- About us and how to get in touch with us
The website www.jenniferjuliette.com is operated by Benefio, s.r.o., Company ID: 281 62 463, with its registered office at 5. Kvetna 2086, Ricany, 25101, Czech Republic (hereinafter referred to as “Jennifer Juliette”). As defined in personal data protection regulations in force, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”), Jennifer Juliette is the controller of your personal data. The personal data controller is the entity which determines the purposes and means of the processing, that is to say, the entity which decides why and how your personal data is processed.
We provide our contact details below in case you do not find answers to your questions in this document, or should you not understand any of the information given.
Postal address: 5. Kvetna 2086, Ricany, 251 01, Czech Republic
- What personal data do we process?
At Jennifer Juliette, we process the following categories of personal data:
Identification details, particularly including first name, surname, date of birth and gender (these are optional);
Contact details, including email address, invoicing address, delivery address, telephone number;
Financial details, particularly including information about your credit/debit card and bank account;
Details on purchases, particularly including details on the purchase and processing of orders (e.g. cart number, order number, amount paid, currency, any discounts applied, delivery method, number of items, product number, etc.); records of payments we have received from you (and any payments you have received from us) and details of other products you have received from us, and communication in regard to your orders;
Technical details, particularly including details on the devices you use to access our website, your IP address, browser type and version, time zone setting and location, and information on the operating system used;
Details on preferences, particularly including information on your purchases, orders, interests in regard to our products, and also any feedback you have given us.
Beyond the above details, we also collect, use and share aggregate data such as statistics and demographic information. Aggregate data can be derived from your personal details, but it is not considered personal details because you cannot be identified from it. Aggregate data helps us, e.g., to determine the percentage of users accessing a particular function on our website.
- How we collect your personal data
It is primarily from you that we acquire your personal data, when you enter personal details on our website (e.g. when you fill in a form) or when you communicate with us either electronically, by post, by telephone or in any other way. This particularly applies to cases where
- you make a purchase on our website;
- you register to receive our newsletter;
- you contact us with a query or to report a problem (e.g. by telephone or email).
We acquire some data on you automatically. This applies particularly to technical information on your device, information on what way you use our website (“data on the use of our website”) and data when you do not complete certain activities on our website (e.g. when you leave a product in your cart or do not complete your order). We acquire this data through cookie files, server logs and other similar technology.
In some cases, a third party provides your personal data. This mainly applies to technical data from analytical tool providers (e.g. Google), contact and financial details and information on the history of purchases you have made from payment and delivery service providers.
- How we process your personal data
We process your personal data only to the extent necessary for a particular purpose and for a period necessary to fulfil this purpose. As a personal data controller, we must have a legal basis for every processing purpose. At Jennifer Juliette, we process personal data when:
- you give us your consent to do so;
- it is necessary for the performance of a contract (e.g. so that we can process your order and send you the goods you have ordered, and also so we can assist you through our customer case service);
- we have a legitimate interest in processing the data for a specific purpose;
- law requires us to process the personal data for a particular purpose.
- The purposes we process your personal data for
- The period of time we process and store your personal data for
We only process and store your personal data for as long as necessary for the purposes detailed above, or for as long as to meet legal requirements. Once this period of time is over, we delete the personal data or render it anonymous.
If we process your personal data on the basis of legitimate interest, processing lasts for as long as we still have the legitimate interest. You can object at any time to the processing of your personal data when it is taking place on the legal basis of legitimate interest. If you submit an objection to the processing of your personal data for marketing purposes (which also includes profiling), we will stop processing your personal data for these purposes.
- How we share your data
We share your personal data with the following recipients:
- with our suppliers, mainly delivery companies, IT suppliers, hosting and marketing services providers, provides of statistical and database software tools, and also with other entities which provide services to us;
Under certain circumstances, we may be legally obliged to share your personal data with third persons (e.g. with law enforcement authorities, etc.). This is our legal duty.
- The way we process your personal data and how it is secured
Personal data processing is undertaken manually and automatically within electronic information systems, in electronic or paper form. Your personal data is processed mainly by our own employees and processors. We have undertaken appropriate security measures (in particular technical and organisational measures) in order to protect your personal data from any kind of accidental loss, destruction, misuse, damage and unauthorised or illegal access. We have entered into appropriate agreements with processors who process your personal data for us as controllers such that due protection of your personal data is guaranteed. Employees and processors who are involved in processing your personal data are bound to keep it confidential.
- What are your rights with regard to personal data protection?
At any time while your personal data is being processed, you can exercise the following rights:
- Right to access. You have the right to receive confirmation of whether and what personal data about you we process, including the right to receive a copy of the personal data we process.
- Right to rectification and completion. If you ascertain that the personal data we process is inaccurate or incomplete, you have the right to ask for it to be rectified and updated.
- Right to erasure. In some cases, you have the right to contact us and ask for the erasure of your personal data which we process. Please bear in mind that we cannot erase your personal data if its processing is necessary.
- Right to restriction of processing. In some cases, such as when you challenge the accuracy, legality or our need to process your personal data, you have the right to ask us to restrict the processing of your personal data. If we comply with your request, we will restrict the processing of your personal data to the minimum necessary (and in general we will no longer actively process your data). We place a record in our systems that there are restrictions on your data. If these restrictions are cancelled and we intend to continue to process your personal data, we will inform you in advance.
- Right to portability. You have the right to ask us to transmit your personal data which you have provided to us and which we process (in a commonly used and machine readable format) to a third party (another data controller) which you state in your request. Please bear in mind that you can only exercise this right if we process your personal data on the basis of your consent, or in order to fulfil an agreement and the processing is also automated.
- Right to lodge a complaint with the supervisory authority. If you think that there has been a breach of our obligations given by the law on the protection of personal data, you have the right to lodge a complaint with the Czech Office for Personal Data Protection, or another authority within a European Union member state which is entrusted with supervision over obligations in personal data protection being kept.
- Right to object to processing of personal data
Besides the rights detailed above, you also have the right to object to the processing of your personal data. This objection can be lodged when the legal basis for processing your personal data is the legitimate interest pursued by the controller or third party (or when the legal basis for processing is to carry out a task undertaken in the public interest or in the exercise of official authority).
You can also lodge an objection when we process your data for direct marketing purposes (on the legal basis of legitimate interest), including profiling with the objective of finding the most appropriate and attractive offers for you.
If you lodge an objection against processing, we will no longer process your personal data until such time as we can demonstrate compelling reasons for such processing which override your personal interests or rights and freedoms. If you lodge an objection against processing for the purposes of direct marketing, we will no longer process your personal data.
- How you can exercise your rights
If you decide to exercise any of the above detailed rights towards us, please inform us by writing to the e-mail or postal address given above. Please bear in mind that if you are exercising your right, we need to be sure of your identity. As such, in some cases we may ask you to prove your identity.
In the event you exercise any of the above detailed rights, we will inform you in writing without undue delay of how we are responding to your request.
- Changes to information on personal data processing
We may amend or update this information on personal data processing in future. If we make any such changes, one way to ascertain this fact is that the date of the latest revision is given below. If we make changes which may have a significant impact on your privacy, we will also inform you as such in another appropriate manner (e.g. by email or by a message placed within our Services environment). We recommend you read this information on personal data processing regularly to remain informed about how we process your personal data and how you can protect your privacy.
Latest update effective May 14th 2021