PRIVACY AND PERSONAL DATA PROTECTION POLICY

This Policy of confidentiality and protection and processing of personal data (hereinafter referred to as the "Policy") was developed by the PRIVATE ENTERPRISE "CIX DESIGN," represented by the manager Solomiya Yaroslavivna Oliynyk, which operates on the basis of the Charter, EDRPOU: 36733509 (hereinafter referred to as the "Company" and/or " Administrator") in accordance with the current legislation of Ukraine, including, but not limited to, the Law of Ukraine "On the Protection of Personal Data" No. 2297-VI dated June 1, 2010, for its use in the process of carrying out business activities, and establishes the procedure for receiving, collecting, accumulation, storage, processing, use, protection and disclosure of personal data (hereinafter - "Data") of Users of the website located on the Internet at the link: https://cix.ua (hereinafter - "Internet store") .

Please read this Policy carefully to understand the principles of processing Users' personal data. This Policy establishes the procedure for the Company's processing of Data, the types of Data that are collected, the purposes of using such Data, the Company's interaction with third parties, security measures for Data protection, conditions for accessing Data, as well as contact information for the User to obtain access, enter changes, blocking or deletion of their Data and addressing any questions the latter may have regarding Data protection.
This Policy covers the Company's activities both online and offline, including Data that the Company collects through various channels, such as other websites, applications, social networks, etc. This Policy does not apply to sites accessed via hyperlinks placed in the online store. In this regard, the Company recommends that you familiarize yourself with the privacy and personal data policy of each site before transferring personal data by which you, as a User, can be identified.

By placing an order for goods in the online store on the basis and under the conditions specified in the Agreement on the public offer on the order, purchase, sale and delivery of goods, the User gives permission and unequivocal consent to the processing of his Data under the conditions and in the order set forth below, and also confirms familiarization with this Policy, its acceptance and agreement with its content.

1. DEFINITION OF TERMS
A personal database is a named collection of ordered personal data in electronic form and/or in the form of personal data files.
The owner of the personal data base is a natural or legal person who is granted the right to process this data by law or with the consent of the subject of personal data, who approves the purpose of processing personal data in this database, establishes the composition of this data and the procedures for its processing unless otherwise determined by law. The owner of the personal data base is the PRIVATE ENTERPRISE "SIX DESIGNS", represented by the manager Solomiya Yaroslavivna Oliynyk, which operates based on the Charter, EDRPOU: 36733509.
The consent of the subject of personal data is any documented, voluntary expression of will of a natural person regarding the granting of permission for the processing of his personal data in accordance with the formulated purpose of their processing.
Anonymization of personal data removes information that makes it possible to identify a person.
The user is a legally competent natural person (including, but not limited to, a citizen of Ukraine, a foreigner, a stateless person, an individual entrepreneur) or a legal entity, on whose behalf and in whose interests an authorized representative acts, who wishes to purchase goods on the Internet shop
Processing of personal data - any actions with Data, including, but not limited to access, provision, distribution, collection, systematization, storage, accumulation, recording, transfer, blocking, deletion, clarification, update and/or change, Depersonalization and other ways of using Data by the Company.
Personal data is information or a collection of information about a natural person who is identified or can be specifically identified.
The administrator of the personal data base is a natural or legal person who is authorized by the Owner of the personal data base or by law to process this data. A person who is instructed by the Owner and/or the Administrator of the personal database to carry out technical work with the personal database without access to the content of personal data is not the Administrator of the personal database. The administrator of the personal database is the PRIVATE ENTERPRISE "CIX DESIGNS", represented by the manager Solomiya Yaroslavivna Oliynyk, which operates on the basis of the Charter, EDRPOU: 36733509.
The subject of personal data is a natural person whose personal data is processed in accordance with the law.
A third party is any person, with the exception of the Subject of personal data, the Owner or Manager of the Personal Data Base and the authorized state body for the protection of personal data, to whom the Owner or Manager of the Personal Data Base transfers personal data in accordance with the law.
Cookies are small text files that are stored on the User's devices when visiting the online store.

2. SOURCES OF PERSONAL DATA
This Policy applies to Data that the Company receives from or about the User from the following sources:
• An online store operated by the Company under its own domains/URLs and pages that the Company runs on social networks such as Facebook, Instagram, TikTok, etc.;
• e-mail, text and other electronic messages;
• electronic registration forms or similar forms that the Company collects using e-mail or direct use of the Internet store;
• marketing research (if the feedback is not provided on an anonymous basis).

3. COLLECTION AND USE OF PERSONAL DATA
The Company collects and uses the following Data and information:
• personal contact information that the User provides to the Company that will allow such User to be contacted, such as name, postal address, email address, social media data, phone number;
• demographic information that describes the User's demographic and behavioral characteristics (for example, their date of birth, age or age range, gender, geographic location);
• information from the computer/mobile device about the computer system or other technological device used by the User to access the Online Store, for example, the IP address used to connect the computer or device to the Internet, the type of operating system, web browser type and version. If the User accesses the Online Store through a mobile device, such as a smartphone, the collected information will also include, where permitted, the User's unique device identifier, advertising identifier, geographic location and other similar mobile device data;
• any information that the User voluntarily shares with the Company (for example, about his experience in purchasing goods), leaving feedback, comments, appeals to the customer support service, complaints, claims, and other appeals;
• any information from social networks that the User shares publicly on a social network, or information that is part of the User's profile on a social network (for example, on Facebook, Instagram, TikTok). To refuse to provide such information in a social network, the User must visit the website of the relevant social network;
• payment information that the Company needs to fulfill orders or that the User uses to make an order (purchase) in the online store, for example, debit or credit card data (name of the owner, card number, expiration date, etc.) or other forms of payment (if available). In any case, the Company processes payment and financial information in accordance with applicable legislation, regulations and security standards;
• information that Users provide to the Company when concluding a Public Offer Agreement on ordering, purchasing, selling, and delivering goods by accepting such a public offer.

4. PURPOSES OF COLLECTION, USE AND PROCESSING OF PERSONAL DATA
The Company uses and processes Data for the following purposes (for):
• ensuring compliance with laws and other normative legal acts;
• administration of the Internet store, provision of its updates and technical support;
• conclusion of contracts with Users, execution of contractual relations between the Company and the User;
• information provision of Users who have provided their Data in any way, including through the Internet store/pages in social networks/e-mail, etc.;
• processing of Users' orders;
• providing Users with effective customer and technical support in the event of problems related to the use of the Internet store;
• to communicate with Users for the purpose of properly fulfilling obligations, processing payments, and carrying out settlement operations;
• consideration of requests and complaints left by Users regarding the use of the Internet store;
• ensuring the security of the Internet store and preventing fraud;
• checking compliance with the conditions governing the use of the online store;
• any other purposes to the extent sufficient to ensure the implementation of civil, economic, and tax relations.

In addition, the Company uses User Data for marketing purposes in accordance with the legislation of Ukraine. When using your Data for direct marketing (commercial mailing and marketing messages about new products (which we think will be of interest to you), we include a link by which you can unsubscribe from such messages in the future.

5. PROTECTION OF PERSONAL DATA
The Company ensures the application of all relevant confidentiality obligations, as well as technical, operational and organizational security measures to prevent unauthorized or illegal disclosure or processing of information and Data, its accidental loss, destruction or damage, but please note that absolutely safe and there is no error-free way of data transmission over the Internet.

The Company is not responsible for the functioning of servers, providers of Internet access services, the work of third parties, due to whose fault access to the online store may be impossible or limited, the possible leakage of information due to the fault of third parties, as well as for the User's disclosure of his Data.

6. THE COMPANY'S INTERACTIONS WITH THIRD PARTIES REGARDING PERSONAL DATA
The Company does not transfer Data to third parties, except when such transfer is required by law, at the request of the Subject of personal data or in other cases set forth in this Policy.

The Company may transfer User Data:
• authorized state bodies within their powers;
• to persons to whom the Company is obliged to transfer them in order to comply with the legislation of Ukraine;
• persons to whom the Company transfers Data for the purpose of fulfilling the contract with the Subject of personal data (including for the purpose of making settlements with the User);
• persons to whom the Company entrusts Data processing;
• to other persons with the consent of the Subject of personal data.

The Company understands that personal information is valuable and an integral part, including the personal non-property rights of any individual, and therefore takes all possible measures to protect the personal information of Users voluntarily and knowingly transferred by the latter to the Company.

The online store may contain links to other websites (exclusively for informational purposes). If you link to other websites, this Policy will not apply to such websites.

However, the Company may transfer information received from Users during the sale of goods in the online store to third parties in order to properly fulfill its obligations to Users, in compliance with the requirements stipulated by the Law of Ukraine "On the Protection of Personal Data"

7. RIGHTS AND OBLIGATIONS OF USERS (SUBJECTS OF PERSONAL DATA)
The User (Subject of personal data) has the right to:
• request clarification of their Data, their updating, blocking or destruction;
• demand notification of all persons who were previously notified of his incorrect or incomplete Data about all corrections and additions made;
• appeal, in accordance with the procedure established by the current legislation of Ukraine, illegal actions or inactions in the processing of his Data;
• know about the sources of collection, the location of their Data, the purpose of their processing, the location or place of residence (residence) of the Owner or Manager of personal data or give the appropriate instructions for obtaining this information to persons authorized by him, except for cases established by current legislation;
• receive information about the conditions for providing access to the Data, in particular information about third parties to whom his Data is transferred;
• to access your Data;
• receive no later than 30 (thirty) calendar days from the date of receipt of the request, except in cases provided by law, an answer about whether his Data are being processed, as well as receive the content of such Data;
• present a reasoned demand to the Owner of personal data with an objection to the processing of their Data;
• make a reasoned demand for the change or destruction of your Data by any Data Owner and Administrator if this Data is processed illegally or is unreliable;
• to protect your Data from illegal processing and accidental loss, destruction, damage due to intentional concealment, failure to provide, or untimely provision of data, as well as protection from providing information that is unreliable or disgraces the honor, dignity and business reputation of a natural person ;
• file complaints and apply legal remedies in case of violation of the legislation on the protection of personal data;
• enter a reservation regarding the limitation of the right to process your Data when giving consent;
• know the mechanism of automatic data processing;
• to protect against an automated decision that has legal consequences for him.

The User (Personal Data Subject) is obliged, in particular, but not limited to:
• in the event of a Data change, provide the Company with accurate, reliable information for updating the Data as soon as possible;
• not to take actions aimed at misleading other Users;
• do not provide your Data for use by third parties;
• not to collect, systematize, store, process or distribute personal information of other Users;
• not attempt to gain access to the Data of other Users in any way, including, but not limited to, fraud or breach of trust.

If the User uses the Online Store on behalf of and in the interests of third parties, then by giving this consent, the User confirms that he has sufficient authority to perform such actions, including - to give consent on their behalf to the processing of Data under the conditions set out above, as their representative.

8. PERSONAL DATA STORAGE PERIOD
Consent to the processing of personal data is given by the User for the entire period necessary for the Company to achieve the processing goals. The data storage period is not limited. Users' data are processed for a period no longer than is necessary in accordance with their legal purpose and the purposes specified in this Policy.

9. COOKIE FILES

Please note that the online store uses cookies. With each visit to the Online Store, the Company may collect information related to the devices Users use and the networks they connect to when using related services. This may include such information as IP address, browser type and version, type and type of browser plug-ins, operating system and platform, and information about the User's visit, including the route of movement by URL addresses to, through or from the Internet store, products/services you viewed or searched for, loading errors, length of visit to certain pages, etc. The company collects such information through the use of various technologies, including cookies.

Cookies may be used in the online store to understand what content the User is interested in and to remember it if he uses the online store again. The company stores cookies to ensure the technically optimized operation of the online store.

Disabling cookies may lead to restricted access and/or poor functioning of the online store.

Cookies that may be used by the Company cannot harm the User's devices. If the User consents to the processing of Data, this automatically allows the Company to use cookies every time the User uses the Online Store.

10. CHANGES IN POLICY
Changes and additions may be made to this Policy from time to time and without prior notice to the Users, including when the requirements of the legislation change. If the Company changes the way it processes User Data, it will update this Policy. The Company also reserves the right to make changes to its Data processing practices and this Policy at any time.

In the event that any provisions of this Policy, clauses or their parts, are recognized as contradicting the current legislation of Ukraine or as invalid, this does not affect other provisions of this Policy, they remain fully valid and continue to operate in full measures and become valid, and any other invalid provision or provision that cannot be fulfilled, without further actions of the parties, is considered changed, corrected to the extent that it is necessary to ensure its validity and the possibility of execution.

The terminology used in this Policy shall have the same meaning as in the Public Offering Agreement for the Order, Purchase, Sale, and Delivery of Goods unless otherwise specified. If you have any questions regarding this Policy, you can send letters to the Company's e-mail address: hello@cix.ua.

11. USER CONSENT
By placing an order for goods in the online store, the User confirms that he is familiar with and agrees to the terms of this Policy, in particular, for the purpose of processing the Data specified in this Policy, as well as the rights granted to Users (Subjects of personal data) in accordance with the current legislation of Ukraine, and using the Data by the Company by paying for goods through the appropriate online store form and/or ticking the box "I agree with the Public Offer Agreement and the Privacy Policy".

If the User does not agree with any provision contained in this Policy, he undertakes to immediately stop viewing or any other use of the Online Store.

12. FINAL PROVISIONS
All relations involving the Company, related to the processing and protection of Data and not directly reflected in the Policy, are regulated in accordance with the provisions of the current legislation of Ukraine on the protection of personal data.

To update, obtain access, make changes, block or delete your Data, withdraw the Consent to the processing of personal data that was given to the Company by the User in accordance with this Policy, or in case of any comments, wishes or claims regarding the Data processed by the Company, the User must send a statement to the Company's email address: hello@cix.ua.

The Company ensures the application of all relevant confidentiality obligations, as well as technical, operational and organizational security measures to prevent unauthorized or illegal disclosure or processing of information and Data, their accidental loss, destruction or damage.