Source: https://www.oxxy.com/en/privacy_policy
Timestamp: 2019-04-21 04:11:50+00:00

Document:
The company Oxxy Limited respects the rights of their customers to the protection of their personal data with regard to the processing of personal data and has taken all the necessary measures in order to provide the needed protection. The purpose of this document is to inform the www.oxxy.com website Users and customers about how Oxxy handles their personal data, as well as about all the rights they have regarding the respective operations.
Oxxy Limited is compliant with all the requirements of the General Data Protection Regulation and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation GDPR). The purpose of this regulation is to guarantee the data protection of natural persons from all the countries EU members and unify the regulations related to the data processing.
"We"/"Us"/"Our"/"Oxxy"/The Company means Oxxy Limited (C 50382) with seat and registered address at THE PLAZA COMMERCIAL CENTRE LEVEL 8 / SUITE 5, BISAZZA STREET, SLIEMA SLM1640, MALTA (which is licensed to operate, represent and maintain the Site www.oxxy.com by Oxxy Group Limited (HE307150) of MICHALACOPOULOU TOWER, 1ST FLOOR, FLAT/OFFICE M102, 25, MICHALAKOPOULOU STREET NICOSIA 1075 CYPRUS).
"You"/"Your"/"Yourself"/"User" means the User of the Site and/or customer of the 'Services' (as defined hereunder) including but not limited to Users offering content and/or other materials or services on or through the Site. "Services" means any services offered by Oxxy on or through the Site www.oxxy.com including but not limited to various online web site development tools and web applications operated and hosted by Oxxy to enable Users (including individuals, businesses and/or developers) to create and publish web sites. The Services also include web hosting services for the websites created by Users through the Site. “Site”/”Website” means the website www.oxxy.com through which the Company provides their Services.
“Site”/”Website” means the website www.oxxy.com through which the Company provides their Services.
for the purposes of the legitimate interest of Oxxy.
(2) Oxxy shall be a controller regarding your data as the User of our services. With regard to the personal data you process using our Services, Oxxy shall act as a processor.
What kind of personal data shall Oxxy collect, process and store?
Art. 2. (1) Oxxy shall process the following categories of personal data and information: Your personalizing data (name and surname, e-mail, country, phone, residence address). The User shall provide all or part of these personal data only if the usage of the respective Service requires it. Example: a website profile registration may be completed using only an e-mail; the billing operations related to the usage of our Services by the User may request name and surname, e-mail, phone and residence address.
Data concerning registered Users in the chatbot application that Oxxy uses to establish communication with them on Facebook Messenger, part of the Company Facebook Page https://www.facebook.com/oxxy.bg/. Such data includes identification and publicly available social media profile information (name, date of birth, gender, geographic location), chat history, navigational data (including chatbot usage information), application integration data, and other electronic data submitted by the User.
(3) Data of Oxxy Users’ users: these are billing and delivery data (name and surname, e-mail, phone, address) which Oxxy Users gather from their users with regard to the provision of their services through the Company ecommerce module.
reveal political, religious or philosophical beliefs, or trade union membership.
(5) Personal data shall be collected by Oxxy from the persons to whom it relates.
(6) The Company shall not perform automated decision making with data.
creating an online store via the Oxxy platform.
Messages related to the usage of Company Services: These messages may include information regarding subscription plans updates, website functionalities upgrades, new Services and/or products, useful information and content, related to our Services. This category may include also all kind of administrative messages regarding the provision of our Services, as well as billing information. Examples: temporary service suspension because of technical intervention or messages related to expiring plan subscriptions, billing, invoicing or service issues when the User uses our Services.
The User personal data may be stored and processed by Oxxy in different EU countries in order to assure a correct provision of our Services and be compliant with their legal obligations.
Art. 4. (1) Oxxy shall store your personal data for no longer than the duration of existence of your website profile. Upon expiry of this period, Oxxy shall take reasonable care to erase and destroy all your data without undue delay.
(2) Oxxy shall notify you in case the storage period needs to be extended in order to achieve the purposes, the implementation of the contract, in view of the legitimate interests of Oxxy or otherwise.
(3) Oxxy shall keep the personal data that they are required to keep under the applicable legislation for the required term, which may exceed the duration of your registration.
Art. 5. (1) Oxxy may, at their sole discretion, transmit all or part of your personal data to personal data processors for the fulfillment of the processing purposes, subject to the requirements of Regulation (EU) 2016/679.
(2) Oxxy shall notify you in case of intent to transmit all or part of your personal data to third countries or international organizations.
Art. 6. (1) Every User has the right to request to Oxxy access to, correction or erasure of their personal data or restriction of processing of data. Also, you have the right to object to processing of personal data about you, as well as the right to data portability as it is described in the paragraphs hereinafter. Тhe respective requests may be presented to Oxxy by free text message sent to support@oxxy.com or by using the respective data settings, provided by the website.
(2) In order to proceed with the User request, Oxxy may require you to prove your identity and your identity with the data subject.
Recipients or recipient categories to whom shall be or already were disclosed your personal data in third countries or international organizations.
(2) Oxxy shall provide you, upon request, with a copy of the processed personal data about you, in electronic or other appropriate form having the right to apply an administrative fee depending on the related administrative costs.
Art. 8. (1) If you do not wish all or any of your personal data to continue to be processed by Oxxy for a particular or for any processing purpose, you may, at any time, withdraw your consent to processing by sending a free text message to support@oxxy.com.
(2) Your account shall be erased if you withdraw your consent for the processing of personal data which is required for creating and maintaining your registration for the use of the services.
Art. 9. You can rectify or fill in the inaccurate or incomplete personal data about you directly through your website profile or by sending a request to Oxxy.
(3) In order to exercise your right to be 'forgotten', you should submit a free text request and send it to support@oxxy.com, as well as to authenticate your identity and identity with the person to whom the data provided to Oxxy relates, by presenting your ID card for identification purposes and, if necessary, entering your login data for the account of the person to whom the data relates.
(4) Oxxy shall not erase the data that they have a legal obligation to store, including for protection against claims brought against them or proof of their rights.
you have objected to processing, pending the verification whether the legitimate grounds of Oxxy override those of yours.
Art. 12. (1) You may, at any time, request the data about you that are stored and processed in connection with the use of Oxxy services by sending us an e-mail to support@oxxy.com.
(2) You can request Oxxy to transmit your personal data directly to another controller, chosen by you, where technically feasible.
Art. 13. You may request from Oxxy to inform you of all recipients to whom personal data has been disclosed for which rectification, erasure or limitation of the processing has been requested. Oxxy may refuse to provide this information if this would not be possible or would require disproportionate effort.
Art. 14. You shall have the right to object, on grounds relating to your particular situation, at any time, to processing of personal data about you, by Oxxy including profiling or direct marketing.
Art. 15. (1) If Oxxy become aware of a breach in your personal data that is likely to result in a risk to your rights and freedoms, we shall, without undue delay, notify you about this breach and about the measures that have been undertaken or are to be undertaken.
Art. 16. (1) For domain registration upon request submitted by you, Oxxy shall transmit the necessary information to the respective domain registrar who shall process your data as a controller for the purpose of registering the requested domain.
(3) For online payments, Oxxy shall provide the necessary information to the company provider of the payment service which shall process your personal data for the purposes of the payment transaction.
Art. 17. The Controller shall not transfer your data to third countries.
Art. 19. If the consent relates to transfer, the Controller shall describe the possible risks in the transfer of data to third countries in the absence of a decision for adequate protection and appropriate remedies.
Art. 20. (1) When assigning Oxxy to process a third party personal data for the purposes of using the Service, Oxxy shall act in their capacity of a personal data processor.
(2) In the cases under Para. 1, Oxxy shall act only on your instruction as the User of the Service and only as long as they may have control over the personal data you are processing. Oxxy shall have no control over the content and data that you as a service User choose to be uploaded to the Service (including whether or not this data includes personal data). In this case, Oxxy shall have no role in the decision-making process whether the User uses the Service to process personal data, for what purposes and whether it is protected. Accordingly, the responsibility of Oxxy in this case shall be limited to 1) complying with the instructions of the User of the service, pursuant to the contract and the general terms and conditions, and 2) providing information about the Service and functionalities through their interface.
the operating system of the machine running your web browser; and the type and version of your web browser.
Some cookies are necessary to the correct functioning of the website. Some of the cookies enables you, for example, to see the website content on the correct language or the prices according to the currency and the VAT rates in the different countries. Other cookies turn on cache options etc.
Without these cookies, we cannot enable important features on our website such as uploaded videos, chat sessions, preferred language, etc.
These cookies contain information how you use our website that we may share with data providers solely in hashed, non-human readable form. They do not contain personal data. These cookies help us displaying you only information which is relevant. These are the dynamic cookies of Facebook, Google, Adform, Adwise, etc.
Should you wish to reject all or certain cookies used by our website, you may modify your web browser preferences to do so. Moreover, you may set your browser to notify you when you receive a cookie, giving you the opportunity to choose whether or not you wish to accept it. Note that by disabling certain categories of cookies, you may be prevented from accessing some features of our website or certain content or functionality may not be available.
Art. 22. Considering that the privacy and the protection of your personal data is an absolute priority for us, the Company undertook all the necessary organizational and technical measures in order to assure a high level of security and protection on their infrastructure. For the purposes of maximum security to collecting, storing and processing your personal data, we may use additional mechanisms for protection as encryption, pseudonymisation etc.

References: Art. 2

Art. 4

Art. 5

Art. 6

Art. 8

Art. 9

Art. 12

Art. 13

Art. 14

Art. 15

Art. 16

Art. 17

Art. 19

Art. 20

Art. 22