Personal Data Processing

This notice explains how RUNLAB (CY) LIMITED, registration number HE 425216, VAT/TIC 10425216G, with its business address at Vasileos Georgiou 20, DRAKOS, Flat SHP06, 4047 Germasogeia, Limassol, Cyprus (hereinafter referred to as “RUNLAB”, “we”, “us” or the “Controller”), processes personal data through the website https://runlab.shop/.

Personal data are processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”), the Protection of Natural Persons with regard to the Processing of Personal Data and the Free Movement of such Data Law of 2018 (Law 125(I)/2018) of the Republic of Cyprus, and other applicable data protection legislation.

1. This notice applies to personal data processed both by automated means and by other lawful means. Depending on how you use our website and services, we may process the following categories of personal data: first name and surname; date of birth where required; telephone number; email address; billing and delivery address; account and authentication data; order and purchase information; payment-related information received from payment service providers; information contained in communications with us; and technical information relating to your use of the website, including IP address, browser type and version, operating system, device type, screen resolution, language settings, referral source, pages viewed, actions performed on the website, and cookie or similar technology data.

2. Personal data may be processed for the following purposes: creating and managing customer accounts; authenticating users; processing, confirming, fulfilling and delivering orders; processing payments and refunds; providing customer support; responding to enquiries; providing requested products and services; complying with tax, accounting, consumer protection and other legal obligations; preventing fraud and misuse of the website; ensuring the security and proper functioning of the website; analysing and improving the website and our services; and, where permitted by law, sending marketing and promotional communications.

3. The legal bases for processing personal data may include: the necessity of processing for the performance of a contract with you or in order to take steps at your request before entering into a contract; compliance with a legal obligation to which RUNLAB is subject; the legitimate interests pursued by RUNLAB or a third party, provided that such interests are not overridden by your rights and freedoms; and your consent where consent is required under applicable law.

4. Where processing is based on consent, such consent is voluntary and may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Consent for optional purposes, including certain marketing activities and non-essential cookies, will be requested separately where required.

5. We may disclose personal data, where necessary, to authorised employees and contractors of RUNLAB and to third-party service providers involved in the operation of our business, including payment service providers, delivery and courier companies, hosting and IT service providers, communications providers, accounting service providers and professional advisers. We may also disclose personal data to competent public authorities, courts or regulators where required by law.

6. Where personal data are transferred outside the European Economic Area, RUNLAB will ensure that an appropriate legal transfer mechanism and safeguards required by the GDPR are in place, including, where applicable, an adequacy decision of the European Commission, Standard Contractual Clauses or another legally permitted transfer mechanism.

7. Personal data will be retained only for as long as necessary for the purposes for which they were collected and for any additional period required by applicable tax, accounting, consumer protection or other legal obligations. Where processing is based solely on consent, personal data will no longer be processed for that purpose after consent has been withdrawn, unless another lawful basis applies.

8. Subject to the conditions and limitations provided by applicable data protection law, you have the right to access your personal data, request correction of inaccurate or incomplete data, request erasure of your data, request restriction of processing, object to certain processing, request data portability where applicable, and withdraw consent at any time where processing is based on consent.

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus if you believe that your personal data have been processed unlawfully.

9. Where processing in connection with an information society service offered directly to a child is based on consent, a child aged 14 or over may provide such consent under the laws of the Republic of Cyprus. Where the child is under the age of 14, consent must be given or authorised by the holder of parental responsibility where required by law.

10. RUNLAB implements appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, alteration or disclosure.

11. You may contact RUNLAB regarding the processing of your personal data, exercise your data protection rights or withdraw a consent previously given to us using the contact details published on https://runlab.shop/.

Data Controller:
RUNLAB (CY) LIMITED
Registration No.: HE 425216
VAT/TIC: 10425216G
Vasileos Georgiou 20, DRAKOS, Flat SHP06
4047 Germasogeia, Limassol
Cyprus

12. By providing personal data through the website, you acknowledge that you have been informed about the processing of your personal data as described above. Where RUNLAB specifically requests your consent for an optional processing activity, such consent will be requested separately and may be withdrawn at any time.