Privacy Policy


1. Introduction

This Privacy Policy explains how JONYS SIA, ID: 45403043267 (hereinafter, the "Entity" or "JONYS") collects, uses, discloses, and protects personal data when you use www.jonys.eu (“Website”).

Our Website operates as an online platform for the sale and trade of mobile phones and electronic devices for both:

  • B2C (individual consumers)

  • B2B (business customers, resellers, partners)

We are committed to protecting your personal data and complying with:

  • General Data Protection Regulation (EU) 2016/679 (GDPR)

  • Applicable Latvian data protection laws

Explanation:
This section establishes the legal foundation and informs users that their data is handled in accordance with EU privacy laws.


2. Data Controller

The data controller responsible for your personal data is:

JONYS SIA
Darza iela 62 - 17, Bauska, LV-3901, Latvia
Email: sales@jonys.eu
Phone: +371 25456755

Explanation:
The “data controller” is the company that decides how and why your data is processed.


3. Personal Data We Collect

3.1 Information You Provide Directly

When you use our Website, you may provide:

  • Full name

  • Company name (for B2B users)

  • Registration/VAT number (B2B)

  • Email address

  • Phone number

  • Billing and shipping address

  • Account login details

  • Order and transaction information

Explanation:
This is data you actively enter when creating an account, placing orders, or contacting us.


3.2 Automatically Collected Data

We may automatically collect:

  • IP address

  • Device type and browser

  • Operating system

  • Website usage data (pages visited, time spent, clicks)

  • Cookies and tracking data

Explanation:
This helps us understand how users interact with the platform and improve performance.


3.3 Data from Third Parties

We may receive data from:

  • Payment service providers

  • Delivery/logistics companies

  • Fraud prevention and verification services

Explanation:
Some services require external partners, especially for payments and shipping.


4. Purposes of Data Processing

We process your personal data for the following purposes:

4.1 Contract Performance

  • Processing orders and payments

  • Delivering products

  • Managing user accounts

Explanation:
Without this, we cannot provide our core service (selling and delivering goods).


4.2 Legal Obligations

  • Accounting and tax compliance

  • Fraud prevention

  • Responding to legal requests

Explanation:
We are legally required to store certain transaction data.


4.3 Legitimate Interests

  • Improving Website functionality

  • Customer support

  • Business analytics

  • Preventing misuse of the platform

Explanation:
These are reasonable business needs that do not override your rights.


4.4 Marketing (with Consent)

  • Sending promotional emails

  • Offering deals on mobile phones and electronics

Explanation:
We only send marketing if you opt in, and you can unsubscribe at any time.


5. Legal Bases for Processing

Under GDPR, we rely on:

  • Contract – when processing is necessary to fulfill an order

  • Legal obligation – for compliance requirements

  • Legitimate interest – for improving services and security

  • Consent – for marketing and non-essential cookies

Explanation:
GDPR requires us to clearly state why we are allowed to process your data.


6. Sharing of Personal Data

We may share your data with:

6.1 Service Providers

  • Payment processors

  • Delivery companies

  • IT and hosting providers

6.2 Business Partners (B2B context)

  • Suppliers or distributors (only when necessary for transactions)

6.3 Authorities

  • Government or regulatory bodies, when required by law

Explanation:
We only share data when necessary and never sell personal data.


7. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, such as:

  • Standard Contractual Clauses (SCCs)

  • Use of compliant service providers

Explanation:
This ensures your data remains protected even outside the EU.


8. Data Retention

We retain personal data only as long as necessary:

  • Account data: as long as the account is active

  • Transaction data: typically 5–10 years (legal requirement)

  • Marketing data: until consent is withdrawn

Explanation:
We do not store data indefinitely without reason.


9. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority

Explanation:
These rights give you control over your personal data.


10. Data Security

We implement appropriate technical and organizational measures, including:

  • Secure servers

  • Encryption where applicable

  • Access controls

  • Monitoring for security breaches

Explanation:
We take reasonable steps to protect your data from unauthorized access.


11. Cookies and Tracking

We use cookies and similar technologies. For full details, please refer to our Cookie Policy.

Explanation:
Cookies help the Website function and improve user experience.


12. Children’s Privacy

Our Website is not intended for individuals under 18 years old. We do not knowingly collect data from children.

Explanation:
This protects minors and ensures legal compliance.


13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

Explanation:
Users should review this policy periodically.


14. Contact Information

If you have any questions or requests regarding this Privacy Policy or your personal data, contact us:

Website: www.jonys.eu
Company: JONYS SIA
Registration Number: 45403043267
Legal Address: Darza iela 62 - 17, Bauska, LV-3901, Latvia
Email: sales@jonys.eu
Phone: +371 25456755


15. Supervisory Authority

You have the right to lodge a complaint with your local data protection authority. In Latvia, this is:

Data State Inspectorate (Datu valsts inspekcija)

Explanation:
This is the official authority overseeing data protection in Latvia.


Update Date: [18.03.2026]