PRIVACY POLICY

Privacy Policy

When visiting Yuugen.store, you may be asked to share some of your personal information. This is obtained to give you the best possible experience. Whenever you share your personal information, we make sure it's processed in accordance with applicable laws and to the highest standards of care and safety.

1. The basis and purpose of personal data processing

Yuugen.store processes your personal data in compliance with the provisions of the Regulation (EU) 2016/679 of the European Parliament, of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”).


The data controller is Yuugen with its office in Warsaw, Prosta 20, 00-850 Warsaw, e-mail hello@yuugen.store. The Controller can be contracted via hello@yuugen.store. You can contact the Controller on all matters relating to the processing of personal data and the use of data processing rights.


Your personal data is processed to successfully accept and fulfil your order. We may need to share your personal data with third parties to do this, such as storage and delivery companies, banks and online payment providers. Where possible, we'll provide you with information on the processing of your personal data received from a third party. In some instances, we may also be required to share your personal data with public authorities upon their substantiated, specific request.

In every other case, we will never share your personal data with anyone.

We use strict technical and organisational measures to secure all personal data that is processed by Yuugen from loss, destruction or unauthorised access by third parties. We cannot, however, take responsibility for any unauthorized access to your personal data caused by security breaches that might happen in relation to your device, browser or your own negligence.

As with every website, our server automatically collects the following information and temporarily saves it in server log files that are transmitted by your browser, unless you have deactivated this function:
- IP address of the computer transmitting the request
- Client’s file request, the http response code, the volume of data transmitted
- The website from which you access our website (referrer URL)
- Date and time of the server request
- Type, version and language of your browser
- Operating system on the computer transmitting the request

Our server log files are not evaluated based on personal use. We cannot allocate this data to specific persons at any time. Also, we do not merge this data with data from other sources.

2. Consent for personal data processing

Newsletter
With your consent, we may use your personal data for marketing or advertising purposes. Specifically, we may use your email address to send you our newsletter.
The legal basis for the processing is your consent (Article 6(1) a) of the GDPR).

Your personal data will be made available to entities that process personal data at the request of the Controller (including IT service providers and marketing agencies). These entities process data on the basis of a contract with the Controller and only on the Controller's request.

Your personal data will be stored no longer than when you decide you do not want to receive these materials and withdraw your consent, in any case no longer than 5 years.
You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing that was made on the basis of the consent before its withdrawal.
Providing personal data for the above purposes is voluntary; however, it might be necessary to comply with them.
User account

When you register for our online shop and create a customer profile, we save the customer account information you provide (including, but not limited to, your name, billing and delivery addresses, telephone number, payment information and email address) so you don't have to re-enter your data every time you place an order. You can update or delete your customer profile at any time. The legal basis is Article 6 (1) b) of the GDPR.

Personal data provided to us via our website will be saved only for the time it takes us to meet the purpose for which you provided the data. When your contract has been fulfilled completely, your data will be blocked and then deleted in accordance with the relevant tax and trade regulations, unless you have given your express consent to such data being used for other purposes. To the extent mandatory for trade and tax retention periods to be observed, the retention period for some types of data can be up to 10 years.

At any time, at no cost to you and without providing any reason, you can request information regarding the data relating to you that is saved in our systems, as well as information regarding the origin, recipients or categories of recipients to whom such data has been transmitted and why such data has been saved.
In addition, you are legally entitled to have your personal data rectified, blocked or erased. Also, you can withdraw your consent to the use of your data at any time and without having to provide a reason. If we process your personal data to pursue our legitimate interests pursuant to Article 6 (1) f) of the GDPR, pursuant to Article 21 of the GDPR you have the right to object. In addition, you have the right to portability of your data and the right to lodge a complaint with a data protection supervisory authority if you are not satisfied with our processing of your personal data.


“Save for later” function

With your consent, we may use your personal data to allow you to save your design and return to it anytime.
The legal basis for the processing is your consent (art. 6(1)(a) of the GDPR).

Your personal data might be made available to entities that process personal data at the request of the Controller (including IT service providers and marketing agencies). These entities process data on the basis of a contract with the Controller and only on the Controller's request.

Your personal data will be stored no longer than when you decide you do not want to receive these materials and withdraw your consent, in any case no longer than 5 years.

You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing that was made on the basis of the consent before its withdrawal.
Providing personal data for the above purposes is voluntary; however, it might be necessary to comply with them.

3. Rights of the data subject

You have the right to access your data, the right to demand its rectification, removal or restriction of its processing and the right to data portability. At your request, the Controller will provide a copy of the personal data to be processed, but for any subsequent copies you request, the Controller may charge a reasonable amount resulting from administrative costs.

You have the right to object to the processing of your personal data.

You have the right to withdraw your consent at any time. Withdrawal of the consent does not affect the lawfulness of the processing that was made on the basis of the consent before its withdrawal.

To the extent that your data is processed in an automated way to perform and conclude the contract, or processed on the basis of consent, you also have the right to transfer personal data (such as to receive personal data from the Controller) in a structured, commonly used machine-readable format. You may send this data to another data Controller.

You also have the right to lodge a complaint with the supervisory authority dealing with the protection of personal data.

In order to exercise the above rights, please contact the data Controller. Contact details are indicated above.

4. Cookies – general information

Our website uses its own cookies and third-party cookies. We use cookies in order to improve the experience of visiting our website and to allow visitors to use certain functions, and to conduct statistical analyses of visits at our website. Cookies are small text files created automatically by the browser and saved on the user's device (laptop, tablet, smartphone, etc.) when visiting a website. Cookies are not harmful for the user's computer and they do not contain viruses, trojans or any other malware. Cookies store information connected with the use of a given device. However, it does not mean that based on such information we gain direct knowledge about the identity of the user.

Most cookies are deleted after the end of a browser session (session cookies). They allow us to e.g. offer the combined cart function, which allows the user to view the current list of products in the cart and their price. Other cookies remain on the user's computer, allowing their identification during the next visit (permanent cookies). Cookies are used most of all to optimise our offer and adjust it to users, and to increase safety. Thanks to cookies, it is possible e.g. to view content precisely customised to the interests of the user.

Of course, the user can change browser settings so that our cookies are not saved on their device. The "help" function in the browser's menu offers information on how to prevent the browser from accepting new cookies; how to enable notifications about new cookies in the browser; and how to delete already saved cookies and block new ones.

In order to do so, use instructions below depending on the browser you use.
IE: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/en/kb/cookies-allow-and-dispose
Chrome: https://support.google.com/chrome/answer/95647
Safari: http://help.apple.com/safari/mac/8.0/#/sfri11471
At the same time, please be informed that it can limit the functionality of our website.
In the scope in which cookies and pieces of information stored in them include personal data, the legal basis for the processing of data is Art. 6 par. 1 letter f) GDPR. In that context, the optimisation of our website is to be deemed a legitimate interest within the meaning of the above provision.

5. Third-party cookies

We will cooperate with marketing partners in order to make our website more and more interesting for our users. For this end, cookies of our partners (third-party cookies) are also saved during visits on our website. Cookies of our marketing partners also store information, with the use of pseudonymisation, about how the website is used and what interests the user during their visits. Also, information connected with visits on other websites occurring before visiting our website is partially registered. Based on such information, the user will be presented with products of our marketing partners in line with the user's interests. No personal data is recorded. Also, personal data is not combined with website use profiles.

Google Analytics

Our website uses Google Analytics. Google Analytics uses cookies and similar technologies in order to help us analyse and improve our website based on user behaviour. Data collected for that purpose can be sent by Google to servers in the USA and stored there. However, your IP address will be removed before estimating user statistics, so that no one can identify you. Google will store information obtained through cookies in order to assess the website use, create website traffic reports for website operators, and provide other services connected with website traffic and Internet use. You can configure your browser so that it will reject cookies or you can prevent the storing of data generated by cookies and connected with the use of this website (including the IP address) and processing of such data by Google by using a browser add-on provided by Google, to be found here.

The legal basis for the processing of data is Art. 6 par. 1 letter f) GDPR.

6. Social plug-ins

On our website, pursuant to Art. 6 par. 1 letter f) GDPR, we use social plug-ins of Facebook and Instagram in order to increase our popularity through those portals. The underlying marketing purpose is to be deemed a legitimate interest within the meaning of GDPR. Responsibility for activity in line with the rules of data protection lies with the provider of a given service.

The purpose and scope of personal data collection as well as further processing and use of data by individual providers, and related user rights and possibility to adjust settings leading to the protection of the private sphere is described in appropriate data protection notices of the provider, available below.

- Facebook plug-ins; Facebook will be available at www.facebook.com from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, and at www.facebook.com from Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2 , Ireland, ("Facebook"). A review of Facebook plug-ins and their appearance can be found here; Information about data protection can be found on Facebook here.
- Plug-ins from Instagram; Instagram is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). Information about privacy on Instagram can be found here.
By logging out of social network websites and deleting saved cookies, the user can prevent a situation in which, during a visit at our website, collected information is attributed to their user account on a given social network. If the attribution of information about a visit at our website to the user account done by social networks is not desired, log out of given portals before visiting our website. The loading of plug-ins can also be completely disabled through browser add-ons known as script blockers, e.g. "NoScript" Script Blocker, available here.
Facebook
Our website uses plug-ins of the social network www.facebook.com operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). If you visit our website through such plug-in, then a connection with Facebook servers will be established, and the plug-in will be displayed on the website thanks to information supplied to your browser. It will be sent to a Facebook server which you have visited from our site. If you are logged in as a Facebook user, Facebook will attribute such information to your personal user account on Facebook.
Facebook can link your visit on our website and related activities with your Facebook user account. We cannot prevent that. From Facebook, we only receive statistical information about the use of our website through Audience Insights service.
On websites, Facebook provides detailed information about the scope, kind, purpose and further processing of user's personal data. Here, you can also find more detailed information about user rights and information about privacy protection settings. Information about data protection on Facebook: www.facebook.com/about/privacy.
Facebook uses your data to improve the quality of its advertisements, including the algorithm of optimisation of advertisements and the ranking of data channels.
Facebook Pixel and non-standard group of recipients
On our website, we want to present special offers customised to the interests of the user ("interest based advertisement") and to limit the frequency of display of some advertisements. To do so, we use Facebook-Pixel and Non-Standard Facebook Recipients. Facebook-Pixel is a Javascript code which sends following data to Facebook Ireland Ltd, Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"):
- HTTP header information (including the IP address, information about the browser, website location, document, URL of the site and the agent of the browser user as well as date and time of use);
- Pixel-specific data; it includes Pixel ID and cookies data of Facebook including your Facebook ID (used for linking events with a specific promotional Facebook account and attributing it to a Facebook user);
- Additional information about a visit, as well as standard and non-standard data events (e.g. starting a video stream).
Facebook uses an encrypted ID (contained in a Facebook cookie) in order to automatically check which data sent by Facebook Pixel can be attributed to a Facebook user. As long as a Facebook cookie file is not stored in the browser, it will not be classified in the user group marked as "Non-standard recipient."
If the Facebook user ID contained in a Facebook cookie file can be attributed to a Facebook user, Facebook will attribute such user to the "Non-standard recipient" category based on rules specified by us, provided that appropriate criteria are met. We use this information to display advertisements on Facebook. However, advertisements are displayed only from the "non-standard group of recipients," and so no conclusions can be drawn concerning the traits of individual users. The attribution of a user to the "Non-standard recipient" group is done over a maximum period of 180 days. This period starts again when you visit our website again and adhere to the same rules of "Non-standard recipients."
If you wish to object to the use of non-standard recipients of the Facebook website, set the so-called resignation cookie file, which prevents the transfer of data through Facebook pixel here.
The duration of the resignation cookie file is unlimited. However, it needs to be remembered that the resignation function is linked to the device or browser and it generally pertains to the end-device or browser used. If you use multiple devices or browsers, you must resign on each device and in each browser you use.
Instagram
Our website uses Instagram plug-ins operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The Instagram plug-in is marked as the logo of Instagram in the form of the "Instagram Camera." A review of Instagram plug-ins and their appearance can be found here.
Clicking the button with Instagram logo on our website will establish a direct connection with Instagram servers. Instagram transfers the content of the plug-in directly to your browser and embeds it on the website. As a result of this embedding, Instagram is informed that your browser has opened a given page of our website, even if you do not have an Instagram profile or if you are not currently logged in to Instagram. This information (including the IP address) is transferred directly from your browser to Instagram server in the USA and stored there.
If the user is logged in to Instagram, Instagram can instantly link their visit on our website with their Instagram account. In the case of an interaction with the plug-in, e.g. by clicking the "Instagram" button, this information is also transferred directly to the Instagram server and stored there. This information is also published on the Instagram account and displayed there to your contacts. Please, read Instagram Privacy Policy in the scope of further processing and use of data by Instagram, and learn about your rights and settings options aimed at privacy protection.
If you do not want Instagram to link information collected through our website directly with your Instagram account, you need to log out of Instagram before visiting our website. The loading of Instagram plug-ins may be also completely blocked through browser add-ons, e.g. "NoScript".
Opt-Out
Also, you can at any time check the activation status of tools from various providers and object to the collection or analysis of your data with the use of such tools, by clicking here.