Privacy Policy.

In this Privacy Policy (hereinafter the “Policy”) you can find the information about the following:

  • what personal data are collected from you when you use https://goodwico.com (hereinafter the “Website”);

  • for what purposes and under what legal basis those data shall be collected and processed;

  • with whom these data may be shared;

  • period of storage of these data;

  • other information on the processing of your personal data.

This Policy is subject to changes. In case of any changes, the revised Policy will be published on the Website. In case if the Company has your contact details, you will be notified about the changes via e-mail notification. Your continued usage of the Website after the changes come into force shall be considered as your acceptance of the new version of the Policy.

Information about the Controller (who will process your personal data).

Applicable legislation defines “controller” as “the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data”. With regard to this Website, the controller is GOODWICO LTD, the Company incorporated under the laws of the Republic of Cyprus, with its registration number HE 267550, with its registered address at Spyrou Kyprianou, 79, PROTOPAPAS BLDG, Floor 2, Flat 201, 3076, Limassol, Cyprus. GOODWICO LTD hereinafter shall be referred to as the “Company”, “We”, “Us”, “Our”. E-mail address for messages/inquiries/requests: info@goodwico.com.

What personal data are collected from you when you use the Website?

Automatically collected data. This category includes the following:

  • Location data. These include your IP address, information about your location (the country or region), the information on your mobile carrier operator or internet provider (if applicable);

  • Device data. These include the information about the manufacturer of your device, installed time-zone, browser data (the name and the version), installed operating system, device`s screen resolution (if applicable);

  • The information about the source, from which you have got into the Website;

  • The information about your browsing session. These include any interactions with the interface of the Website, interactions with interactive windows of the Website.

Message data. When you contact the Company via the Interface of the Website or contact the Company via email address specified in the contact information, you provide the Company with the following data:

  • Your name;

  • Your e-mail address;

  • Your phone number;

  • Your message, that may also contain the information, that falls within the definition of the “personal data”.

Order data. When you order any goods, available for sale via the Website, you hereby, in addition to the Message data, provide the Company with the data about your order.

Transaction data. When you make a payment for the goods, available for sale via the Website, you hereby provide us with the following data:

  • The information about your transaction;

  • The information about your payment instrument.

Verification data. In some cases, you may be asked to pass the Verification. Thus, the following data shall be submitted by you:

  • The photo of your identification document. This may be government-issued ID, driving license, or other document applied by your jurisdiction as an identification document;

  • The photo of the payment card, used for making payment(s) for the goods or Services, provided via the Website;

  • Your photo with the documents required for submission within the Verification process;

  • In some cases – your photo, on which you hold a piece of paper with a handwritten verification code.

The Purposes and legal basis of the processing.

To protect and administer the Website. Automatically collected data are collected for the purposes of a) Administration of the Website; b) protection of the Website and the Serves, that makes it available, from any threats and attacks (including DDoS attacks); с) Prevention the Website and Company from being used in any illegal and unlawful activity. The legal basis: Article 6(1)(f) of the Regulation (EU) 2016/679 – processing is necessary for the purposes of the legitimate interests pursued by the Company or by a third party.

To provide you with the Website. Automatically collected data is collected to provide you with the Website with all its functionality. Additionally, if applicable, we can use these data to provide you with the Website, tailored for your preferences and your device. The legal basis: Article 6(1)(f) of the Regulation (EU) 2016/679 – processing is necessary for the purposes of the legitimate interests pursued by the Company or by a third party.

To provide you with the goods of the Company. We may use your Order data, Transaction data and Message data in order to provide you with the goods, available for sale via the Website. The legal basis: Article 6(1)(b) of the Regulation 2016/679 – processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract.

To conduct Verification. When required by the situation, we may ask you to pass the Verification. The legal basis: Article 6(1)(c) of the Regulation 2016/679 – processing is necessary for compliance with a legal obligation to which the Company is subject.

To contact you. Your message data are used in order to contact you in order to discuss the subject of your message. It may be the discussion of potential business relationships, discussion of your feedback and message or implementation of your request. Additionally, the Company will use the data, provided by you in order to provide you with the Services or goods, offered on the Website (under the contract). The legal basis: Article 6(1)(a) of the Regulation (EU) 2016/679 – you have given consent to processing of your personal data for the purposes of this Privacy Policy and the Article 6(1)(b) of the Regulation (EU) 2016/679 – processing is necessary for the performance of a contract to which you are party or in order to take steps at the request of your prior to entering into a contract and Article 6(1)(c) of the Regulation 2016/679 – processing is necessary for compliance with a legal obligation, to which the Company is subject or Article 6(1)(f) of the Regulation (EU) 2016/679 – processing is necessary for the purposes of the legitimate interests pursued by the Company or by a third party.

To develop and enhance the Website and the Services the Company provides. The Company uses the information contained in your feedback(s) and messages in order to develop new functions and features of the Website. Additionally, the Company may anonymize your data (remove all personally identifiable information from data sets) and use these data to find out how users of specific audiences use the Website. Additionally, the Company can use your personal data to develop its goods or Services. The legal basis: Article 6(1)(f) of the Regulation (EU) 2016/679 – processing is necessary for the purposes of the legitimate interests pursued by the Company or by a third party.

To comply with the legislation of the Republic of Cyprus and EU. In case of a request from the public authority, governmental body (including court, police) your personal data may be used for the purpose of compliance with the legal obligation, to which the Company is subject. The legal basis: Article 6(1)(c) of the Regulation (EU) 2016/679 – processing is necessary for compliance with a legal obligation to which the Company is subject.

To what recipients your personal data shall be disclosed/shared?

The contractors and affiliates of the Company. The Website and the Company are administered and maintained by a large number of people, which may be contracted by other legal persons (contractors and affiliates of the Company). Thus, your personal data will be disclosed to them. We want to ensure you, that these disclosures are based on contracts, that oblige this category of the recipients to process your personal data in accordance with this Policy.

Host Providers and Software Providers. This Website is placed on the third-party`s Server. From this follows that your personal data will be processed by this third-party. Please note, that your personal data shall be encrypted by using most up-to-date technical approaches.

Service providers. The Company uses Google`s and Cloudflare`s services.

Google LLC. The Company uses Google Services, provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which includes Google Analytics, Google Tag Manager and Google reCAPTCHA.

  1. Google Analytics. The Website uses Google Analytics, a web analytics service. Google Analytics collects the following information concerning you:

  • The total time you spend on the Website;

  • The time you spend on each page and in what order those pages were visited;
  • What internal links were clicked (based on the URL of the next pageview);
  • The IP address, user agent string;

  • Initial page inspection that analytics.js performs when creating a new tracker object is used to determine your geographic location, what browser and operating system are being used, your device`s screen size and whether flash or java is installed, and the referring site;

  • Pageview – a metric defined as the total number of pages viewed.

We use Google Analytics to understand how the Website is used by the audience of the Website, to understand the audience of the Website. The information generated to a Google server in the USA and stored there. Google Analytics Opt-out Browser Add-on provides visitors and users with the ability to prevent their data from being collected and used by Google Analytics. To install Google Analytics Opt-out Browser Add-on, follow this link: https://tools.google.com/dlpage/gaoptout?hl=en.

  1. Google Tag Manager. Google Tag Manager is a tool made by Google that allows the Company to integrate and manage tags (snippets of code) into the Website.

  2. Google reCAPTCHA. The Company uses Google reCAPTCHA. reCAPTCHA protects the Website from spam and abuse. This tool is primarily used to distinguish whether an input is made by an individual or robot, algorithm, code, or by any other form of automated processing. Google reCAPTCHA collects the data about your input.

If you want to find out more about how Google processes your data, please, follow Google`s Privacy Policy https://policies.google.com/privacy. Additionally, you can find the information about certification of Google under EU-US and Swiss-US Privacy Shield frameworks https://policies.google.com/privacy/frameworks?hl=en&gl=de.

Cloudflare, Inc. The Company uses the services, provided by Cloudflare, Inc. 101 Townsend St, San Francisco, CA 94107 USA. Сloudflare provides web optimization and security services that the Company uses to improve and protect the Website, including a reverse proxy, pass-through security service. Cloudflare may collect the log data from the visitors of the Website. Additionally, the Company deployed a Cloudflare`s cookie file for security purposes (see Cookies Policy to find out more). To find out more about processing of the data by Cloudflare, please follow https://www.cloudflare.com/privacypolicy/. Additionally, you can find Cloudflare’s Privacy Shield Framework Statement via the link https://www.cloudflare.com/privacyshield/.

The legal basis for usage of Google LLC. and Cloudflare, Inc. services: Article 6(1)(f) of the GDPR – processing is necessary for the purposes of the legitimate interests pursued by the Company and the third party.

How long your personal data shall be stored?

For Automatically collected data and the data, collected by Google services – for a period of twenty-eight (28) months starting from the date of your last visit to the Website. Your message data shall be stored as long as required for a purpose of your message. If you have made an order for the Services or goods of the Company or have entered in any form of a contract with the Company – your data shall be stored for a period of six (6) years starting from the date of provision of the Services or goods to you or starting from the date of termination of a contract between you and the Company. Anonymized data shall be stored for an unlimited period of time (unless you objected to this processing in accordance with your right to object to processing).

Protection of minors.

The Company does not knowingly collect information from children under 14 years old and the Website is not directed to children under the age of 18. If you are a parent and believe that your child under the age of 14 has used the Website and provided personally identifiable information to us through the Website, please contact the Company via contact details in order to request us for the removal of the personal data of your child.

Your rights under this Policy.

As the data subject, you have several rights, which you can realize by contacting the Company via email info@goodwico.com. Your request will be notified to the proper department of the Company, that will process your request.

These rights are:

The right to access. You have the right to obtain from the Company confirmation as to whether or not your personal data are being processed, and, if the Company indeed processes your personal data, to receive a copy of the personal data undergoing processing (in a plain language, if the Company has you personal data – you may request the Company to provide you with a copy of these data).

The right to rectification. You have the right to obtain from the Company the rectification of inaccurate data concerning you (in a plain language, if the Company has inaccurate data concerning you – you have the right to ask the Company to correct those inaccurate data).

The right to erasure/to be forgotten. You have the right to have your personal data erased. Upon your request, the Company shall remove your personal data. Nevertheless, this right shall be applied if: i) the Company has no legal obligation to have your personal data retained; and ii) the purposes of the processing have been reached.

The right to object to processing. You have the right to object, on grounds relating to your particular situation, to processing of your personal data, if the grounds of this processing were necessary for the purposes of the legitimate interests pursued by the Company (article 6(1)(f) of the GDPR). Additionally, you have the right to object to processing of your personal data for direct marketing purposes (if this processing was based on the article 6(1)(f) of the GDPR).

The right to restriction of the processing. You have the right to have the processing of your personal data restricted, in case if one of the following applies: a) the accuracy of the personal data have been disputed by you (for a period enabling the controller to verify the accuracy of the personal data); b) the processing is unlawful (or has been unlawful) and you oppose the erasure of the personal data and request the restriction of their use instead; c) the Company no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; d) you have objected to processing on the basis of your right to object pending to verification whether your legitimate grounds override those of the Company.

The right to withdraw consent. If you have previously consented to the processing of your personal data, you have the right to withdraw this consent at any time. It means that the Company shall stop processing of the personal data, for the processing of which the consent was required, starting from the date of the withdrawal. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

The right to data portability. You have the right to have your personal data received from the Company in a structured, machine-readable format and have the right to have your personal data transmitted to another controller (simply, to another company). Nevertheless, this rule applies only to the processing, which was carried out by automatic means and was collected under the contract or under your consent in accordance with the Regulation 2016/679.

Please note, that these rights are applicable with some restrictions:

  • If the Company is not sure about the identity of the requestor, the Company shall verify the identity of a user/visitor who requests for the realization of any of the rights before the implementation of this right.

  • The Company may restrict the rights, specified above, or deny in the realization of any of the rights, if this restriction or denial is grounded on the legislation, to which the Company is subject. In this case, the Company will specify to you the reason for the denial in the reply to your request.

The right to lodge a complaint with the supervisory authority. You can always connect with Company for any issue concerning your privacy, including complaints. Nevertheless, if you deem, that your rights under the data protection legislation have been infringed, you can lodge a complaint with the Office of The Commissioner for personal data protection of the Republic of Cyprus. The Website of the Commissioner: dataprotection.gov.cy.

For EU Residents – data transfer outside the EU.

Our business operates globally. Thus, your personal data be transferred to the countries (or, in legal terms, jurisdiction) with the personal data protection legislation, different in comparison with the legislation in force in the European Union. All these transfers are based whether on the adequacy decision of the European Commission in accordance with the article 45 of the Regulation 2016/679 or appropriate safeguards in accordance with the article 46(2) of the Regulation 2016/679 or, in some occasional cases, on the article 49(1)(b) of the Regulation 2016/679.

Cookies Policy.

The Website uses cookies. A cookie is a small file of letters and numbers that placed on your electronic device. These cookies allow The Company to distinguish you from other visitors and users of the Website, which helps the Company to provide you with a good experience when you browse the Website and also allows the Company to improve the Website and protect it from cyberattacks.

How can you control Cookies?

Most browsers allow a user to control and manage the cookies. The “Help” or “Setting” tab in your browser shall provide you with the proper functionality. Here you can find the guidelines for cookie management for the most widely spread types of browsers:

Google Chrome: https://support.google.com/chrome/answer/95647?hl=en&p=cpn_cookies

Opera: https://help.opera.com/en/latest/web-preferences/

Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies

Internet Explorer: https://support.microsoft.com/en-us/help/278835/how-to-delete-cookie-files-in-internet-explorer

Safari for Mac: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Microsoft Edge: https://support.microsoft.com/en-gb/help/4468242/microsoft-edge-browsing-data-and-privacy-microsoft-privacy

Cookies Used by the Website.

Strictly necessary cookies. These cookies are essential for the functioning of the Website and may not be disabled.

Cookie Name Expiration Deployed by? Reason for Use
__cfduid 1 month. The Company.

The _cfduid cookie helps the Company to detect malicious visitors to our Website and minimizes blocking legitimate visitors. It is placed on the devices of the visitor of the Website and used to identify individual visitors behind a shared IP address and apply security settings on a per-client basis. It is necessary for supporting Our security features. The _cfduid cookie collects and anonymizes Website visitors IP address using a one-way hash of certain values so they cannot be personally identified.

Analytics cookies. These cookies are needed for us to understand the audience of the Website, and, with the usage of these data, to enhance and develop this Website. We use these cookies only if you have agreed to their usage by the interface of the Website.

Cookie Name Expiration Deployed by? Reason for Use
_ga 2 years The Company.

Used to distinguish users.
_gat_gtag_UA_147552367_1 1 minute
_gid 24 hours