorities and institutions, accountants, auditors, lawyers and other external professional consultants, when their activity requires knowledge of the data or when the law requires us to disclose them.
While not in our intention to disclose data in this way, we may disclose it:
where you request or agree to it
to persons who demonstrate they are acting on your behalf
where we are required to disclose your data in order to comply with a legal obligation or a request from the authorities
for the establishment, exercise or defense of legal claims.
Third parties with whom we choose to share your personal data in accordance with the above are limited (by law and contract) in their ability to use personal data strictly for the specific purposes identified by us. We will always ensure that any third party with whom we choose to share personal data are subject to data protection obligations. However, for the avoidance of doubt, this may not be applicable when disclosure is not our decision (for example, whether we need to provide personal data as a result of a mandatory request from a public authority).
Our website may contain links to other websites belonging to third parties. We do not control the privacy policies of these websites.
5. YOUR RIGHTS
5.1. Right to access
You have the right to obtain from us information related to the personal data we hold about you, including information related to the purpose of processing, the categories of personal data we process, the recipients or categories of recipients to whom data is disclosed, the period for which data is expected to be stored.
5.2. Right to withdraw the consent
Where you have given consent for the processing of your personal data, you may withdraw your consent at any moment.
5.3. Right to rectification
You have the right to obtain the rectification of your personal data, if inaccurate or incomplete.
5.4. Right to erasure
You have the right to request that we delete the personal data we process about you, in the following situations:
personal data are no longer necessary for the purposes for which they were collected or processed
you withdraw the consent you have given us for the processing of Personal Data and there is no other legal basis for the processing
you object to the processing of Personal Data and there are no legitimate reasons to prevail regarding the processing
personal data have been processed illegally or personal data must be deleted in order to comply with a legal obligation incumbent on us.
We must comply with this request, unless the data is necessary:
for exercising the right of freedom of expression and information
for compliance with a legal obligation that binds us
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes; or
for the establishment, exercise or defense of legal claims.
5.5. Right to restriction
You may obtain from us restriction of processing of your personal data, if you contest the accuracy of your personal data; the processing is unlawful, if you request the restriction of the processing instead of the erasure of your personal data; we do no longer need your personal data, but you request it for the establishment, exercise or defense of legal claims; or you object to the processing while we verify whether our grounded reasons override yours.
5.6. Right to object
You may object, at any time, to the processing of your personal data due to your particular situation, provided that the processing is not based on your consent, but on our legitimate interests or those of a third party. Your right to object may be exercised by sending a request in this regard to us, in writing. In the light of the above, you can address a request directly to our data protection officer.
In this case, we will no longer process your personal data, unless we can prove the legitimate grounds that bind us and an interest that prevails for processing or for the writting, exercise or defense of legal action. If you object to the processing, please indicate whether you also want your personal data to be deleted, otherwise they will be limited.
5.7. Right to lodge a complaint
If you have any complaints about the way in which we process your personal data, we prefer that you contact us directly, in order to address your problem. However, you may contact the data protection authority (for the Romanian Data Protection Authority, you may use the information posted on their website www.dataprotection.ro).
Time period: We will try to fulfil your request within one month, a period which may be extended due to specific reasons relating to the context of the situation or the complexity of your request. In all cases, if this period is extended, we will inform you about the term of extension and the reasons that led to it.
No identification: In some cases, we may not be able to identify your personal data due to the identifiers you provide in your request. In such cases, where we cannot identify you as a data subject, we are not able to comply with your request in accordance with this section, unless you provide additional information enabling your identification. We will inform you and give you the opportunity to provide such additional details.
Exercise your legal rights: In order to exercise your rights, please contact us in writing (including electronically) at the contact details provided below.
6. CONFIDENTIALITY AND SECURITY
The protection of your personal data is very important to us. We will take all necessary security measures to protect your data against unauthorized access to data or unauthorized modification, disclosure or destruction of data. This involves internal reviews of data collection, storage and processing practices and security measures, as well as physical security measures to protect against unauthorized access to the systems where we store personal data.
We have implemented technical and organizational security measures, in order to protect your personal data against unauthorized access to data, loss, destruction or accidental or intentional modification.
This Policy may be modified unilaterally by us at any time. To the extent that such a change occurs, it will be valid from the date of publication of the updated version on our Website.
8. CONTACT DETAILS
Please use the contact details below for any questions regarding the protection and processing of your personal data and for exercising your data subject rights:
When you visit our website accessible through the url address www.joule-project.com we collect information about you using cookies or other similar technologies. Please read this policy carefully to find out more about how we process your data and what rights you have.
What are Cookies?
Cookies are small files, consisting of letters and numbers, which will be stored on the computer, mobile terminal or other equipment of a user from which the Internet is accessed. Cookies allow us to offer you a better browsing experience and a faster response on our website. Any additional information, including that allowing us to serve you ads or analyze the audience of the website, shall only be stored upon your prior consent to be given by indicating your option in the cookie banner displayed when accessing our website or by any of the means specified below.
Cookies can be placed for different purposes. In general, the main categories of cookies, organized by purpose, are: necessary, audience (analytics), preferences and marketing.
The cookies necessary for the operation of a website may be placed without the prior consent of the users, according to the legislation. Disabling the necessary cookies can lead to malfunctions or the impossibility of using a certain website.
What type of cookies do we use?
Our website may use both cookies that do not need your consent to be downloaded onto your device and cookies that can be downloaded only upon your prior consent. Also, cookies are distinguished depending on the domain that places them, namely first party cookies (cookies that we place) and third party cookies (cookies placed by third parties).
Marketing Cookies that may include:
Profiling cookies for advertising purposes: These create user profiles for ads that correspond to the preferences expressed by users in web browsing.
Retargeting cookies: they are used to serve advertisements for products that are similar to those you are interested in (e.g. displaying pages about products you have visited on our website when browsing affiliate websites) or measuring the effectiveness of marketing campaigns (conducted by us or third parties).
Social media cookies: moreover, our website allows certain social networks (eg Facebook, Youtube) to install their own cookies through their plug-ins. These cookies are administered directly by third parties and may also be used to serve ads that are in line with your preferences when browsing other websites.
Analytical (Statistics) cookies: they record your choices and activity on our website to perform statistical analysis, for us or for third parties, by tracking your preferences and browsing behavior, and to serve personalized ads for you.
Analytical and marketing cookies are installed only taking into account your options. For this reason, when you access our website a special banner is displayed which will give you the opportunity to express your choice regarding the categories of cookies that our website installs on your devices (except those necessary, which are installed automatically when accessing the website).
After expressing your option, the cookie banner will disappear. We will track your option / consent (if applicable) through a specific technical cookie. As a consequence, the cookie banner will no longer be displayed if you visit our website again in the future. If you decide to delete some cookies with technical functionalities, please keep in mind that we will lose track of your options / consent and, as such, the cookie banner will be presented again on your next visit to our website.
List of cookies used:
The necessary cookies help to make a site usable by activating the basic functions, such as page navigation, login and access to secure areas on the site. The site cannot function properly without these cookies. These types of cookies do not require your consent and they are active automatically and continuously.
Marketing cookies are used to track users from one site to another. The intention is to display relevant and engaging ads for individual users. Our site does not contain advertisements for third parties, but when you visit our site and accept the personalization of advertising, the cookie set on the terminal allows us to display advertising for our products and campaigns, both on our sites and on third party sites (remarketing).
3. Analytical (Statistics)
Analytical (Statistics) cookies record your choices and activity on our website to perform a statistical analysis by tracking your preferences and your browsing behavior and to serve personalized ads for you.
Security and Confidentiality
Cookies use plain text formats. They are not made up of pieces of code so they cannot be executed or auto-run. Consequently, they cannot be duplicated or replicated on other networks to run or replicate again. Because they cannot perform these functions, they cannot be considered viruses.
In general, browsers have integrated privacy settings that provide different levels of acceptance of cookies, validity period and automatic removal after the user has visited a particular website.
Please note that disabling and refusing to receive cookies may make certain websites impractical or difficult to visit and use. Also, the refusal to accept cookies does not mean that you will no longer receive / see online advertising, but only that the advertising will not be personalized according to your preferences.
All browsers should be able to change cookie settings. These settings are usually found in the "options" or "preferences" menu of your browser. To understand these settings, the following links may be useful, otherwise you can use the "help" option of the browser for more details.