Privacy Policy
Rules for the processing of personal data
1. General provisions
1.1. These personal data processing rules (hereinafter, the Rules) govern the website (hereinafter, the Website) and the basic principles and procedure for collecting, processing, and storing personal data of the buyer, visitor, who has entered accurate personal data into the website form (hereinafter, the Registered Visitor).
1.2. This Regulation has been prepared in accordance with the Law of the Republic of Cyprus on the Legal Protection of Personal Data and other laws regulating the collection, processing, and storage of personal data.
1.3. In accordance with these Rules, the controller of personal data is "Estripo", company code 3070143088. The Data Controller is responsible for the collection, processing, and storage of personal data in accordance with the procedure established by law.
2. Collection, processing and storage of personal data
2.1. The Data Controller confirms that personal data is collected for direct marketing and marketing purposes and that it is processed in accordance with the principles of fairness, lawfulness, and accuracy, as well as with respect for individuals' right to privacy.
2.2. The Data Controller automatically collects and uses the personal data of the Registered Visitor, which the Visitor provides when registering on the Website, solely in accordance with the procedure set out in these Rules and for direct marketing purposes.
2.3. During registration in the online store, the Buyer must provide complete and accurate personal data. By registering, the Registered Visitor agrees that the data they provide will be processed for the specified purposes of data collection and use. In the event of a Registered Visitor's disagreement, expressed in accordance with the procedure set forth in Section 3.1 of these Rules, the Data Controller shall not be entitled to use this person's data (except for storing personal data).
2.4. The Data Controller respects the right to privacy of each Registered Visitor. The Buyer's personal data (name, surname, address, telephone number, email address, and other information specified in the online store registration form) is collected and processed for the following purposes:
2.4.1. process the Buyer's orders for goods;
2.4.2. issue financial documents;
2.4.3. resolve problems related to the supply or delivery of goods;
2.4.4. for direct marketing purposes;
2.4.5. to fulfill other contractual obligations.
2.5. The Data Controller may use data not directly related to the Registered Visitor, i.e., data on purchased goods, for statistical purposes. Such statistical data will be collected and processed in a manner that does not disclose the Registered Visitor's personal identity or other personal data that could be used to identify them.
2.6 All information about the personal data being processed is confidential. "Estripo" reserves the right to transfer information to third parties:
2.6.1. implement the objectives mentioned in paragraph 2.4 of this document;
2.6.2. In accordance with the procedure established by the laws of the Republic of Cyprus.
2.7. A registered visitor's personal data will not be retained longer than required for the stated purposes of data processing. After the retention period has elapsed, it will be destroyed in accordance with the procedure established by applicable law.
2.8. A registered visitor's personal data is processed using secure organizational and technical measures that protect it against accidental or unlawful destruction, alteration, disclosure, use, and any other unlawful processing.
1. General provisions
1.1. These personal data processing rules (hereinafter, the Rules) govern the website (hereinafter, the Website) and the basic principles and procedure for collecting, processing, and storing personal data of the buyer, visitor, who has entered accurate personal data into the website form (hereinafter, the Registered Visitor).
1.2. This Regulation has been prepared in accordance with the Law of the Republic of Cyprus on the Legal Protection of Personal Data and other laws regulating the collection, processing, and storage of personal data.
1.3. In accordance with these Rules, the controller of personal data is "Estripo", company code 3070143088. The Data Controller is responsible for the collection, processing, and storage of personal data in accordance with the procedure established by law.
2. Collection, processing and storage of personal data
2.1. The Data Controller confirms that personal data is collected for direct marketing and marketing purposes and that it is processed in accordance with the principles of fairness, lawfulness, and accuracy, as well as with respect for individuals' right to privacy.
2.2. The Data Controller automatically collects and uses the personal data of the Registered Visitor, which the Visitor provides when registering on the Website, solely in accordance with the procedure set out in these Rules and for direct marketing purposes.
2.3. During registration in the online store, the Buyer must provide complete and accurate personal data. By registering, the Registered Visitor agrees that the data they provide will be processed for the specified purposes of data collection and use. In the event of a Registered Visitor's disagreement, expressed in accordance with the procedure set forth in Section 3.1 of these Rules, the Data Controller shall not be entitled to use this person's data (except for storing personal data).
2.4. The Data Controller respects the right to privacy of each Registered Visitor. The Buyer's personal data (name, surname, address, telephone number, email address, and other information specified in the online store registration form) is collected and processed for the following purposes:
2.4.1. process the Buyer's orders for goods;
2.4.2. issue financial documents;
2.4.3. resolve problems related to the supply or delivery of goods;
2.4.4. for direct marketing purposes;
2.4.5. to fulfill other contractual obligations.
2.5. The Data Controller may use data not directly related to the Registered Visitor, i.e., data on purchased goods, for statistical purposes. Such statistical data will be collected and processed in a manner that does not disclose the Registered Visitor's personal identity or other personal data that could be used to identify them.
2.6 All information about the personal data being processed is confidential. "Estripo" reserves the right to transfer information to third parties:
2.6.1. implement the objectives mentioned in paragraph 2.4 of this document;
2.6.2. In accordance with the procedure established by the laws of the Republic of Cyprus.
2.7. A registered visitor's personal data will not be retained longer than required for the stated purposes of data processing. After the retention period has elapsed, it will be destroyed in accordance with the procedure established by applicable law.
2.8. A registered visitor's personal data is processed using secure organizational and technical measures that protect it against accidental or unlawful destruction, alteration, disclosure, use, and any other unlawful processing.
3. Rights of the registered visitor
3.1. By registering on the Website, the Registered Visitor confirms their consent to the processing and use of their personal data in accordance with the procedure set forth in these Rules. If the Registered Visitor does not wish their personal data to be processed and used for the purposes specified, they have the right to object to the processing of their personal data by informing the Data Controller by email.
3.2. Upon receiving the notification specified in clause 3.1 of the Regulation, the Data Controller shall terminate the processing of the personal data free of charge and inform the Registered Visitor thereof in accordance with the procedure set out in clauses 5.1 and 5.2 of the Regulation.
3.3. The registered visitor has the right to modify or update the information provided in the registration form.
3.4. Registered visitors have the right to know the measures taken regarding the processing of their personal data.
3.5. A registered visitor has the right to request the correction, destruction, or suspension of processing of their personal data (excluding storage) if, after reviewing it, they determine that it is incorrect, incomplete, or inaccurate, by contacting the Data Controller in accordance with the procedure set out in section 5.1 of these Rules.
4. Change the rules
4.1. The Data Controller has the right to modify these Rules in part or in full by notifying us on the Website.
4.2. Additions or modifications to the Rules will take effect from the date of their publication on the Website.
4.3. If the Registered Visitor does not agree with the amendments or additions to the Regulations, they have the right to express their disagreement with the procedure and purposes of the amended or supplemented Regulations regarding the processing of their personal data, in accordance with the procedure set out in clause 5.1 of these Regulations. If their disagreement is not received, they will be deemed to have agreed to the new version of the Regulations.
5. Final provisions.
5.1. All notifications related to the processing of personal data must be sent to the Data Controller by email. The costs of sending such notifications, if any, shall be borne by the sender.
5.2. The Data Controller must provide the response in the same format in which the notification was received from the Registered Visitor, no later than 20 business days after the date of receipt of the data subject's request.
3.1. By registering on the Website, the Registered Visitor confirms their consent to the processing and use of their personal data in accordance with the procedure set forth in these Rules. If the Registered Visitor does not wish their personal data to be processed and used for the purposes specified, they have the right to object to the processing of their personal data by informing the Data Controller by email.
3.2. Upon receiving the notification specified in clause 3.1 of the Regulation, the Data Controller shall terminate the processing of the personal data free of charge and inform the Registered Visitor thereof in accordance with the procedure set out in clauses 5.1 and 5.2 of the Regulation.
3.3. The registered visitor has the right to modify or update the information provided in the registration form.
3.4. Registered visitors have the right to know the measures taken regarding the processing of their personal data.
3.5. A registered visitor has the right to request the correction, destruction, or suspension of processing of their personal data (excluding storage) if, after reviewing it, they determine that it is incorrect, incomplete, or inaccurate, by contacting the Data Controller in accordance with the procedure set out in section 5.1 of these Rules.
4. Change the rules
4.1. The Data Controller has the right to modify these Rules in part or in full by notifying us on the Website.
4.2. Additions or modifications to the Rules will take effect from the date of their publication on the Website.
4.3. If the Registered Visitor does not agree with the amendments or additions to the Regulations, they have the right to express their disagreement with the procedure and purposes of the amended or supplemented Regulations regarding the processing of their personal data, in accordance with the procedure set out in clause 5.1 of these Regulations. If their disagreement is not received, they will be deemed to have agreed to the new version of the Regulations.
5. Final provisions.
5.1. All notifications related to the processing of personal data must be sent to the Data Controller by email. The costs of sending such notifications, if any, shall be borne by the sender.
5.2. The Data Controller must provide the response in the same format in which the notification was received from the Registered Visitor, no later than 20 business days after the date of receipt of the data subject's request.
Contacts
If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights granted to you, please email us.
Company details: 'Estripo'