Last updated July 25, 2023
We collect, use and are responsible for certain personal information about you. When we do so we are subject to various laws in the United States and the General Data Protection Regulation which applies across the European Union (including in the United Kingdom), and we are responsible as "controller" of that personal information for the purposes of those laws.
Key Terms. It would be helpful to start by explaining some key terms used in this policy:
We, us, our
Our representative in the EU according to Art 27 GDPR
Maetzler Rechtsanwalts GmbH & Co KG
Our representative in the UK according to Art 27 UK-GDPR
PrighterUK-Rep by Prighter Ltd
Our data protection officer
May be contacted at email@example.com
Any information relating to an identified or identifiable individual
Special category (sensitive) personal information
Personal information revealing racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs or trade union membership
The categories below describe the personal information we have collected and may have shared with one or more third parties in the past twelve months or may collect about you and may share with one or more third parties and the sources from which we collect those categories of personal information.
This personal information is required to provide services to you. If you do not provide personal information we ask for, it may delay or prevent us from providing services to you.
USE OF PERSONAL INFORMATION
We may use your information for the following purposes:
- Sending you communications and administrative emails;
- Personalizing and tailoring the features, performance and support of the Website;
- Identifying you as a user on the Website;
- For the performance of a contract between you and us;
- Sending you promotional/marketing information, advertising, newsletters, offers or other information from us;
- Providing support related to your account or orders you may place on the Website;
- Providing you with opportunities and functionality that we think would be of particular interest;
- Analyzing, benchmarking and conducting research on user data and interactions with the Website;
- Processing services, resolving disputes, preventing fraud and verifying your identity;
- Monitoring, maintaining, administering and improving Website performance;
- Ensuring business policies are adhered to, e.g. policies covering security and internet use;
- Protecting your, our, or third parties’ networks, systems, property, or physical safety;
- Complying with requests from regulatory agencies, law enforcement, and other public and government authorities, as well as with relevant industry standards and policies;
- Enforcing our contracts, terms, and conditions or otherwise exercising our legal rights; defending ourselves from claims; and complying with laws and regulations that apply to us or third parties with whom we work;
- Aggregating the information collected via cookies and similar technologies to use in statistical analysis to help us track trends, analyze patterns, and conduct research and product development;
- Statistical analysis to help us manage our business;
- Responding to your inquiries related to employment opportunities or other requests;
- Participating in any merger, acquisition, or other corporate transaction;
- Meeting our or third parties’ audit and compliance requirements; and
- For any other purposes that we may specifically disclose at the time you provide or we collect your information.
The above list does not apply to special category personal or sensitive information, which we will only process with your explicit consent.
Anonymized or Aggregated Information
We may also use data that we collect on an aggregate or anonymous basis (such that it does not identify any individual users) for various business purposes, where permissible under applicable laws and regulations, including for research, product development, and the purposes set forth above. We may publish or otherwise provide our research containing this aggregated data in our products and services to third parties. If you would like to opt out of inclusion of your information in such aggregated data, please email firstname.lastname@example.org.
SHARING OF PERSONAL INFORMATION WITH OTHER ENTITIES
We may share your personal information with the following types of entities or in the following situations:
Service providers: We engage service providers to facilitate our operation of the Website and provide the Services. These service providers analyze information about the Website and your use of the Website. Information disclosed for these purposes may include device and online identifiers, ISP information, session ID and /or session log data, information about your internet, browser, and network activity, and location data. We only allow our service providers to handle your personal information if we are satisfied they take appropriate measures to protect your personal information. We also impose contractual obligations on service providers relating to ensure they can only use your personal information to provide services to us and to you.
Legal authorities, emergency responders and other legal requirements: We may disclose personal information to third parties as permitted by, or to comply with, applicable laws, regulations, or legal obligations, including but not limited to responding to a subpoena or similar legal process, protecting against fraud, cooperating with law enforcement or regulatory authorities, protecting and defending the rights or property of Jungmaven, preventing or investigating possible wrongdoing in connection with the Website/Services, protecting the personal safety of users of the service or the public, and protecting against legal liability. Information disclosed for these purposes may include device and online identifiers, information about your internet, browser, and network activity, and location data.
For Business transfers: We may share or transfer your personal information in connection with, or during negotiations of, any merger, sale of our assets, financing, or acquisition of all or a portion of our business to another company.
With Business partners: We may share your personal information with third party companies that are our business partners to offer you certain products, services or promotions.
With other users: when you share personal information or otherwise interact in the public areas of the Website with other users, such information may be viewed by all users and may be publicly distributed outside. If you interact with other users or register through a third party social media service such as Facebook, Instagram, Twitter, or Google (“Third-Party Social Media Service”), your contacts on the Third-Party Social Media Service may see your name, profile, pictures and description of your activity. Similarly, other users will be able to view descriptions of your activity, communicate with you and view your profile.
User Testimonials and Feedback. We often receive testimonials and comments from users who have had positive experiences with our products and Services. We occasionally publish such content. When we publish this content, we may identify the user who submitted the content by their first and last name and may also indicate their home city. We obtain the user’s consent prior to posting their last name along with the testimonial. We may post feedback submitted to us on the Website from time to time. If you make any comments on a blog or forum associated with the Website, you should be aware that any personal information you submit there can be read, collected, or used by other users of these forums, and could be used to send you unsolicited messages. We are not responsible for the personally identifiable information you choose to submit in these blogs and forums.
Promotional Communications. We may use your personal information to send you updates by email about our services, including exclusive offers, promotions or new products or services.
We have a legitimate interest in processing your personal information for promotional purposes. This means we do not usually need your consent to send you promotional communications. However, where consent is needed, we will ask for this consent separately and clearly.
You have the right to opt out of receiving promotional communications at any time by contacting us at email@example.com.
Cookies are small pieces of data sent from a website and stored on a device. Cookies may enable us to capture and compile statistical information about how you use our online services, including information relating to your device’s IP address, the frequency of your visits, readership data (such as the average length of visits, which pages are viewed or shared during a visit or other interactions with our content, such as time spent viewing videos, PDFs read and links clicked), authentication information, acceptance or rejection of website terms, and periods of inactivity. To learn more about cookies, including information on what cookies have been set on your device and how cookies can be managed and deleted, visit https://www.allaboutcookies.org/.
Our online services also use web beacons. Web beacons are invisible tags and may be placed on a webpage, in advertisements, or in an email or other message. They usually work in conjunction with cookies, registering when a particular device visits a particular page.
“Clickstream” data (e.g., information regarding which of our Website pages you access, the frequency of such access, and your product and service preferences) may be collected by Jungmaven itself, or by our service providers, using cookies, web beacons, page tags, or similar tools that are set when you visit the Website or when you view an advertisement we may have placed on another website. Clickstream data and similar information may be shared internally within Jungmaven and used for administrative purposes to assess the usage, value and performance of our online products and services; to improve your experience with the Website; and as otherwise permitted by applicable law or regulation. This information may be processed by us for the purposes described above, or on our behalf by other entities, solely in accordance with our instructions.
How We Use These Technologies
We, our services providers, and third party business partners may use information collected from cookies, web beacons, and similar technologies for the following purposes:
We may combine the information that we collect through cookies, web beacons and similar technologies with other personal information we have collected from you from both online and offline sources.
We may work with service providers to promote our products and services both on the Website and other websites. For example, if you visit a page on the Website or third-party websites that provides information about one of our products or services, a cookie may be placed on your browser or device that identifies the product or service you viewed. This information allows us, our service providers, and our third-party business partners to deliver more relevant and tailored content, such as ads for that particular product or service.
Other than service providers, we do not allow unaffiliated third parties to collect personal information about your activities on the Website.
Managing Your Preferences
Web Browser Preferences
You can also opt out of online targeted advertising by companies participating in the Digital Advertising Alliance by visiting https://www.aboutads.info/choices.
Mobile Device Preferences
Your mobile device may give you the ability to opt out of the use of information about the mobile browsers or apps you use in order to serve you ads that are targeted to your interests. You can stop the collection of location information from your mobile device by changing the preferences on your mobile device.
Do Not Track Policy
Most browsers can be set to send signals to third party websites requesting them not to track the user’s activities. At this time, we do not respond to “do not track” signals. Consequently, our third party service providers may indeed track and collect information about your online activities over time while navigating to, from and on our online services, notwithstanding any “do not track” signals we may receive.
Keeping Your Personal Information Secure. Our goal is to protect your personal information submitted to us through our Website or online services. We maintain appropriate reasonable physical, electronic, and procedural safeguards that comply with applicable law to guard nonpublic personal information about you against loss, misuse or unauthorized access, disclosure, alteration or destruction of the information you have provided to us through our online services. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality. We have internal policies governing the proper handling of consumer information by personnel and requiring third parties that provide support or marketing services on our behalf to adhere to appropriate security standards with respect to such information. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so. The security of your personal information is important to us, but please note that no method of transmission over the Internet, or method of electronic storage is perfectly secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
Where Your Personal Information is Held. The Website and our Services are United States-based, and are controlled, operated and administered from our offices within the United States. However, Jungmaven, its operations, workforce, and service providers are located throughout the world. Information may be held at our offices and those of our third party agencies, service providers, representatives and agents as described above (see above: "SHARING OF PERSONAL INFORMATION WITH OTHER ENTITIES"). Some of these third parties may be based outside the European Economic Area. For more information, including on how we safeguard your personal information when this occurs, see below: "Transferring Your Personal Information Out of the EEA". For more information on how specific service providers process personal information, see the section below “Detailed Information on the Processing of Your Personal Information”.
If you have additional questions about how we protect your information, please contact us at firstname.lastname@example.org.
Links to Other Websites
Information Collected from Third Party Companies
We may receive personal information and/or anonymous data about you from companies that provide our Services or products by way of a co-branded or private-labeled website or companies that offer their products and/or services on the Website. We may add this information to the personal information we have already collected from you via the Website or Services in order to improve the Services we provide, the features we offer you, or the functionality of the Website.
How Long Your Personal Information Will Be Kept. Personal Information shall be processed and stored for as long as required by the purpose they have been collected for. Personal Information collected for purposes related to the performance of a contract between the us and you shall be retained until such contract has been fully performed. Personal information collected for the purposes of our legitimate interests shall be retained as long as needed to fulfill such purposes. Jungmaven may be allowed to retain Personal information for a longer period whenever you have given consent to such processing, as long as such consent is not withdrawn. Furthermore, we may be obliged to retain Personal information for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority. Once the relevant personal information retention period expires, Personal information shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
Transferring Your Personal Information Out of the EEA. To deliver services to you, it is sometimes necessary for us to share your personal information outside the European Economic Area (EEA), e.g.:
- With our offices, which are located outside the EEA;
- With your and our service providers located outside the EEA;
- If you are based outside the EEA; or
- Where there is an international dimension to the services we are providing to you or the contract between you and us.
These transfers are subject to special rules under European and UK data protection law. These non-EEA countries do not have the same data protection laws as the United Kingdom and EEA. We will, however, ensure the transfer complies with data protection law and all personal information will be secure. If you would like further information, please contact us at email@example.com or see "How To Contact Us" below.
Detailed Information on the Processing of Your Personal Information
Our third-party service providers have access to your personal information only to perform their tasks on our behalf and are obligated not to disclose or use it for any other purpose.
We use Shopify to power our Website. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
We use Amazon Web Services (AWS) to power our Website, you can read more about how AWS uses your Personal Information here: https://aws.amazon.com/privacy/.
We use Google Analytics and Google Tag Manager to help us understand how our customers use our Website and to manage our website. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
We use Adobe Audience Manager to help us understand how our customers use our Website, to manage our website and to help manage our marketing campaigns. You can read more about how Adobe uses your Personal Information here: https://www.adobe.com/privacy/policy.html.
Email Marketing & Communications
We may use third party email service providers to manage and send emails to you. We may use your personal information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt-out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send or by contacting us. Third party services that we used or may use in the future include Klaviyo. For more information about these services and their privacy policies, please visit their websites.
SMS Marketing & Communications
We may use third party SMS service providers to manage and send SMS text messages to you. We may use your personal information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt-out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any text message we send or by contacting us. Third party services SMS services that we used or may use in the future include Attentive Mobile Inc. For more information about these services and their privacy policies, please visit their websites.
Loyalty & Rewards Program; Customer Reviews
We use Yotpo to help manage our loyalty and rewards program to help manage the customer reviews on our Website. You can read more about how Yotpo uses your Personal Information here: https://www.yotpo.com/privacy-policy/.
We use Impact to manage our affiliate marketing program. For more information about these services and their privacy policies, please visit its website at: https://impact.com/privacy-policy/.
As described above, we use your personal information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
We may use the following providers for such advertising. You can read more about how these providers use your personal information and you may opt out of targeted advertising from these providers by using the links below:
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/ .
PROTECTING CHILDREN’S PRIVACY ONLINE
Protecting the privacy of minors is important to Jungmaven. We comply with the Children’s Online Privacy Protection Act in the United States, and similar laws around the world, where applicable. The Website, and the Services are not directed to or intended for individuals under 18 years of age. We do not knowingly collect or solicit personal information from or about individuals under the age of 18, or the relevant minimum age under applicable local legal requirements, except as permitted under applicable law. If you become aware that we have collected personal information from a minor, please contact us at firstname.lastname@example.org so that we can promptly investigate and address the issue.
California residents should be aware that this section does not apply to: personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) and its implementing regulations, the California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994; or other information subject to a California Consumer Privacy Act (CCPA) exception.
Your Rights under the CCPA
Disclosure of Personal Information We Collect About You
You have the right to know:
Personal Information Sold or Used for a Business Purpose
In connection with any personal information we may sell or disclose to a third party for a business purpose, you have the right to know:
Right to Deletion
Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:
Protection Against Discrimination
You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. This means we cannot, among other things:
Exercising Your CCPA Data Protection Rights
In order to exercise any of your rights under the CCPA, and if you are a California resident, you can email us at email@example.com.
California law requires us to verify the requests we receive from you when you exercise certain of the rights listed above. To verify your request, we will check the information you provide us in your request against third party identity verification tools. As part of this process, we may call you after you submit your request to verify information. You may also designate an authorized agent to exercise certain of the rights listed above on your behalf by providing the authorized agent with power of attorney pursuant to the California Probate Code. If an authorized agent submits a request on your behalf, we will contact you to verify that they represent you.
Jungmaven will disclose and deliver the required information free of charge within 45 days of receiving your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonably necessary and with prior notice.
Do Not Sell My Personal Information
We do not sell personal information. However, the third party service providers we partner with (for example, our advertising partners) may use technology on the Website that shares or “sells” personal information as defined by the CCPA law. If you wish to opt out of the use of your personal information for interest-based advertising purposes and these potential sales as defined under CCPA law, you may do so by following the instructions below or by emailing us at firstname.lastname@example.org. Please note that any opt out is specific to the browser you use. You may need to opt out on every browser on every device that you use.
You can opt out of receiving ads that are personalized as served by our service providers by emailing us at email@example.com.
Your mobile device may give you the ability to opt out of the use of information about the apps you use in order to serve you ads that are targeted to your interests:
- "Opt out of Interest-Based Ads" or "Opt out of Ads Personalization" on Android devices
- "Limit Ad Tracking" on iOS devices
You can also stop the collection of location information from Your mobile device by changing the preferences on your mobile device.
"Do Not Track" Policy as Required by California Online Privacy Protection Act (CalOPPA)
Our Website does not respond to Do Not Track signals. However, some third-party websites do keep track of your browsing activities. If you are visiting such websites, you can set your preferences in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track signals by visiting the preferences or settings page of Your web browser.
Your California Privacy Rights (California's Shine the Light law)
Under California Civil Code Section 1798 (California's Shine the Light law), California residents with an established business relationship with us can request information once a year about sharing their personal information with third parties for the third parties' direct marketing purposes. If you'd like to request more information under the California Shine the Light law, and if you are a California resident, you can contact us by email at firstname.lastname@example.org.
Legal Basis for Processing Personal Information under GDPR
We may process personal information under the following conditions:
- Consent - you have given your consent for processing personal information for one or more specific purposes.
- Performance of a contract - provision of personal information is necessary for the performance of an agreement with you and/or for any pre-contractual obligations thereof.
- Legal obligations - processing personal information is necessary for compliance with a legal obligation to which we are subject.
- Vital interests - processing personal information is necessary in order to protect your vital interests or of another natural person.
- Public interests - processing personal information is related to a task that is carried out in the public interest or in the exercise of official authority vested in Jungmaven.
- Legitimate interests: processing personal information is necessary for the purposes of the legitimate interests pursued by the Jungmaven.
In any case, the Company will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of personal information is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
Your Rights under the GDPR
The Company undertakes to respect the confidentiality of your personal information and to enable you to exercise your rights under the GDPR.
Right to Access
The right to be provided with a copy of your personal information (the right of access)
Right to Rectification
The right to require us to correct any mistakes in your personal information
Right to be Forgotten
The right to require us to delete your personal information—in certain situations
Right to Restriction of Processing
The right to require us to restrict processing of your personal information—in certain circumstances, e.g. if you contest the accuracy of the data
Right to Data Portability
The right to receive the personal information you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations
Right to Object
The right to object:
Right Not to be Subject to Automated Individual Decision-Making
The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you
For further information on each of those rights, including the circumstances in which they apply, see the guidance from the UK Information Commissioner's Office (ICO) on individual rights under the General Data Protection Regulation.
Exercising of Your GDPR Data Protection Rights
We hope that we or our Data Protection Officer can resolve any query or concern you raise about our use of your information. You may exercise your GDPR data protection rights by contacting us clicking here. Please note that we may ask you to verify your identity before responding to such requests. If you make a request, we will try our best to respond to you as soon as possible.
The General Data Protection Regulation also gives you right to lodge a complaint with a supervisory authority, in the European Union (or European Economic Area) state where you work, normally live, or where any alleged infringement of data protection laws occurred.
Contacting Our GDPR Data Protection Officer
We have designated a Data Protection Officer whom you have the right to contact with regard to all issues related to processing of your personal information and to the exercise of your rights under the GDPR. You may exercise your GDPR data protection rights by contacting us clicking here.
EEA data subjects may contact the data protection officer with regard to all issues related to processing of their personal data and to the exercise of their rights under the GDPR.
Changes to This Privacy Notice.
We may change this privacy notice from time to time–when we do, we will inform you via our website or other means of contact such as email.
Our contact details are shown below:
12308 NE 56TH ST STE 1205
VANCOUVER, WA, 98682-6453
Do You Need Extra Help? If you would like this notice in another format (for example: audio, large print, braille) please contact us (see "How to contact us" above).