Last updated on February, 7, 2021.

INTRODUCTION

Joanna Bel (“we” or “us” or “our”) respects the privacy of our users (“user” or “you”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://joannabel.com, including any other media form, media channel, mobile website related or connected thereto (collectively, the “Site”).

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the “Last Updated” date of this Privacy Policy. Any changes or modifications will be effective immediately upon posting the updated Privacy Policy on the Site, and you waive the right to receive specific notice of each such change or modification.

You are encouraged to periodically review this Privacy Policy to stay informed of updates. You will be deemed to have been made aware of, will be subject to, and will be deemed to have accepted the changes in any revised Privacy Policy by your continued use of the Site after the date such revised Privacy Policy is posted.

This privacy policy was created using Termly.

Principles for processing personal data

Our principles for processing personal data are:

• Fairness and lawfulness. When we process personal data, all personal data must be collected and processed in a legal and fair manner.
• Restricted to a specific purpose. The personal data must be processed only for specific purposes.
• Transparency. You must be informed of how his/her data is being collected, processed, and used.

COLLECTION OF YOUR INFORMATION AND WHY WE COLLECT THEM

We may collect information about you in a variety of ways. The information we may collect on the Site includes:

Personal Data

Personally identifiable information, such as your name, shipping address, email address, and telephone number, and demographic information, such as your age, gender, hometown, and interests, that you voluntarily give to us when you register with the Site or when you choose to participate in various activities related to the Site, such as online chat and message boards.

You are under no obligation to provide us with personal information of any kind, however, your refusal to do so may prevent you from using certain features of the Site.

Use of Your Personal Data

The Site may use Personal Data for the following purposes and all with your consent:

• To maintain the Site, including monitoring the use of the Site.
• To manage your account: to manage your registration as a user of the Site. The Personal Data You provide can give you access to different functionalities of the Site.
• To address your requests: to attend and manage your requests to us.
• To contact you: to contact you by email, phone calls, SMS, or other forms of electronic communication, such as a mobile application’s push notifications on updates or informing related to the functionalities, products, contracted services, including the security updates, when necessary or reasonable for their implementation.
• To provide you with news, general information, or special information or offers about goods, services, and events we offer that are similar or related to those you already purchased or enquired on, unless you had opted not from receiving this type of information.
• For business transfers: we may use your information to conduct or assess a merger, restructuring, dissolution, reorganization, divestiture, or another transfer or sale of some or all our assets, whether as an ongoing concern or as part of liquidation or bankruptcy or another such proceeding, in which Personal Data held by us about users is among the assets transferred.
• For other purposes: we may use your information for purposes such as evaluating and improving the Site, products, services, marketing, or your experience, and also data analysis, determining the effectiveness of our promotional campaigns, and identifying usage trends.

Derivative Data

The information our servers automatically collect when you access the Site, such as your IP address, browser type, operating system, your access times, and the pages you have viewed directly before and after accessing the Site.

Financial Data

Financial information, such as data related to your payment method (e.g. valid credit card number, card brand, expiration date) that we may collect when you purchase, order, exchange, or request information about our services from the Site. We store only very limited, if any, financial information that we collect. Otherwise, all financial information is stored by our payment processor, [Paypal,], and you are encouraged to review their privacy policy and contact them directly for responses to your questions.

Content Management System

The Site uses WordPress as a publishing software. WordPress is a free and open-source Content Management System that is written in PHP and paired with a MySQL or MariaDB database. WordPress features include a plug-in architecture and a template system, referred to within WordPress as the Themes. By default, WordPress does not collect any personal data about visitors, and only collects the data shown on the User Profile screen from registered users. But some of the WordPress plug-ins may collect personal data, so we added relevant information below under Plugins.

Facebook Permissions

The Site may by default access your Facebook basic account information, including your name, email, gender, birthday, current city, and profile picture URL, as well as other information that you choose to make public. We may also request access to other permissions related to your accounts, such as friends, check-ins, and likes, and you may choose to grant or deny us access to each individual permission. For more information regarding Facebook permissions, refer to the Facebook Permissions Reference page.

Data From Social Networks

User information from social networking sites, such as Facebook, Instagram, Pinterest, Twitter, including your name, your social network username, location, gender, birth date, email address, profile picture, and public data for contacts, if you connect your account to such social networks.

Mobile Device Data

Device information, such as your mobile device ID, model, and manufacturer, and information about the location of your device, if you access the Site from a mobile device.

Third-Party Data

Information from third parties, such as personal information or network friends, if you connect your account to the third party and grant the Site permission to access this information.

Data From Contests, Giveaways, and Surveys

Personal and other information you may provide when entering contests or giveaways and/or responding to surveys.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address also called a hash, may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

Ninja Forms

Contact forms collect the name you provided and your email address so we can answer your request, question, or any inquiry you made using our website contact forms.

We don´t use your email for any other purpose, in this case, and we will never collect your email for sending an email campaign, or any other marketing campaigns, newsletter, or any other material to your email address or anywhere else. Except if your inquiry was a request for us to put you on any of our email lists. We will respond only to that concrete inquiry you made to us through our website contact forms.

Ninja Forms is GDPR compliant. Ninja Forms never collects or store personally identifiable information, or any information, from our website forms. Easy-to-use templates are included for Right to Be Forgotten and Data Export requests. Ties into native WordPress GDPR features for automated compliance.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other website or websites

Articles and every other content of this website may include embedded content (e.g. articles, videos, images, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited that other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

MailPoet newsletter & emails

Source: MailPoet

If you have subscribed to our newsletter or if you are a member of our website (you can log in) or if you have purchased on our website, there is a good chance you will receive emails from us. We will only send you emails that you have signed up to receive, or which pertain to the services we provided to you.

To send you emails, we use the name and email address you provide us. Our site also logs the IP address you used when you signed up for the service to prevent abuse of the system.

This website can send emails through the MailPoet sending service. This service allows us to track opens and clicks on our emails. We use this information to improve the content of our newsletters.

No identifiable information is otherwise tracked outside this website except for the email address.

MailPoet creates and stores two cookies if you are using WooCommerce and MailPoet together. Those cookies are:

Note: User must be opted-in and a confirmed subscriber.

Plugins

Source: WP Smush

Plugin: Smush

Smush does not interact with end users on your website. The only input option Smush has is a newsletter subscription for site admins only. If you would like to notify your users of this in your privacy policy, you can use the information below.

Smush sends images to the WPMU DEV servers to optimize them for web use. This includes the transfer of EXIF data. The EXIF data will either be stripped or returned as it is. It is not stored on the WPMU DEV servers.

Smush uses the Stackpath Content Delivery Network (CDN). Stackpath may store web log information of site visitors, including IPs, UA, referrer, Location, and ISP info of site visitors for 7 days. Files and images served by the CDN may be stored and served from countries other than your own. Stackpath’s privacy policy can be found here.

Smush uses a third-party email service (Drip) to send informational emails to the site administrator. The administrator’s email address is sent to Drip and a cookie is set by the service. Only administrator information is collected by Drip.

Source: Really Simple SSL

Really Simple SSL and Really Simple SSL add-ons do not process any personally identifiable information, so the GDPR does not apply to these plugins or usage of these plugins on your website. You can find their privacy policy here: https://really-simple-ssl.com/privacy-statement/.

USE OF YOUR INFORMATION

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:

• Administer sweepstakes, promotions, and contests.
• Assist law enforcement and respond to subpoena.
• Compile anonymous statistical data and analysis for use internally or with third parties.
• Create and manage your account.
• Deliver targeted advertising, coupons, newsletters, and other information regarding promotions and the Site to you.
• Email you regarding your account or order.
• Enable user-to-user communications.
• Fulfill and manage purchases, orders, payments, and other transactions related to the Site.
• Generate a personal profile about you to make future visits to the Site more personalized.
• Increase the efficiency and operation of the Site.
• Monitor and analyze usage and trends to improve your experience with the Site.
• Notify you of updates to the Site.
• Offer new products, services, and/or recommendations to you.
• Perform other business activities as needed.
• Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.
• Process payments and refunds.
• Request feedback and contact you about your use of the Site.
• Resolve disputes and troubleshoot problems.
• Respond to product and customer service requests.
• Send you a newsletter.
• Solicit support for the Site.

LEGAL BASIS FOR COLLECTING AND PROCESSING PERSONAL DATA

Joanna Bel legal basis for collecting and using the personal data described in this Data Protection Policy depends on the personal data we collect and the specific context in which we collect the information:

• Joanna Bel needs to perform a contract with you.
• You have given Joanna Bel permission to do so.
• Processing your personal data is in Joanna Bel´s or in a third party’s legitimate interests.
• Joanna Bel needs to comply with the law.

RETENTION OF YOUR PERSONAL DATA

Joanna Bel will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.

We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations for example if we are required to retain your data to comply with applicable laws, resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Derivative Data for internal analysis purposes. It is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of the Site, or We are legally obligated to retain this data for longer time periods.

WHAT RIGHTS YOU HAVE OVER YOUR DATA

If you have an account on the Site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us.

You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Data protection rights

You have the following data protection rights:

• The right to access, update or delete the information we have on you. You have the right to know whether your data is being processed by us, receive disclosure on certain aspects of the processing and receive a copy of the data processing, and also to have your data removed under certain circumstances.
• The right of rectification. You have the right to verify the accuracy of your data and ask for it to be updated or to be corrected.
• The right to object to the processing of your data if the processing is carried out on a legal basis other than consent.
• The right of restriction of processing of your data under certain circumstances in which case we will not process your data for any purpose other than storing it.
• The right to data portability. You have the right to receive your data in a structured and machine-readable format and have it transferred to another data controller.
• The right to withdraw consent at any time where you have previously given your consent to the processing of your personal data.
• The right to lodge a complaint before your competent data protection supervisory authority.

Your right can be exercised free of charge and addressed by us within 30 days. In order to exercise your right contact us at joanna@joannabel.com.

DISCLOSURE OF YOUR INFORMATION

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

By Law or to Protect Rights

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation. This includes exchanging information with other entities for fraud protection and credit risk reduction.

Third-Party Service Providers

We may share your information with third parties that perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.

Marketing Communications

With your consent, or with an opportunity for you to withdraw consent, we may share your information with third parties for marketing purposes, as permitted by law.

Interactions with Other Users

If you interact with other users of the Site, those users may see your name, profile photo, and descriptions of your activity, including sending invitations to other users, chatting with other users, liking posts, following blogs.

Online Postings

When you post comments, contributions, or other content to the Site, your posts may be viewed by all users and may be publicly distributed outside the Site in perpetuity. Visitor comments may be checked through an automated spam detection service.

Third-Party Advertisers

We may use third-party advertising companies to serve ads when you visit the Site. These companies may use information about your visits to the Site and other websites that are contained in web cookies in order to provide advertisements about goods and services of interest to you.

Affiliates

We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include our parent company and any subsidiaries, joint venture partners or other companies that we control or that are under common control with us.

Business Partners

We may share your information with our business partners to offer you certain products, services or promotions.

Social Media Contacts

If you connect to the Site through a social network, your contacts on the social network will see your name, profile photo, and descriptions of your activity.

Other Third Parties

We may share your information with advertisers and investors for the purpose of conducting general business analysis. We may also share your information with such third parties for marketing purposes, as permitted by law.

Sale or Bankruptcy

If we reorganize or sell all or a portion of our assets, undergo a merger, or are acquired by another entity, we may transfer your information to the successor entity. If we go out of business or enter bankruptcy, your information would be an asset transferred or acquired by a third party. You acknowledge that such transfers may occur and that the transferee may decline to honor commitments we made in this Privacy Policy.

We are not responsible for the actions of third parties with whom you share personal or sensitive data, and we have no authority to manage or control third-party solicitations. If you no longer wish to receive correspondence, emails, or other communications from third parties, you are responsible for contacting the third party directly.

TRACKING TECHNOLOGIES

Cookies and Web Beacons

We may use cookies, web beacons, tracking pixels, tags, scripts, and other tracking technologies on the Site to help customize the Site, to track the activity on the Site, and improve your experience. When you access the Site, your personal information is not collected through the use of tracking technology. Most browsers are set to accept cookies by default. You can remove or reject cookies, but be aware that such action could affect the availability and functionality of the Site. You may not decline web beacons. However, they can be rendered ineffective by declining all cookies or by modifying your web browser’s settings to notify you each time a cookie is tendered, permitting you to accept or decline cookies on an individual basis.

The technologies We use may include:

• Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, You may not be able to use some parts of our Site. Unless you have adjusted your browser setting so that it will refuse cookies, our Site may use Cookies.
• Flash Cookies. Certain features of the Site may use local stored objects (or Flash cookies) to collect and store information about your preferences or your activity on the Site. Flash cookies are not managed by the same browser settings as those used for Browser Cookies. For more information on how you can delete Flash Cookies, please read “Where can I change the settings for disabling, or deleting local shared objects?” available at https://helpx.adobe.com/flash-player/kb/disable-local-shared-objects-flash.html#main_Where_can_I_change_the_settings_for_disabling__or_deleting_local_shared_objects_
• Web Beacons. Certain sections of the Site and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit Joanna Bel, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on your personal computer or mobile device when you go offline, while Session Cookies are deleted as soon as you close Your web browser. Learn more about cookies: Cookies: What Do They Do?.

We use both Session and Persistent Cookies for the purposes set out below:

• Necessary / Essential Cookies: Session Cookies: These cookies are essential to provide you with services available through the Site and to enable you to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these cookies, the services that you have asked for cannot be provided, and we only use these cookies to provide you with those services.
• Cookies Policy / Notice Acceptance Cookies: Persistent Cookies: These cookies identify if users have accepted the use of cookies on the Site.
• Functionality Cookies: Persistent Cookies: These cookies allow us to remember choices you make when you use the Site, such as remembering your login details or language preference. The purpose of these cookies is to provide you with a more personal experience and to avoid you having to re-enter your preferences every time you use the Site.

For more information on how we use cookies, please refer to our Cookie Policy posted on the Site, which is incorporated into this Privacy Policy. By using the Site, you agree to be bound by our Cookie Policy.

How to control cookie performance

In accordance with our Privacy Policy, you have the right to accept or reject cookies. This does not refer to Necessary Cookies due to their functionality because they are enabling the process of browsing the Site and using the Site´s features.

If you decide to reject certain or all cookies except the necessary cookies, you will still be able to use the Site, but certain functionalities, features, or areas may be restricted for you if you do.

You can at any time change or withdraw your consent from the Cookie Declaration on the Site. Just click on the Manage consent tab on your screen and then cookie settings to choose your preference.

We set our cookie management system to automatically ask for your consent renewal every six months.

Internet-Based Advertising

Additionally, we may use third-party software to serve ads on the Site, implement email marketing campaigns, and manage other interactive marketing initiatives. This third-party software may use cookies or similar tracking technology to help manage and optimize your online experience with us. For more information about opting out of interest-based ads, visit the Network Advertising Initiative Opt-Out Tool or Digital Advertising Alliance Opt-Out Tool.

Website Analytics

We may also partner with selected third-party vendors, such as Google Analytics, to allow tracking technologies and re-marketing services on the Site through the use of first-party cookies and third-party cookies, to, among other things, analyze and track users’ use of the Site, determine the popularity of certain content and better understand online activity. This integration of Google Analytics anonymizes your IP address by default and prevents collecting personally identifiable information (PII) too. PII for Google is email addresses, mailing addresses, phone numbers, precise locations (such as GPS coordinates), full names, or usernames. Google may use the information collected, recognized, or tracked for ad personalization. If you want to learn more about how Google Analytics collects and processes data see https://www.google.com/policies/privacy/partners/.

To provide website visitors the ability to prevent their data from being used by Google Analytics, Google has developed the Google Analytics opt-out browser add-on for websites using the supported version of Google Analytics JavaScript (analytics.js, gtag.js). Google Analytics Opt-out Browser Add-on is here: https://tools.google.com/dlpage/gaoptout/

By accessing the Site you will be provided an option to choose whether or not you consent to the collection and use of your information by these third-party vendors. You are encouraged to review their privacy policy and contact them directly for responses to your questions.

We do not transfer personally identifiable information to these third-party vendors. However, if you do not want any information to be collected and used by tracking technologies, you can visit the third-party vendor or the Network Advertising Initiative Opt-Out Tool or Digital Advertising Alliance Opt-Out Tool.

You should be aware that getting a new computer, installing a new browser, upgrading an existing browser, or erasing or otherwise altering your browser’s cookies files may also clear certain opt-out cookies, plug-ins, or settings.

THIRD-PARTY WEBSITES

The Site may contain links to third-party websites and applications of interest, including advertisements and external services, that are not affiliated with us. Once you have used these links to leave the Site, any information you provide to these third parties is not covered by this Privacy Policy, and we cannot guarantee the safety and privacy of your information.

Before visiting and providing any information to any third-party websites, you should inform yourself of the privacy policies and practices (if any) of the third-party responsible for that website, and should take those steps necessary to, in your discretion, protect the privacy of your information. We are not responsible for the content or privacy and security practices and policies of any third parties, including other sites, services, or applications that may be linked to or from the Site.

SECURITY OF YOUR INFORMATION

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties. Therefore, we cannot guarantee complete security if you provide personal information.

How we protect your data

SSL and/or TLS encryption

For security reasons and protection of the transmission of confidential content, such as purchase orders or inquiries you submit to the Site, this website uses either an SSL or a TLS encryption system. You know it is an encrypted connection if the address line of the browser switches from “HTTP://” to “HTTPS://” and also by the appearance of the lock icon in the browser line. When the SSL or TLS encryption is activated, it prevents the data you transmit to the Site to be read by third parties.

Security system

The security system includes anti-spam, firewall, malware scanner, site accessibility checking, security and threats audits for WordPress websites. Its security functions provide the latest firewall rules, malware signatures, and database of malicious IP addresses – all that is needed to ensure the security of any website.

WordPress Firewall:

The web application firewall detects and blocks malicious traffic. It protects the Site at the endpoint by providing deep integration with WordPress. In contrast to cloud alternatives, it does not violate encryption, cannot be bypassed, and does not contribute to data leakage. It protects from brute force attacks by restricting login attempts.

WordPress Security Scanner:

The malware scanner checks the system files, themes, and plugins for malware, invalid URLs, backdoors, SEO spam, malicious redirects, and code injections. Compares system, themes, and plugins with those which are in the WordPress.org repository, checking their integrity and informing you of all changes. Recover modified files by overwriting them with the original version. Delete unknown and unwanted files easily via the plugin interface. It checks the Site for vulnerabilities and notifies in case of any problems or discrepancies. It also provides a notification of potential security issues when the plugin has been closed or inactivated. It checks content security by scanning the contents of files, messages, and comments for dangerous URLs and suspicious content.

POLICY FOR CHILDREN

We do not knowingly solicit information from or market to children under the age of 13. If we learn we have collected or received personal information from a child under 13 years of age or under 18 years of age without the parent or guardian of the child’s consent, the personal information that is collected or received will be deleted with no delay. If you become aware of any data we have collected from children under age 13, please contact us using the contact information provided below.

CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. If you set the DNT signal on your browser, we will respond to such DNT browser signals.

OPTIONS REGARDING YOUR INFORMATION

Account Information

You may at any time review or change the information in your account or terminate your account by:

• Logging into your account settings and updating your account
• Contacting us using the contact information provided below

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use, and/or comply with legal requirements.

Emails and Communications

If you no longer wish to receive correspondence, emails, or other communications from us, you may opt-out by:

• Noting your preferences at the time you register your account with the Site.
• Logging into your account settings and updating your preferences.
• Contacting us using the contact information provided below.

If you no longer wish to receive correspondence, emails, or other communications from third parties, you are responsible for contacting the third party directly.

CONTACT US

In case of any privacy-specific concerns and you have questions or comments about this Privacy Policy, please contact us at joanna@joannabel.com.