Last updated: 24-02-2025

At xKickx, we take your privacy seriously and are committed to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This page provides information about how we collect, use, and protect your personal data in accordance with the GDPR.

The data controller for your personal data is:

xKickx

Romania

If you have any questions or concerns regarding the processing of your personal data or wish to exercise your rights under the GDPR, please contact us at contact@xkickx.com.

We collect and process various types of personal data for specific purposes. The types of personal data we may collect include:

• Contact Information: This may include your name, email address, postal address, and phone number.
• Account Information: If you create an account on our website, we may collect information such as your username, password, and account preferences.
• Transaction Information: If you make purchases or transactions through our website, we may collect information related to those transactions, including payment card details.
• Usage Information: We may collect information about how you use our website, including your browsing history, search queries, and page views.
• Communications: When you contact us or interact with our customer support, we may collect information related to your communication, including call recordings and chat transcripts.
• Cookies and Tracking Technologies: We use cookies and similar tracking technologies to collect information about your usage patterns and preferences while using our website. For more information, please refer to our Cookie Policy.

We process your personal data for the following purposes:

• To provide and maintain our services.
• To process and fulfill orders and transactions.
• To communicate with you, including sending service-related notifications and updates.
• To improve our website and services, including analyzing usage patterns and user feedback.
• To protect our rights, safety, and the rights and safety of our users and others.

We process your personal data based on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of a contract with you or to take pre-contractual steps at your request, according to Article 6(1)(b) of the GDPR.
• Legitimate Interests: Processing is necessary for our legitimate interests, such as improving our services and protecting our rights, according to .Article 6(1)(f) of the GDPR. When processing data based on legitimate interests, we ensure that our interests (e.g., improving our services or protecting legal rights) do not unduly infringe on your rights and freedoms. If you object to such processing, you may contact us to exercise your right to object.
• Consent: Processing is based on your explicit consent, which you can withdraw at any time, according to Article 6(1)(a) of the GDPR. Where we process your data based on consent (e.g., for marketing purposes), you can withdraw your consent at any time by e-mailing us at contact@xkickx.com.
• Legal obligations: for compliance, according to Article 6(1)(c) of the GDPR.

Under the GDPR, you have certain rights regarding your personal data, including:

• Right to Access: Users can request access to their personal data and information about how it is processed.
• Right to Rectification: Users can request corrections to inaccurate or incomplete personal data.
• Right to Erasure ( Right to be Forgotten ): Users can ask for their personal data to be deleted, subject to legal or contractual obligations.
• Right to Data Portability: Users can request their data in a structured, commonly used, and machine-readable format for transfer to another provider.
• Right to Restrict or Object to Processing: Users can limit or object to how their personal data is processed, especially for marketing purposes.
• Right to Lodge Complaints: Users can file complaints with relevant data protection authorities if their rights are violated.

The website ensures compliance with GDPR and provides users with tools or contacts for exercising these rights. To exercise any of these rights or if you have any questions or concerns about your personal data, please contact us at contact@xkickx.com.

We implement technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. We regularly review and update our security measures to ensure the ongoing integrity and confidentiality of your data.

We retain your data for as long as your account is active to provide our services, such as enabling transactions, maintaining your listings, and ensuring platform functionality. Transactional data, like payment records and invoices, is kept for 5 years to comply with accounting and tax laws. After these periods, data is securely deleted or anonymized unless further retention is legally required.

We will not transfer your Personal Data outside the European Economic Area (EEA), except in exceptional cases and only when necessary for the provision of services, such as IT services (e.g., cloud storage), by our processing partners.

In the event of any transfer, we ensure that appropriate safeguards are in place to protect your Personal Data, in compliance with the GDPR, including standard contractual clauses approved by the European Commission. However, as a general rule, we do not transfer Personal Data outside the EEA. You are entitled to obtain more information regarding the safeguards we apply by contacting our Data Protection Officer.

We reserve the right to update this GDPR Compliance Page to reflect changes in our data processing practices or to comply with legal requirements. We encourage you to check this page periodically for any updates. You will be notified of significant changes of our GDPR Policy and your continued use of our Website after any notification of such changes to this GDPR Policy will constitute your acceptance of these changes.

By using our services, you acknowledge that you have read, understood, and agree to the practices described in this GDPR Compliance Page.

If you have any questions or concerns regarding our GDPR compliance or your personal data, please contact us at contact@xkickx.com. We are committed to addressing your inquiries promptly and effectively.

If you believe your rights under GDPR have been violated, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) in Romania or the data protection authority in your country of residence.