Privacy policy

We, Front Line Kart, take data protection and information security very seriously. The effective management of all personal data, including security and confidentiality, is the heart of our business and naturally underpins our practices and processes.

This privacy policy informs you about the type, scope and purpose of the processing of personal data we collect, use and process as a part of our website (the “Services”).

This policy applies to you, the User of our Services and us the provider of the Services and governs the processing of your personal data in context of our Services and business.

The Controller

Front Line Kart
P.O. Box 20424,
Aglantzia 2152, Nicosia, Cyprus

www.frontlinekart.com
info@frontlinekart.com

Our Principles

Front Line Kart respects your right to privacy and is committed to the following key principles:

  • We protect your privacy and aim to provide you with a service that is tailored to your needs.
  • Personal data is collected for specific purposes based on your consent or a legitimate interest when you contact us.
  • You have the right to information and access to your personal data at any time and may request its correction or deletion.
  • We do not sell your personal data to third parties. However, if necessary and if explicitly mentioned afterwards or if you have consented, we may share your data with group companies, brand licensees, partners and other service providers. In this case, their own privacy policies may also apply.
  • We take all reasonable measures to ensure the security and protection of your data from misuse.

Automated decision-making

We do not use automated decision-making or profiling.

Accuracy

It is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data.

Children Data

Our website is not intended for children, and we do not knowingly collect data relating to children. If you become aware that your Child has provided us with Personal Data, without parental consent, please contact us, and we take the necessary steps to remove that information from our server.

External Links

Our website contains links to the online offers of other providers. We hereby point out that we have no influence on the content of the linked online offers and the compliance with data protection regulations by their providers.

Scope of the processing of personal data

As a matter of principle, we collect and use personal data of our users only insofar as this is necessary for the provision of a functional website as well as our contents and services. The collection and use of our users’ personal data regularly only takes place with the user’s consent. An exception applies in those cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by legal regulations.

Rights of the data subject

If personal data is processed by us, you are a data subject within the meaning of the GDPR and you are entitled to the following rights against us:

Right to information

You may request confirmation from us as to whether personal data concerning you is being processed by us. If such processing is taking place, you may request information from us about the following:

  1. the purposes for which the personal data are processed;
  2. the categories of personal data which are processed;
  3. the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
  4. the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage period;
  5. the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
  6. the existence of a right of appeal to a supervisory authority;
  7. any available information on the origin of the data, if the personal data are not collected from the data subject;
  8. the existence of automated decision-making, including profiling, pursuant to Article 22(1) and

  9. of the GDPR and, at least in those cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information about whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

This right of access may be restricted to the extent that it is likely to render impossible or seriously impair the achievement of the statistical purposes and the restriction is necessary for the fulfilment of the statistical purposes.

You have the right to obtain a copy of the personal data that is the subject of the processing. For any additional copies you request, we may charge a reasonable fee based on administrative costs. If you make the request electronically, the information shall be provided in a commonly used electronic format, unless otherwise specified.

The right to receive a copy may not affect the rights and freedoms of other persons, and the right of access does not exist insofar as the information would disclose information that must be kept secret under a legal provision or by its nature, in particular because of the overriding legitimate interests of a third party.

Right to rectification

You have a right to rectification and/or completion, insofar as the personal data processed concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay. Your right to rectification may be limited to the extent that it is likely to render impossible or seriously prejudice the achievement of the statistical purposes and the limitation is necessary for the fulfilment of the statistical purposes.

Right to restriction of processing

You may request restriction of the processing of personal data concerning you under the following conditions:

  1. if you contest the accuracy of the personal data concerning you for a period enabling us to verify the accuracy of the personal data;
  2. the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
  3. we no longer need the personal data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims; or

  4. if you have objected to the processing pursuant to Article 21 (1) of the GDPR and it is not yet clear whether our legitimate grounds override your grounds.

If the processing of personal data concerning you has been restricted, such data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

Your right to restriction of processing may be limited to the extent that it is likely to render impossible or seriously impede the achievement of the statistical purposes and the restriction is necessary for the fulfilment of the statistical purposes.

Right to erasure

You may request us to erase the personal data concerning you without undue delay, and we are obliged to erase such data without undue delay, if one of the following reasons applies:

  1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
  2. You revoke your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR and there is no other legal basis for the processing.
  3. You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
  4. The personal data concerning you have been processed unlawfully.
  5. The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.
  6. The personal data concerning you has been collected in relation to information society services offered in accordance with Article 8(1) of the GDPR.

Information to third parties

If we have made the personal data concerning you public and we are obliged to erase it pursuant to Article 17(1) of the GDPR, we shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers that process the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.

Exceptions

The right to erasure does not exist to the extent that the processing is necessary to.

  1. for the exercise of the right to freedom of expression and information;
  2. for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  3. for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or

  5. for the assertion, exercise or defence of legal claims.

Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us, provided that.

  1. the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and

  2. the processing is carried out with the help of automated procedures.

In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. We will then no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object by means of automated procedures using technical specifications. You also have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for statistical purposes in accordance with Article 89(1) of the GDPR. Your right to object may be limited to the extent that it is likely to render impossible or seriously impede the achievement of the statistical purposes and the limitation is necessary for the fulfilment of statistical purposes.

Right to revoke your consent

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

  1. is necessary for the conclusion or performance of a contract between you and the controller,
  2. is permitted by legal provisions of the Union or the Member States to which the controller is subject and these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests; or
  3. is made with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With regard to the cases mentioned in (1) and (3), we take reasonable steps to safeguard the rights and freedoms as well as your legitimate interests, which include at least the right to obtain the intervention of a person on the part of the controller, to express your point of view and to contest the decision.

Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR. The supervisory authority to which the complaint has been submitted will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR. The competent supervisory authority for us is the Data Protection Ombudsman, https://tietosuoja.fi/en/home.

Purposes and legal bases of processing and duration of storage

In the following, we inform you about the various purposes for which we process personal data, the legal basis for such processing in each case and how long we store the data in the process. Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) (a) GDPR serves as the legal basis for the processing of personal data. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis. If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing. The personal data of the data subject will be stored as long as the respective purpose lasts.

Collection and storage of personal data as well as type and purpose of their use

a) When visiting the website

When you visit our website www.frontlinekart.com, the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:

IP address of the requesting computer,

  • Date and time of access,
  • name and URL of the file accessed,
  • website from which access was made (referrer URL),
  • the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The aforementioned data is processed by us for the following purposes:

  • Ensuring a smooth connection set-up of the website,
  • Ensuring a comfortable use of our website,
  • evaluating system security and stability, and
  • for other administrative purposes.

The legal basis for the data processing is Art. 6 (1) (f) GDPR. Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations of this in our cookie policy.

b) When using our contact form

If you have any questions, we offer you the possibility of contacting us via a form provided on the website. In doing so, it is necessary to provide a valid e-mail address so that we know who the enquiry is from and so that we can answer it. Further information can be provided voluntarily.

Data processing for the purpose of contacting us is based on your voluntarily given consent in accordance with Art. 6 (1) (a) GDPR.

The personal data collected by us for the use of the contact form will be automatically deleted after completion of your enquiry.

c) When becoming a member

It is also possible for you to register for a member account. For this purpose, you will need to provide us with the following: Username, First Name, Last Name, E-mail Address, Password, Phone Number, Country of Residence, Date of Birth, Sector, Division, Your job title or position, Professional Registration Number, your professional ID card. Providing those will enable you to enter into a contract with us and to benefit from our services. We will hold your data for further orders as long as you maintain your registration. The legal basis for the data processing is Art. 6 (1) (a) GDPR and the legal basis for the storage is Art. 6 (1) (b) GDPR.

d) Partner Registration

Partners enter into a service contract with us. Front Line Kart exclusively processes personal data provided by the partner himself/herself or an employee authorised to represent him/her and necessary for the contractual performance of services by Front Line Kart.

The Partner is responsible for ensuring that the active consent of the persons concerned has been obtained for all personal data provided by him/her, such as names and e-mail addresses of contact persons or company photos on which employees can be seen. The legal basis for the data processing is Art. 6 (1) (a) GDPR and the legal basis for the storage is Art. 6 (1) (b) GDPR.

By submitting the Partner Registration form, the partner will be indicating the consent to use the company logo and offer data in our Media Deck, Website and Social Media Platforms. 

Transfer of data

Your personal data will not be passed on to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

  • you have given your express consent to this in accordance with Art. 6 (1) (a) GDPR,
  • the disclosure is necessary to protect our legitimate interests or the legitimate interests of third parties in accordance with Art. 6 (1) (f) GDPR and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
  • in the event that there is a legal obligation to disclose your data in accordance with Art. 6 (1) (c) GDPR, and
  • this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 (1) (b) GDPR.

Online Payment, Secure data transmission and Credit card information

The transmission of your personal information during an order transaction is encrypted using industry standard Secure Socket Layer (“SSL”) technology, (SSL encryption version 3). Any credit card information you provide will not be stored by us but will be encrypted and collected directly from our payment service provider Stripe via hypertext transfer protocol secure (“https”).

We may share information with, and you may need to provide credit or debit card information directly to the provider in order to process payment details and authorise payment following a secure link. The information which you supply to in such cases is not within our control and is subject to Stripe’s own Privacy Notice and Terms and Conditions which can be found on their website at https://stripe.com/gb.

Cookies and similar technologies

We use cookies in our web sites. Cookies are text files that are placed and stored on a computer system via an Internet browser. We use such cookies both as a technical means of providing services on our platforms, for example, to enable certain functionalities, and to analyse the website behaviour of our visitors and, based on this, to design our offers in a more user-friendly manner. For this purpose, we may also use other techniques, such as tracking pixels or a code in apps. In addition, we may also use these cookies or other techniques to send you targeted job ads and other content that are of interest to you. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies to recognize your browser the next time you visit (persistent cookies). You can find out the exact storage period of a cookie, if not yet specifically stated below, from the respective cookie by displaying the cookie in your browser. You can control the type of advertising that is displayed to you here. If you do not accept cookies, the functionality of our website may be limited. You can learn more about the specific cookies and similar technologies and your choices in our Cookie Policy.

The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests as well as those of third parties in accordance with Art. 6 (1) (f) GDPR.

Analysis tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 (1) (f) GDPR. With the tracking measures used, we want to ensure a needs-based design and the ongoing optimisation of our web site. On the other hand, we use the tracking measures to statistically record the use of our web site and to evaluate it for the purpose of optimising our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

Google Analytics

For the purpose of demand-oriented design and continuous optimisation of our pages, we use Google Analytics, a web analytics service provided by Google LLC. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymised usage profiles are created and cookies (see under point 4) are used. The information generated by the cookie about your use of this website, such as

  • Browser type/version,
  • operating system used,
  • Referrer URL (the previously visited page),
  • host name of the accessing computer (IP address),
  • time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with requirements. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that an allocation is not possible (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on.

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help.

Social media plugins

We use social plugins of the social networks Facebook, Instagram on our website on the basis of Art. 6 (1) (f) GDPR in order to make Front Line Kart better known via these. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the GDPR.

The responsibility for the data protection compliant operation is to be ensured by their respective providers. We integrate these plugins using the so-called two-click method in order to protect visitors to our web site as best as possible.

a) Facebook

Social media plugins from Facebook are used on our website to make their use more personal. We use the “SHARE” button for this purpose. This is an offer from Facebook.

When you call up a page of our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser, which then integrates it into the web site.

By integrating the plugins, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, for example by clicking the “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.

Facebook may use this information for the purposes of advertising, market research and the needs-based design of Facebook pages. For this purpose, Facebook creates usage, interest, and relationship profiles, e.g., to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.

If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.

For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please refer to Facebook’s privacy policy.

b) Instagram

Our website also uses so-called social plugins (“plugins”) from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera”. When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers.

The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by clicking the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts. If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. For more information, please see Instagram’s privacy policy.

Data security

Within the website visit, we use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Newsletter and alerts

The legal basis for the processing of your personal data in the context of sending the newsletter and alerts is your consent.

The purpose of collecting your personal data is to send the newsletter and alerts to you. The purpose of processing your personal data in the context of sending the newsletter and alerts is to send you information, offers and, if applicable, to promote sales through the sale of goods or services.

Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. Accordingly, your personal data will be stored until you have unsubscribed from our newsletter and alerts.

You can revoke your consent to receive the newsletter and alerts at any time or use the unsubscribe link contained in each newsletter and pre-alert to object to further receipt of the newsletter and alerts.

Direct marketing

The legal basis for the processing of your personal data in the context of direct marketing measures is either your consent or our legitimate interest in marketing and promoting our courses and services.

The purpose of processing your personal data in the context of direct marketing measures is to send information, offers and, if applicable, to promote sales through the sale of goods or services.

Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected; this is the case in particular upon receipt of the revocation or objection.

You can revoke your consent at any time for the future or object to the processing of your personal data in the context of direct marketing measures at any time for the future.

Changes of this privacy policy

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this privacy policy. You can access and print out the current privacy policy at any time on our website.