
PRIVACY POLICY
1. Data Controller (hereinafter: “the Company”)
MARSS TRADING & CONSULTING LTD, with registered office in ARCH. MAKARIOU III & LEONTIOU, A, 258, 3020 LIMASSOL (EE), Cyprus is the Data Controller. If you have any questions about the processing of your personal data, please do not hesitate to contact us at privacy@marss-trade.com.
2. Personal data, purposes of their processing and legal basis
Our website can generally be used without having to provide any personal data. The provision of personal data is optional. Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”).
The purpose of data processing is to manage online orders with information about our product range, including contact options and processing your order. Personal data is collected on our website only:
- for the use of the website (legal basis: Art. 6 paragraph 1 letter a) and / or Art. 6 paragraph 1 letter .b) European General Data Protection Regulation (GDPR),
- to safeguard our interest in improving the user experience and maintaining the safe use (Art. 6 paragraph 1 letter f),
- for the use of the services offered on the website as well as for pre-contractual measures, in particular for the compilation of request or contact forms (legal basis: Art. 6 paragraph 1 letter a) and / or Art. 6 paragraph 1 letter .b) GDPR) or
- it is necessary for the conclusion and execution of a contract (legal basis: Art. 6 paragraph 1 letter a) and letter .b) GDPR).
More details on the processing of data are shown below in the relevant points:
3. Access data/server log files
When you visit our website, the servers automatically save the information sent by your browser, so-called server log files. The information includes: name of the website, downloaded files, date and time of download, notification of successful download, browser type and version, user operating system, referring URL, suppliers. This data is not merged with other data sources. The information is used exclusively to analyze and maintain the technical operation of the server and network in accordance with Article 6 paragraph 1 letter f) GDPR.
4.Cookies
about your device on your access device (PC, smartphone, etc.). On the one hand, they are useful to ease the use of websites and therefore for users (e.g. storage of access data). Moreover, they are used to collect statistical data on the use of the website and to analyze them in order to improve the offer. The legal basis for the possible processing of personal data through cookies and their retention period may vary. If you have given us your consent, this is the legal basis. Insofar as the data processing takes place on the basis of our overriding legitimate interests, the legal basis is Article 6 paragraph 1 letter f). As a user, you can influence the use of cookies. Most browsers have an option to limit or completely prevent the storage of cookies. However, it should be noted that the use and in particular the ease of use are limited without cookies.
When they access our website, all users of our website are informed by an information banner about our use of cookies and referred to this privacy and consent management policy. As a user, you will also be asked for consent to the use of certain cookies, which are particularly relevant for the personalization of services and for marketing measures. You can find more information and opt-in options in the cookie provider in the footer of our website.
5. Contact by e-mail and contact form
When you contact us by e-mail or contact form, the data you provide (your e-mail address, your name and phone number if applicable) will be stored by us to answer your questions and process your requests. The legal basis for this is Article 6(1)(f) of the GDPR. Insofar as your data is processed in the context of a contractual relationship or a pre-contractual relationship, the legal basis is Article 6 paragraph 1 letter b) of the GDPR. We will process the data you voluntarily provide as strictly confidential. We store and use the personal data you voluntarily provide to the extent that this is necessary for further communication with you.
6. User Accounts/Orders
If you have created a user account with us, the information you provide for this purpose will be stored for the duration of the user relationship in accordance with Article 6(1)(b) of the GDPR. If you place an online order on our website, we collect the data necessary to terminate the contract. The data are kept for the entire duration of the contract and in compliance with legal obligations. The legal basis is the termination and execution of a contract within the meaning of Article 6 paragraph 1 letter b) of the GDPR. We may also use the personal data you provide to us when registering or placing an order to send you information about new products and services by post or phone (to other market participants). If you are an active customer, we process your email address to send you information for our similar products, unless you have given your specific consent. The legal basis is Article 6(1)(f) of the GDPR. You can object to the use at any time without incurring costs other than transmission costs according to the basic tariffs. More information, in particular about your right to object, can be found in the section “Rights of the data subject”.
7. Recipients of personal data
We communicate personal data to the following categories of recipients: to our employees and to the host of our website. In connection with the provision of the site, other companies may also have access to the data (as part of order processing or for internal administration purposes). In addition, your personal data will not be passed on to third parties without your explicit consent, unless we are legally obliged to do so. Pursuant to Article 6 (1) paragraph 1 letter .b) of the GDPR the transfer of data is mandatory for the execution of a contractual relationship. If necessary to process your order, we will forward your address data to a shipping service provider.
8. Data retention period
We delete your personal data immediately after the purpose has been achieved. We keep your data from your emails or from the contact form until your request has been fully processed and resolved. After that, the information is usually deleted. In addition, every year it is checked whether the data stored by you can be deleted. Session cookies are automatically deleted by us after your visit to the website. The access data and server log files are deleted after a week. Please note that there are trade and tax law retention requirements for certain data that are at least ten years old.
9. Rights of the data subjects
You are not legally obliged to provide your personal data. However, the provision may be necessary for the conclusion of a contract or for the functions of the website. In case of non-provision, a contract or function may not be offered on the website. There is no automated decision-making process on the site and no profiling is carried out. The rights of data subjects arise in particular from Articles 15 to 23 and Article 77 of the GDPR. You have rights against us in relation to your personal data: Information, Art.15 GDPR; Rectification, Art. 16 GDPR; Erasure, Art. 17 GDPR; Limitation of processing, Art.18 GDPR; Portability, Art. 20 GDPR. If you have given your consent to the processing of personal data, you have the right to withdraw it, Art. 7 GDPR with effect for the future. You also have the right to object to the processing of personal data Objection, Art. 21 GDPR.
You have the right, on grounds arising from your particular situation, to object at any time to the processing of personal data concerning you, which is based on Article 6(1)(1)(f) GDPR (data processing on the basis of a balancing of interests). If you submit an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or the processing is necessary to assert, exercise or defend a right in court. We process personal data in individual cases in order to manage direct advertising. If this is your case, you have the right to object at any time to the processing of data concerning you for the purposes of such advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for those purposes. If you believe that the processing of your personal data infringes data protection law, you always have the right to complain with a supervisory authority, see Art. 77 GDPR. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data infringes the GDPR. The contact details of the authorities in Europe can be found here: https://edpb.europa.eu/about-edpb/about-edpb/members_en#member-it.”