Who we are
FLYING BITS SRL(“Company”), headquartered at 4 Bozieni Str., Bucharest 061616, Romania, is committed to processing personal data in accordance with all applicable legal regulations governing the protection of persons with regard to the processing of personal data.
We may process personal data in relation to:
General information on processing personal data
Personal data refers to any information that pertains to an identified or identifiable person, also known as a data subject. An identifiable person is someone who can be directly or indirectly identified, typically by using an identifier such as a name, identification number, location data, online identifier, or by one or more factors that relate to their physical, physiological, genetic, mental, economic, cultural or social identity.
Processing of personal data encompasses any operation or set of operations that is carried out on personal data or sets of personal data, either by automated means or not. These operations include collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
A Controller is a natural or legal person, public authority, agency or another body that, either alone or together with others, determines the purposes and means of the processing of personal data.
A Processor is a natural or legal person, public authority, agency, or another body that processes personal data on behalf of the Controller.
A Recipient is a natural or legal person, public authority, agency or another body, to whom personal data is disclosed, whether or not they are a third party.
The main data/categories of data processed by the Company
The Company processes different types and categories of data, depending on the purposes associated with the processing. These may include:
What information do we collect from merchants and why?
We gather several types of personal data to provide you with our services and to comply with legal requirements. The data we collect includes your name, email address, and phone number.
When you install our app, we collect personal information about your customers, such as their ID, name, email, phone number, shipping and billing address. We only use this information to provide you with our Service, and we never share your customers' information with third parties.
We also collect information from visitors to our website and users who contact us for support. This information includes data about the device and browser you use, your network connection, your IP address, and the cookies installed on your device.
We primarily collect your personal data directly from you, especially when you are in a legal relationship with our Company or when you are representing an organization that is in a legal relationship with us.
However, there may be instances where we obtain personal data from other sources, including but not limited to, merchants, suppliers, and partners. We may also collect personal data from publicly available sources, Shopify, and other channels/platforms providers, as per your settings preferences within such channels/platforms.
Types of data processing
Purposes for which personal data are processed
The following are the main purposes for which we process personal data:
Legal basis on which data processing is based
The processing of personal data considers both the provisions of relevant normative acts and the applicable legislation in the Company's field of operation.
The processing is deemed lawful based on the following conditions:
1) when necessary to fulfill a contract or to undertake pre-contractual measures at the request of the data subject;
2) when necessary to comply with legal obligations imposed on the Company as the controller;
3) when necessary to pursue legitimate interests of the controller or a third party;
4) when the data subject gives explicit consent for specific purposes, but only when required by law;
5) for managing potential customers, clients, and partners, including risk management;
6) handling complaints and notifications regarding the Company's services;
7) improving products and services; and
8) ascertaining and defending the Company's rights in court.
How long do we keep personal data
We only keep the personal data we process for the duration necessary to achieve the purpose for which it was collected, in accordance with applicable laws and regulations. This includes:
Your rights and how to exercise them
Our company is committed to helping you exercise your rights listed below. You can do so by sending an email to us or submitting a request to our headquarters address. To ensure the protection of your data, we may ask for additional information to verify your identity before processing your request, especially in cases where the request is made electronically.
If you submit an electronic request, we will provide the information in electronic format where possible. We will make every effort to respond promptly to your request, within the time limits set by the applicable legal provisions, usually within 30 days of the request being registered. Please note that in certain cases, we may charge an access fee to cover administrative costs associated with fulfilling the request, as provided by applicable laws.
If our company is unable to fulfill your request, either in whole or in part, due to legal provisions, we will communicate this to you in writing, providing an explanation for the denial.
The right to access your personal data
As a data subject, you have the right to request access to the personal data we process as the controller. You can obtain confirmation from our company whether we process your personal data and if so, the following information:
The right to rectification of data
You have the right to obtain from the Company, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes for which the data were processed, you have the right to obtain the completion of personal data that are incomplete, including by providing an additional statement. When possible or necessary we will make corrections (as appropriate) based on updated information and inform you about this if necessary.
The right to delete data
You have the right to obtain from the Company the deletion of personal data concerning you, without undue delay, except for certain cases provided by the law, if one of the following reasons applies:
The right to restrict processing
You have the right to request a restriction on the processing of your personal data in the following situations:
The right to data portability
You are entitled to receive a copy of your personal data that you have provided to the Company, in a format that is widely used and structured in a way that can be read automatically, and which can be transferred to another controller without any impediments from the Company, if (i) the processing is based on your consent or a contract with you, and (ii) the processing is carried out by automated means.
If you choose to exercise your right to data portability, the personal data may be transferred directly from the Company to another controller that you have specifically designated, provided that this is technically feasible.
The right to opposition
You are entitled to object to the processing of your personal data when it is done for the legitimate interests of the Company or a third party, including profiling, if it relates to your particular circumstances. This right applies even if the processing is carried out in the public interest. If you exercise this right, the Company will stop processing your personal data unless it can demonstrate legitimate and compelling reasons for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
The right to object to processing for direct marketing purposes
You have the right to object to the processing of your personal data for direct marketing purposes, including profiling, at any time. This applies specifically when the purpose of the processing is direct marketing. Please note that the Company may send you offers, information, and other types of communications based on your participation in an event organized by the Company as a main organizer or partner, or your agreement to receive commercial communications from us.
If you exercise your right to object to the processing of your personal data for direct marketing purposes, your data will no longer be processed for this purpose.
The right to withdraw consent
You can withdraw your consent for the processing of your personal data at any time if the processing is based on your consent. However, please note that the withdrawal of consent will not affect the legality of the processing carried out before the withdrawal. It's important to note that withdrawal of consent only applies if the processing is based on consent and not if it's based on another legal basis.
The right to submit a complaint
To report any concerns regarding the handling of your personal data, you may contact us by sending an email or letter that includes the details of your complaint. We will carefully examine and provide a response within the timeframe prescribed by law. Additionally, you have the right to lodge a complaint with the relevant data protection supervisory authority.
Our contact information for data protection purposes
Email: [email protected]
Address: Bozieni 4, Bucharest 061616, Romania
Date of Last Revision: April 07, 2023