Skip to content

Privacy policy

Denfit International Ltd., established at Mesaorias Street , 2322 Lakatamia, Nicosia Cyprus responsible for the processing of personal data as shown in this privacy statement.

Contact details:
www.denfit.eu
Mesaorias Street 1
2322 Nicosia Cyprus

Denfit International Ltd. has a Data Protection Officer, who can be reached at privacy@denfit.eu.

PERSONAL DATA WE PROCESS

Denfit processes your personal data because you use our services and/or because you provide it to us directly. Below is an overview of the personal data we process:

  • First and last name
  • Address data
  • Phone number
  • Email address
  • Order and payment history

CHILDREN

Our website and services are not intended for visitors younger than 16 years old, unless they have permission from a parent or guardian. We cannot verify the age of website visitors. We encourage parents to stay involved in their children’s online activities, so that data about children is not collected without parental consent. If you believe we have collected personal data about a minor without such consent, please contact us at privacy@denfit.eu and we will delete this information.

PURPOSE AND LEGAL BASIS FOR PROCESSING

Denfit processes your personal data for the following purposes. For each purpose, we state the legal basis under the GDPR:

  • Handling your order and payment, basis: performance of a contract
  • Delivering goods and services to you, basis: performance of a contract
  • Contacting you by phone or email where necessary to carry out our services, basis: performance of a contract or legitimate interest
  • Informing you about changes to our services and products that you already use, basis: legitimate interest
  • Sending our newsletter and marketing communications, basis: your consent, which you can withdraw at any time
  • Meeting legal obligations, such as tax and accounting requirements, basis: legal obligation

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

AUTOMATED DECISION MAKING

Denfit does not make decisions based solely on automated processing that could have legal or similarly significant effects on you. All decisions that may affect you are taken by a person, not exclusively by a computer program or system.

HOW LONG WE STORE PERSONAL DATA

Denfit does not keep your personal data for longer than is necessary for the purposes it was collected for:

  • Customer profile and order history: kept for as long as you remain a customer, and deleted or anonymised within 2 years of your last order or contact, unless you ask us to delete it sooner
  • Invoices and financial records: kept for 7 years, in line with Dutch and Cypriot tax and accounting retention requirements
  • Newsletter and marketing consent records: kept until you unsubscribe or withdraw consent, plus a short period to demonstrate compliance

Once a retention period ends, employees no longer have access to your customer profile and related documents, and the data is deleted or anonymised.

SHARING PERSONAL DATA WITH THIRD PARTIES

Denfit shares your personal data with third parties where this is necessary to perform our agreement with you, to comply with a legal obligation, or where you have given consent. This includes:

  • Payment providers, to process your payment
  • Transport and logistics providers, to deliver your order
  • IT and hosting providers, to operate our website and systems

Denfit works with distributors in over 40 countries. These distributors do not receive your personal data from us, they operate as independent businesses selling under their own customer relationship. With every third party listed above that does process data on our behalf, we sign a data processing agreement to ensure the same level of security and confidentiality that we apply ourselves. Denfit remains responsible for this processing.

INTERNATIONAL DATA TRANSFERS

We do not share personal data with our distributors, so the only transfer of personal data outside the European Economic Area is through Google Analytics, which is used on our website and transfers data to the United States. This transfer relies on the European Commission’s Standard Contractual Clauses, or another legally recognised transfer mechanism, to ensure your data remains protected to the same standard as within the EEA. You can request further details by contacting privacy@denfit.eu.

COOKIES AND SIMILAR TECHNOLOGIES

Denfit uses technical and functional cookies that are necessary for the website to work correctly, and analytics cookies to understand how visitors use our website.

Where cookies are not strictly necessary for the website to function, we ask for your consent before placing them, through a cookie banner on our website that gives you an equal choice to accept or reject these cookies. You can withdraw your consent at any time through your cookie settings or your browser settings. Rejecting non essential cookies will not prevent you from using the core functions of our website.

GOOGLE ANALYTICS

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies to help us understand how visitors use the site. Where enabled, we use IP anonymisation so your full IP address is not stored. The information generated is transferred to and processed by Google, including in the United States, under the safeguards described in the section above. Google may provide this information to third parties where legally required to do so, or where third parties process it on Google’s behalf. You can refuse Google Analytics cookies through our cookie banner or your browser settings; this may limit some website functionality.

YOUR RIGHTS

You have the right to access, correct, or delete your personal data. You also have the right to withdraw consent, to object to processing, to restrict processing, and to data portability, meaning you can ask us to send your personal data to you or to another organisation you name.

You can send a request to exercise any of these rights to privacy@denfit.eu. To confirm your identity, we may ask you to send a copy of your ID, with your photo, MRZ strip, passport number, and national identification number blacked out, since these are not needed to verify your request. We respond within one month of receiving your request.

You also have the right to file a complaint with a supervisory authority. As Denfit is established in Cyprus, the competent authority is:

  • Office of the Commissioner for Personal Data Protection, Cyprus, www.dataprotection.gov.cy

If you are located in another EU country, you may also file a complaint with your own national supervisory authority.

UNSUBSCRIBING FROM THE NEWSLETTER

At the bottom of every newsletter you will find a link to update your details or unsubscribe. You can also unsubscribe at any time by contacting privacy@denfit.eu.

HOW WE PROTECT PERSONAL DATA

Denfit takes appropriate technical and organisational measures to prevent misuse, loss, unauthorised access, unwanted disclosure, and unauthorised modification of your personal data. If you believe your data is not secure, or if you notice any indication of misuse, please contact us at privacy@denfit.eu.

CHANGES TO THIS POLICY

We may update this privacy policy from time to time. The version on this page is always the most recent one, and the date at the top of this document shows when it was last revised. We recommend checking this page periodically.