Privacy Policy

Privacy at a Glance

We are committed to protecting your privacy and ensuring you have a positive experience on our website. This Privacy Policy explains how ZM ECOM GROUP collects, uses, and protects your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller

The data controller responsible for your personal data is:

If you have any questions about our privacy practices or wish to exercise your data protection rights, please contact us using the information above.

Hosting

Our website is hosted by [Hosting Provider Name]. The hoster processes data on our behalf as a data processor and is contractually obligated to comply with GDPR requirements.

Legal Basis

The processing of data by our hosting provider is based on our legitimate interest in maintaining a secure, reliable, and efficient website (GDPR Article 6(1)(f)). We have implemented appropriate technical and organizational measures to ensure the security of your data.

General Information on Data Protection

We are deeply committed to protecting your personal data and ensuring your privacy rights are respected. Your data is processed securely and only for the purposes specified in this Privacy Policy.

Security Measures

Our website uses SSL/TLS encryption to protect data transmitted between your browser and our servers. All personal data is protected with appropriate technical and organizational security measures to prevent unauthorized access, alteration, disclosure, or destruction.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations. Specific retention periods are outlined for each data collection method in this Privacy Policy.

Legal Bases for Processing

We process personal data only when we have a legal basis to do so under GDPR Article 6(1). The following legal bases apply to our data processing activities:

• Article 6(1)(a) - Consent: We process your data when you have explicitly consented to the processing. You may withdraw your consent at any time.
• Article 6(1)(b) - Contract: We process data necessary to fulfill a contract with you or to take steps at your request before entering into a contract.
• Article 6(1)(c) - Legal Obligation: We may process data when required by applicable law, such as tax or accounting regulations.
• Article 6(1)(f) - Legitimate Interest: We process data for our legitimate business interests, such as improving our website, preventing fraud, and maintaining website security, provided your rights are not overridden.

Data Collection on This Website

Contact Form

When you submit a contact form on our website, we collect the following personal data:

• Name
• Email address
• Phone number (if provided)
• Company name (if provided)
• Message content

Legal Basis: We process this data based on GDPR Article 6(1)(b) to respond to your inquiry and Article 6(1)(f) for our legitimate interest in providing customer support.

Data Retention: We retain contact form data for 12 months from the date of submission or until the matter is resolved, whichever is longer. After this period, the data is deleted unless we have a legal obligation to retain it.

Email Inquiries

If you contact us via email, we will collect your email address and any information contained in your message. We use this information solely to respond to your inquiry and provide the services you request.

Legal Basis: GDPR Article 6(1)(b) and 6(1)(f).

Data Retention: Email communications are retained for 24 months unless required by law to keep them longer.

Server Log Files

Our web server automatically collects and stores information about your visits to our website in server log files. This data is collected automatically and does not require any action on your part. The following information is recorded:

• IP address
• Browser type and version
• Operating system
• Referrer URL
• Hostname
• Date and time of access
• Pages accessed and time spent on each page
• HTTP status codes

Purpose: We use server log data for system administration, security monitoring, analyzing website usage patterns, and improving website performance and functionality.

Legal Basis: GDPR Article 6(1)(f) - our legitimate interests in maintaining website security, detecting abuse, and analyzing usage statistics.

Data Retention: Server log files are automatically deleted after 90 days. We do not use this data to identify individuals unless there is an indication of illegal activity.

International Data Transfers

ZM ECOM GROUP LTD is located in Cyprus, which is a member state of the European Union. Personal data we collect is primarily processed within the EU/EEA, which is considered to have an adequate level of data protection under GDPR Article 45.

Data Transfers Outside the EU/EEA

If we transfer your personal data outside the EU/EEA, we implement appropriate safeguards to protect your data, including:

• Standard Contractual Clauses (SCCs): We use EU-approved Standard Contractual Clauses as a legal mechanism to ensure data protection when transferring data to countries without an adequacy decision.
• Adequacy Decisions: We only transfer data to countries for which the EU Commission has issued an adequacy decision.
• Your Consent: We may transfer data based on your explicit consent where other mechanisms are not available.

You have the right to request information about the specific safeguards we have implemented for international data transfers. Please contact us at zmecomgroup@gmail.com for details.

Your Rights Under the GDPR

The GDPR grants you the following rights regarding your personal data. You may exercise these rights by contacting us at zmecomgroup@gmail.com:

Right of Access (Article 15)

You have the right to request access to the personal data we hold about you. We will provide you with a copy of your data in a commonly used, machine-readable format within 30 days of your request.

Right to Rectification (Article 16)

You have the right to request that we correct inaccurate or incomplete personal data. We will correct your data without undue delay.

Right to Erasure (Article 17)

You have the right to request the deletion of your personal data, subject to certain legal exceptions. This right applies when the data is no longer necessary for the original purpose, you withdraw consent, or when there is no legal basis for processing.

Right to Restrict Processing (Article 18)

You have the right to request that we restrict the processing of your personal data when you contest its accuracy, when processing is unlawful, or when we no longer need the data but you require it for legal claims.

Right to Data Portability (Article 20)

You have the right to request your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller without hindrance.

Right to Object (Article 21)

You have the right to object to the processing of your personal data for direct marketing purposes or when processing is based on our legitimate interests. We will cease such processing upon receipt of your objection.

Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not engage in such processing.

Right to Lodge a Complaint

If you believe that our processing of your personal data violates your rights under the GDPR, you have the right to lodge a complaint with the competent data protection authority. You do not need to exhaust your remedies with us first; you may lodge a complaint at any time.

In Cyprus, the competent authority is the Commissioner for Personal Data Protection (Επίτροπος Προστασίας Δεδομένων Προσωπικού Χαρακτήρα).

Supervisory Authority - Commissioner for Personal Data Protection (Cyprus)

You can file a complaint with the Commissioner for Personal Data Protection if you believe your data protection rights have been violated. The Commissioner is the independent public authority responsible for ensuring compliance with data protection legislation in Cyprus.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date at the top of this document. Your continued use of our website following the posting of revised Privacy Policy means you accept and agree to the changes.

Contact Us

If you have any questions about this Privacy Policy, our data protection practices, or would like to exercise your rights, please contact us: