Company: JORLAR s.r.o.

Registered address:
K Červenému vrchu 844/2a
CZ-160 00 Prague 6
Czech Republic

Managing Director: Jörg Harmening

Email: info@jorlar.com

Telephone: +420 226 886 571

This Privacy Policy applies to:

• the website jorlar.com;
• the JORLAR online store powered by WooCommerce;
• the JORLAR mobile application for Android and iOS;
• customer accounts and user profiles;
• orders, support requests, contact forms and newsletter subscriptions;
• push notifications and other communications sent through the application.

When you register or manage an account, we may collect:

• username;
• first and last name;
• email address;
• telephone number;
• password in securely protected form;
• company name and business information;
• billing and shipping addresses;
• profile photograph, if you choose to upload one;
• account preferences and communication settings.

When you request information or place an order, we may collect:

• products and services ordered;
• order history and order status;
• invoice and tax information;
• delivery information;
• payment status and transaction references;
• communications relating to an order;
• information required to provide software licenses, activation keys or access to external services.

Payments may be processed by banks or independent payment service providers. JORLAR does not normally receive or store complete payment-card details. Payment providers process payment information under their own privacy policies and security requirements.

When you use the website or mobile application, technical information may be collected automatically, including:

• IP address;
• device type, model and operating-system version;
• application version;
• language and regional settings;
• device or other identifiers;
• Advertising ID or similar identifiers made available by the operating system;
• application interactions and usage information;
• diagnostic information, crash reports and performance data;
• network and connection information;
• push-notification tokens.

This information may be processed to operate the application, deliver notifications, protect accounts, diagnose technical problems and understand application performance.

The JORLAR application may request access to the device camera when you choose to use QR-code or barcode-scanning functionality.

Camera access is requested only when required for the relevant feature. JORLAR does not continuously access or record video through the camera.

You may choose a photograph from your device and upload it as your profile image. Access to photos is optional and is initiated by the user.

The selected image may be transmitted to and stored on JORLAR systems or service-provider infrastructure in order to display it in your profile.

If you actively use a location-based feature, such as detecting your current position or assisting with address selection, the application may request access to precise or approximate location data.

Location access is optional and subject to your device permission settings. The application does not require continuous background location tracking for its standard shopping and account functions.

You can deny or revoke location access at any time through your device settings.

The application may allow you to confirm access using fingerprint, Face ID or another biometric method supported by your device.

Biometric authentication is performed locally by the device operating system. JORLAR does not receive or store your fingerprint, facial template or other raw biometric data.

We may process:

• messages submitted through contact or support forms;
• email correspondence;
• newsletter subscription information;
• push-notification preferences;
• records of consent or opt-out requests.

You may unsubscribe from marketing emails by using the unsubscribe link in the message. Push notifications may be disabled through the application or device settings.

We process personal data for the following purposes:

• creating and managing user accounts;
• authenticating users and protecting accounts;
• providing the website and mobile application;
• processing and fulfilling orders;
• providing products, software licenses and customer support;
• issuing invoices and maintaining accounting records;
• delivering physical products;
• sending operational and push notifications;
• responding to questions and support requests;
• improving application stability, functionality and security;
• detecting fraud, misuse and technical problems;
• complying with legal and regulatory obligations;
• sending marketing communications where permitted or consented to.

Where the General Data Protection Regulation applies, we process personal data on one or more of the following legal bases:

• Performance of a contract: to create an account, process orders and provide requested products or services.
• Legal obligation: to comply with accounting, tax, consumer-protection and other applicable requirements.
• Legitimate interests: to secure, maintain and improve our services, prevent misuse and communicate with business customers.
• Consent: where required for optional permissions, marketing communications, certain analytics technologies or other optional processing.

The JORLAR application uses or may include Google Firebase and related software-development kits for functions such as:

• push-notification delivery;
• application configuration;
• analytics and measurement;
• application diagnostics and performance monitoring;
• security, installation attribution and fraud prevention.

Depending on the enabled service and device configuration, Google services may process device identifiers, Advertising ID, application interactions, IP address, diagnostic information and technical device data.

More information about Google's privacy practices is available at: https://policies.google.com/privacy

The JORLAR website may use cookies and similar technologies required for login, shopping-cart operation, security, language selection, preferences, analytics and website performance.

Where legally required, optional cookies and analytics technologies are activated only after consent. You may manage cookies through the cookie banner or browser settings.

We may provide personal data to service providers where necessary to operate our business and deliver requested services, including:

• website, application and cloud-hosting providers;
• WooCommerce and technical service providers;
• Google Firebase and related infrastructure providers;
• payment processors and banking institutions;
• shipping and logistics providers;
• email, newsletter and communication providers;
• accounting, legal and professional advisers;
• manufacturers or suppliers where required to fulfil an order or license.

We do not sell personal data. Service providers are permitted to process personal data only for the relevant services and in accordance with applicable law and contractual obligations.

Personal data may also be disclosed where required by law, court order, regulatory authority or to protect the rights, security and property of JORLAR, its users or others.

Some technology providers may process data outside the Czech Republic or European Economic Area.

Where required, international transfers are protected using an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.

Personal data is retained only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• while an account remains active;
• while necessary to fulfil an order or provide support;
• for applicable warranty, contractual and limitation periods;
• for periods required by tax, accounting and other applicable laws;
• as necessary to resolve disputes or protect legal rights.

When data is no longer required, it is deleted, anonymised or securely restricted, unless continued storage is required by law.

You may request deletion of your JORLAR account and associated personal data at any time.

Instructions and the account-deletion request method are available at: https://jorlar.com/delete-account/

You may also contact: info@jorlar.com.

Following a Following a verified deletion request, the account and personal data that are no longer required will be deleted or anonymised. Certain order, invoice, transaction or legal-compliance records may be retained where required by applicable law.

Subject to applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• withdraw consent at any time;
• receive certain data in a portable format;
• submit a complaint to a competent data-protection authority.

To exercise these rights, contact info@jorlar.com. We may need to verify your identity before completing a request.

We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

Data transmitted between the application, website and supporting systems is protected in transit using encrypted HTTPS connections where supported. No system can be guaranteed to be completely secure, and users should keep their login credentials confidential.

JORLAR is intended for business customers and adult users. It is not directed to children, and we do not knowingly create customer accounts for children.

If you believe that a child has provided personal data to JORLAR, please contact us so that we can review and delete the information where appropriate.

JORLAR may provide links to third-party websites, applications, products or services, including products and services supplied by INELO, Eurowag, fireTMS and other business partners.

Third parties process personal data under their own terms and privacy policies. We recommend reviewing those policies before using external services.

We may update this Privacy Policy when our services, technologies or legal obligations change. The latest version will be published on this page with an updated revision date.

Where required, significant changes may also be communicated through the application, website or email.

Questions, privacy requests and complaints may be sent to:

JORLAR s.r.o.
K Červenému vrchu 844/2a
CZ-160 00 Prague 6
Czech Republic

Email: info@jorlar.com

You also have the right to lodge a complaint with the competent supervisory authority. In the Czech Republic, this is the Office for Personal Data Protection: https://uoou.gov.cz/