Privacy Policy

OVERVIEW

 

Data protection is of highest priority for us. The use of our website is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.

The processing of personal data, such as the name, address, email address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to us. By means of this data protection policy, we would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process.

As the controller, we have implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed.

 

NAME AND ADDRESS OF THE CONTROLLER

 

Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:

COMPLIANCE DEPT.

Email: info@jamsprintboutique.com

 

DEFINITIONS

 

This data protection declaration is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). In this data protection declaration, we use the following terms:

  • PERSONAL DATA: Any information relating to an identified or identifiable natural person (“data subject”).

  • DATA SUBJECT: Any identified or identifiable natural person, whose personal data is processed by the controller.

  • PROCESSING: Any operation performed on personal data, such as collection, recording, storage, retrieval, use, disclosure, or erasure.

  • CONTROLLER: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

  • CONSENT: Any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she signifies agreement to the processing of personal data.

 

COOKIES (Revised to Include SMS Cart Tracking)

 

Our website, jamsprintboutique.com, uses cookies. Cookies are text files stored in a computer system via an Internet browser to help us provide user-friendly services.

  • Cookies allow us to recognize our website users, making it easier to utilize the website (e.g., remembering login status or shopping cart items).

  • In connection with our SMS Abandoned Cart program, JAMS Print Boutique’s website uses cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart. This cookie information is necessary to determine when to send cart reminder messages via SMS, provided you have explicitly opted in to the SMS Program.

  • The data subject may, at any time, prevent the setting of cookies through their browser settings, though doing so may limit the full functionality of our website.

 

ELECTRONIC COMMUNICATIONS AND MESSAGING (EMAIL AND SMS)

 

 

EMAIL COMMUNICATIONS

 

We use email for both marketing and transactional purposes (e.g., order confirmations, shipping updates). Data subjects can opt out of marketing emails at any time by clicking the "unsubscribe" link found in the footer of every marketing email. Opting out of marketing emails will not affect the receipt of necessary transactional emails.

 

SMS/MOBILE MESSAGING POLICY (Fully Compliant)

 

We offer a mobile messaging program (the “SMS Program”) to data subjects who have explicitly opted-in to receive promotional, marketing, and/or transactional text messages.

  1. Data Collected and Purpose: We collect your mobile phone number, mobile carrier name, the date, time, and content of your messages, and other information provided during sign-up. This data is used solely to deliver account-related information, marketing alerts, promotional messages, and customer service communications.

  2. SMS Abandoned Cart Processing: JAMS Print Boutique’s website uses cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart. If a data subject initiates a purchase but fails to complete the transaction, we may use their provided mobile number (with explicit prior consent) to send text messages reminding them of the abandoned items.

  3. Third-Party Data Sharing (SMS): We use third-party messaging platforms and mobile carriers to send text messages. Data collected through the SMS Program may be shared with these third-party partners and mobile carriers for the sole purpose of enabling and operating the SMS Program. We do not sell, rent, or trade mobile numbers to third parties for their own marketing purposes.

  4. Location Tracking or Location-Based Services (SMS): We do not use location tracking technology or precise location-based services in connection with our SMS Program.

  5. Opt-Out (Termination): Data subjects can cancel the SMS service at any time by texting “STOP” to the short code or phone number used to message them. Texting “HELP” will provide further instructions.

  6. Exclusion from General Data Sharing: The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties for their own marketing or promotional purposes. This specific exclusion applies even if other sections of this Privacy Policy permit the sharing of other non-SMS related data with third parties.

 

RIGHTS OF THE DATA SUBJECT (GDPR)

 

Each data subject has the rights granted by the European legislator, including:

  • Right of Confirmation and Access: To obtain confirmation as to whether or not personal data concerning him or her are being processed, and to obtain a copy of that data.

  • Right to Rectification: To obtain without undue delay the rectification of inaccurate personal data.

  • Right to Erasure (Right to be Forgotten): To obtain the erasure of personal data without undue delay, provided certain legal grounds apply (e.g., the data is no longer necessary for the purposes collected).

  • Right of Restriction of Processing: To obtain restriction of processing where one of the legal conditions applies (e.g., contesting the data's accuracy).

  • Right to Data Portability: To receive the personal data provided to a controller in a structured, commonly used and machine-readable format.

  • Right to Object: To object, on grounds relating to his or her particular situation, at any time to processing of personal data.

  • Right to Withdraw Data Protection Consent: To withdraw consent to processing of personal data at any time.

 

LEGAL BASIS FOR THE PROCESSING

 

Processing is typically based on one of the following GDPR provisions (Art. 6(1)):

  • Consent (lit. a): Where the data subject has given consent for a specific purpose (e.g., newsletter subscription, SMS opt-in).

  • Contract (lit. b): Where processing is necessary for the performance of a contract (e.g., processing an order).

  • Legal Obligation (lit. c): Where processing is required for compliance with a legal obligation (e.g., tax regulations).

  • Legitimate Interests (lit. f): Where processing is necessary for the legitimate interests pursued by our company (e.g., fraud prevention, website optimization), except where such interests are overridden by the fundamental rights and freedoms of the data subject.

 

DATA STORAGE AND DELETION

 

The data controller shall process and store the personal data only for the period necessary to achieve the purpose of storage, or as far as this is granted by statutory retention periods. After expiration of that period, the corresponding data is routinely deleted or blocked in accordance with legal requirements.

 

OTHER PROCESSING DETAILS

 

 

COLLECTION OF GENERAL DATA AND INFORMATION

 

Our website collects general data and information when accessed (e.g., browser type, IP address, time of access). This information is stored in server log files, used to deliver content correctly, optimize the website, ensure system viability, and assist law enforcement in case of cyber-attacks. This data is analyzed anonymously.

 

CONTACT POSSIBILITY VIA THE WEBSITE

 

If a data subject contacts the controller via email or a contact form, the personal data transmitted is stored for the purpose of processing the inquiry or contacting the data subject. There is no transfer of this personal data to third parties.

 

REGISTRATION ON OUR WEBSITE

 

Personal data entered during website registration is collected and stored exclusively for internal use and to offer registered-only services. IP address, date, and time of registration are stored to prevent misuse. Registered persons are free to modify or delete their personal data at any time.

 

PAYMENT METHOD: PAYPAL

 

If "PayPal" is chosen as the payment option, personal data (name, address, email, phone number, etc.) necessary for payment processing and fraud prevention is automatically transmitted to PayPal (Europe) S.à.r.l. & Cie. S.C.A. The applicable data protection provisions of PayPal apply to that processing.

Link to PayPal's Data Protection Provisions: https://www.paypal.com/us/webapps/mpp/ua/privacy-full