Source: https://www.stephanierichardson.com/gdpr.html
Timestamp: 2019-01-22 01:42:21
Document Index: 121167900

Matched Legal Cases: ['§ 1', '§7', '§2', '§3', '§3', '§4', '§4', '§6', '§7', '§7']

Jumping Chihuahua Productions Inc PRIVACY POLICY
Jumping Chihuahua Productions, Inc. (the “Company”) is committed to protecting the privacy of its users. This Privacy Policy (“Privacy Policy”) is designed to help you understand what information we gather, how we use it, what we do to protect it, and to assist you in making informed decisions when using our Service.
For purposes of this Agreement, “Service” refers to the Company’s service which can be accessed via our website at Jumpingchihuahua.com, StephanieRichardson.com, futurecatalyst.weebly.com or through our mobile application. The terms “we,” “us,” and “our” refer to the Company. “You” refers to you, as a user of Service.
III. HOW WE USE AND SHARE INFORMATION Personal Information: In general, we do not sell, trade, rent or otherwise share your Personal Information with third parties without your consent. We may share your Personal Information with vendors and other third-party providers who are performing services for the Company including powr.io and getresponse.com. In general, the vendors and third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide for the Company. For example, when you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery, or return a purchase, you consent to our collecting and using such personal information for that specific purpose, including by transmitting such information to our vendors (and their service providers) performing these services for the Company. However, certain third-party service providers, such as payment processors, have their own privacy policies in respect of the information that we are required to provide to them in order to use their services. For these third-party service providers, we recommend that you read their privacy policies so that you can understand the manner in which your Personal Information will be handled by such providers. In addition, we may disclose your Personal Information if required to do so by law or if you violate our Terms of Use. Non-Personal Information: In general, we use Non-Personal Information to help us improve the Service and customize the user experience. We also aggregate Non-Personal Information in order to track trends and analyze use patterns of the Service. This Privacy Policy does not limit in any way our use or disclosure of Non-Personal Information and we reserve the right to use and disclose such Non-Personal Information to our partners, advertisers and other third parties at our sole discretion.
​XII. CONTACT US & WITHDRAWING CONSENT If you have any questions regarding this Privacy Policy or the practices of this Site, or wish to withdraw your consent for the continued collection, use or disclosure of your Personal Information, please contact us by sending an email to wags@JumpingChihuahua.com. Last Updated: This Privacy Policy was last updated on Sat Dec 01 2018.
Our Email List is Handled through Get Response.... Our Policy is as following:
DATA PROCESSING AGREEMENT („AGREEMENT”) entered into on 24-05-2018 by and between GetResponse Sp. z o.o. with its registered office in Gdańsk (80-387), Arkońska 6, A3, entered in theRegister of Enterprises of the National Court Register kept by the District Court for GdańskPółnoc in Gdańsk, 7thCommercial Division of the National Court Register, at KRS No. 0000187388, with NIP No.9581468984, REGON No.192998251, with a share capital of PLN 5.559.840 represented by: Daniel Brzeziński –Vice president, hereinafter:„GetResponse” and Jumping Chihuahua Productions, Inc. with its registered office in 9163 Selborne Ln, PALMETTO, Georgia, 30268, United States represented by: Stephanie Richardson, CEO hereinafter:„Customer”
The Customer and GetResponse are hereinafter also jointly referred to as „Parties” and each separately as a „Party”.
Whereas: 1. The service provided by GetResponse to the Customer ("Service") may require GetResponse to process Personal Data (as defined below), the Parties wish to ensure that the Personal Data processing is in conformity with the applicable laws, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR") - from the moment it shall apply - and with other applicable personal data protection laws;
2. The Customer is the controller of the personal data processed in the course of using the Service ("Personal Data") or acts as a processor, based on an authorization granted by the Personal Data controller and on behalf of the controller. The detailed scope of Personal Data and the categories of data subjects are defined in Annex 1; 3. GetResponse provides the Service to the Customer based on the GetResponse Terms of Service ("Terms of Service") with this Agreement constituting an integral part thereof. The Parties have decided as follows:
§ 1 SUBJECT MATTER OF THE AGREEMENT 1. Pursuant to Article 28(3) of the GDPR,the Customer engages GetResponse in processing of the Personal Data and GetResponse hereby accepts the processing. 2. GetResponse shall process the Personal Data: (i) in accordance with applicable laws and the Agreement, (ii) exclusively for the purpose of providing the Service to the Customer by GetResponse, (iii) to the extent defined in Annex 1 and (iv) in the period from the commencement of Service provision to Agreement termination, subject to §7(2)hereof. 3. The role of GetResponse shall be limited to providing the Customer with the Service tools to be used for the purpose of Personal Data processing. GetResponse does not have any impact on the scope of the Personal Data processed by the Customer in the Service,except for specifying the minimum scope of the Personal Data required for the proper use of the Service, GetResponse does not determine the purposes and means of processing, does not monitor the scope of these data or the lawfulness of the basis for their processing, nor does it check if the Customer processes them correctly.
§2 REPRESENTATIONS OF THE CUSTOMER
1. The Customer hereby represents that it has obtained and that it processesPersonal Data in accordance with applicable laws, including GDPR. The Customer confirms in particular that it has: (i) obtained and holds the legally required direct marketing consents, including consents to send commercial information by e-mail or telephone and to use telecommunications terminal equipment and automated phone call systems for direct marketing purposes –if the Customer carries out such activities, (ii) informed the data subjects about the processing of the data to the extent and in a manner required under the GDPR, (iii) has the right to process Personal Data and engage GetResponse for carrying out processing activities to the extent and for the purpose defined in Annex 1 hereto. Notwithstanding the foregoing, if the Customer is not the Personal Data controller, it confirms that it has received the permission of the respective controller as required under the GDPR to engage GetResponse for carrying out processing for the purpose and to the extent in question.
2. The Customer hereby confirms that the technical and organizational measures implemented by GetResponse and defined in Annex 2 are suitable and sufficient for the protection of the rights of data subjects, and the Customer considers GetResponse to be providing sufficient guarantees in this respect.
3. Notwithstanding the foregoing,the Customer shall use the Service in a safe manner and in accordance with the law, which includes properly securing the Customer account authentication data, ensuring the security of the Personal Data while providing them for the purpose of the Service, taking suitable actions to ensure secure encryption or creation of internal backup of the Personal Data entrusted to GetResponse and ensuring protection against unauthorized access.The Customer hereby acknowledges and accepts that in connection with the Service GetResponse uses cookies and other similar technologies to track user activity. The Customer undertakes to apply appropriate notices, obtain appropriate consents and have mechanisms for their withdrawal (opt-in and opt-out) required by law to enable GetResponse to use these technologies lawfully and collect data from the Contacts’ devices in accordance with Cookie Policy available at https://www.getresponse.com/legal/cookie-policy.html and in a manner describer therein.
4. The Customer shall inform GetResponse without undue delay about any inspection performed by the Inspector General for the Protection of Personal Data (“IGPPD”), and from the moment of its appointment -President of the Personal Data Protection Authority ( “PPDPA”) that is connected with the processing of the Personal Data entrusted to GetResponse and about any notice from the IGPPD or PPDPA requesting explanations regarding the same.
§3 THE CUSTOMER’S INSTRUCTIONS
1. GetResponse shall process the Personal Data exclusively in line with the instructions from the Customer, unless the European Union or Member State law requires otherwise. In the latter case, 4(6)(a) hereof shall apply.
2. The Customer’s instructions are given in the Agreement or can be given and followed through the functionalities provided by GetResponse in the Service. The Customer shall make sure that any instructions given to GetResponse are in conformity with applicable data protection laws.
3. Any further instructions that go beyond the instructions defined in §3(2) above must pertain to the subject matter of the Agreement or the subject matter of the Service provided in accordance with Terms of Service. If executing further instructions results in costs for GetResponse, GetResponse shall inform the Customer about such costs, explaining the amounts of the costs, before executingthe instruction. Only uponthe Customer’sconfirmationof bearingthesecosts and their payment is GetResponse obliged to execute further instruction, provided that technical and organisational measures allow it. The Customer shall give further instructions in writing, unless urgency or other special circumstances justify giving instructions through electronic means of communication. Instructions in any form other than in writing should be subsequently properly documented without undue delay.
4. GetResponse shall immediately inform the Customer if GetResponse believes that an instruction infringes the GDPR or other European Union or Member State data protection provisions, and shall request the Customer to withdraw, change or confirm the challenged instruction. While waiting for the Customer’s decision, GetResponse has the right to suspend the performance of the challenged instruction. If, despite the Customer’s explanation,executing the challenged instruction would infringe the GDPR or other European Union or Member State data protection provisions, GetResponse has the right to refrain from executing the instruction.
§4 REPRESENTATIONS AND OBLIGATIONS OF GETRESPONSE
1. Taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes of processing as well as the risks for rights and freedoms of natural persons, GetResponse hereby represents that as per Article 32 of the GDPR, GetResponse has implemented appropriate technical and organizational measures to secure the processing of Personal Data. The description of the implemented measures is available in Annex
2. GetResponse may at any time change the implemented measures, provided that the protection level they ensure is not lower than that ensured by the measures applicable at the conclusion of the Agreement. The Customer can find an information about the current technical and organizational measures along with an information about any changes to the scope of the implemented measures in the Account. 2. As a justified request of the Customer, GetResponse shall make available to the Customer any further information necessary to demonstrate its compliance with the obligations laid down in Article 28 of the GDPR. The last sentence of §4(5) hereof shall apply as appropriate.
3. GetResponse shall ensure appropriate security of the Personal Data against unauthorized access and unauthorized seizure, as well as against damage, destruction or loss, and shall take any necessary steps as required by law to keep the Personal Data and how they are secured confidential.
4. GetResponse hereby represents that all persons authorized to process the Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality as per Article 28(3)(b) of the GDPR, and GetResponse shall be liable for their acts or omissions as for its own acts or omissions.
5. It is the responsibility of the Customer to satisfy the requests of Personal Data subjects and to prepare replies to such requests. GetResponse shall reasonably support the Customer to the best of its abilities and to a reasonable extent, in fulfilling its obligations, in particular through the application of appropriate technical and organizational measures necessary for the Customer to support the exercise of the data subjects' rights under the GDPR.
6. GetResponse shall assist the Customer in compliance with the obligations pursuant to Articles 32 to 36 of the GDPR in respect of the Service by providing the Customer with the necessary information. In respect of assisting the Customer in data protection impact assessment (Article 35 of the GDPR) and in prior consultation with the supervisory authority (Article 36 of the GDPR), GetResponse shall assist only insofar as the Customer is unable to fulfill its obligations by other means. GetResponse shall inform the Customer about the costs of such assistance. Once the Customer confirms that it will cover such costs, GetResponse shall provide the required assistance.
7. GetResponse shall inform the Customer without undue delay upon receiving any credible and confirmed information: a. that GetResponse or its sub-processors have been obliged, under the European Union or Member State law to which GetResponse is subject, to process the Personal Data in a manner going beyond the Customer's instructions; in such a case, GetResponse shall inform the Customer of such obligation before processing, unless law prohibits providing such information on important grounds of public interest; in such an event, the notice to the Customer shall specify the legal requirement arising from the European Union or Member State law; b. about any identified Personal Data breach committed by GetResponse or its subprocessor that affects the Customer's Personal Data hereunder.
In such a case, GetResponse shall support the Customer in the Customer
1. To ensure proper provision of the Service, the Customer authorizes GetResponse to engage other processors for carrying out processing activities. For the avoidance of doubt and without limiting the general authorisation granted to GetResponse in the preceding sentence, the Customer in particular agrees to the sub-processors listed in Annex 3.
2. The current list of GetResponse’s sub-processors is available in the Customer’s Account. GetResponse shall inform the Customer about any intended changes concerning the addition or replacement of other processors. The Customer shall be informed about this through a notice in the Customer’s Account and properly in advance. The Customer shall have the opportunity to object (via electronic means of communication or by post) to such changes within 14 days of receiving a notice on the intended change. If the Customer does not object within 14 days of receiving the information about the intended change, the Customer is deemed to have agreed to the change. Having received an objection,
GetResponse has 30 days to determine how to proceed in relation to the objection. On the expiry of that period, each Party may terminate the Agreement in line with the provisions of the Service Agreement. Notwithstanding the foregoing, GetResponse stipulates that the Customer’s objection to a chosen sub-processor may render the Customer unable to use all the functionalities of the Service.
3. Engagement of other processors may only take place within the limits of and for the purpose of performing the Service. GetResponse hereby represents that (i) the sub-processors it has engaged meet all the requirements arising from the GDPR and from applicable data protection provisions, (ii) it has entered into Personal Data processing agreements with the sub-processors as required under Article 28(4) of the GDPR and that such agreements include provisions imposing obligations analogical to those defined in the Agreement in respect of GetResponse, and that (iii) the personal data protection standard followed by the sub-processors is at least equal to the personal data protection standard followed by GetResponse.
If sub-processor chosen by GetResponse is located in a third country within the meaning of GDPR, GetResponse shall be obliged to ensure that the conditions set in Chapter V of the GDPR are met. §6 CUSTOMER'S RIGHTS TO AUDIT
1. The Customer shall have the right to audit GetResponse's compliance with the Agreement in terms of Personal Data processing ("Audit"). An Audit may also be conducted by an independent auditor mandated by the Customer, subject to prior conclusion of confidentiality agreement between the auditor and GetResponse.
2. The Customer shall not appoint as an auditor any entity conducting directly or indirectly competitive activity in relation to activity conducted by GetResponse. Competitive activity shall mean any activity, whether or not fee-based, irrespective of the place and territory where it is carried out, regardless of the legal form, conducted in the same or the same subject range and addressed to the same group of recipients, coinciding - even partially - with the scope of the main or the side activity of GetResponse or of entities from the GetResponse group worldwide. Assessment of whether an entity is a competitor will include not only the subject of business activity of such an entity as listed in its articles of association or other document constituting the basis for its functioning, but also any activities actually pursued by that entity. If the Audit is mandated to GetResponse's competitors, GetResponse shall have the right to refuse to allow the Audit until another entity is mandated to carry out the Audit on behalf of the Customer or until the Parties agree on how to further proceed.
3. The Audit shall be subject to the following conditions:
(i) it may only apply to the Personal Data entrusted to GetResponse for processing under the Agreement, it shall be limited to GetResponse's registered office, devices used to process the Personal Data and staff involved in the processing hereunder;
(ii) it shall be carried out efficiently and as quickly as possible, taking no more than 2 working days,
(iii) it shall not take place more than once a year, unless it is required under applicable laws or by a competent supervisory authority or takes place promptly after a material breach of the Personal Data processed hereunder is identified,
(iv) it may take place during regular working hours of GetResponse, in a manner that does not disrupt GetResponse's business and is in conformity with GetResponse's security policies;
(v) the Customer shall inform GetResponse about the intention to carry out the Audit via electronic means of communication or by post at least 14 working days before the intended Audit date. If an Audit cannot be carried out as intended for reasons beyond GetResponse's control or if other unexpected obstacles arise, GetResponse shall inform the Customer about such circumstances and shall suggest a new Audit date, which shall not be later than 7 working days after the date specified by the Customer;
(vi) the Customer shall bear all costs arising from or connected with an Audit, except where an Audit reveals a serious breach of Personal Data security rules that pertains or is a threat to the Customer's Personal Data; (vii) an Audit cannot be intended or lead to the disclosure of legally protected secrets (including GetResponse's trade secrets). The Customer shall create an Audit report that summarizes the Audit findings. The report shall be submitted to GetResponse and shall represent GetResponse's confidential information which cannot be disclosed to any third parties without GetResponse's written permission unless this is required by the applicable laws.
4. If GetResponse adheres to an approved certification mechanism referred to in Article 42 of the GDPR or an approved code of conduct referred to in Article 40 of the GDPR, the Customer's auditing rights may also be exercised through GetResponse's reference to the results of the monitoring of the rules of certification or the code of conduct. If this is the case, the Audit shall only address issues that cannot be sufficiently clarified through the submission of such results by GetResponse.
§7 RETURN OR DELETION OF PERSONAL DATA
1. If the Agreement is terminated, GetResponse shall, according to the Customer's statement, delete the Personal Data (by deleting any existing copies of Personal Data) or return them to the Customer (along with any media where they are stored, if possible), unless GetResponse has the right to further process the Personal Data for a longer period based on independent legal grounds. If GetResponse does not receive the statement referred to in the preceding sentence, whether in writing or by e-mail, within 5 days of Agreement termination, the Customer shall be deemed to require that the entrusted Personal Data be deleted. If the Customer chooses to have the Personal Data returned, GetResponse shall provide the same to the Customer or enable the Customer to download the Personal Data in a commonly used and machine-readable format.
2. The Customer may obtain a copy of the processed Personal Data throughout the term of the Service Agreement, but no later than 60 days after the Customer's Account has been deactivated. In the said period of 60 days after the Customer's Account has been deactivated, the Personal Data shall only be processed by GetResponse for the purpose of potential reactivation of the Customer's Account, and shall only involve Personal Data storage for the Customer without any other processing activities, subject to GetResponse's other obligations or rights arising from applicable laws or public authorities'' orders. After the expiry of this term, Personal Data shall be deleted from the main base without possibility of recovery. In the period of next 120 days Personal Data shall be subject to encryption and stored in backup copies only. The said 120-day period is required to delete the Personal Data completely due to specifics of the backup copies operations.
1. GetResponse's liability in contract and in tort shall be limited to direct actual losses incurred by the Customer. GetResponse shall not be liable for lost profit, notwithstanding the source, except where this is caused by wilful misconduct or gross negligence.
2. GetResponse's total liability, notwithstanding the number of and grounds for the Customer's claims, shall be limited to equivalent of amount payable for the Service for three settlement periods (settlement period shall mean, respectively, monthly period or 30 days) paid by the Customer in the settlement period immediately preceding the date when the event causing the damage occurred, with the exclusion of any amounts representing setup fees or any extra charges. The Customer hereby releases GetResponse from any liability above that limit.
3. GetResponse shall not be liable for not performing or improperly performing the Agreement resulting from Force Majeure.
4. The Parties agree that the Customer shall be liable for satisfying any and all claims of Personal Data subjects in connection with any damage arising from improper processing of personal data hereunder, unless the Customer demonstrates that the damage resulted from the sole through fault of GetResponse or GetResponse's sub-processors. If the Customer fails to demonstrate this, the Customer shall unconditionally indemnify GetResponse and hold it harmless in respect of any claims filed by the entities whose Personal Data GetResponse has processed based on the Agreement, and in connection with the processing of such data hereunder. If action is brought against GetResponse, the Customer shall, if so required by GetResponse, join the proceedings as a party and assume full liability for the claim.
1. The Parties jointly agree that save as otherwise provided in the Agreement, GetResponse's remuneration for the activities hereunder is included in the remuneration due for the provision of the Service to the Customer.
2. The Agreement has been concluded for an indefinite period, but it shall be terminated no later than on the day of return or deletion of Personal Data according to §7 hereof.
3. The Agreement shall supersede any arrangements between the Parties in respect of entrusting Personal Data which the Parties may have made before in connection with the Service, notwithstanding the form of such arrangements.
4. Any amendments to the Agreement shall be made in writing, including electronic means of communication.
5. Any communications between the Parties shall be sent to the following addresses only: a. GetResponse – privacy@getresponse.com b. Customer - email address stephanie.photo@gmail.com
6. The Agreement shall be governed by Polish law. To any matters not regulated herein, the provisions of the GDPR, other applicable Polish laws, the Privacy Policy available at https://www.getresponse.com/legal/privacy.html and Terms of Service available at https://www.getresponse.com/legal shall apply. Any capitalized terms (e.g. Contacts, Force Majeure etc.) not defined herein shall have the meaning as assigned to them in Terms of Service. In the event of any discrepancies between Terms of Service and this Agreement, the provisions of this Agreement in relation to personal data protection shall prevail.
​7. The Agreement has been executed in two counterparts, one for each Party.