Please ensure Javascript is enabled for purposes of website accessibility

Tabox Online Privacy Policy

Version applicable as of 15 August 2022

1. WHY SHOULD I READ THIS PRIVACY POLICY?

This Privacy Policy (“policy”) describes how Overseer Technologies Ltd (trading as Tabox, hereinafter referred to as the “Company,” “we,” “us,” “our”) collects, uses, discloses, and stores your personal information and what statutory rights you have. We protect your personal information under the EU General Data Protection Regulation (2016/679) (“GDPR”) and other applicable laws. We may amend this policy unilaterally from time to time. Any such amendments will be effective immediately upon publication, so please visit our website regularly for the latest version of this policy.

2. WHO IS RESPONSIBLE FOR PROTECTING MY INFORMATION?

3. WHY AND HOW DO YOU COLLECT MY INFORMATION?

3.1. TO PROCESS YOUR ORDERS ON OUR WEB SHOP, RECEIVE PAYMENTS, AND DELIVER PURCHASED GOODS

  • When this applies: When you purchase our products
  • Information collected: First name, last name, delivery address, phone number, email address, paid purchase price and currency, credit card brand, type, BIN number and credit card issuer country, IP address, language, device type, payment history
  • Legal basis: Contract (Art. 6 (1)(b) of GDPR)
  • Source: From yourself
  • Obligation to provide information: Required to enter into a contract; without this information, purchasing and receiving our products is not possible
  • Storage duration: 10 years

3.2. TO ENSURE SECURITY OF AND IMPROVE OUR WEBSITE

  • When this applies: When you use our website or violate our Terms of Service
  • Information collected: IP address, device information and ID, web browser information, activity on our website, country, violations of Terms of Service, inclusion in blacklist
  • Legal basis: Legitimate interest (security and improvement of our website) (Art. 6 (1)(f) of GDPR)
  • Source: From yourself
  • Obligation to provide information: No
  • Storage duration: 1 month after last website use; 10 years for Terms of Service violations and blacklist records

3.3. TO PROVIDE CUSTOMER SUPPORT

  • When this applies: When you submit an inquiry or file a complaint to our customer support
  • Information collected: First name, last name, email, country, telephone number, inquiry subject, date and content, attachments, reply, customer contact history, order ID
  • Legal basis: Consent (Art. 6 (1)(a) of GDPR)
  • Source: From yourself and customer support service providers
  • Obligation to provide information: No
  • Storage duration: 10 years from the last inquiry

3.4. TO INFORM YOU ABOUT OUR PRODUCTS OR SHOW YOU INTERNET ADS

  • When this applies: When we inform you, ask for your opinion, or show you ads
  • Information collected: Full name, email, telephone number, IP address, order information, country, postback information, referring website, interaction with ads
  • Legal basis: Consent (Art. 6 (1)(a) of GDPR); Legitimate interest (direct marketing and internet ads) (Art. 6 (1)(f) of GDPR)
  • Source: From yourself, social media providers, marketing service providers, e-commerce providers
  • Obligation to provide information: No
  • Storage duration: 5 years unless you opt-out

3.5. TO INTERACT WITH YOU VIA SOCIAL MEDIA

  • When this applies: If you engage with our social media profiles
  • Information collected: Name, surname, email, gender, country, profile picture, messages, comments, shares, reactions
  • Legal basis: Consent (Art. 6 (1)(a) of GDPR)
  • Source: From yourself and social media providers
  • Obligation to provide information: No
  • Storage duration: 10 years from last interaction

3.6. TO CARRY OUT SELECTION OF POTENTIAL EMPLOYEES

  • When this applies: When you apply for a job or provide consent to store your CV
  • Information collected: Full name, email, phone number, CV, work experience, additional provided information
  • Legal basis: Consent (Art. 6 (1)(a) of GDPR); Contract (Art. 6 (1)(b) of GDPR); Legitimate interest (to contact you if you made information public) (Art. 6 (1)(f) of GDPR)
  • Source: From yourself, professional social media providers, HR agencies
  • Obligation to provide information: Required for employment contracts
  • Storage duration: 6 months after recruitment ends; 5 years with consent/public disclosure

3.7. TO FULFIL STATUTORY ACCOUNTING REQUIREMENTS

  • When this applies: When you order products
  • Information collected: Full name, email, phone, bank account, address, signature, invoices, reports, payments
  • Legal basis: Legal obligation (Art. 6 (1)(c) of GDPR)
  • Source: From yourself, audit providers
  • Obligation to provide information: Yes, required by law
  • Storage duration: 10 years after a transaction

3.8. TO DEFEND OUR RIGHTS AND INTERESTS

  • When this applies: If we are involved in a legal process
  • Information collected: Any previously mentioned information, legal case files, legal documents
  • Legal basis: Legal obligation (Art. 6 (1)(c) of GDPR); Legitimate interest (Art. 6 (1)(f) of GDPR)
  • Source: From aforementioned sources, law enforcement, courts
  • Obligation to provide information: Yes, where required by law
  • Storage duration: 10 years after contract termination or for legal process duration plus 3 years

4. WHO DO YOU SHARE MY INFORMATION WITH?

We share your information with entities both within and outside the European Economic Area (EEA), including:

  • Accounting and audit providers (EU)
  • Archiving service providers (EU)
  • Electronic communication providers (EU)
  • Legal professionals and consultants (EU)
  • Cloud hosting and IT service providers (Worldwide, with EU Standard Contractual Clauses)
  • Payment processors (Worldwide, with EU Standard Contractual Clauses)
  • Marketing providers (Worldwide, with EU Standard Contractual Clauses)
  • Shipping providers (Worldwide, with EU Standard Contractual Clauses)
  • Customer support providers (Worldwide, with EU Standard Contractual Clauses)
  • Social media platforms (Worldwide, with EU Standard Contractual Clauses)

5. STATUTORY RIGHTS REGARDING YOUR INFORMATION

You have the right to:

  • Access your data
  • Correct inaccuracies
  • Request deletion
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent
  • File complaints
  • Not be discriminated against for exercising your rights

6. WHAT IS MY RIGHT TO REQUEST ACCESS TO INFORMATION?

You have the right to request that we disclose certain information to you about our collection and use of your information. Once we receive and verify your request we will disclose to you the categories of personal information we collected about you, the categories of sources for the personal information we collected about you, our business or commercial purposes for collecting that personal information, the categories of third parties with whom we share that personal information, the specific pieces of personal information we collected about you and other information that we are obliged to provide under the applicable laws. We have disclosed the information to third parties for a business or commercial purpose as described in Section 4 of this policy.

7. WHAT IS MY RIGHT TO RECTIFICATION?

You have the right to obtain the rectification of inaccurate personal information concerning you. Considering the purposes of the processing, you have the right to have incomplete information completed, including by means of providing a supplementary statement.

8. WHAT IS MY RIGHT TO REQUEST DELETION OF THE INFORMATION?

You have the right to request the deletion of your information collected and maintained by us in the cases where (i) information is no longer necessary in relation to the purposes for which it was collected or otherwise processed; (ii) you withdraw consent on which the processing is based and there is no other legal ground for the processing; (iii) when you object to the processing and there are no overriding legitimate grounds for the processing, or you object to the processing for direct marketing purposes; (iv) the information have been unlawfully processed; (v) where the information have to be erased for compliance with a legal obligation; (vi) the information have been collected in relation to the offer of information society services directly to a child and subject to a consent.

Once we receive and verify your request, we will delete (and direct our service providers to delete) your information from our records, unless applicable laws do not provide for deletion of the information in a particular case (for instance, retaining the information is necessary for us or our service provider(s) to complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you, detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities, comply with a legal obligation, make other internal and lawful uses of that information that are compatible with the context in which you provided it).

9. WHAT IS MY RIGHT TO RESTRICT THE PROCESSING OF INFORMATION?

You have the right to restrict the processing of your information in the cases where (i) the accuracy of the personal information is contested by you; (ii) the processing is unlawful and you oppose the erasure of the personal information and request the restriction of their use instead; (iii) where we no longer need the personal information for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; (iv) where you have objected to processing.

10. WHAT IS MY RIGHT TO INFORMATION PORTABILITY?

You have the right to information portability in the cases when you seek to receive the information you have provided in a structured, commonly used and machine-readable form or to transmit that information to another controller where the processing is based on consent or on a contract and is carried out by automated means.

11. WHAT IS MY RIGHT TO OBJECT TO THE PROCESSING OF MY INFORMATION?

You have the right to object to the processing of your information where the collection and use is based on a task carried out in the public interest or in the exercise of official authority vested or legitimate interest, including profiling, as explained in Section 3 of this policy, or where you object to the collection of your personal information for direct marketing purposes.

12. WHAT IS MY RIGHT TO WITHDRAW CONSENT?

You have the right to withdraw any consent given regarding the processing of your information where the processing is based on consent, as explained in Section 3 of this policy, and you seek to withdraw it at any time.

13. WHAT IS MY RIGHT TO FILE A COMPLAINT WITH SUPERVISORY AUTHORITIES?

You have the right to file a complaint with supervisory authorities where you want to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or of an alleged infringement of the GDPR.

14. WHAT IS MY RIGHT NOT TO RECEIVE DISCRIMINATORY TREATMENT WHILE EXERCISING MY RIGHTS?

When you exercise your rights enshrined in applicable laws, you also have the right to non- discrimination. For example, because you exercised your rights under applicable laws, you will not be denied of any goods or services, charged with a different price, provided a different quality of good and services etc.

15. HOW DO I SUBMIT A REQUEST?

If you would like to exercise your rights described above, please submit a request to us via e-mail at [email protected] or our telephone number: +353 1 4376990

16. CAN I USE AN AUTHORIZED AGENT?

Sure. You may use an authorized agent to submit a request to opt-out on your behalf if you provide us with the authorized agent written permission to do so. If this is the case, please provide us with a copy of the said permission as instructed under the Section 18 of this policy below. We may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf. You may also make a request on behalf of your minor child.

17. DO YOU ENGAGE IN AUTOMATED INDIVIDUAL DECISION-MAKING, INCLUDING PROFILING?

No, we do not make decisions based solely on automated processing, including profiling, which would produce legal effects concerning you.

18. DOES YOUR WEBSITE PLACE COOKIES ON MY DEVICE?

Yes, our website places cookies on your device for functionality, security, analytics, and marketing purposes. These cookies help improve your experience and enable us to understand user behavior.

Types of Cookies Used:

  • Strictly Necessary Cookies: Essential for website operation.
  • Statistics Cookies: Help us analyze how visitors interact with the site.
  • Marketing Cookies: Used for advertising and retargeting purposes.
  • Functionality Cookies: Enable enhanced website functionality and personalization.

For a detailed list of cookies, their purpose, and expiry periods, please refer to our website’s Cookie Policy section.

19. HOW CAN I MANAGE COOKIES?

You can configure your browser to decline some or all cookies or to ask for your permission before accepting them. Please note that deleting cookies or disabling future cookies may impact your ability to access certain website features.

How to Manage Cookies in Different Browsers:

20. HOW CAN I CONTACT YOUR DATA PROTECTION OFFICERS?

If you have any questions, comments, or complaints regarding how we collect, use, and store your personal information, our data protection officers are ready to assist you. You may contact them at any time via:

For further inquiries, contact our Data Protection Officer at [email protected].