Neadoo Digital (Service Provider) Privacy Policy
of May 15th 2018

§1. General information

1. This Privacy Policy defines the rules of processing and protection of personal data in relation to the User utilising contact forms provided by the Controller
2. The User, as defined by this Privacy Policy, is a natural person making an enquiry and / or order for the services provided by the Controller
3. The Personal Data Controller, as defined by Regulation (EU) No 2016/679 of the European Parliament and the Council of April 27th 2016 regarding the protection of natural persons with regard to the processing of personal data and regarding the free movement of such data, as well as the repeal of Directive 95/46/EC (“GDPR”) L 119/40 Official Journal of the European Union May 4th 2016 is Neadoo Digital Ltd, Icg House Greenford Business Centre, Station Approach, UB6 0AL London, Company No. 08236821, tel: +44 20 8123 4979, email: hello@neadoo.eu
4. Contact regarding personal data processing handled by Neadoo Digital Ltd: gdpr@neadoo.eu
5. The acquisition of data about the Website’s Users and its storage is handled in the following manner:
   – through data willingly entered by the Users in electronic forms placed on the website (i.e.. sidebars, contact forms and free quotation forms) or the internet live chat app forms,
   – through saving cookies in terminal equipment,
   – through amassing www server logs via a hosting operator.
6. The scope, aim, and period of personal data processing is defined in a later section of this Privacy Policy.

§2. The aims of data processing performed by the Controller

1. The User entrusts the processing of their personal data to the Controller for the purposes of their enquiry and / or order made through a contact form, including sending the User the ordered, personalised commercial information.
2. Should the User provide a telephone number, it is equivalent to consent to telephone contact for the purposes detailed in point 1.
3. Should the user provide an e-mail address, it is equivalent to consent to email contact for the purposes detailed in point 1.
4. Consenting through providing contact data is voluntary. However, in some cases, it can hinder handling the enquiry / order made through the contact form.
5. The User’s personal data may be made available to the following recipients: partners of the Controller with whom the Controller collaborates, combining products or services. In the case of collaboration, the access to the data may be given to subcontractors (processors), such as: accounting companies, consultancy companies, IT system operators.
6. The Controller reserves the right to submit an enquiry to the User when handling the enquiry / order, via phone and / or email, regarding further permission to process personal data for direct marketing purposes and utilising telecommunications terminal equipment. Without consent from the User, their data will not be processed for this purpose.

§3. Scope of the Controller’s data processing

1. The User’s Personal data gathered on the basis of this Privacy Policy encompass some or all of the following data: User data:
   -name,
   -mobile phone number,
   – company name,
   – e-mail address,
   – IP addresses,
   – the www address of the domain that the User wishes to promote with the help of the Controller’s services.
2. The scope of the processing of the data mentioned above also encompasses the production of backups.

§4 Automatically collected data
As the User uses the website, data on the User is being collected automatically. This data includes: IP address, domain name, browser type, OS type, as well as the User’s interests, age, and sex. This data can be collected through cookies, the Google Analytics system, as well as the HotJar system.

1. The aforementioned cookies are files sent to the User’s device as they browse the Shop’s website.
2. Cookies store the User’s preferences, which allows them to:
   a) improve the quality of the Service,
   b) correct the search results as well as the accuracy of the viewed Goods,|
   c) create view stats,
   d) track the User’s preferences,
   e) maintain a logged-in User’s session.
3. Cookies do not make any configuration to the device or software installed on the device used by the User.
4. The User may choose not to consent to the use of cookies, which will prevent cookie files from being stored on the User’s device in the future.
5. Should the User not consent to the use of cookies, they should select the proper settings in their preferred Internet browser. The process of consenting to the use of cookies differs depending on the User’s preferred web browser.
6. Should the user want to delete the cookies that have accumulated up to that point, they should choose the proper settings in their preferred web browsers or delete all cookies manually. The process of removing cookie files differs depending on the User’s preferred web browser.
7. The service provider notes that blocking or deleting cookie files may hinder the use of the website and, in some cases, make certain options impossible to access.
8. HotJar is a file used to monitor User activity on a website.
9. If a user doesn’t consent to the use of the HotJar file, they should implement cookie blocking software. With a cookie blocker, the User will be considered an anonymous user, i.e. one that cannot be attributed any preferences, traits, etc.
10. Google Analytics is an Internet analytics system that gives insight to the traffic of online shop data, as well as the demographic data on Users. It is used for marketing purposes.
11. If a user doesn’t consent to the use of Google Analytics, they should implement cookie blocking software.
12. Our website utilises remarketing codes provided by Google Adwords and/or Google Analytics of display advertisers. They are used to create remarketing lists for the purpose of matching personalised ads within the Google ad network and Google search engine. Based on cookies and remarketing tags, Google AdWords can display ads to users who have visited our website while using select tools by Google. Each user visiting our website may choose not to be tracked by Google AdWords/Google Analytics for display advertisers, as well as non-standard ads in the Google ad network.

§5. Rights of the User whose data is being processed

1. The User has the right to:
   – access their personal data,
   – amend their personal data,
   – limit the processing of their personal data,
   – moving their personal data,
   – objecting to the processing of their personal data.
2. In order to exercise their rights, the User should contact us via e-mail at: gdpr@neadoo.eu
3. The Controller will carry out the User’s request right away, though it’s important to keep in mind that the limitation, deletion, move, or objection toward data processing may influence the scope of the proper management of the enquiry / order, including the delivery of personalised commercial information.

§6. Time of personal data processing by the Controller

Collected User data will be stored so long as is considered acceptable by legal standards and regulations (including accountancy-related regulations), as well as necessary in order to accomplish the goals set.

§7. Duties of the Personal Data Controller
The Personal Data Controller must take all measures to ensures the safe processing of personal data within the scope defined by the Directive. In particular, the Controller is obliged to:

1. secure the data from being made available to unauthorised persons, taken by an unauthorised person, changed, damaged, or destroyed,
2. allow for the processing of personal data to be performed by persons with proper authorisation issued by the Controller,
3. ensure control over the proper processing of personal data,
4. perform a record of persons authorise to process personal data; taking all measures to ensure that persons authorised to processing such data keep them secret, even after the Controller’s task has been completed, including informing them of the legal consequences of breaching the privacy of the data and receiving declarations regarding maintaining the secrecy of such data,
5. manage the required documentation describing the means of processing the provided personal data, as well as the technical and organisational means of ensuring the protection of the processing of such data, in particular the Information Controller’s Office, the Personal Information Security Policy, and the Manual for Information System managing the Processing of Personal Data.