Privacy Policy

Who We Are

Our website address is https://netshop-isp.com.cy/ (referred to as “Our Website”, “Main Website”, “Company Website”) and our Client Portal is https://my.netshop-isp.com.cy/ (referred to as “myNetShop”, “Client Portal”, “Hosting Portal”, “Billing Portal”).

1. Protection of our Clients and Partners Data

Registered users on my.netshop-isp.com.cy are “Clients” [Clients (Individuals and/or Companies) and Partners (Resellers and/or Affiliates]) and unregistered users are “Visitors”. This Privacy Policy statement applies to both Clients and Visitors.

This privacy policy describes NetShop Internet Services Ltd (referred to as ‘we’, ‘us’, ‘our’, ‘NetShop ISP’) current policies and practices with regard to personal data collected by NetShop ISP through its websites, https://my.netshop-isp.com.cy, https://netshop-isp.com.cy and other NetShop ISP related sites, landing pages, communication and other services (hereinafter referred to collectively as “NetShop ISP websites”).

While we encourage clients to read our privacy policy in full, we do have a number of guiding principles we operate our company by:

NetShop ISP will never sell your data on.
NetShop ISP will never share your data with any third party for their own marketing.
NetShop ISP will always keep your personal data secure by using strong encryption, abiding by data protection rules and by implementing good security practice.
NetShop ISP will never send you direct email marketing without your consent. Our newsletter requires you to explicitly opt-in and you are free to opt-out at any time using the unsubscribe link contained within the email.

2. GDPR Compliance

Our team is working diligently to ensure our procedures and policies are persistent with the General Data Protection Regulation (GDPR), which has been applied from May 25, 2018. Because of these ongoing changes in the law, and the changing nature of technology, NetShop ISP data practices will change from time to time. If and when our data practices change, NetShop ISP will post the changes on our websites to notify you of the changes. View our Roadmap towards GDPR Compliance.

3. What Personal Data we collect and when

Your personal data is only collected for specific, explicitly stated and legitimate purposes.

Website Users, Clients and Authorized Accounts

NetShop ISP websites collect data to provide you with a better service.

The information you provide must be valid and added using only the Latin Alphabet. In case of invalid information, NetShop ISP reserves the right to stop Services Activation or proceed with Suspension.

If you signup to the myNetShop Portal we will collect the following information:

Full Name
Address
Email Address
Telephone number(s)

If your Account in the myNetShop portal has been linked to another Account associated with abuse activities and/ or violation of our Terms & Conditions, we will also collect the following information:

Copy of Passport/ID card
Proof of Residency/ Address

This data is required to mark your Account as non fraud and reactivate any Suspended services.

Application Forms

If you apply for a Data Center Visit we will collect the following information:

Copy of Passport/ID card
E-Signature

Employment Candidate

If you apply for a position in the Company we will collect the following information:

Full Name
Email Address
Telephone number(s)
Curriculum Vitae (CV)

While not actively collected, we may store any other personal information that you may disclose during LiveChat, Tickets, Emails, Contact forms or Phone calls. For information on our Data Retention policy for Phone call Recording(s), please see point 9. Data Retention Policy. If you do not consent to being recorded, you can Terminate the call before being forwarded to an Agent.

4. Anonymous Data Collection through NetShop ISP Websites

NetShop ISP uses technology (Cookies) to compile statistics about our visitors and their use of our sites by collecting anonymous information about the use of our websites e.g. we track how many visitors access our websites, the length of their stay, their IP and which pages they view. This technology does not identify you personally. We also use technology to determine which web browsers our visitors use and the address from which they accessed our sites (for example, if they connected to a NetShop ISP website by clicking on one of our banner ads). You can read more about this in our Cookies Policy.

5. Data Processing and Storage

NetShop ISP ensures that your personal data is always processed in accordance with good practice. No more personal data is processed than is necessary having regard to the purposes of the processing. All reasonable measures are taken to complete, correct, block or erase data to the extent that such data is incomplete or incorrect, having regard to the purposes for which they are processed in accordance with this privacy policy and the GDPR (General Data Protection Regulation) which includes certification to ISO 27001 standard. NetShop ISP does not keep personal data for a period longer than is necessary, having regard to the purposes for which they are processed.

The data that we collect from you is stored in the UK which is a member of the EEA (European Economic Area) but it may be processed by staff operating outside who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to the processing of this data outside of the EEA.

You acknowledge and agree that details of Your full name, address, telephone and fax numbers together with email address(es) and assigned IP Addresses may be released to the RIPE NCC to ensure that both WE and You fulfil their obligations under prevailing RIPE policies and that such data may be published in whole or in part in the RIPE WHOIS database.

6. Newsletters & Notifications

NetShop ISP contacts its clients and subscribers by e-mail, telephone and/or post for Marketing purposes such as service updates, newsletters, with invitations for events, etc.

By submitting this Form you can easily opt-in or opt-out from our Marketing mailing lists. In case of opt-out and you do not have an account created at myNetShop, your details will be deleted. If you opt-out but you are a registered client at myNetShop, we will still be contacting you but only for important notifications about your service(s).

You can also unsubscribe to our Newsletters by clicking the “Unsubscribe” link/button at the end of the email newsletter.

7. Disclosure of Your Personal Data

NetShop ISP may share your personal data with third-party Authorities / Vendors / Registrants in Cyprus, Malta, UK and overseas who act for or on behalf of NetShop ISP in accordance with this Privacy Policy for the purpose of being able to provide you the service requested, to sell and register products and subscriptions where we are acting as Resellers, to install, maintain and repair core products (including cloud solutions) and hardware, for billing issues, debt collection and protection of our legal rights, porting services and fraud detection services. The third-parties are not authorized to use the information we share with them for any other purpose.

NetShop ISP ensures that the third-party recipient is either subject to an adequacy decision or to appropriate safeguards in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679) and any other applicable legislation and that NetShop ISP has a justifiable ground for such a transfer. NetShop ISP and its Employees use commercially reasonable efforts to ensure protection of your data including industry-standard encryption and offline security methods in our physical facilities.

7.1. Debt Collection Process

NetShop ISP is under a Debt Collection Agreement and has the right to share your personal data and assign the debt collection to its Partner. The third-party will contact you, identify themselves as a debt collection agency, inform you on the amount you owe and how you can dispute the debt or seek verification of the debt. The debt collection agency is permitted to contact you by every communication system available – phone, letter, email or text message.

8. Right to be forgotten

You have the right to have your personal data erased and no longer processed. If you wish to delete your account, at any time you can do so by logging in to your myNetShop account Tab Account > Overview and click on button “Delete my account / forget my data”. If you do not have any Paid invoices, all your account details will be deleted by our system in 30 days and you will no longer be able to access or use our Services. In case of Paid invoices, the Account will be deleted 7 Years after last payment.

9. Data Retention Policy

When you purchase a Service, we will collect personal data to fulfill our legal contractual obligations.
Examples of use are: to manage your account, to contact you for technical support purposes, to invoice you and keep financial records, as required by the Law.

Client with Terminated Service(s) and Paid Invoice(s):

The myNetShop Account will be deleted along with all Invoices, Statements, Tickets, Emails and Personal Data 84 months (7 Years) after the last Paid Invoice date. The data must remain in the system for legal purposes, as it is required by the Law to have a history of all financial transactions for the above mentioned period of time.

Client without Service(s) and without Paid Invoice(s):

The myNetShop Account will be deleted 6 months after signup.

Employment Candidates and Curriculum Vitae (CV):

All data collected during the employment application will be processed for recruitment purposes only and will be kept on record for a period of 1 month or until the Hiring Process is completed, whichever ends earlier. During the application process, candidates can specify whether or not they wish their personal data to be on record for a longer period of time.

Phone Call Recording(s):

Phone Call Recording(s) will be deleted in 14 days.

10. Link to Other Sites

NetShop ISP’s websites may contain hyperlinks to websites that are not operated by NetShop ISP or one of our affiliates. These hyperlinks are provided for your reference and convenience only and do not imply any endorsement of the activities of these third-party websites or any association with their operators. This privacy policy applies only to NetShop ISP’s websites.

11. Information and Access Policy

You have the right to obtain:

Confirmation that your data is being processed
Access to your personal data
Update your personal data
Other supplementary information (mostly the information provided in privacy notices)

You can download all the information we have stored about your account in machine-readable format (json). Simply login to your myNetShop account then click Account > Overview > and then scroll down to find the button ‘Download’

NetShop ISP must provide you with a copy of the information you requested free of charge. However, we are permitted to charge a “reasonable fee” when a request is manifestly unfounded, excessive or repetitive. The fee must be based on the administrative cost of providing the information.

You have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection concerning the processing of personal data.

12. How to Update/Change your Personal Data

You can update your Personal Data by logging in to your myNetShop account then click Account > Edit Details. Subsequently, you must also inform us via email at legal@netshop-isp.com.cy about the Data changes so that we ensure you that the new information is updated everywhere.

13. Your Data Safety

All data we collect is done so over encrypted connections (https).
All data is stored behind state of the art firewalls, managed by our security team.
All data is access-controlled to ISO 27001 standards.
All systems storing personal data have access logging.
All passwords are encoded at rest.
All systems are subject to regular penetration testing and are monitored for vulnerabilities and attacks.

14. Password Policy

To increase the security of our Client’s accounts we have set the following rules for setting your password:

Password must be at least 8 characters long
It must contain at least 1-lower (a-z) case character
It must contain at least 1-upper (A-Z) case character
It must contain at least 1-number (0-9)

Your password provides access to your myNetShop account. It is your responsibility to keep your password secure. Sharing your password and account access with unauthorized users is strictly prohibited. You must take care and prevent others from using your Account since you will be responsible for the consequences.

We reserve the right to update the current policy, at any time, with amendments which may concern new or updated legislation, or other privacy related matters.

For any clarifications or questions regarding our Privacy Policy please contact us at legal@netshop-isp.com.cy.

Electronic Signature Agreements Policy

This Electronic Signature Agreements Policy complements the NetShop ISP Privacy Policy and the General Data Protection Regulation (GDPR) Compliance.

NetShop ISP utilizes the SignRequest B.V. (“SignRequest”, “Data Processor”) online signatures software to ensure that agreements or agreement related documents are safely and securely signed electronically.

What types of personal data do we process in the context of SignRequest?

Full Name
Job title
Work e-mail address
Work contact telephone number
Work address
Signature

Who is the Data Controller of your data?

S.S. NETSHOP INTERNET SERVICES LTD a limited liability company, duly organised according to the Laws of Cyprus, registration number HE217340, with registered office situate at 2A Marathonos Street, Livadhia, 7060 Larnaca, Cyprus.

Execution of the processing:

1. In the execution of the Assignment, the Data Processor is obliged to handle and only process the personal data in a careful manner based on the assignment of the Data Controller, in accordance with the Data Controller instructions, the DPA Agreement between the Data Processor and the Data Controller and in accordance with the GDPR.
   
   
2. The Data Processor will not process the personal data for its own purpose or any other purpose other than as established by the Data Controller. The Data Processor has no control over the purpose and means of the processing of the personal data.

Security Measures:

1. The Data Processor implements appropriate technical and organisational measures to prevent loss of personal data or any form of unlawful processing. These measures shall guarantee an adequate level of protection of the personal data being processed.
   
   
2. The Data Processor will at least take the following security measures:
   
   
• Encryption of digital files containing personal data
  
  
• Security of the network connection with Secure Socket Layer (SSL) technology or a similar technology
  
  
• Restriction of access to the personal data to authorised employees
  
  
• Security of the personal data in accordance with the ISO 27001 standard for the selected server (Amazon Web Services)
  
  

Data Location:

The Agreements are only processed and stored on Servers in Countries which are members of the EEA (European Economic Area), Ireland, Germany & the Netherlands.

SignRequest provides the option to sign a Document through other applications, such as Elasticsearch, Google G Suite, Sendgrid etc. In case of this option, the Data might be stored and processed in Servers in other locations.

Questions

For any clarifications or questions regarding our Electronic Signature Data Privacy Policy please contact us at legal@netshop-isp.com.cy.

Calendly Scheduling Platform Policy

The Calendly Scheduling Platform Policy complements the NetShop ISP Privacy Policy.

NetShop ISP is a "Calendly User" that utilizes the Calendly scheduling platform for arranging online and offline meetings.

People who have scheduled a meeting with NetShop ISP but may or may not have registered with Calendly are referred to as "Invitees".

Calendly Privacy Policy Notice can be found here.

What types of personal data do we collect and process in the context of Calendly?

Full Name
Email Address
Meeting Day & Time

Calendly is integrated with a NetShop ISP Calendar where after the Invitee submission, an appointment is created automatically showing the submitted details of the meeting.

All data collected will be processed solely for the purposes of arranging the online and offline meetings.

NetShop ISP might contact the Invitee in case the meeting needs to be re-scheduled or for future followups.

The personal data of the Invitees will be deleted in 36 months.

Invitees have the right to have their personal data erased and no longer processed at any time by sending an email to legal@netshop-isp.com.cy.