Effective Date: July 06, 2020
Last Modified: July 06, 2020
Previous Version: May 26, 2020
TECOM LTD is the publisher and operator (referred to as the “Company”, “we”, “our” or “us”) of the website www.faphouse.com including its subdomain studio.faphouse.com (referred to as the “Website”). The Company is committed to protecting your privacy and handling your personal data in an open and transparent manner. The personal data that we collect and process will vary depending on how you use the Website.
Who we are
TECOM LTD is a limited liability company, registered in the Republic of Cyprus under registration number HE 365144, having its registered office at Spyrou Kyprianou 79, PROTOPAPAS BLDG, Floor 2, Flat 201, 3076 Limassol, Cyprus
How we collect your personal data
We obtain your personal data mainly through any information you provide directly to us through our Website. Below is a list of ways we collect your personal data:
If you fail to provide personal data
Where we need to collect and process your personal data in order to provide you with our services and you fail to provide that data when requested, we may not be able to provide you with access to our Website and/or the services we offer. In this case, we may have to suspend your access to the Website or, if you are a Registered Studio Operator, prohibit any access to non-public areas of the Website or restrict the operation of your account and the services we provide to you.
Personal data that we collect and process
Personal data we collect and process from Browsers
Technical Data, including your Internet Protocol (IP) address, your browser type and version, time zone setting and location, browser plug-in types and versions, smart device information, mobile phone network information, operating system and platform and other technology on the devices you use to access the Website;
Communications and correspondence information, including your name (where you have voluntarily provided it to us) and details of any queries or complaints you have communicated to us either via our “Contact Us” form, or via email, post, phone or otherwise.
Personal data we collect and process from Registered Studio Operators
All personal data we collect from Browsers set out in paragraph 4(a) above;
Identity and Contact Data, including your name and email address and other information requested during registration of your account in order to fill out your profile details;
Consents, including any permissions, consents or preferences that you give to the Website;
User Submitted Data, including data collected when you voluntarily upload content on the Website, including, animations, images, videos, comments or other content or media you choose to upload on the Website;
Marketing Data, including preferences in receiving marketing from us, our affiliates and third-parties; and
Transactional information, including direct debit data, credit card numbers.
Automated personal data collection
Why we need your personal data and how we use it
We will most commonly use your personal data in the following circumstances:
where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;
where we need to comply with a legal obligation; and/or
where you have given us your consent.
Below, we describe these circumstances in further detail.
Performance of our services to you
Provision of services
We may collect and process your personal data where it is necessary in order to present our Website and its contents to you, including any interactive features on our Website and to provide you with information or services that you request from us.
Please note that if you do not agree to provide us with the requested information, it may not be possible for us to continue to operate your account and/or provide you with the services we provide to our Browsers and Registered Studio Operators.
Customer management (Registered Studio Operators only)
We may collect and process your personal data where it is necessary in order to manage your account, to provide customer support and notices to you about your account and subscription, including expiration and renewal notices, and notices about changes to our Website or any services we offer or provide through it.
Customization of content
We may collect and process your personal data where it is necessary in order to perform research and analysis about your use or, or interest in, our Website content and/or services, so as to develop and display content and advertising tailored to your interests on our Website.
We may collect and process your personal data where it is necessary in order to determine whether users of the Website are unique, or whether the same user is using the Website on multiple occasions, and to monitor aggregate metrics such as total number of visitors, pages viewed and demographic patterns.
Functionality and security
We may collect and process your personal data where it is necessary in order to diagnose or fix technology problems, and to detect, prevent and respond to actual or potential fraud, illegal activities, or intellectual property infringement.
Other legitimate interests
In addition to the above, we may process your personal data, to the extent required for our business needs in order to:
develop new services on our Website as well as analyze and target new markets;
protect our legal rights and interests (including legal claims and preparing our defense in litigation);
monitor, maintain and improve internal business processes, information and data, technology and communication solutions and services;
ensure network information security, including monitoring Browsers’ and/or Registered Studio Operators’ access to our information technology for the purpose of preventing cyber-attacks, unauthorized use of Website and prevention or detection of crime;
send you relevant marketing information (including details of other services provided by us which we believe may be of interest to you, but only where you are a Registered Studio Operator);
monitor the performance and effectiveness of our services and the Website;
assess the quality of our customer services; and
run promotions, contests, surveys and other features and events.
For compliance with legal obligations
When you visit and/or use and/or register in our Website (and throughout your relationship with us), we are required to comply with certain legal and regulatory obligations which may involve the processing of your personal data. This may include processing to:
perform checks and comply with laws relating to fraud;
manage contentious regulatory matters, investigations and litigation.
You have provided your consent
We will ask for your consent when we wish to provide marketing information to you in relation to our services which we believe may be of interest and of benefit to you, but only where you are a Browser of the Website.
You have the right to revoke your consent at any time. However, any processing of personal data prior to the receipt of your revocation will not be affected.
Who we share your personal data with
service providers such as digital payment processing companies;
governmental and regulatory bodies, including law enforcement authorities, in connection with enquiries, proceedings or investigations by such parties or in order to enable the Company to comply with its legal and regulatory requirements. We specifically reserve the right to disclose any and all information to law enforcement in the event that a crime is committed or suspected or if we are compelled to do so by lawful criminal, civil or administrative process, discovery requests, subpoenas, court orders or writs;
our legal or other professional consultants.
We may also disclose aggregated information about our users, and information that does not identify any individual, without restriction. We may also share aggregated information with third-parties for conducting general business analysis. This information does not contain any personal data and may be used to develop content and services that we hope you and other users will find of interest.
Please note that we have never sold and will never sell your personal data to third parties.
Registered Studio Operators’ Profiles
Registered Studio Operators should be aware that some of the information directly provided on the Website when they create an account is public and can be viewed by other Registered Studio Operators of the Website, unless otherwise stated. Even if a Registered Studio Operator’s profile does not contain any personal information, there is a possibility of identification by others through other information on the Registered Studio Operator’s profile. Accordingly, Registered Studio Operators should understand that they are in control of all of the information they upload on the Website and/or display on their profile and are fully responsible for any consequences arising out of such information.
Security of your personal data
We take appropriate security measures (including physical, electronic and procedural measures) to safeguard your personal data from unauthorized access and disclosure. For instance, only authorized employees are permitted to access personal data, and they may do so only for permitted business functions. In addition, we use encryption in the transmission of your personal data between your system and ours, and we use firewalls to help prevent unauthorized persons from gaining access to your personal data. However, please be advised that we cannot fully eliminate security risks associated with the storage and transmission of personal data as we cannot guarantee that our security measures will prevent third-party hackers from illegally obtaining this information.
You are responsible for maintaining the secrecy of your unique password and account information at all times. We are not responsible for circumventions of any privacy settings or security measures contained on the Website.
Information we transfer
Some of our external third parties are based outside the European Economic Area (“EEA”) so the processing of your personal data will involve a transfer of data outside the EEA.
Whenever we transfer your data outside the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
Where we use service providers outside the EEA, we may use specific contracts approved by the European Commission which give personal data the same protection it has in the European Union.
Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the European Union and the US.
We may additionally, in rare occasions, transfer your personal data to a party outside the EEA where we have your prior explicit consent to do so or where such transfer is necessary for the provision of our services to you.
We may process your personal data so as to inform you about existing and/or future services that may be of interest to you by sending you periodic announcements with details on existing and/or new services and/or programs.
You have the right to object at any time to the processing of your personal data for marketing purposes, by sending us an email at email@example.com or by clicking at the opt-out link at the bottom of any marketing emails we send you.
We can only use your personal data to promote our services to you if we have your explicit consent to do so, or in certain cases such as for example when you are a Registered Studio Operator of our Website, if we consider that it is in our legitimate interest to do so. You may also occasionally receive marketing communications from our affiliates, but only provided you have given your explicit consent in receiving such communications.
Even if you inform us that you no longer wish to receive marketing material, you will still receive from us system notices and other information specifically related to your account from time to time.
How long we keep your personal data for
We will only keep your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect of our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
If you have questions about our data retention practices, please contact us electronically by sending as an email at firstname.lastname@example.org.
Your data protection rights
We want to make sure you are aware of your rights in relation to the personal data we process about you. We have described those rights and the circumstances in which they apply further below.
Access: This enables you to get access or receive a copy of the personal data that we hold about you and to check that we are lawfully processing it.
Correction: If you believe that any of the information that we hold about you is inaccurate or incomplete, you have a right to request that we correct the inaccurate personal information.
Erasure: You may request that we delete your personal information if you believe that:
we no longer need to process your information for the purposes for which it was provided;
we have requested your permission to process your personal information and you wish to withdraw your consent; or
we are not using your information in a lawful manner.
Right to object: You have the right to object to the processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground. If you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedom or for the establishment, exercise and defense of legal claims.
You also have the right to object where we are processing your personal data for direct marketing purposes. This also includes profiling in as much as it is related to direct marketing.
If you object to processing for direct marketing purposes, then we shall stop the processing of your personal data for such purposes.
Depending on the circumstances, we may need to restrict or cease processing your personal data altogether or, where requested, delete your personal data. Please note that if you object us processing your personal data, we may have to suspend the services we provide to you.
Restriction: You have the right to request the restriction of processing of your personal data. This enables you to ask us to restrict the processing of your personal data if:
it is not accurate; or
it has been used unlawfully but you do not want us to delete it; or
it is not relevant any more, but you want us to keep it for use in possible legal claims; or
you have already asked us to stop using your personal data but you are waiting for us to confirm if we have legitimate grounds to use your personal data.
Right to portability: Where we have requested your permission to process your personal data or you have provided us with information for the purposes of entering into a contract with us, you have the right to receive the personal data you provided to us in a portable format. You may also request us to provide it directly to a third party, if technically feasible. We are not responsible for any such third party’s use of your account information, which will be governed by their agreement with you and any privacy statement they provided to you.
If we ask for your consent to use your personal data, you can withdraw your consent at any time. Please note that in case of a withdrawal of your consent you may no longer be able to use several functionalities of our Website and our services.
Please note that some requests to delete certain personal data will require the deletion of your account as a Registered Studio Operator as the provision of Registered Studio Operator accounts is inextricably linked to the use of certain personal data (e.g. your email address and username). Also note that it is possible that we require additional information from you in order to verify your authorization to make the request and to honor your request.
To exercise any of your rights, or if you have any other questions about our use of your personal data, please contact us electronically by sending us an email at email@example.com or by post at Spyrou Kyprianou 79, PROTOPAPAS BLDG, Floor 2, Flat 201, 3076 Limassol, Cyprus
We endeavor to address all your requests promptly.
How to access or modify your personal data
We remain dedicated to the protection of your data and we want to be clear about the type of information collected, helping you make choices about your privacy. You may:
access/modify the information provided during registration – please refer to the profile editing page;
choose whether your profile/uploaded content is visible to everyone, or to other Registered Studio Operators only;
block cookies, including cookies associated with our services, by activating or deactivating the related cookies on your browser. Please note, however, that if you choose to disable all cookies (including essential cookies) you may not be able to access all or part of our Website.
Our communication with you
Right to complain
Upon receipt of your complaint, we will investigate it and respond to you within a reasonable time.
You also have the right to complain to the data protection supervisory authority of the country in which you reside, provided that such country is a Member State of the European Union or is located within the EEA.
Our policy towards minors
Our Website is not directed to individuals under the age of eighteen (18) or the applicable age of majority in the jurisdiction from which the Website is accessed and we do not knowingly collect personal data from minors. If you become aware that your child has provided us with personal data, please contact us electronically at firstname.lastname@example.org. If we become aware that a minor has provided us with personal data, we will take steps to remove such information and terminate that person’s account immediately.
California Consumer Privacy Act Notice
As of January 1, 2020, the California Consumer Privacy Act of 2018 ("CCPA") provides California residents ("Consumer(s)") certain rights with respect to their personal information, as this term is defined under the CCPA. In addition to the rights we state under this policy and subject to the exceptions found under the CCPA, Consumers have the right to:
Opt-out of the sale of their personal information, should we sell their personal information;
Be informed of certain information concerning our collection and use of their personal information;
Request that we delete certain personal information we collected from them;
Appoint an agent to exercise their rights provided for by the CCPA, provided that a duly executed notarized power of attorney is presented and provided that the agent has information deemed sufficient to allow us to verify the identity of the Consumer in question and to locate his/her information in our systems;
Not be subjected to discrimination for the exercise of these rights. We will not deny California residents the use of our service, neither will we provide a different level or quality or services for exercising any of their CCPA rights, unless as permitted under the CCPA.
This Website does not sell nor has it sold in the past 12 months personal information to third parties for monetary or other valuable considerations. We may however disclose certain personal information with third parties, service providers and entities within our corporate group in order to enable them to perform certain services on our behalf and namely to make the Website work properly. Regardless, we respect the California residents' right to exclude personal information from such sharing arrangements and to thereby opt-out of any future sale of their personal information. If the CCPA is applicable to you and you would like to record such preference, please send us an email at email@example.com.