Privacy Policy
Who is the Administrator of my personal data?
The administrator of your personal data, i.e. the entity deciding on the purposes and methods of their processing, is Jagoda Michalewska Mühlemattstrasse 4, 6004 Luzern, Schweiz
How can I contact you about personal data?
If you wish to contact us in relation to the processing of your personal data, you can do so:
- a) by e-mail at: info@jagodamichalewska.com
- b) in writing by traditional mail at: Jagoda Michalewska Mühlemattstrasse 4, 6004 Luzern, Schweiz
In what situations do you process my personal data?
We process your personal data always when:
- you use our services, in particular when you use our products,
- You visit our website.
- you take part in trainings, competitions and promotional campaigns organized by us,
- Sometimes we ask our clients to take part in market research. Any kind of personal information used for research will only be used with your consent, we may use the information we collect for testing, research, analysis and product development. This allows us to improve and enhance the safety and security of our services, develop new features and products,
- in certain cases, it may be necessary to use your data to resolve legal disputes, in the case of official proceedings, in matters related to compliance with the law,
- for this purpose, we may process certain personal data such as: name, surname, date of birth, data on the use of our services, if the claims arise from the way you use our services, other data necessary to prove the existence of the claim, including the extent of the damage suffered,
- We may also process your personal data if we send you a Newsletter (provided that you have previously consented to it),
- We also process your personal data when we send you marketing information about us or our partners Commercial (under provided that you have previously agreed to it).
- you contact us by phone or e-mail.
Do I have to provide you with my details?
Providing data is voluntary, however, some of your data may be necessary to use our services and provide them properly. In addition, some of your data is necessary for us to meet the requirements set out in the legal provisions referred to below. If you enter into a contract with us, the provision of data is necessary for the performance of this contract.
What data do you process?
We only process the data that is necessary to fulfill the purpose for which it was collected. Depending on the type of service provided, the scope of data may vary:
1) If you use our services or take part in events organized by us, we process your personal data such as – name and surname, contact details and payment details.]
2) If you enter into a contract with us, we process your personal data such as your name, contact details and payment details.
3) If you participate in competitions organized by us, we process m.in. your name and surname, telephone number, e-mail address and in some cases also your bank account number if you have won a cash prize.
4) If you use our electronic services (create an account on the Website), we process your data to enable you to log in to your User Account.
5) If you have agreed to receive the Newsletter and marketing information, we process, m.in, your name and email address.
6) If we issue you a sales document, we process such data as: your name and surname, company name, address of residence (registered office)
7) If we communicate with you electronically or with the use of telecommunications terminal equipment and automatic calling systems (after you have previously consented to such communication), then (depending on the form of communication) we process data such as: your name, telephone number, e-mail address.
For what purpose do you process my data?
We process your personal data in order to take action at your request (e.g. to respond to an inquiry or request), for the purpose necessary to conclude and perform a contract or provide a service, including handling any complaints, complaints or pursuing receivables resulting from concluded contracts.
The processing of some of your personal data is also necessary for us to comply with our obligations under the law, such as the obligation to store certain data for a specified period of time, to collect certain information for the purpose of verifying and identifying the user, or to transfer data to authorized authorities or entities, e.g. resulting from:
1) the Accounting Act of 29.09.1994,
2) Act of 11.03.2004 on tax on goods and services,
3) The Act of 16.11.2000 on Counteracting Money Laundering and Terrorist Financing,
If we decide to process your data for a purpose other than that we collected it, we will inform you and ask for your consent, if required by law.
Cookies Policy
To a limited extent, we may collect personal data automatically through cookies on our websites.
Cookies are small text files saved on the user’s computer or other mobile device when they use websites. These cookies are used, m.in, to use various functions provided on a website or to confirm that a given user has seen certain content from a given website. Among the cookies, there are those that are necessary for the operation of jagodamichalewska.com
- cookies with data entered by the User (session ID) for the duration of the session (user input cookies)
- authentication cookies used for services that require authentication for the duration of the session (authentication cookies)
- cookies used to ensure security, e.g. used to detect fraud in the field of authentication (user centric security cookies)
- Multimedia player session cookies (e.g. Flash player cookies) for the duration of the session (Multimedia Player session cookies)
- persistent cookies used to personalize the User’s interface for the duration of the session or a little longer (user interface customization cookies)
- cookies used to monitor traffic on the website, i.e. data analytics, including Google Analytics cookies (these are files used by Google to analyse the way the Website is used by the User, to create statistics and reports on the functioning of the Website). Google does not use the data collected to identify you, nor does it combine this information to enable identification.
By using the Website, the user agrees to place the cookies described above on their computer or other device. However, it is possible to control and manage the cookies installed. However, please note that deleting or blocking cookies may affect your use of the Website, as some areas of the Website may become inaccessible.
The Administrator reserves that after rejecting cookies, some functions offered by the Websites may not work properly, and even in some cases it is associated with complete prevention of the use of the selected product.
On what legal basis do you process my data?
We process Personal Data in accordance with applicable law, in particular in accordance with the provisions of the Regulation (GDPR) on personal data.
The legal basis for the processing of your data is:
- your consent, or
- to deal with your request or request, or
- conclusion and performance of the contract, or
- implementation legitimate interests of the Administrator or
- compliance by us Obligations applicable law.
How long will you process my data?
For individual cases, the data processing time is as follows:
1) if we process your data on the basis of a contract, the processing will last as long as the contract and the period of limitation of possible claims lasts,
2) if you have consented to the processing for a specific purpose, we will process your personal data until you withdraw your consent, after which we will delete it immediately,
3) data that we process on the basis of the legitimate interest of the data controller – the processing period lasts until the above-mentioned interest ceases to exist (e.g. the limitation period for civil law claims) or until the data subject objects to further such processing – in situations where such an objection is available in accordance with the law,
4) We will process data processed in order to comply with our obligations under applicable law for as long as it results from these regulations.
Who are the recipients of the data?
The recipients of the data are persons authorized by the Administrator to use the data as part of the performance of their professional duties, to whom the Administrator commissions the performance of such activities.
In some situations, we have the right to transfer your data if it is necessary for us to perform our services, fulfil our obligations and duly comply with applicable laws.
In performing some of the tasks (m.in. document destruction, data storage, accounting, HR and payroll services, legal services, marketing services, IT services), we use the help of external entities. In justified cases, they will also be received from us by the relevant authorities.
In such a case, we entrust personal data to subcontractors for the implementation of a specific purpose on our behalf (on the basis of the Data Processing Agreement), while still remaining the Administrator of your data and being responsible for their security.
We will only share data with three groups:
1) persons authorized by us, our employees and associates, who must have access to the data in order to properly perform their duties,
2) processing entities to whom we commission this task for a specific purpose (e.g. an accounting office, a law firm, an IT company),
3) other recipients of the data (e.g. law enforcement authorities, banks in the event of their request for information based on an appropriate legal basis in accordance with the provisions of applicable law).
Do you share my data and with whom?
We do not share your data with third parties except where:
1) you have given your voluntary consent to such sharing. Your consent may be revoked at any time, in the same simple way as it was given.
2) the provision is necessary for the performance of the contract or the provision of the service.
3) in special cases, your data may be made available to entities authorized to do so under generally applicable law (e.g. law enforcement authorities, statutory auditor for the purpose of auditing financial statements).
Each request for disclosure is thoroughly investigated by us, and the transfer of data takes place only if, as a result of this analysis, we determine that there is a valid and effective legal basis for requesting disclosure of your data to these entities.
Do we transfer personal data outside the Switzerland and European Union?
Our partners are mainly based in Switzerland and other countries of the European Economic Area (EEA). Some of our suppliers are based outside the EEA. In connection with the transfer of your data outside the EEA, we have made sure that our suppliers guarantee a high level of personal data protection. We minimize the scope of data sent outside the EEA. At the same time, in the case of SCCs being applied, we verify whether there is a risk of personal data breaches by these entities outside the EEA m.in. what their data security process looks like and whether the data provided may potentially be of interest to third countries.
How do you protect my data?
The Administrator makes every effort to ensure the means of physical, technical and organizational protection of personal data against their accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, use or access, in accordance with all applicable regulations.
What are my rights and how can I exercise them?
In In connection with the processing of your personal data, you have the following rights:
1) to information on the processing of your personal data, the so-called “information obligation” (in accordance with Articles 12 and 13 of the GDPR),
2) access to the content of their personal data (in accordance with Article 15 of the GDPR),
3) request the rectification of your personal data (in accordance with Article 16 of the GDPR), i.e. correction of incorrect data and completion of incomplete data,
4) request restriction of the processing of your personal data (in accordance with Article 18 of the GDPR),
5) the right to request the transfer of their personal data to another Administrator (in accordance with Article 20 of the GDPR),
6) object to the processing of data for reasons related to your particular situation (in accordance with Article 21(1) of the GDPR), however, this right is not absolute
– i.e. despite your objection, we will still be able to process your personal data if we demonstrate that there are important, legally justified grounds for the processing, overriding rights and freedoms or grounds for establishing, pursuing or defending claims,
7) object to the processing of your personal data carried out for the purposes of direct marketing, to the extent that the processing is related to such direct marketing. This objection does not require justification or conditions of effectiveness – in this case we will no longer be able to process your personal data for direct marketing purposes.
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
8) request the deletion of your personal data (in accordance with Article 17 of the GDPR) – the so-called “right to be forgotten”, you can exercise this right, for example, when:
- a) the Administrator processes your personal data unlawfully,
- b) you object to the processing of data for marketing purposes,
- c) the data must be deleted in order for the Administrator to comply with the obligation resulting from the provisions of law;
You can exercise the above rights by submitting to us (the Data Administrator) an appropriate statement:
- by e-mail at: info@jagodamichalewska.com
- in writing – by traditional mail at: Jagoda Michalewska Mühlemattstrasse 4, 6004 Luzern, Schweiz annotation: personal data
9) you also have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection (formerly GIODO).
How do we update the privacy policy?
We may update this policy from time to time. If we make material changes, we will notify you by email. To the extent permitted by applicable law, your use of our services following such notice constitutes your consent to updates to this policy.
We encourage you to review this policy periodically for the latest information on our privacy practices. We also provide you with previous versions of our privacy policy.
The policy is verified on an ongoing basis. The current version of the Policy has been adopted and is effective as of. Archived versions of this document can be found on our website.