At Excelix (here in after “Excelix”, or “us”, or “we”) we collect and process personal data with respect to the user’s (here in after “user”, “you”, “your”) privacy and in accordance with the applicable national and European legal framework on data protection and the General Data Protection Regulation EU 2016/679 (hereinafter the Regulation, GDPR) as updated from time to time.
Collection of personal data – Purpose of processing – Legal basis
We may collect and process your personal data through different channels of collection and for different purposes of processing. We always collect and process the necessary data for the specific purpose of processing and for a predetermined time provided that we have a legal basis according to the applicable legislation.
1. Data Collected through our website
A. When you choose to communicate with us through the contact form available at our website, you submit your personal data such as your name, your email, your telephone number (voluntarily) as well as any other information that you wish to provide us via the contact form n in relation with your request.
We collect the abovementioned data to identify you and respond to your specific request. The legal basis of processing is our legitimate interest. Further to that, we may use the data collected via this form to further communicate with you and provide you periodically with our news, provided that you consent specifically to this processing activity.
2. B2B Data
We may collect and process your data such as name, surname and corporate email to build our business relationship and inform you for our cooperation or relevant upcoming business opportunities. In this case your data have been selected by business contacts and are processes only for achieving B2B purposes and communication. However, you can always choose to unsubscribe from this business communication. Our legal basis for processing your data is our legitimate interest.
Transfer of Personal Data
We protect and safeguard your personal data. We may transfer your personal data to authorised third parties (legal entities or individuals) when the transfer is provided by the law, or, alternatively pursuant to the guarantees set by the existing legislation. In cases that data are being transferred outside the European Economic Area, we always take care to safeguard that adequate level of protection is ensured and that appropriate safeguards for the protection of personal data according to the GDPR are in place.
We will only retain your personal data for a limited period of time, necessary to fulfil the purpose of processing for which these data were collected as well as for legal, accounting or reporting requirements. We always take into account the legal requirements, the nature of the processed personal data and any potential risk from unauthorised use or disclosure of these data in order to determine the necessary period of processing.
Our website may include links to third-parties’ websites. If you click these links, you will be redirected to the third- parties’ websites. We do not control their privacy protection practices and we are not responsible for the collection and processing of your personal information when you are visiting third-parties’ websites. You are strongly advised to read carefully their privacy statements before navigating to these websites.
Minors’ Personal Data
We do not address to minors and we do not knowingly collect and process minors’ personal data. In case that we realise that we have collected and process minors’ personal data without verifiable parental consent, we will delete such data from our database directly. You are encouraged to inform us directly if you are aware of minors’ data collected through our website.
Data Subjects’ Rights
According to the General Data Protection Regulation you have the following rights:
The right of Information and the right to request access and receive a copy of the personal data we maintain for you “data subject access request”. You can ask and receive a copy of the personal data we process and review the legal basis of the processing.
The right of Rectification. You can request the correction of the personal data that we process.
The right of Erasure (“the right to be forgotten”). You can ask to delete or remove your personal data.
The right to request the Restriction of the processing of your personal data.
The right of Data Portability and more specifically to receive your personal data in a structured, commonly used and machine-readable format (pdf, word, etc.).
The right to Object to the processing and the right to object to automated individual decision-making, including profiling.
The right to Withdraw your consent at any time. Where we are relying on consent to process your personal data, such withdrawal shall not affect the lawfulness of any processing carried out before that.
If you wish to exercise your rights, we will reply to your request within one (1) month from its receipt. If the request is complex or in case of numerus requests, we may extend this period for two further months.
You can submit a written request to the following contact details:
Address: Excelix, 28th street, No. 37, Kato Polemidia 4155, Limassol, Cyprus
Furthermore, if you consider that we have not responded appropriately to your request or that your personal data have been affected, you may also contact the Cypriot Commissioner for Personal Data Protection (www.dataprotection.gov.cy).
Last Revision: May 2020