Πολιτικη GDPR
Last updated: 2023 April 15th
At The Fight Store, we are committed to complying with the General Data Protection Regulation (GDPR) and ensuring the protection of personal data belonging to our customers and users located in the European Economic Area (EEA).
This GDPR Policy outlines our commitment to GDPR compliance, including the rights of our customers and users, and the measures we take to protect personal data.
Data Controller
The Fight Store is the Data Controller for the processing of personal data under GDPR. As the Data Controller, we determine the purpose and means of processing personal data.
Contact email for The Fight Store: contact@thefightstore.cy.
Lawful Basis for Processing
We process personal data only when we have a lawful basis to do so. Our lawful bases for processing personal data include:
- Consent: We may process personal data when users have provided their explicit consent for a specific purpose (e.g., subscribing to our newsletter).
- Contractual Obligations: We may process personal data to fulfill our contractual obligations, such as processing orders and delivering products.
- Legitimate Interests: We may process personal data when it is necessary for our legitimate interests, such as improving our website and services, provided that it does not infringe on users’ rights and interests.
Data Subject Rights
Under GDPR, data subjects (i.e., our customers and users) have the following rights:
- Right to be informed: Users have the right to know what personal data we collect, how we process it, and for what purposes.
- Right of access: Users have the right to request a copy of their personal data that we hold.
- Right to rectification: Users have the right to correct any inaccurate or incomplete personal data.
- Right to erasure: Users have the right to request the deletion of their personal data when it is no longer necessary for the purposes for which it was collected.
- Right to data portability: Users have the right to receive their personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller.
- Right to object: Users have the right to object to the processing of their personal data for direct marketing purposes, or when it is based on our legitimate interests.
- Right to restrict processing: Users have the right to request the restriction of processing their personal data under certain circumstances, such as when they contest the accuracy of the data.
- Right to automated decision-making and profiling: Users have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significant effects on them.
To exercise any of these rights, please contact us using the information provided in the “Data Controller” section above.
Data Security and Retention
We employ appropriate technical and organizational measures, including encryption and secure server technology, to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee the absolute security of your personal data.
We retain personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy or to comply with legal requirements.
International Data Transfers
If we transfer personal data outside the EEA, we ensure that adequate safeguards are in place to protect the data, such as the use of Standard Contractual Clauses or reliance on Privacy Shield certification for transfers to the United States.
Data Breach Notification
In the event of a personal data breach that poses a risk to the rights and freedoms of our users, we will notify the appropriate supervisory authority within 72 hours of becoming aware of the breach. We will also notify affected users without undue delay if the breach is likely to result in a high risk to their rights and freedoms.
Changes to This GDPR Policy
We may update this GDPR Compliance Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any significant changes by updating the “Last updated” date at the top of this policy and, if necessary, obtaining your consent to the updated policy.
Contact Us
If you have any questions or concerns about this GDPR Compliance Policy, our privacy practices, or wish to exercise your data subject rights, please contact us at contact@thefightstore.cy.
We will respond to your inquiries as quickly as possible.
