Personal Data Processing Policy
1. General provisions
This Personal Data Processing Policy is drawn up in accordance with applicable personal data protection legislation and defines how the Operator processes personal data and the measures taken to keep it secure.
1.1. Respect for human and civil rights and freedoms — including the right to privacy and to personal and family confidentiality — is the Operator's highest priority when processing personal data.
1.2. This Policy applies to all information that the Operator may receive about visitors of the website https://gotriply.net/.
2. Key terms
2.1. Automated processing — processing of personal data using computer technology.
2.2. Blocking — temporary suspension of personal data processing (except where processing is required to update the data).
2.3. Website — the set of graphical and informational materials and the software and databases that make them available at https://gotriply.net/.
2.4. Personal data information system — the set of personal data contained in databases together with the information technologies and technical means used to process it.
2.5. Anonymization — actions after which it is no longer possible, without additional information, to attribute personal data to a specific User.
2.6. Processing — any action or set of actions performed on personal data with or without automation: collection, recording, organization, accumulation, storage, updating, retrieval, use, transfer, anonymization, blocking, deletion and destruction.
2.7. Operator — the legal entity that organizes and/or carries out the processing of personal data and defines its purposes and scope.
2.8. Personal data — any information that relates, directly or indirectly, to a specific or identifiable User of https://gotriply.net.
2.9. Personal data permitted for distribution — personal data made available to an unlimited number of persons by the data subject's consent under applicable law.
2.10. User — any visitor of https://gotriply.net.
2.11. Provision — actions aimed at disclosing personal data to a specific person or a defined group of persons.
2.12. Distribution — actions aimed at disclosing personal data to an unlimited number of persons, including publication in mass media or on telecommunication networks.
2.13. Cross-border transfer — transfer of personal data to the territory of a foreign state, to a foreign authority, individual or legal entity.
2.14. Destruction — actions that irreversibly destroy personal data and/or the physical media containing it.
3. Operator's rights and obligations
3.1. The Operator has the right to receive accurate information and documents containing personal data from the data subject; to continue processing without consent where the law permits; and to determine on its own the measures sufficient to comply with applicable law.
3.2. The Operator is obliged to: provide subjects with information about how their data is processed upon request; organize processing in accordance with applicable law; respond to enquiries from data subjects; cooperate with the supervisory authority within 10 days of a request; publish this Policy; take legal, organizational and technical measures to protect personal data; and stop processing or destroy personal data when required.
4. Rights and obligations of data subjects
4.1. Data subjects have the right to receive information about the processing of their data, to require clarification, blocking or destruction of inaccurate or unlawfully obtained data, to consent or refuse processing for marketing purposes, to withdraw consent, to challenge unlawful actions of the Operator and to exercise other rights provided by law.
4.2. Data subjects are required to provide accurate data about themselves and to notify the Operator of any updates.
4.3. Persons who provide false information about themselves or about other data subjects without consent bear liability under applicable law.
5. Principles of personal data processing
5.1. Processing is carried out on a lawful and fair basis.
5.2. Processing is limited to specific, predefined and legitimate purposes; processing incompatible with the original purpose of collection is not allowed.
5.3. Databases containing personal data processed for incompatible purposes may not be combined.
5.4. Only data that matches the processing purpose is processed.
5.5. The content and volume of data processed corresponds to the declared purposes; excessive data is not collected.
5.6. The Operator ensures accuracy and, where necessary, the timeliness of personal data.
5.7. Personal data is stored in a form that allows identification of the subject for no longer than required by the purposes of processing or by applicable law or contract.
6. Conditions of personal data processing
6.1. Processing is carried out with the consent of the data subject.
6.2. Processing is required to fulfil a contract to which the data subject is a party or a beneficiary, or to enter into such a contract at the subject's initiative.
6.3. Processing is required to exercise the legitimate rights and interests of the Operator or third parties, provided that the rights and freedoms of the data subject are not violated.
6.4. Processing of personal data made publicly available by the subject is permitted.
6.5. Processing of personal data subject to mandatory publication or disclosure under applicable law is permitted.
7. Collection, storage, transfer and other processing of personal data
The security of personal data processed by the Operator is ensured through legal, organizational and technical measures sufficient to fully comply with applicable personal data protection law.
7.1. The Operator ensures the safety of personal data and takes all reasonable measures to prevent access by unauthorized persons.
7.2. A User's personal data is never transferred to third parties except where required by law or where the data subject has consented to such transfer for the purpose of performing a civil-law contract.
7.3. If personal data is inaccurate, the User can update it by sending a notification to support@gotriply.net with the subject "Personal data update".
7.4. The processing period is determined by the purposes for which the data was collected unless another period is set by contract or law. The User may withdraw consent at any time by writing to support@gotriply.net with the subject "Withdrawal of consent".
7.5. Any information collected by third-party services (payment systems, communication tools, other service providers) is stored and processed by those parties in accordance with their own terms and privacy policies. The Operator is not responsible for the actions of such third parties.
7.6. Restrictions set by a data subject on the transfer or processing of personal data permitted for distribution do not apply in cases of processing in public interests as defined by law.
7.7. The Operator maintains the confidentiality of personal data during processing.
7.8. When delivery of goods is involved, the Operator may collect delivery endpoint and recipient data to calculate the route correctly. Carriage is performed by logistics and courier services at their published rates.
7.9. Personal data is stored in a form allowing identification of the subject for no longer than required by the purposes of processing or by law or contract.
7.10. Processing may be terminated when the purposes are achieved, when consent expires or is withdrawn, when the subject requests termination, or when unlawful processing is detected.
8. Actions performed by the Operator with personal data
8.1. The Operator performs collection, recording, organization, accumulation, storage, updating, retrieval, use, transfer, anonymization, blocking, deletion and destruction of personal data.
8.2. The Operator performs automated processing of personal data, with or without transmission of the resulting information over telecommunication networks.
9. Cross-border transfer of personal data
9.1. Before starting any cross-border transfer of personal data, the Operator notifies the competent personal data protection authority of its intention.
9.2. Before sending the above notification, the Operator obtains the required information from the foreign authorities, individuals and legal entities to which transfers are planned.
10. Confidentiality of personal data
The Operator and any other persons with access to personal data are required not to disclose it to third parties and not to distribute it without the subject's consent, unless otherwise required by law.
11. Final provisions
11.1. A User may obtain clarification on any questions regarding the processing of their personal data by writing to support@gotriply.net.
11.2. Any changes to the Operator's personal data processing policy will be reflected in this document. The Policy is open-ended until replaced by a new version.
11.3. The current version of the Policy is freely available at https://gotriply.net/legal.