Polices

The e-shop JOYSTONE of Pat & Mary Works Ltd. , a company incorporated in Taiwan, ROC (hereinafter referred to as "JOYSTONE") processes personal data provided by Customer to fulfill and additionally confirm Terms and Conditions, to process electronic orders and shipments and for the necessary communication during a period required by law.

This Privacy Policy covers how we protect your personal data including how we collect, process, store, and use your data, in order to protect your rights and for you to feel peace of mind when using our services. If you do not agree with part or whole of the Privacy Policy, please stop using our services immediately.

In the Privacy Policy, the first person ("we", "our", "us", "ours") denotes JOYSTONE or any of its subsidiaries responsible for the collection of personal data and bound by this Policy. The second person ("you", "your", "yours") denotes the customer or the individual providing the personal data.

Scope

Before using the services offered by JOYSTONE's website and mobile Web, please familiarize yourself with our Privacy Policy, and agree to all the articles listed. If you do not agree to part or all of the articles, please do not use the services offered by our Platforms.

The Privacy Policy only applies to the collection, processing, storage, and use of your personal data by JOYSTONE's Platforms. We are not responsible for the content or privacy policies of third-party companies, websites, people, or services, even when you access these from a link on our Platforms.

The source of personal data

1. Controller processes personal data obtained with consent from Customer and collected through the contract to purchase and fulfillment of the electronic order created in the e-shop JOYSTONE;

2. Controller processes only the identifying and contact details of Customer which are necessary for the fulfillment of the contract to purchase;

3. Controller processes personal data for the shipping and accounting purposes and for the necessary communication between the contracting parties for the duration required by law. Personal data will not be made public and will not be transferred to other countries.

The source of personal data

1. Controller processes personal data obtained with consent from Customer and collected through the contract to purchase and fulfillment of the electronic order created in the e-shop JOYSTONE;

2. Controller processes only the identifying and contact details of Customer which are necessary for the fulfillment of the contract to purchase;

3. Controller processes personal data for the shipping and accounting purposes and for the necessary communication between the contracting parties for the duration required by law. Personal data will not be made public and will not be transferred to other countries.

Purpose of data processing

Controller processes personal data of the Customer for following purposes:

1. Registration on the website JOYSTONE in compliance with Chapter 4, Section 2 of GDPR;

2. For fulfillment of the electronic order created by Customer (name, address, e-mail, telephone number);

3. To observe law and regulations arising from the the contractual relationship between Customer and Controller;

4. Personal data are necessary for the fulfillment of contract to purchase. Contract cannot be concluded without the personal data.

Duration of personal data storage

1. Controller stores personal data for the period necessary for fulfillment of rights and obligations arising from the contractual relationship between Controller and Customer and for the duration of 3 years following the conclusion of contractual relationship;

2. Controller must delete all personal data after the expiration of the period required for the storage of personal data.

Recipients and processors of personal data

Third parties processing personal data of the Customer are subcontractors of the Controller. Services of these subcontractors are indispensable for the successful fulfillment of the contract to purchase and processing of the electronic order between Controller and Customer.

Subcontractors of the Controller are:

Webnode e-shop system;

Shipping company;

Google Analytics (website analytics)

Rights of Customer

In compliance with the Regulation, Customer is entitled to:

1. The right of access to personal data;

2. The right to rectification of personal data;

3. The right to erasure of personal data;

4. The right to object to processing of personal data;

5. The right to data portability;

6. The right to withdraw consent to the processing of personal data in writing or by e-mail sent to: service@joy-stone.net;

7. The right to lodge a complaint with the supervisory authority in case of suspected breach of the Regulation.

Security of personal data

1. Controller declares to take all technical and organizational precautions necessary for the protection of personal data;

2. Controller has taken technical precautions to secure data storage spaces, in particular securing access to computer with a password, using antivirus software and performing regular maintenance of computers.

Protection of Minors

Our Platforms are not designed for minors. Users under 18 should acquire permission from a parent or legal guardian before using our services, or use our services under the supervision of a parent or legal guardian. Furthermore, the parent or legal guardian must agree to our collecting or using of any personal data provided. The parent or legal guardian may ask JOYSTONE use of their minor's personal data, at any time.

Final provisions

1. By placing an electronic order on the website JOYSTONE, Customer confirms to be informed about all the conditions of personal data protection and accepts them to the full extent;

2. Customer accepts these rules by ticking the checkbox in the order purchase form;

3. Controller can update these Rules at any time. New, updated version has to be published on his website.