Welcome to the official website (the ‘Website’) of the online shop of the business name FRIX REPAIRS (the ‘Business Name’ alternatively ‘Frix Repairs’) having an established address located at Kasou 14b, Agioi Omologites, Nicosia, Cyprus 1086, with V.A.T. number ……………, Business Name Registration number ΕΕ 39528 and electronic address [email protected].
Frix Repairs respect each user’s personal information thus, adopt all reasonable measures to safeguard the personal information of each user of the Website.
The present privacy policy (the ‘Privacy Policy’) Privacy Policy informs each user about the circumstances when the collection of the users’ personal information is made, the purpose of the uses of such personal information and about the security measures taken. The Privacy Policy sets forth the statutory rights of each user including the right to erasure the personal data, the right to rectification of the personal data, the right to access to the personal data, the right to restrict processing, the right to object processing, the right to data portability and the right not to be subject to a decision based solely on automated processing.
The Privacy Policy is exclusively applicable to the personal data collected by Frix Repairs. Frix Repairs have no any responsibility for personal data collected by third parties by virtue of the interactions of each user with them.
For any queries regarding this Privacy Policy and submission of request to exercise any of the statutory rights under the General Data Protection Regulation (EU) 2016/679 (the ‘Regulation’), each user may contact the Business Name in the following manner:
- by telephone at: +35722255259
- via e-mail at: [email protected]
Frix Repairs collect only non-sensitive personal data of each user of the Website and/or the online shop when a user creates an account with the Website and/or place an order through the online shop of the Business Name.
For the creation of account with the Website, it is required to submit the following information (collectively hereinafter referred to as the ‘Account Data’):
- Name and Surname;
- Delivery address;
- Correspondence address;
- Telephone number; and
- E-mail address.
For placing an order through the online shop of the Business Name, the following additional personal data recorded in the debit or credit card of the user in question will be required:
- Cardholder name;
- Card number;
- Expiry month and year; and
- CCV number (the three-digit number on the back of the card),
(collectively hereinafter referred to as the ‘Card Data’).
The abovementioned information are confidential and Frix Repairs declares that such information are treated in a manner compliant with the applicable legislation in Cyprus and the Regulation. Frix Repairs shall not use the abovementioned personal data for any other reason apart from enabling the user in question to make online order(s) and purchase(s) of products listed in the Website. The Card Data shall not be stored by Frix Repairs. Each user should insert card details every time when he/she is proceeding with an online order through his/her account with the Website. Each user reserves the right to revoke his/her consent to the collection and storage of the aforesaid data and thus request that the data be deleted at any time. The Website has an option of deletion of the account in question. In case the user does not revoke his consent to the collection and storage of the abovementioned data after the creation of the account with the Website, Frix Repairs will keep storing the said data as long as it is necessary for each user to place an online order through the Website. The retention period of such data shall not exceed the period of 2 years from the date of creation of the account. Frix Repairs reserves the right to delete the account in question. [A1]
Should a user do not wish to create an account with the Website, but wish to place an order through the online shop of the Website, the Account Data and the Card Data will be required by Frix Repairs to enable the user to make the online order(s) of the product(s) listed in the Website and to enable the Business Name to fulfil their contractual obligations under the online contract formed with the user at issue. In such a case, the Account Data and the Card Data will be stored until the timeframe for exercising the right of withdrawal as described in the Terms and Conditions [A2] of Frix Repairs lapses.
The Account Data may be requested by the Business Name in case an online competition runs by the latter through the Website. Frix Repairs shall retain such data until the competition in question is completed.
When users visit the Website, cookies may be used by the Business Name in order to make the experience of exploring the Website and to personalise the services the users receive from Frix Repairs. For additional information, it is highly recommended for each user of the Website to read and understand the Cookies Policy [A3] of Frix Repairs.
Subject to compliance with the right of each user not to be subject to a decision based solely on automated processing, when a user visits the Website, the Business Name may collect an automatically populated IP address[A4] . An IP address is a unique number which allows a computer, group of computers or another Internet connected device to browse the Internet. The Business Name may also record the time and date of the visit of each user automatically, the pages that were requested, the referring website (if provided) and the user’s internet browser version.
The processing of personal data by Frix Repairs is made for a lawful reason i.e. necessity for the purchase of product(s) through the online shop of the Website or for the compliance by Frix Repairs with a legal obligation.
Generally, the collection of the Account Data and/or the Card Data is made by Frix Repairs to serve the following purposes:
- To carry out the business of Frix Repairs and to provide a service or carry out a contract with each user;
- To deliver the ordered products and/or services. The Account Data may be disclosed to the delivery partners of Frix Repairs;
- To process payments made through the Website. Frix Repairs not store any payment card numbers once the online transaction has been completed;
- To communicate the user in question about important information relating to the rendered service(s) and/or purchase(s), such as confirming the order, informing about returns and/or refunds;
- To provide the user in question with an electronic receipt by e-mail for every purchase, in order to help him/her avoid keeping hard copies so as to be convenient for him/her to track his/her receipt whenever he/she wishes to return a product or claim for warranty;
- To share the Account Data with third-party postal providers e.g. Cyprus Governmental Post Office and/or established courier companies such as G.A.P. Akis Express and/or DHL and/or Aramex and/or Kronos Express, in order for such postal providers to deliver the purchased product(s) via the Website to the designated address of each user; and
- To detect and reduce fraud and credit risk.
As far as the third-party postal providers are concerned, Frix Repairs ensure that they always check the safeguards adopted by such providers regarding the security of the personal data.
The Website can be explored only by people who have reached the 18th year. In case a user is below 18 years old, he/she can use the Website only with the presence of a parent or legal guardian.
The Website may contain links to third party websites and services. Each user should be aware that when he/she uses a link to go from the Website to another website owned by another person or such user requests a service from a third party, this Privacy Policy no longer applies. The browsing and interaction of each user with any other websites, or his/her dealings with any other third-party service provider and/or online store, is subject to that website’s or third-party service provider’s own policies.
Frix Repairs do not monitor and/or control and/or or endorse the privacy practices of any third-party(ies). It is strongly suggested for each user to become familiar with the privacy practices of every website he/she visits or third-party service provider(s) that he/she deals with and to contact them if such user has any queries about their respective privacy policies and practices. The present Privacy Policy applies solely to personal data collected by Frix Repairs through the Website and does not apply to these third-party websites and third-party service providers.
The Business Name are committed to keeping the personal data provided by the users of the Website secure and the Business Name shall take reasonable precautions to protect the collected personal data from loss, misuse or alteration. Frix Repairs do not sell the personal information of the users of the Website for any purpose. The Business Name have implemented information security policies and technical measures to protect the personal data having under their control.
All of the employees and data processors of Frix Repairs (i.e. those who process personal data on behalf the Business Name, for the purposes cited hereinabove), who have access to, and are associated with the processing of personal data, are obliged to respect the confidentiality of the personal data of all users of the Website.
Each user has the following rights in relation to the personal data collected by the Business Name:
- Right of access which encompasses the following elements:
- Obtaining a copy of the personal data of each user;
- Accessing supplementary information about how and why the user’s personal data is used;
- Checking if data processing is lawful; and
- Receiving information about data processing purposes, recipients, storage duration, and other relevant details.
- Right to rectification alternatively right to have inaccurate or incomplete personal data rectified which includes the following elements:
- The users can make a request for rectification verbally or in writing; and
- The Business Name has one calendar month to respond to such requests.
- Right to erasure alternatively right to be forgotten which entailsthe following aspects:
- The personal data is no longer necessary for the purpose the Business Name originally collected or processed it;
- The Business Name is relying on a user’s consent as the lawful basis for processing the data and that user withdraws his/her consent;
- The Business Name is relying on legitimate interests as its justification for processing a user’s data, the individual objects to this processing, and there is no overriding legitimate interest for the Business Name to continue with the processing;
- The Business Name is processing personal data for direct marketing purposes and the user objects to this processing;
- The Business Name processed the user’s personal data unlawfully;
- The Business Name must erase personal data in order to comply with a legal ruling or obligation;
- The Business Name has accidentally processed a child’s personal data.
Each user should be aware that the Business Name’s right to process the user’s data might override his/her right to be forgotten for the following reasons:
- The personal data is being used to exercise the right of freedom of expression and information;
- The personal data is being used to comply with a legal ruling or obligation.
- The personal data is being used to perform a task that is being carried out in the public interest or when exercising an organization’s official authority;
- The personal data being processed is necessary for public health purposes and serves in the public interest;
- The personal data is being used for the establishment of a legal defence or in the exercise of other legal claims.
Thus, Frix Repairs can deny a request to erase personal data in case there is a legitimate justification as described hereinabove or such requested is unfounded or excessive.
In case a user wishes to erase his collected personal data collected by the Business Name, the Business Name shall also inform the user at issue whether his/her personal data were shared with any third-party provided as cited hereinabove, in order for such user to be able to contact the particular third-party provided directly.
Each user who wishes to exercise his/her right to be forgotten should complete the form found hereto RIGHT-TO-ERASURE-REQUEST-FORM.pdf (gdpr.eu) and thereafter, the user should send the filled in form to the e-mail address of the Frix Repairs as stated in the first page of the present Privacy Policy.
- Right to restriction of processing pursuant to which each user shall have the right to obtain from the Business Name restriction of processing where one of the following applies:
- The accuracy of the personal data is contested by the user, for a period enabling the controller to verify the accuracy of the personal data;
- The processing is unlawful and the user opposes the erasure of the personal data and requests the restriction of their use instead;
- The Business Name no longer needs the personal data for the purposes of the processing, but they are required by the user for the establishment, exercise or defence of legal claims;
- The user has objected to processing pending the verification whether the legitimate grounds of the Business override those of the user.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the user’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State of the European Union.
A user who has obtained restriction of processing after exercising his/her right to restriction of processing, shall be informed by the Business Name before the restriction of processing is lifted.
In case the personal data of a user are shared with other third-party(ies) as described hereinabove, the Business Name shall inform such third-party(ies) regarding the restriction to processing of the personal data of the particular user where it is feasible for the Business Name to act accordingly. In the event that the user would like to ask from such third-party(ies) to cease processing of his/her personal data, the Business Name shall relay the contact details of the third-party(ies) to the user in question where this is possible and lawful, in order for the user to contact them directly.
- Right to data portability pursuant to which each user shall have the right to receive the personal data concerning him or her, which he or she has provided to the Business Name, in a structured, commonly used and machine-readable format and have the right to transmit those personal data to another third party without interference from the Business Name to which the personal data have been provided when is technically feasible, where:
- The processing is based on consent or on a contract with the Business Name; and
- The processing is carried out by automated means.
The aforesaid right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Business Name.
- Right to object accordingto which each usershall have the right to object at any time to processing of his/her personal data by the Business Name; hence the Business Name shall no longer process the personal data. Such right is exercisable where the following condition is met:
- The personal data of the user are processed for direct marketing purposes including profiling to the extent that it is related to such direct marketing; in that case, the personal data of the user in question shall no longer be processed for such purposes.
Each user may exercise his or her right to object by automated means using technical specifications.
Frix Repairs may oppose to the halt in processing of the personal data of the particular user where the Business Name demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the user in question or for the establishment, exercise or defence of legal claims.
- Automated individual decision-making, in accordance to which the user shall have the right not to be subject to a decision based solely on automated processing, including profiling[1].
The aforesaid right is not exercisable if one of the following conditions is met:
- The decision is necessary for entering into, or performance of, a contract between the user and the Business Name; or
- The decision is authorised by the European Union or the Republic of Cyprus to which the Business Name is subject and which also lays down suitable measures to safeguard the user’s rights and freedoms and legitimate interests; or
- The decision is based on the user’s explicit consent.
The Business Name implements suitable measures to safeguard each user’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the Business Name, to express his or her point of view and to contest the decision.
The present Privacy Policy may be updated from time to time in order to reflect the latest legislative and regulatory regime. Therefore, each user is encouraged to review this Privacy Policy periodically so as for him/her to be informed about the processing of his/her personal data.
[1] Profiling under the Regulation refers to automated processing of personal data to evaluate certain aspects of an individual, such as performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
[A1]It should be ensured that Frix Repairs is enabled to delete each account directly without the need of a user’s intervention.
[A2]Insert hyperlink of the Terms and Conditions of Frix Repairs.
[A3]Insert hyperlink of the cookies policy of Frix Repairs.
[A4]Please check again with web designer if there is a possibility of filter to halt this processing.