Privacybeleid

This Privacy & Cookie Statement describes how we use cookies and similar technologies when you use and visit our website (www.jimmyjoy.com). This statement also describes how we deal with your personal data when you use the website, place an order, register an account and/or join the forum.

When you agree with this Privacy & Cookie Statement, you give your consent to the processing of your e-mail address for marketing purposes (article 3) and to the use of cookies and similar technologies (article 4).
This Privacy & Cookie Statement applies from [date] and replaces all information provided by Jimmy Joy regarding the use of your personal data.
Identity and contact details of Jimmy Joy
Jimmy Joy is the party who, as a controller, is responsible for your personal data which are processed via the website www.jimmyjoy.com.
Jimmy Joy is a tradename of itizi B.V., a company organized under Dutch law with its principal place of business in Amsterdam at the (1013 BE) Archangelkade 17D, registered with the Dutch Chamber of Commerce under number 65679083.
If you have any questions regarding this Privacy & Cookie Statement, you can contact us by using the information available on our website: https://www.jimmyjoy.com/contact.
Purposes of the processing and legal basis for the processing
We use your personal data for the following purposes (and based on the following legal basis):
In order to facilitate the placement of your order (legal basis: performance of a contract to you are or will be a party);
For us to comply with legal data retention obligations imposed by Dutch laws, e.g. tax legislation (legal basis: compliance with a legal obligation to which we are subject);
In order to measure your use of our website for marketing purposes by using cookies or similar technologies (legal basis: your consent);
In order to measure your use of our website for the purposes of enhancing the website’s functioning aimed at your benefit (legal basis: our legitimate interest to process these data).

Personal data
Order information
Your provision of the order information is necessary to conclude an agreement with Jimmy Joy, as clarified in the following articles.
If you want to place an order, it is necessary that we receive your invoice and address information. We need this to perform the contract which we (will) have with you. These data are obligatory to provide. If you do not provide these data, then you cannot place an order with Jimmy Joy. These obligatory data are the following:

E-mail address: your e-mail address will be used to send a conformation link, which is needed in order to conform your identity and to keep in touch with each other;
Name and surname: to properly deliver your purchased order;
Place of residence, address and country: to ensure that the order will be delivered at the correct location;
Telephone number: to allow the delivery service to contact you. This is mandatory information regarding deliveries in The Netherlands. With regard to international deliveries this is optional information.

You can indicate if the order needs to be delivered at a company, where applicable. In that case you provide us with the company name.
Account information (orders and forum participation)
You can choose to place an order based on the account information which you have provided us as part of the account registration procedure on the website of Jimmy Joy. This account information will also allow you to join the forum.
If you choose to register an account, then you need to provide us with a nickname in addition to the order information. You do not have use your real name as your nickname. This can be a fictional name. The nickname will be used to address you on the forum and to allow other forum participants to have a conversation with you.
Please use a strong password containing a minimum of six characters in order to protect your account. Learn more about creating strong passwords here:
https://ssd.eff.org/en/module/creating-strong-passwords.
Your account information, such as your name and nickname, can also be used to properly address you via the website.

Consent for retargeting (marketing purposes)
E-mail address
We can use your e-mail address for retargeting via websites other than those maintained by Jimmy Joy, such as Facebook. Retargeting makes it possible to show advertisements about e.g. products and services which have been seen by the website’s visitor. This makes it possible to infer that the visitor may be a potential buyer of a product he or she saw online and therefore the visitor will, for example, see a certain advertisement.
You provide your consent for these processing activities by checking the box stating that you agree with this Privacy & Cookie Statement and consequently clicked on “agree” (or similar wording).

Withdrawal of consent
If the processing of personal data is based on your consent, such as consent for retargeting, then you have the right to withdraw your consent at any time. The withdrawal of your consent can be done easily by sending us an e-mail: love@jimmyjoy.com. If you send such e-mail message, then you should use the same e-mail address which you have used to place your order and/or you used to register your account.
Younger than 16?
Attention: if you are younger than 16 years, then any consent in relation to your personal data processing must be given by your parent(s), parental guardian or legal representative. The parent, guardian or representative can withdraw the consent at any time by sending us an e-mail.

Use of cookies and similar technologies
General
Our website uses cookies or similar technologies such as javascripts, flash cookies, HTML5-local storage and web beacons, used to store and/or access your device which you use to visit our website, such as your computer.
We use the following types of cookies or similar technologies. Cookies that ensure that the website properly functions (functional cookies), cookies that allow us to measure the usage of our website (analytic cookies), cookies that enable content sharing via social media such as Facebook (social media cookies), cookies that allow the provision of advertisements, e.g. tailored to your online surfing behaviour (advertisement cookies) and other cookies that, if you choose to accept them, allow the monitoring of your online surfing behaviour by social media, advertisement networks or other networks.
Please consider the following. Advertisement cookies can be used for retargeting purposes. By accepting these cookies it is possible that your online surfing behaviour will be monitored by other websites, such as advertisement networks or Facebook.
Also consider that social media networks such as Facebook conduct profiling and tracking activities of website visitors. By accepting social media cookies you accept that your online surfing behaviour can be monitored by these networks.
Your consent for the use of cookies
By accepting this Privacy & Cookie Statement, you give your consent for the use of cookies and/or similar technologies, as described in detail below:
Name of cookie (or similar technology)
Company name/ domain and corresponding privacy policy

Purpose, value and retention period of the cookie (or similar technology)
Analytic cookies
Cookies starting with _hj
and/or
hotjar-57168.js
modules-14db5ab5e0c940b032d5b5500ffa4f5d.js

More information:
https://www.hotjar.com/cookies

Hotjar Ltd. / hotjar.com / static.hotjar.com / vars.hotjar.com

Privacy- and cookie policy of Hotjar:
https://www.hotjar.com/cookies
https://www.hotjar.com/privacy

Decline the use of cookies by Hotjar:
https://www.hotjar.com/opt-out
Purpose: to measure the use of the website by the visitor

Retention period: 1 year
Sdk.js (script)
Service.js (script)
Services.js (script)

More information:
https://apps.ghostery.com/and/apps/sumome
Sumo Group Inc. / sumome.com / sumo.com / sumome-140a.kxcdn.com / load.sumome.com

Privacy policy of Sumo:
https://help.sumo.com/hc/and-us/articles/218958727-Privacy-Policy
Purpose: to measure the click behavior of the website visitor
analytics.js
ga-audiences
collect

Google Analytics, Google Inc. / google-analytics.com

Beveiligings- and privacyprincipes of Google: https://support.google.com/analytics/answer/6004245?hl=nl

Decline Google Analytics using the browser-add-on:
https://tools.google.com/dlpage/gaoptout
Purpose: to register statistics about the visits to the website.

Retention period: max. 2 year
Social media
Fr (cookie)
and
sdk.js (script)

More information:
http://www.ghostery.com/apps/facebook_connect
Facebook Connect, Facebook Inc. / facebook.net / connect.facebook.net / staticxx.facebook.com / facebook.com

Privacy policy of Facebook:
http://www.facebook.com/about/privacy/
Purpose: to allow the Facebook social media widget to function, e.g. for Facebook likes

Retention period: max. 2 years; fr-cookie lasts 3 months.
Advertisement cookies
fbevents.js (script)

More information:
https://apps.ghostery.com/and/apps/facebook_pixel

Facebook Pixel, Facebook Inc. / facebook.com / connect.facebook.net

Privacy policy of Facebook:
http://www.facebook.com/about/privacy/
Purpose: to measure the action performed by visitors of the website for retargeting purposes, e.g. to provide advertisements on Facebook.
anj, sess, icu and uuid2

and

seg

More information:
https://apps.ghostery.com/and/apps/appnexus

AppNexus Inc. / adnxs.com / secure.adnxs.com

Decline the use of cookies by AppNexus:
http://www.appnexus.com/and/company/platform-privacy-policy#choices
Purpose: targeting(anj), check if browser allows cookies (sess), frequency cap (icu), targeting and outcome measurements (uuid2)

Retention period: anj (3 months), sess (1 day), icu (3 months) and uuid2 (3 months)
1714726c817af50457d810aae9d27a2e.js (script)

More information:
https://apps.ghostery.com/and/apps/adcrowd and https://www.adcrowd.com/and/retargeting

AdCrowd BV / adcrowd.com / pixel.adcrowd.com

Purpose: to measure the use of the website for the purpose of retargeting or retargeting via banners on the website and advertisements on Facebook. This allows us to show you advertisements that are tailor made to your interestst.
IDE (cookie)
collect
Pixel (script)

ad_status.js
More information:
https://support.google.com/adsense/
answer/2839090?hl=nl

Doubleclick by Google, Google Inc. / doubleclickbygoogle.com /.doubleclick.net

Decline the use of cookies by Doubleclick:
http://www.google.com/ads/preferences
Purpose: to offer tailor made advertisements on third party websites (retargeting)
Retention period: max. 2 year.
Other cookies
Pixel
Widget.js (script)

More information:
https://apps.ghostery.com/and/apps/yotpo
Yotpo, Ltd. / yotpo.com / p.yotpo.com / staticw2.yotpo.com / w2.yotpo.com / api.yotpo.com

Privacy policy of Yotpo:
https://www.yotpo.com/privacy-policy/
Purpose: to allow visitors to give their rating about the website

Retention period: 3 months.
Starts with _dc_gtm (cookies)
and/or

gtm.js (script)
Google Tag Manager, Google Inc. / www.googletagmanager.com
Security and privacy policy of Google: https://support.google.com/analytics/answer/6004245?hl=nl

Privacy policy of Google:
http://www.google.com/intl/nl/policies/privacy/
Purpose: to analyze the website’s ordering process.

Retention period: 10 min.

The abovementioned overview shows – briefly worded – that the data we collect about you using cookies or similar technologies may be used for marketing purposes, such as personalized advertisements and content. You give your consent for these processing activities by clicking “I agree” (or similar wording) via the website.

Functional cookies
In addition we use several cookies to register your visit on the domain jimmyjoy.com. These cookies are: __cfduid (max. 1 day) _ga (max. 2 years) _gid (1 dag)__smToken__smVID_hjIncludedInSample (session) _jimmyjoy_session (session) _sp_id.38ea (max. 2 years) _sp_ses.38ea (max. 1 day) guest_token (20 years). The use of these cookies have limited consequences for your privacy and therefore do not need your consent in order to be processed. This also applies to cookies which are used to show you certain fonts, coming from the domains fonts.googleapis.com and fonts.gstatic.com.
Forum
In order to make the forum available to you, we use the open source software made and hosted by Civilized Discourse Construction Kit, Inc (‘Discourse’). Learn how Discourse deals with your personal data processed via the forum, here: https://www.discourse.org/hosted-forum-privacy-policy.html.
Your IP-address will be registered after you posted a message on the forum. If you do not want this, please do not join the forum. You are not obliged to use the forum.
Your nickname will be visible on the forum if you choose to participate on the forum. Please be advised that if you publish information about yourself on the forum, then this information will be publicly visible for everyone. You should also take into account that you have to respect the forum community guidelines: https://forum.jimmyjoy.com/guidelines.
If you want, you can use a photo (‘avatar’) to promote yourself on the forum. This can be a photo of yourself and thus personal data. In any case, you should ensure that you are legally entitled to use the photo.
Recipients of personal data
In addition to the parties and networks specified in relation to the use of cookies (article 4), parties that facilitate the services available via the website of Jimmy Joy also need to receive your personal data. These are parties that process orders, payments, deliveries as well as parties that host the website and help customer service, as set forth below.
The orders – and the accompanying information provided by you – are processed by our partner SendCloud B.V., a company with its principal place of business at the Insulindelaan 115 in (5642 CV) Eindhoven, registered at the Dutch Chamber of Commerce under number 60316721. Read here how SendCloud deals with personal data: https://www.sendcloud.nl/privacy-policy/.
The payments – and the accompanying information provided by you – are processed by our payment providers. These parties process the data you provide in relation to the payment, such as bank- or credit card data. These providers are:

Mollie B.V., a company with its principal place of business at the Keizersgracht 313 at (1016 EE) Amsterdam, registered at the Dutch Chamber of Commerce under number 30204462. Read here how Mollie deals with personal data: https://www.mollie.com/nl/privacy.
PayPal (Europe) S.à.r.l. & Cie, S.C.A., a company with its principal place of business in Luxemburg. Learn how PayPal deals with personal data:
https://www.paypal.com/nl/webapps/mpp/ua/privacy-full, https://www.paypal.com/nl/webapps/mpp/ua/cookie-full and
https://www.paypal.com/nl/webapps/mpp/ua/third-parties-list.
Stripe, Inc., a company with its principal place of business in San Francisco, United States of America. Stripe is allowed to process the data, because it respects the conditions of the EU-US privacy shield program. Learn how Stripe participates in this program:
https://www.privacyshield.gov/participant?id=a2zt0000000TQOUAA4&status=Active.
See also: https://stripe.com/us/privacy/.

Delivery services only receive the data which are needed to deliver your orders. This concerns your name, address and – if you have provided these – data that allow the delivery service to contact you if needed, e.g. in order to deliver the order correctly (e-mail address, telephone number).
To ensure that our website can cope with the amount of data requests, we use the service of Cloudflare, Inc., a company with its principal place of business in San Francisco, United States of America. It is possible that Cloudflare processes your personal data, such as your IP address. Cloudflare is allowed to process the data, because it respects the conditions of the EU-US privacy shield program. Learn how Cloudflare participates in this program:
https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active. See also: https://www.cloudflare.com/privacyshield/.
Our customer service uses a tool to manage their administration. This tool is provided by Help Scout Inc., a company with its principal place of business in Boston, United States of America. It is possible that Help Scout processes your personal data, e.g. with regard to complaints and questions. Help Scout is allowed to process the data, because it respects the conditions of the EU-US privacy shield program. Learn how Help Scout participates in this program: https://www.privacyshield.gov/participant?id=a2zt0000000KzX1AAK&status=Active.
Data retention
We store server logs that may contain your IP address. This happens because of information security purposes. This concerns all requests to our server. These requests, including IP addresses, will be stored up until a maximum of 90 days after the initial server request.
Due to our obligations based on Dutch tax laws, we store the data in relation to your order for a period of 7 years. We are legally obliged to this.
In other cases, where no legal retention period applies, you determine how long data are stored. For example with regard to the data you provided to us in relation to your use on the forum.
You can delete your account – including the accompanying data – at any time. You can file a request to Jimmy Joy accordingly. Please use the contact details available at: https://www.jimmyjoy.com/contact.
Newsletter
As a customer, you may receive offers by e-mail from Jimmy Joy related to our products and services. These newsletters can also be used for service messages, e.g. to inform you about changes in the privacy policy, terms and conditions, etc. You can always opt-out from this newsletter by using the opt-out option available in each e-mail message. The newsletters are made available by Mailchimp:

The Rocket Science Group LLC d/b/a MailChimp, a company with its principal place of business in Atlanta (Georgia), United States of America. Mailchimp is allowed to process the data, because it respects the conditions of the EU-US privacy shield program. Learn how Mailchimp participates in this program:
https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active.
See also: https://mailchimp.com/legal/privacy/.

You can also subscribe to the newsletter yourself, by checking the box next to the text “subscribe to newsletter” (or similar wording) as part of the account registration process. In this case you can also opt-out from the newsletter at any time.
Security
The data that you provide via the website of Jimmy Joy, are transferred in a secure manner. This is indicated by the ‘lock’ symbol in the address bar of your browser. The website has been secured properly, according to the following website:
https://www.ssllabs.com/ssltest/analyze.html?d=jimmyjoy.com&hideResults=on.
Our personnel is also trained to handle your data carefully. We therefore do not use your data in a manner that is incompatible with the purposes as mentioned in this Privacy & Cookie Statement.
Your rights
You can send a request to Jimmy Joy based on your right to access, rectify or erase your personal data. In addition you have the right to request to restrict certain processing activities. You also have the right to object to certain processing activities as well as the right to data portability.
Jimmy shall provide the information about your request within one month after we received the request about the action that has been taken as a consequence of your request. Dependent on the complexity of your request and the number of requests, Jimmy Joy is allowed to extend the term to respond with two months. Jimmy Joy will notify you within one month after your request about such extension.
You have the right to lodge a complaint with the supervisory authorities, such as the Dutch Data Protection Authority / Autoriteit Persoonsgegevens
(https://autoriteitpersoonsgegevens.nl/en) or the Dutch Authority for Consumers & Markets / Autoriteit Consument en Markt https://www.consuwijzer.nl/consumer-questions-english).

***