Privacy Policy & Personal Data Processing Policy(in accordance with GDPR)
This Privacy Policy describes the procedure for collection, storage, processing and use of personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR).
1. Data Controller
The data controller responsible for the processing of personal data is:
Individual Entrepreneur Denys Shpodaris
Project: toys-agency.com
E-mail: info@toys-agency.com
The Data Controller is directly responsible for ensuring compliance with GDPR requirements and the protection of personal data.
2. Categories of Personal Data Collected
The Project may collect and process the following personal data, including but not limited to:
-
full name;
-
contact information (e-mail, phone number);
-
passport or identity document data;
-
data of the Certificate of Registration of an individual entrepreneur (if applicable);
-
place of residence;
-
other information voluntarily provided by the data subject and required for project purposes.
3. Sources and Methods of Data Collection
Personal data is collected exclusively through official data collection channels, including:
-
the official e-mail address info@toys-agency.com;
-
official websites, forms, or communication channels legally associated with the toys-agency.com project.
No personal data is collected from unofficial or unauthorized sources.
4. Legal Basis for Processing
Personal data is processed in accordance with Article 6 of the GDPR on the following legal grounds:
-
performance of a contract or pre-contractual obligations;
-
compliance with legal obligations;
-
consent of the data subject;
-
legitimate interests of the Project, provided such interests do not override the rights and freedoms of the data subject.
5. Purpose of Processing
Personal data is processed solely for purposes directly related to the implementation of the toys-agency.com project, including:
-
communication with clients, partners, and employees;
-
conclusion and performance of contracts;
-
fulfillment of legal and accounting obligations;
-
internal project administration and reporting.
Personal data shall not be used for purposes incompatible with the purposes stated above.
6. Data Storage and Security
Personal data is stored only on servers and computers belonging to the toys-agency.com project and/or its organizers.
Appropriate technical and organizational measures are implemented to ensure a level of security appropriate to the risk, including protection against unauthorized access, loss, alteration, or disclosure of personal data.
Access to personal data is limited exclusively to authorized project organizers involved in data processing.
7. Data Processing and Third Parties
Processing of personal data is carried out only by the Project organizers.
If necessary, the Data Controller may involve other Project organizers and/or specialized service providers (processors) solely for the purposes stated in this Policy. Such parties are obligated to comply with GDPR requirements and ensure appropriate data protection measures.
Personal data is not transferred to third parties without a lawful basis.
8. International Data Transfers
If personal data is transferred outside the European Economic Area (EEA), such transfer shall be carried out in compliance with GDPR requirements, including the use of appropriate safeguards such as standard contractual clauses or equivalent legal mechanisms.
9. Data Retention Period
Personal data is stored only for the period necessary to achieve the purposes for which it was collected, or as required by applicable law.
After the expiration of the retention period, personal data shall be securely deleted or anonymized.
10. Rights of Data Subjects
In accordance with GDPR, data subjects have the right to:
-
access their personal data;
-
request rectification of inaccurate data;
-
request erasure of personal data;
-
restrict processing of personal data;
-
object to processing;
-
request data portability;
-
withdraw consent at any time (where processing is based on consent);
-
lodge a complaint with a supervisory authority within the EU.
Requests related to the exercise of these rights may be sent to info@toys-agency.com.
11. Deletion of Personal Data
Personal data shall be deleted from the Project database upon request of the client, employee, or partner, unless retention is required by law.
12. Personal Data Records
Records of personal data processing may be maintained in the form of registers and/or partnership agreements approved by the Project organizers.
Such records may include:
-
list of personal data categories;
-
date of receipt of personal data;
-
date of inclusion in the register;
-
date of modification;
-
date of transfer to third parties and legal basis for such transfer (if applicable);
-
date of destruction of personal data.
13. Final Provisions
This Privacy Policy may be updated from time to time. The current version is published on the toys-agency.com website and is effective from the date of publication.