Privacy policy

The administrator of the personal data processed within the Online Services is the StethoMe sp. z o.o. company having its seat in Poznań (postal code: 61-663) in Poland at the address ul. Winogrady 18a, entered into the Entrepreneur Register of National Court Register (KRS) under KRS number: 0000558650, NIP (tax identification number): 7831726542, REGON (business register number): 361535342

The Administrator of the data can be contacted using the e-mail address: gdpr@stethome.com.

When collecting personal data, we always notify of the legal basis for its processing. The said basis stems from provisions of GDPR (Regulation of the European Parliament and of the Council (EU) 2016/679 of 27th of April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC - General Data Protection Regulation). When we refer to:

• Article 6 Item 1 Letter a) of GDPR – it means that we process the personal data on the basis of the consent received,

• Article 6 Item 1 Letter b) of GDPR – it means that we process the personal data since it is indispensable to use for the purposes of performing the contract or taking actions prior to concluding it, at a request received,
• Article 6 Item 1 Letter c) of GDPR – it means that we process the personal data for the purpose of meeting an obligation under law,
• Article 6 Item 1 Letter f) of GDPR – it means that we process the personal data for the purpose of pursuing legally justified interests.

1. We may also process the personal data required for implementation of the contract concluded with you. However, even before concluding it, we may process the personal data required for taking action at your request. This data is processed under Article 6 Item 1 Letter b) of GDPR.
2. In the event of implementation of the contract for provision of paid services, we may process your data for the purposes of meeting the accounting and tax obligations. This data is processed under Article 6 Item 1 Letter c) of GDPR.
3. During and after implementation of the contract, we process the personal data of the party to it for the purposes of presumptive consideration and pursuit of claims. Our legally justified interest includes, for example, the possibility of responding to a presumptive complaint, which we are obligated to do under separate provisions of the civil law. In such case we will process the personal data under the legally justified interest consisting in defence against presumptive claims or pursuit of presumptive claims. This data is processed under Article 6 Item 1 Letter f) of GDPR.
4. We will store this data for the period required to fulfil the objectives indicated, not longer than until prescription of claims resulting from separate provisions of the law.
5. You are entitled to access your data, rectify it, remove it, limit its processing, transfer it, and file a complaint to a supervisory body. In the situation where the data is processed for the purposes specified in Item 3, you are also entitled to object to its processing.
6. Provision of this data is voluntary. However, if it is not provided, it will make it impossible to conclude or implement the contract.
7. The recipients of this data include: our hosting provider, e-mail service provider, IT service provider, transport service provider, advertising service provider, provider of accounting services and software intended for invoice handling, banking service and online payment provider, legal, counselling, and debt collection service provider, and other service providers whose services we take advantage of within the framework of the purpose indicated.

1. We provide an option to subscribe to the list of recipients of our newsletter. If you used this function, we process your personal data for the purposes of sending that newsletter. A newsletter may contain advertising, commercial, or marketing content.
2. If you subscribe to the list of recipients of our newsletter, you agree that we can provide you with information about both the product and its new features, unused features, updates, enhancements and, if applicable, account status information using the services of Hubspot Inc.
3. This data is processed under your consent, and therefore under Article 6 Item 1 Letter a) of GDPR.
4. You are entitled to withdraw your consent at any time. However, such a withdrawal of consent has no impact on compliance of any previous data processing with law.
5. We will store your data until the withdrawal of the consent granted. In the event of you never withdrawing it, we will process your data until we cease sending the newsletter.
6. You are entitled to access your data, rectify it, remove it, limit its processing, transfer it, and file a complaint to a supervisory body.
7. Provision of this data is voluntary. However, if it is not provided, it will make it impossible to send the newsletter.
8. The recipients of this data are: our hosting provider, IT service provider, e-mail service provider, and newsletter distribution service provider.

1. We may contact you in order to check your level of satisfaction with StethoMe services and products. Your opinion is very important to us, because it lets us develop and improve our services and products, so that they meet our users’ expectations.To this effect, we may send and carry out e-mail, SMS and telephone surveys via the communication channels you provided during registration or by using other tools (pop-up windows in the application). The information and data provided by you in the survey in our application are anonymised. If you do not want to complete the survey while using the application, simply skip it.
2. Consent to the sending of the survey is voluntary (Article 6(1)(a) of the GDPR). You decide whether you wish to be sent the survey and about the period of processing of your data. Remember that you can withdraw your consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
3. You have the right of access to your data, the right to their rectification, erasure and restriction of their processing, the right to data portability, the right to object to the data processing and the right to lodge a complaint with a supervisory authority.
4. The data may be received by: our hosting provider, e-mail service provider, IT service provider, transport service provider, advertising service provider, provider of accounting services and invoicing software, banking service and electronic payment service provider, the provider of legal, counselling and debt collection services, as well as other service providers used by us in the fulfillment of a specific purpose.

1. We may process your personal data and the personal data of your family members, such as full name and image for the purpose of publication of comments about our product on our website and on our social media channels. This happens when we contact you to obtain your consent to such publication and you grant the consent.
2. Since the personal data is processed on the basis of consent (Article 6(1)(a) of the GDPR), the granting of consent is purely voluntary. You decide what data you wish to make available to us and for how long, therefore, we will process the data until you withdraw the consent.
3. Remember that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
4. You have the right of access to your data, the right to their rectification, erasure and restriction of their processing, the right to data portability, the right to object to the data processing and the right to lodge a complaint with a supervisory authority.
5. The data is received by: our hosting provider, IT service provider, e-mail service provider, advertising service provider, administrators of individual social media channels.

1. We may process your personal data such as full name, telephone number, e-mail address and age for the purpose of recruitment for research studies on the basis of your application and consent to be included in our database of potential candidates.
2. By participating in our recruitment, you consent to the processing of your personal data provided in the application form. If we accept your candidacy, we will contact you for the purpose of further cooperation related to the research studies.
3. You may withdraw your consent to the processing of personal data at any time, because it has been freely given (Article 6(1)(a) of the GDPR). The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
4. You have the right of access to your data, the right to their rectification, erasure and restriction of their processing, the right to data portability, the right to object to the data processing and the right to lodge a complaint with a supervisory authority.
5. The data may be received by: our hosting provider, e-mail service provider, IT service provider, transport service provider, advertising service provider, provider of accounting services and invoicing software, banking service and electronic payment service provider, the provider of legal, counselling and debt collection services, as well as other service providers used by us in the fulfillment of a specific purpose.

1. We may process your personal data such as full name, telephone number, e-mail address, age and auscultation recordings for the purpose of conducting research studies. As part of our cooperation, we will also ask you to provide the address of residence to which we will send you a stethoscope. The processing of the indicated data (of yours or of your child) is based on your application and consent to the participation in the research study.
2. You may withdraw from participation in medical research at any time.
3. Participation in these research studies is purely voluntary.
4. When withdrawing from participation in a research programme, you can also withdraw your consent to the processing of personal data. If you do not withdraw the consent, we will keep you informed about future research programmes. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
5. After you withdraw the consent to the processing of personal data, we will erase your (or your child’s) personal data such as full name, telephone number, e-mail address and age, whereas data from auscultation recordings will be anonymised in order to eliminate the possibility of associating an individual with a specific auscultation recording.
6. You have the right of access to your data, the right to their rectification, erasure and restriction of their processing, the right to data portability, the right to object to the data processing and the right to lodge a complaint with a supervisory authority.
7. The data may be received by: our hosting provider, e-mail service provider, IT service provider, transport service provider, advertising service provider, provider of accounting services and invoicing software, banking service and electronic payment service provider, the provider of legal, counselling and debt collection services, as well as other service providers used by us in the fulfilment of a specific purpose.

1. We may process the personal data you provide in the registration form (patient and physician) and data related to the user account in order to perform a service related to the StethoMe system (application).
2. The personal data is processed for the purpose of performance of a contract (Article 6(1)(b) of the GDPR) or fulfilment of a legitimate interest of the controller or a third party (Article 6(1)(f) of the GDPR) and on the basis of consent (Article 6(1)(a) of the GDPR).
3. Personal data processed in order to perform a contract will be processed for a period necessary for the provision of the service and for as long as necessary for the establishment, exercise or defence of claims, and until withdrawal of consent to the processing.
4. You have the right of access to your data, the right to their rectification, erasure and restriction of their processing, the right to data portability, the right to object to the data processing and the right to lodge a complaint with a supervisory authority.
5. The data may be received by: our hosting provider, e-mail service provider, IT service provider, transport service provider, advertising service provider, provider of accounting services and invoicing software, banking service and electronic payment service provider, the provider of legal, counselling and debt collection services, as well as other service providers used by us in the fulfillment of a specific purpose.
6. More information about the use of the StethoMe system can be found in the Terms and Conditions.

1. We may process your personal data for the purposes of direct marketing. This happens, for example, when we answer a message of yours and present the details of our offer and commercial, educational or marketing information.
2. For the purposes of direct marketing, we may take advantage of profiling, consisting in automated decision-making with regard to showing you advertisements. Such a decision is made on the basis on the actions you have been making within the Online Service, and in particular on the basis of contracts concluded and websites browsed. In practice, profiling supports the usefulness of our Online Service, allowing us to present the content that may potentially be of interest to you.
3. This data is processed under Article 6 Item 1 Letter f) of GDPR.
4. We will process your data until you withdraw your consent, which you can withdraw at any time.
5. You are entitled to access your data, rectify it, remove it, limit its processing, transfer it, and object to its processing, and to file a complaint to a supervisory body.
6. You are entitled not to be subject to profiling, unless you granted your consent to it.
7. Provision of this data is voluntary. However, if it is not provided, it will make it impossible to carry out direct marketing activities.
8. The recipients of this data are: our hosting provider, IT service provider, e-mail service provider, and advertising service provider including Facebook and Google utilizing the customer match tool - used for creating personalized advertisements based on the data that is shared with us

1. Starting from the moment you launch our website, we process certain data for the purposes of ensuring security of services, namely:
   • public IP address of the device sending the enquiry,
   • browser type and language,
   • enquiry date and time,
   • the number of bytes sent by the server,
   • the URL address of the previously visited page in the event of the visit resulting from using a link,
   • information on errors that occurred during the execution of the enquiry.
2. Our legally justified interest within this processing is keeping server event logs and securing the Online Service against potential hacker attacks and other abuses. This includes the possibility of determining the IP address of the person performing illegal activity within the Online Service, such as an attempt at breaching the security measures, publishing prohibited content, or attempted illegal activities with the use of our servers.
3. This data is processed under Article 6 Item 1 Letter f) of GDPR.
4. We will store this data for the period required to fulfil the objectives indicated, not longer than until prescription of claims resulting from separate provisions of the law.
5. You are entitled to access your data, rectify it, remove it, limit its processing, object to its processing, and file a complaint to a supervisory body.
6. The provision of this data is a prerequisite for using the Online Service. If this data is not provided, it will be impossible to use the Online Service.
7. The recipients of this data are our hosting provider and IT service provider.

When processing personal data, we take advantage of external services. As a result of that, the recipients of your personal data may be third parties. When collecting personal data, we always inform those recipients. However, since the intelligibility of the message is our top priority, we only include a general mention. That is why we hereby explain that when informing of individual categories of recipients, we have the following entities in mind:

• IT service provider: eCommerceConnections Sp. z o.o., ul. Topolowa 2a, 62-090 Bytkowo, Poland; Shopify International Ltd., 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland; LINKER CLOUD Sp. z o.o., ul. Tadeusza Borowskiego 2, 03-475 Warszawa, Poland.
• Transport/courier service provider: eCommerceConnections Sp. z o.o., ul. Topolowa 2a, 62-090 Bytkowo, Poland; InPost S.A, ul. Wielicka 28, 30-552 Kraków, Poland; DHL Parcel Polska Sp. z o.o., ul. Osmańska 2, 02-823 Warszawa, Poland.
• Hosting service provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany; Google Cloud, Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA.
• E-mail service provider: Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA.
• Advertising and analytics service provider: Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA; Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, USA; LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
• Accounting service provider: Taxteam sp. z o.o., al. Kościuszki 39, 90-418 Łódź, Poland.
• Invoice handling software provider: TAXXO ul.Łubinowa 1F/7, 52-210 Wrocław, Poland; Chargebee Inc. 340 S Lemon Avenue, #1537, Walnut, California 91789, USA; Shopify International Ltd., 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.
• Legal / counselling / debt collection service provider - these service providers are appointed individually each time when a necessity arises.
• Newsletter distribution service provider: The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
• Banking service provider: Santander Bank Polska S.A., al. Jana Pawła II 17, 00-854 Warszawa, Poland; mBank S.A. seated in Warsaw (in Poland) at the address ul. Senatorska 18.
• Online payment service provider: PayU S.A., ul. Grunwaldzka 186, 60-166 Poznań, Poland; PayLane Sp. z o.o., ul. Norwida 4, 80–280 Gdańsk, Poland.
• External payment system for subscription payments: Chargebee Inc. 340 S Lemon Avenue, #1537, Walnut, California 91789, USA – with a stipulation that it is the user who transmits his/her data to the operator, and StethoMe sp. z o.o. receives information about the creation of the subscription by the user and about traffic in the shopping cart. More information on the terms of use and the rules of personal data processing can be found at:
  https://www.chargebee.com/privacy/
  https://www.chargebee.com/company/terms/
• Provider of services supporting the external payment system: Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.
• Online store operated by Shopify - Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. With this provider, we use the Facebook Conversation API tool, which records information about user activity on our online store website and sends it to Facebook in order to optimise the ads targeted to users and increase their effectiveness. You can find more in the terms of use and the privacy policy:
  https://www.shopify.com/legal/privacy
  https://www.facebook.com/business/help/2041148702652965?id=818859032317965
  https://www.facebook.com/legal/technology_terms  

1. In view of the fact that we take advantage of services of other providers, your personal data may be transferred outside of the European Economic Area, namely to the following country: United States of America (USA).
2. The European Commission has determined that certain countries from beyond the European Economic Area (EEA) protect personal data sufficiently.
3. Since the country to which we transfer the personal data has not been considered a secure country, the transfer of data takes place under a contract that includes standard data protection clauses adopted by the European Commission.

Whenever we refer to the rights related to processing of your personal data, we refer to the rights described below. The possibility of exercising the rights described below is independent of the legal basis for processing of personal data.

The right to access the data

You are entitled to receive from us a confirmation whether we process any personal data that regards you. If we do, you are entitled to access this data and to receive additional information on:

• purposes of data processing,
• categories of the data considered,
• recipients or categories of recipients to whom the data has been or will be disclosed, particularly regarding recipients in third countries or international organisations,
• to the extent possible, the planned period of data storage, and if it is not possible, on the criteria of determining that period,
• the right to demand us to rectify, delete, or limit the processing of data, to file an objection to such processing, and on the right to submit a complaint to a supervisory body,
• the source of data, if your data was not collected directly from you,
• automated decision making, including profiling, and the principles of making such decisions, as well as on the significance and anticipated consequences of such processing for you.

After receiving such a demand, we are obligated to provide you with a copy of the personal data that is subject to processing. If such a demand is received by electronic means and if we do not receive any reservation to the contrary, we will provide the information also by electronic means.

The right to rectify the data

You are entitled to demand us to rectify immediately any personal data that regards you and is incorrect. With taking into account any purposes of processing, you are entitled to demand supplementation of incomplete personal data, including by submitting an additional declaration.

The right to removal of data (to be forgotten)

You are entitled to demand us to remove immediately any personal data that regards you. We are obligated then to remove the personal data without undue delay if any of the following circumstances take place:

• you have removed your consent to processing of your personal data and we have no other basis for processing it,
• you have made an effective objection to processing of data that regards you,
• your personal data was processed illegally,
• your personal data has to be removed in order to meet an obligation under law,
• your data was collected in relation to offering information society services.

The right to limit data processing

You are entitled to demand us to limit the processing in the following cases:

• when you question the correctness of the data – for the period allowing us to check its correctness,
• when the processing is illegal and you object to the removal of data, demanding limitation of its use instead,
• when we no longer need the personal data for processing purposes, but you require it in order to establish, pursue, or defend claims,
• when you submitted an objection to processing of your data – until establishing whether the legally justified basis on our side is superior in relation to the basis of your objection.

Automated decisions, including profiling

You are entitled not to be subject to a decision that is based solely on automated processing, including profiling, and has legal consequences for you and has a similar significant impact on you.

This entitlement is not applicable if such a decision:

• is indispensable for conclusion or performance of a contract between you and us,
• is allowed under provisions of the EU law or the law of the Republic of Poland, which envisage appropriate means for protecting your rights, freedoms, and legally justified interest, or
• is based on your explicit consent.

The right to submit a complaint

You are entitled to submit a complaint in relation to processing of your personal data to a supervisory body: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa, Poland, tel. +48 22 531 03 00, fax. +48 22 531 03 01; e-mail: kancelaria@uodo.gov.pl

Whenever we refer to the rights related to processing of your personal data, we refer to the rights described below. The possibility of exercising them depends each time on the legal basis for processing of personal data.

The right to withdraw the consent to processing

In case when we process your personal data on the basis of your consent to it, you are entitled to withdraw such consent at any moment. Naturally, such a withdrawal of consent granted has no impact on compliance of any previous personal data processing with law.

The right to transfer the data

You are entitled to receive the personal data that you have provided, in a structured in commonly used format fit for machine reading. You are also entitled to send this personal data to another administrator without obstacles on our part, provided that the processing takes place:

• on the basis of consent or on the basis of a contract, and
• in automated manner.

By exercising your right to transfer the data you are entitled to demand us to send the personal data directly to another administrator, provided that this is technically possible. This right may not have any negative impact on the rights and freedoms of others.

The right to object

In the event of us processing your personal data under Article 6 Item 1 Letter f) of GDPR, you are entitled to object to processing of that data for reasons related to your special situation.

In such case we are no longer allowed to process such personal data, unless we demonstrate the existence of:

• valid and legally justified basis for processing, whereas such basis has to be superior in relation to your interests, rights, and freedoms, or
• basis for determining, pursuing, or defending claims.

Therefore, if you object to processing of your personal data for direct marketing purposes, we will not be allowed to process it for such purposes.

The Online Service website uses cookie files. They are small, commonly used files that contain a sequence of characters, which are sent and then saved on the end device (e.g. a computer, laptop, tablet, or smartphone) used when visiting the Online Service. This information is sent to the memory of the browser used, which sends it back when the user enters the same website later. Cookie files can be categorised using three methods of division.

When it comes to the purposes of using the cookie files, we differentiate three categories of them:

• Necessary cookies – these files enable correct functioning of a website and its functions, e.g. authenticating or securing cookie files. Without saving them on your device it will be impossible to use the website.
• Analytics cookies – these files enable monitoring of the websites opened, traffic sources, and duration of stay at a website. If they are not saved, there will be no limitation in using the website functions.
• Advertising cookies – these files enable displaying customised advertisements within the website or outside of it. If they are not saved, there will be no limitation in using the website functions.
• Social media files – these files enable displaying a fanpage within the website, as well as “liking” it. If they are not saved, there will be no limitation in using the website functions.

In terms of the time of their validity, we differentiate two categories of cookie files:

• session cookies – existing until the end of a given session,
• persistent cookies – existing after the end of a given session.

With regard to differentiation of the entity administering the cookie files, we differentiate:

• our cookies,
• third party cookies.

The cookie files administered by us enable:

• authenticating access,
• maintaining session after signing in,
• securing the Online Service against the attacks of hackers,
• browser “memory” of the content of form fields filled in (optional)
• browser “memory” of the items added to the basket.

Thanks to that, using the functions of the Online Service becomes easier and more pleasant.

GOOGLE

We use the cookie files administered by Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA, within the framework of the following services:

• Google Ads – advertising files used for conducting advertising campaigns using the Google Ads service and evaluating their quality and the customer match tool used for creating personalised advertisements,
• Google Analytics – analytics files intended for studying user behaviour and traffic and elaborating traffic statistics,
• Google Analytics for Firebase: analysis of application users, using e.g. the remarketing lists created for advertising purposes,
• BigQuery: provided that we will carry out integration, analysis of raw data about users.

The data collected by Google Inc are of anonymous and aggregated nature. In particular, it does not contain any identifying characteristics (understood as personal data) of the Online Service users. By using the services listed, we collect data such as the source of acquisition of users visiting the Online Service, their behaviour at the Online Service website, information on the devices and browsers they use, IP address, domain, demographic data (age, sex), interests, and geographic data.

You can find more information within that scope here: https://policies.google.com/technologies/cookies

FACEBOOK

We use the files administrated by Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, USA.

• Advertising pixel tags used by Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, USA. They are elements published within digital content and enable recording information about e.g. activity at the website, as well as the efficiency of advertising. The pixel tag of Facebook Inc. can be managed through the Facebook service, in its user panel,
• Facebook analytics: analysis of users,
• Facebook Ads: advertisements on the basis of data from pixel FB and remarketing lists and the customer match tool used for creating personalised advertisements.

You can find more information within that scope here: https://www.facebook.com/policies/cookies/

Webflow, Inc.

We use the services of Webflow. Hubspot is a system for building and presenting websites.

WebFlow Inc. processes data related to user activity anonymously, unless the user submits his or her data in a form, in which case Webflow will associate his or her previous views of individual pages based on a tracking cookie. It is possible to delete cookies, meaning that the user will then be treated as a new user and a new cookie will be assigned. 

You can find more information about Webflow and its policies here: https://webflow.com/legal/privacy and https://webflow.com/legal/eu-privacy-policy

CookieBot

We use CookieBot, a product of Usercentrics A/S. CoockieBot is a system for managing cookies on the website.

CookieBot processes personal data only to the extent that it is necessary to ensure a functioning website and their content and services. The processing of personal data regularly takes place only with the user's consent. Exceptions are cases in which prior consent cannot be obtained for factual reasons, and data processing is permitted by law.

You can find more information about Webflow and its policies here: https://www.cookiebot.com/en/privacy-policy/

With the exception of the necessary cookie files, the processing of cookie files takes place under user’s consent.

The consent to processing of cookie files is voluntary and may be withdrawn at any time. However, it is necessary to remember that the lack of consent to using certain cookie files may cause limitations in using the Online Service and its functions, and even prevent using it.

Granting consent to processing of cookie files may take place:

• through settings of the software installed in the telecommunications end device used by the user,
• using the button that includes a declaration of granting consent to processing of cookie files or confirmation of familiarising oneself with its conditions,
• using the setting available within the website.

When you are using the Online Service website we may automatically use the cache installed in your device. Within the framework of the local memory it is possible to store data between sessions, i.e. between subsequent visits at the Online Service website. The purpose of using the cache is making the use of the Online Service faster by eliminating situations in which the same data would be downloaded from the Online Service multiple times, thus putting burden on the online connection of the User. The cache may also store data such as a sign-in password.

The Online Service may include links to other websites or software. We do not bear liability for any principles of adherence to the privacy policy and processing of cookie files that are valid at those websites or in that software. We recommend becoming familiar with the privacy policy and cookie policy of these websites or that software after visiting them or before installing it.

1. The Privacy Policy and Cookie Policy comes into force on the date it is published at the Online Service website.
2. A change to the Privacy Policy and Cookie Policy takes place through publication of its new content at the Online Service website.
3. We publish the information on a change to the Privacy Policy and Cookie Policy within the Online Service website, not later than 3 days before the date on which its new wording comes into force.