We appreciate your interest in our Privacy Policy. At My Max Time, we take the protection of your Personal Data very seriously, and in the below we explain what data we collect when you use our website www.mymaxtime.com (“our website”), socials and services and how it is used.

General Information 

Why do we have a privacy policy and what law applies?

Cyprus’ Law 125(I)/2018 (“Law 125(I)”) and the General Data Protection Regulation (“GDPR”) require us to inform you how we process your Personal Data. Doing so we will only use your Personal Data in accordance with Law 125(I) and the GDPR, and only as described in this Privacy Policy. 

What is Personal Data?

Personal Data is any information relating to personal or material circumstances that relates to an individual. This may include a name, date of birth, e-mail address, postal address, or telephone number but also online identifiers such as IP addresses or device ID`s. 

What is processing?

“Processing” means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means. The term is broad and covers virtually any handling of data.

Who is responsible for data processing?

The responsible party for data processing is My Max Time, Max Time of Athienou, Larnaca, Cyprus(“My Max Time”, “we”, “us” or “our”). If you have any questions or if you wish to exercise your rights, please contact us using [Insert email address]. 

What are the grounds for processing Personal Data?

We only process your Personal Data, if at least one of the following reasons applies:

  • for the fulfillment of contractual obligations
  • within the framework of our legitimate interests
  • based on your consent

Data we collect automatically

Log data

Each time you visit our website, our system automatically records the following data from the visiting device and stores it in a so-called log file: i) Name of the retrieved file, ii) date and time of the visit, iii) amount of data transferred, iv) message about successful retrieval, type of browser and version used, v) IP address (identification of the user’s device), vi) Operating system of the visiting device, vii) Internet service provider of the visiting device, viii) website from which you access our website, and ix) which of our website pages you are accessing. The basis for processing is our legitimate interest.

Hosting 

To provide our website, we use the services of Bluehost (Newfold Digital Inc) who processes all data to be processed in connection with the operation of this website on our behalf. This represents a legitimate interest.

Content Management System (CMS)

We also use the Content Management System (CMS) of WordPress (Automattic Inc) to publish and maintain the created and edited content and texts on our website. This means that all content and texts submitted to us is transferred to WordPress. This represents a legitimate interest.

Cookies

We use so-called cookies with our website. Cookies are small text files or other storage technologies that are placed and stored on your device by the Internet browser you use. Cookies are used to process certain information about you on an individual basis, such as your browser or location data or your IP address. This processing makes our website more user-friendly, effective, and secure. The basis for the use of cookies is our legitimate interest and your consent. If you wish to learn more about cookies in general and how they work, please visit www.allaboutcookies.org. If you want to learn more about the cookies we use, please read our Cookie Policy. 

Third-party services and content

We use content or service offers of third-party providers on the basis of our legitimate interests in order to integrate their content and services (“services”). 

This always requires that the third-party providers of this content are aware of the IP address of the user, as without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary for the display of this content. 

The following provides an overview of third-party providers and their content, together with links to their privacy policies, which contain further information on the processing of data and so-called opt-out measures, if any,

Data we collect directly

Contacting us

In addition to your name, address, and e-mail address, IP address or phone number, if provided, we usually collect the context of your message which may also include certain Personal Data. The Personal Data collected when contacting us is to handle your request and the bases are both your consent and contract.

Marketing 

General

Insofar as you have given us your separate consent to process your data for marketing and advertising purposes, we are entitled to contact you for these purposes via the communication channels you have given your consent to.

You may give us your consent in a number of ways including by selecting a box on a form where we seek your permission to send you marketing information, or sometimes your consent is implied from your interactions or contractual relationship with us. Where your consent is implied, it is on the basis that you would have a reasonable expectation of receiving a marketing communication based on your interactions or contractual relationship with us.

Direct Marketing generally takes the form of e-mail but may also include other less traditional or emerging channels. These forms of contact will be managed by us, or by our contracted service providers. Every directly addressed marketing sent or made by us or on our behalf will include a means by which you may unsubscribe or opt out. 

Newsletter

If you have consented to receive our newsletter, we will use your email address to send you information about us, our products and promotions, and news. You can revoke your consent to receive the newsletter or to the creation of personalized user profiles at any time with effect for the future. You will find the unsubscribe link at the end of each newsletter. The revocation leads to the deletion of the collected user data. Our newsletter is sent as part of processing on our behalf by MailerLite to whom we pass on your email address for this purpose.

Affiliate programs

Based on our legitimate interests, we are participants in affiliate programmes, which are designed to provide a means for websites to earn advertising fees by placing advertisements and links. Our affiliate partners may place certain cookies to track the origin of orders and can thus recognize that you have clicked on the partner`s link. We have no control over the processing activities of our affiliate partners and no way to influence their processing of your Personal Data. If you wish to learn more about the data processing of our affiliate partners, please refer to the relevant partners privacy policy. 

Social Media

General

We are present on social media on the basis of our legitimate interest. If you contact or connect with us via social media, we and the relevant social media platform are jointly responsible for the processing of your data and enter into a so-called joint controller agreement. The Personal Data collected when contacting us is to handle your request and the bases are both your consent and our legitimate interest.

When you visit our profiles and interact with us and others

When you visit our social media profiles, we, as the operator of the profile, process your actions and interactions with our profile (e.g., the content of your messages, enquiries, posts or comments that you send to us or leave on our profile or when you like or share our posts) as well as your publicly viewable profile data (e.g., your name and profile picture). 

Which Personal Data from your profile is publicly viewable depends on your profile settings, which you can adjust yourself in the settings of your social media account. 

Please take care not to transmit or share sensitive data or confidential information (e.g., application documents, bank or payment data) via social media platforms; we recommend that you use a more secure means of transmission (e.g. e-mail). 

Processing of your Personal Data by the relevant social media platform

The relevant social media platform is solely responsible for the processing of Personal Data on the social media platform itself. As a rule, the relevant social media platform processes your Personal Data when you visit our profile, irrespective of whether you have a user account or are logged in, and generally also uses cookies and other storage and (in some cases cross-device) tracking technologies. Further information on the processing of your Personal Data by the relevant social media platform.

General Principles

Who receives my data?

Within My Max Time, those that need your data to fulfill our contractual and legal obligations will receive access to it. We ensure that access by our employees to your data is only available on a need-to-know basis, restricted to specific individuals, and is logged and audited. We communicate our privacy and security guidelines to our employees and enforce privacy and data protection safeguards strictly.

Outside of My Max Time, only if this is i) necessary for the performance of our services, ii) you have consented to the disclosure, iii) or if we are legally obliged to do so e.g., by court order or if this is necessary to support criminal or legal investigations or other legal investigations or other legal proceedings; or proceedings at home or abroad or to fulfill our legitimate interests.

How long will my data be stored?

As far as necessary, we process and store your Personal Data for the duration of our business relationship, which also includes, for example, the initiation and execution of a contract. In addition, we are subject to various storage and documentation obligations, which result from the minimum statutory retention periods. The retention and documentation periods specified there are 4 to 10 years.

How do we secure your data? 

Our website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of content or contact requests that you send to us. We have also implemented numerous security measures (“technical and organizational measures”) for example encryption or need to know access, to ensure the most complete protection of Personal Data processed through this website. 

Nevertheless, internet-based data transmissions can always have security gaps, so that absolute protection cannot be guaranteed. And databases or data sets that include Personal Data may be breached inadvertently or through wrongful intrusion. Upon becoming aware of a data breach, we will notify all affected individuals whose Personal Data may have been compromised as expeditiously as possible after which the breach was discovered.

Is data transferred to a third country?

Your data is not transferred to third countries.

Sensitive Data

Unless specifically required when using our services and explicit consent is obtained for that service, we do not process sensitive data.

Automated decision-making

Automated decision-making is the process of making a decision by automated means without any human involvement. Automated decision-making including profiling does not take place.

DO NOT SELL

We do not sell your Personal Data.

Your Rights and Privileges 

Privacy rights 

You can exercise the following rights:

  • Right to information
  • Right to rectification
  • Right to deletion
  • Right to data portability
  • Right of objection
  • Right to withdraw consent
  • Right to complain to a supervisory authority
  • Right not to be subject to a decision based solely on automated processing.

If you have any questions about the nature of the Personal Data we hold about you, or if you wish to exercise any of your rights, please contact us.

Updating your information

If you believe that the information we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion, or object to its processing, please do so by contacting us. 

Withdrawing your consent 

You can revoke consents you have given at any time by contacting us. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Access Request 

In the event that you wish to make a Data Subject Access Request, you may inform us in writing of the same. We will respond to requests regarding access and correction as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days, we will tell you why and when we will be able to respond to your request. If we are unable to provide you with any Personal Data or to make a correction requested by you, we will tell you why.

Complaint to a supervisory authority

You have the right to complain about our processing of Personal Data to a supervisory authority responsible for data protection. The competent data protection authority in Cyprus is: The Commissioner for the Protection of Personal Data, 1 Iasonos Street, 2nd Floor, 1082 Nicosia, Cyprus www.dataprotection.gov.cy 

Changes and Questions

We may update this Privacy Policy from time to time. If we make changes to this Privacy Policy or materially change our use of your Personal Data, we will revise this Privacy Policy accordingly and also change the effective date at the end of this section. We encourage you to periodically review this Privacy Policy to be informed of how we use and protect your Personal Data. If you have any questions regarding our privacy practices, please contact us using privacy@mymaxtime.com.

Effective Date

Friday, 12 May, 2023