Good morning!

If you've come here, it's a reliable sign that you value your privacy. We understand this perfectly, so we put into your hands a document in which in one place you will find the rules of processing personal data and the use of cookies and other tracking technologies in connection with the functioning of the https://www.tjboats.com/pl.

Formal information to begin with – the administrator of the store is a company operating "TJ TECHNOLOGIES sp. z o.o. ul. Aesthetic 4, 43-100 Tychy tax id number: 6462983187"

This privacy policy is designed in the form of questions and answers The choice of such a form is dictated by the attention to transparency and readability of the information presented to you. Below you will find a table of contents of this policy corresponding to the questions to which we answer in turn.

#1: Who is the controller of your personal data?

#2: Who can you contact about the processing of your personal data?

#3: What information do we have about you?

§ 4: Where do we get your personal data from?

#5: Is your data safe?

#6: For what purposes do we process your personal data?

#7: How long will we keep your personal data?

#8: Who are the recipients of your personal data?

#9: Do we transfer your data to third countries or international organizations?

#10: Do we use profiling? Do we make an automated decision based on your personal data?

#11: What rights do you have in relation to the processing of your personal data?

#12: Do we use cookies and what are they?

#13: Why do we use cookies?

#14: Can you disable cookies?

#15: For what purposes do we use our own cookies?

#16: What third-party cookies are used?

#17: Do we track your behavior within our store?

#18: Are we targeting you?

§ 19: How can you manage your privacy?

#20: What are server logs?

#21: Is there anything else you should know about?

#22: Can this privacy policy be subject to change?

If you have any doubts about the privacy policy, you can contact us at any time by sending an email to info@tjboats.com

#1: Who is the controller of your personal data?

The administrator of your personal data is "TJ TECHNOLOGIES sp. z o.o. ul. Aesthetic 4, 43-100 Tychy tax id number: 6462983187".

#2: Who can you contact about the processing of your personal data?

As part of the implementation of the protection of personal data in our organization, we have decided not to appointed a data protection officer due to the fact that in our situation it is not mandatory. For matters related to the protection of personal data and privacy in general, you can contact us at the e-mail address info@tjboats.com

#3: What information do we have about you?

Depending on your purpose, we may process the following information about you:

• first name

• e-mail address

• phone number

• data contained in correspondence addressed to us,

• IP address

We have described the scope of the processed data precisely for each processing purpose. Information in this regard can be found later in this policy.

§ 4: Where do we get your personal data from?

In most cases, you give it to us yourself. This happens when:

• you are contacting us.

In addition, some of your information may be automatically collected by the tools we use:

• The newsletter system mechanism collects information about your activity in relation to the content sent to you as part of the opening of messages, clicking on links, etc.

#5: Is your data safe?

We care about the security of your personal data. We have analysed the risks associated with the different processing of your data and then implemented appropriate security and personal data protection measures. We constantly monitor the state of our technical infrastructure, train our staff, look at the procedures used, make the necessary improvements. If you have any questions about your personal data, we are at your disposal at info@tjboats.com

#6: For what purposes do we process your personal data?

These goals are more than one. Below is a list of them, followed by a more detailed overview. We have also assigned appropriate legal bases for processing to individual purposes.

• handling of correspondence – Art. Article 6 (1) 1(f) GDPR,

• creation of an archive for the purposes of possible defence, determination or redress, as well as for the identification of the returning client – Art. Article 6 (1) 1(f) GDPR,

• self-marketing – Art. Article 6 (1) 1(f) GDPR.

Mailing handling details

By contacting us, you naturally provide us with your personal information contained in the content of the correspondence, in particular your e-mail address and your name. Providing data is voluntary, but necessary to establish contact.

Your data is processed in this case for contact with you, and the basis for processing is Art. Article 6 (1) 1(f) GDPR, which is our legitimate interest. The legal basis for post-contact processing is also our legitimate purpose in the form of archiving correspondence in order to ensure that we can prove certain facts in the future (Art. Article 6 (1) 1(f) GDPR).

The content of the correspondence may be archived and we are unable to clearly determine when it will be deleted. You have the right to request the presentation of the history of correspondence you have conducted with us (if it has been archiving) and to request its removal, unless its archiving is justified by our overriding interests, e.g. defending against potential claims on your part.

Tax and accounting obligations – details

If we issue an invoice to you, it is part of the accounting records, which will be kept for the period of time required by law. In this case, your personal data is processed in order to fulfill our tax and accounting obligations (Art. Article 6 (1) Article 1(.c the GDPR in accordance with the provisions governing tax and accounting obligations).

Archive Details

As part of the description of the individual purposes of the processing of personal data, which are located above, we have indicated the time limits for the storage of personal data. These terms are often associated with our archiving of certain data for the purpose of providing ourselves with the opportunity to prove certain facts in the future, to reconstituted the course of cooperation with the client, the said correspondence, defense, determination or redress. We are based in this respect on our legitimate interest, as referred to in Art. Article 6 (1) 1(f) GDPR.

#7: How long will we keep your personal data?

The retention periods have been indicated separately for each purpose of the processing. You will find this information as part of the details dedicated to each separate processing purpose.

#8: Who are the recipients of your personal data?

We risk saying that modern business is not able to do without services provided by third parties. We also use such services. Some of these services involve the processing of your personal data. Third-party service providers that are involved in the processing of your personal data are:

• a web host who stores data on the server,

• a cloud computing service provider that stores backups that may contain your personal information,

• an accounting office that processes your data visible on invoices,

• a maintenance service provider that accesses the data if the technical work carried out concerns areas where personal data are located,

• other subcontractors who access the data if the scope of their activities requires such access.

All entities listed above process your data on the basis of contracts concluded with us entrusting the processing of personal data and guarantee an adequate level of protection of personal data.

If necessary, your data may be made available to a solici counsel or lawyer bound by professional secrecy. The need may arise from the need for legal assistance requiring access to your personal data.

Your personal data may also be transferred to tax authorities to the extent necessary for the performance of tax, accounting and accounting obligations. This includes, in particular, any declarations, reports, reports and other accounting documents in which your personal data is located.

In addition, if necessary, your personal data may be shared with entities, authorities or institutions entitled to access the data on the basis of legal provisions such as police, security, courts, public prosecutor's office.

Moreover, we use tools that collect a number of information about you related to the use of our website. This includes, in particular, the following information:

• Information about the operating system and web browser you are using

• viewed bystander,

• time spent on the site,

• transitions between subpages

• Clicks on individual links

• the source from which you go to our site,

• the age range you are in

• Your gender,

• Your approximate location limited to your locality.

• Your interests based on online activity.

This information in itself is not, in our view, personal data. Because this information is collected by third-party tools we use, this information is also processed by tool providers on the basis of their terms and privacy policies. As a general principle, this information is used to provide and improve services, manage them, develop new services, measure the effectiveness of advertising, protect against fraud and abuse, and personalize the content and advertising displayed on individual services, websites and applications. We have tried to describe the details in this regard later in this policy, as part of the explanations on the various tools.

#9: Do we transfer your data to third countries or international organizations?

Yes, part of the processing of your personal data may involve their transfer to third countries.

We transfer your personal data to third countries in connection with the use of tools that store personal data on servers located in third countries, in particular the USA. Providers of these tools guarantee an adequate level of protection of personal data through the relevant compliance mechanisms provided for by the GDPR, in particular by joining the Privacy Shield program or using standard contractual clauses.

The storage of personal data on servers located in third countries occurs under the following tools:

• Google G-Suite services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – for all data that is processed through Google services, including data that is contained in files that are synchronized with Google Drive.

Both Rocket Science Group LLC and Google Ireland Limited ensure an adequate level of protection of personal data through the application of the compliance mechanisms provided for by the GDPR, in particular through the use of standard contractual clauses.

We also remind you here that we use third-party tools that may collect anonymous information about you to us. We have already mentioned this on several occasions in this policy, including in response to a previous question. Providers of these tools often use servers located around the world to store the information they collect, especially in the United States of America (USA).

#10: Do we use profiling? Do we make an automated decision based on your personal data?

We do not make decisions against you based solely on automated processing, including profiling, which would have legal effects on you or similarly significantly affect you.

Yes, we use tools that I can take certain actions depending on the information collected through tracking mechanisms, but we believe that these actions do not have a significant impact on you because they do not differentiate your situation as a customer, do not affect the terms of the contract you may enter into with us, etc.

For example, we may use certain tools to target you with personalized ads based on past actions you have taken on our site, or to suggest products that may be of interest to you. We are talking about so-called behavioral advertising. We encourage you to learn more about behavioral advertising, in particular on privacy issues. For details, along with the ability to manage behavioral advertising settings, see http://www.youronlinechoices.com.

We emphasize that within the tools we use, we do not have access to information that would allow you to be identified. The information we are talking about here is, in particular:

• Information about the operating system and web browser you are using

• viewed bystander,

• time spent on the site,

• transitions between subpages

• the source from which you go to our site,

• the age range you are in

• Your gender,

• Your approximate location limited to your locality

• Your interests based on online activity.

We do not compile the information indicated above with your personal data, which is located in our databases. This information is anonymous and does not allow us to identify you. This information is stored on the servers of individual tool providers, and these servers can most often be located around the world.

#11: What rights do you have in relation to the processing of your personal data?

The GDPR grants you the following potential rights related to the processing of your personal data:

• the right to access and obtain a copy of your data,

• the right to rectify (correct) their data,

• the right to erasure (if in your opinion there are no grounds for us to process your data, you can request that we delete it),

• the right to restrict the processing of data (you can request that we limit the processing of data only to their storage or to perform actions agreed with you if in your opinion we have incorrect data or process them unjustly),

• the right to object to the processing of your data (you have the right to object to the processing of your data on the basis of a legitimate interest; you should indicate a particular situation that in your opinion justifies our cessation of the processing subject to objection; we will stop processing your data for these purposes, unless we show that the grounds for our processing override your rights or that your data is necessary for us to establish , to pursue or defend claims),

• the right to data portability (you have the right to receive from us in a structured, commonly used format machine-readable personal data that you have provided to us on the basis of a contract or your consent; you may have that data sent directly to another entity),

• the right to withdraw your consent to the processing of personal data, if you have previously given such consent,

• the right to lodge a complaint with a supervisory authority (if you find that we are processing data unlawfully, you can lodge a complaint with the President of the Office for Personal Data Protection or other competent supervisory authority).

The rules relating to the exercise of the abovementioned powers are described in detail in Article 10. 16 – 21 GDPR. We encourage you to familiarize yourself with these regulations. For our part, we consider it necessary to explain to you that the rights indicated above are not absolute and will not be entitled to you in relation to all the processing of your personal data.

We emphasize that one of the rights indicated above is always vested in you – if you consider that we have committed a breach of the data protection rules when processing your personal data, you have the opportunity to lodge a complaint with the (President of the Office for Personal Data Protection).

You can also always ask us to share information about what data we have about you and for what purposes we process it. Just send a message to the info@tjboats.com. However, we have made every effort to ensure that the information you are interested in is fully presented in this privacy policy. You can also use the email address provided above if you have any questions about the processing of your personal data.

#12: Do we use cookies and what are they?

Our store, like almost all other websites, uses cookies.

Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone) that can be read by our iteration system (own cookies) or third-party information and communication systems (third-party cookies). Cookies may store and store certain information, which can then be accessed by information and communication systems for certain purposes.

Some cookies used by us are deleted after the end of the session of the internet browser, i.e. after its closure (so-called session cookies). Other cookies are stored on your end device and allow us to recognize your browser the next time you access the website (persistent cookies).

If you would like to know more about cookies as such, you can see, for example, this material: https://pl.wikipedia.org/wiki/HTTP_cookie.

#13: Why do we use cookies?

We use cookies based on your consent, except when cookies are necessary for the proper provision of a service to you electronically.

As far as your consent to cookies is concerned, we accept the option according to which you give such consent through the settings of your web browser or additional software supporting the management of cookies. We assume that you agree to all cookies used by us that are not blocked by your browser or additional software that you use.

Please note that disabling or restricting the use of cookies may prevent the use of some of the features available in our store and cause difficulties in using our store, as well as from many other websites that use cookies. For example, if you block social media plug-in cookies, the buttons, widgets and social features implemented in our store may not be available to you.

#14: Can you disable cookies?

Yes, you can manage your cookie settings within your web browser. You can block all or selected cookies. You can also block cookies for specific websites. You can also delete previously stored cookies and other website and plug-in data at any time.

Web browsers also offer the ability to use incognito mode. You can use it if you don't want information about pages you've visited and files you've downloaded saved to your browsing and download history. Cookies created in incognito mode are deleted when all incognito windows are closed.

Browser plug-ins are also available to control cookies, such as google cookies. Ghostery (https://www.ghostery.com). Additional software, in particular antivirus packages, etc. may also provide the option to control cookies.

In addition, tools are available on the Internet to control certain types of cookies, in particular the collective management of behavioural advertising settings (e.g. www.youronlinechoices.com/, www.networkadvertising.org/choices).

Please note that disabling or restricting the use of cookies may prevent the use of some of the features available in our store and cause difficulties in using our store, as well as from many other websites that use cookies. For example, if you block social media plug-in cookies, the buttons, widgets and social features implemented in our store may not be available to you.

#15: For what purposes do we use our own cookies?

Own cookies are used to ensure the proper functioning of the individual mechanisms of the website. Cookies also store information about the cookie settings you define from the cookie management mechanism.

#16: What third-party cookies are used?

The following third-party cookies are available within our shop:

• Google Analytics,

• Google Tag Manager

• Google AdWords

• Facebook (social tool cookies),

• Hotjar,

• YouTube.

Details of individual third-party cookies are described below.

Google Analytics Details

We use Google Analytics provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We carry out our activities in this regard, based on our legitimate interest in producing statistics and analyzing them in order to optimize our websites.

In order to use Google Analytics, we have implemented a special code tracking Google Analytics in our website code. The tracking code uses Google LLC cookies for Google Analytics. You can block Google Analytics tracking code at any time by installing a browser add-on provided by Google: https://tools.google.com/dlpage/gaoptout.

Google Analytics automatically collects information about your use of our website. The information collected in this way is most often transmitted to Google's servers, which may be located worldwide and stored there.

We emphasize that under Google Analytics, we do not collect any data that would allow you to identify you. Therefore, the data collected as part of Google Analytics is not personal data for us. The information we have access to in Google Analytics includes, in particular:

• Information about the operating system and web browser you are using

• subpages that you browse within our store,

• time spent in our store and on its subpages,

• transitions between subpages

• the source from which you go to our store.

In addition, we use the following Advertising Features as part of Google Analytics:

• demographic and interest reports,

• remarketing

We also do not collect personal data as part of the Advertising Features. The information we have access to is, in particular:

• the age range you are in

• Your gender,

• Your approximate location limited to your locality

• Your interests based on online activity.

Google Analytics and Google Analytics 360 are certified by the ISO 27001 Independent Security Standard. ISO 27001 is one of the most recognized standards in the world and certifies that systems that support Google Analytics and Google Analytics 360 meet the requirements.

If you are interested in the details of Google's use of data from websites and apps that use Google services, we encourage you to review this information: https://policies.google.com/technologies/partner-sites.

Google Tag Manager Details

We use Google Tag Manager provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and allows you to manage tags, or small pieces of code, so that we are able to

control user traffic and behavior, collect information about the effectiveness of ads, and

take action to improve our store. Google Tag Manager

it does not collect any personally identifiable information, however, this tool triggers other tags that in turn may collect data.

Google AdWords Details

We use remarketing features available through Google AdWords supported by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We carry out our activities in this regard on the basis of our legitimate interest in marketing our own products or services.

When you visit our website, google's remarketing cookie is automatically left on your device, which collects information about your activity in our store. Thanks to the information collected in this way, we are able to show you ads within the Google Network depending on your behavior in our store. For example, if you view a product, the information will be noted by a remarketing cookie, which will allow us to target you with advertising about that product or any other product we deem appropriate. This ad will appear to you on the Google Network when you use the Internet, browse other websites, etc.

We emphasize that we do not collect any data that identifies you using Google Ads. Any compilation of data in such a way that it takes on the nature of personal data may be made on Google's part, but in this respect we are no longer responsible for this, because Google carries out these activities on the basis of the contract concluded with you as a user of Google services.

We, using Google AdWords, are only able to define the audiences we would like our ads to reach. Based on this, Google decides when and how it will show you our ad.

Further processing of information takes place only if you have consented to Google linking your browsing history to your account and using information from your Google Account to personalize the ads that appear on websites. In this case, Google will use your data to create and define target audience lists for remarketing across devices. To do this, Google combines the temporarily collected information with other data you have to create target groups.

If you don't want to receive personalized ads, you can manage your ad settings right on the Google page: https://adssettings.google.com/.

If you are interested in the details of Google's use of data from websites and apps that use Google services, we encourage you to review this information: https://policies.google.com/technologies/partner-sites.

Hotjar Details

We use Hotjar to better understand your needs and optimize our website for your experience using it, which is our legitimate interest. The tool is provided by an external entity, i.e. a third party. Hotjar Limited, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta.

Hotjar records each visitor to our website and allows you to play a video recording of its traffic on our site, as well as generate so-called heat maps. As part of the Hotjar tool, we do not have access to information that allows us to identify you because Hotjar does not record the process of filling out forms. The information we have access to within Hotjar is, in particular:

• Information about the operating system and web browser you are using

• subpages that you browse within our service,

• time spent on our website and its subpages,

• transitions between individual subpages within our service,

• the source from which you go to our service,

• Places where you click with your mouse.

In order to use Hotjar, we have implemented special hotjar tracking code in our website code. The tracking code uses Hotjar Limited cookies. The information collected as part of cookies is stored by Hotjar as part of a pseudonymous user profile. Neither Hotjar nor we use this information to identify you.

You can object to Hotjar creating your user profile, hotjar storing information about your use of our website and using Hotjar cookies here: https://www.hotjar.com/legal/compliance/opt-out.

If you are interested in the details of hotjar data processing, we encourage you to read hotjar's privacy policy: https://www.hotjar.com/legal/policies/privacy.

YouTube Details

Our pages include YouTube widgets that allow you to play you to you directly from our sites. YouTube is operated by Google LLC.

The videos are embedded on the site in privacy mode. Based on the information provided by YouTube, this means that no cookies are stored on your device or Google collects any information about you until you play the recording.

When you play a recording, YouTube stores cookies on your device and receives information that you have played the recording from a specific website, even if you don't have a Google Account or are not signed in. If you've signed in to your Google Account, that service provider will be able to directly assign a visit to our website to your account. The purpose and scope of data collection and its further processing and use by Google, as well as your ability to contact you and your rights in this regard and the ability to make settings to protect your privacy are described in Google's privacy policy.

If you don't want Google to assign data collected during video playback directly to your profile, you'll need to sign out of your account before playing the video. You can also completely prevent plug-ins from loading on the page by using appropriate extensions for your browser, such as blocking scripts.

The information collected as part of cookies related to YouTube videos embedded on our websites is used by Google to ensure the proper and safe functioning of the widget, to analyze and optimize the services provided by YouTube, as well as for personalization and advertising purposes.

Keep in mind that when you play back recordings that are available on YouTube, you use services provided electronically by Google LLC. Google LLC is a stand-alone entity independent of us that provides electronic services to you. You can search for details about YouTube's policies, including privacy, in documents shared directly with YouTube:

• Regulations: https://www.youtube.com/t/terms,

• Privacy Policy: https://policies.google.com/privacy

§ 19: How can you manage your privacy?

The answer to this question can be found in many places of this privacy policy when describing individual tools, behavioral advertising, consent to cookies, etc. Nevertheless, for your convenience, we have gathered this information again in one place. Below you will find a list of options for managing your privacy.

• settings of cookies within the web browser,

• browser plug-ins supporting the management of cookies e.g. Ghostery

• additional software that manages cookies,

• incognito mode in a web browser

• Behavioral advertising settings, e.g. youronlinechoices.com,

• Google Analytics Opt-out: https://tools.google.com/dlpage/gaoptout,

• Google Ads Settings: https://adssettings.google.com/,

• Facebook Ads Settings: https://www.facebook.com/ads/settings,

• HotJar Opt-out: https://www.hotjar.com/legal/compliance/opt-out

#20: What are server logs?

When you use a store, you send queries to the server where the store is stored. Each query addressed to the server is saved in the server logs.

Logs include m.in. Your IP address, server date and time, web browser information and operating system you use. Logs are saved and stored on the server.

The data stored in the server logs is not associated with specific people using the site and is not used by us to identify you.

Server logs are only supporting material for administering a page, and their content is not disclosed to anyone other than those authorized to administer the server.

#21: Is there anything else you should know about?

As you can see, the subject matter of processing personal data, the use of cookies and managing privacy in general is quite complicated. We have made every effort to ensure that this document gives you the most far-reaching knowledge on issues that matter to you. If anything is unclear to you, you want to learn more or just talk about your privacy, please email us at info@tjboats.com

#22: Can this privacy policy be subject to change?

Yes, we may modify this privacy policy, in particular due to technological changes on the part of our store and changes in the law. If you are a registered user of the store, you will receive a message about any change in the privacy policy. In addition, all archival versions of the privacy policy are linked below.