Privacy Policy
Welcome to OVACY! Your privacy is important to us. This Privacy Policy outlines the types of personal information we collect, how we use and protect it, and your rights regarding your personal data. We are committed to safeguarding your privacy and ensuring that your personal information is handled in a safe and responsible manner.
By using our services, you agree to the collection and use of information in accordance with this policy. Please take a moment to read through the details to understand how we manage your personal information. If you have any questions or concerns, feel free to contact us.
Thank you for trusting.
In this Privacy Policy, you can find information about the following:
1. When does this Privacy Policy apply?
2. Who is the data controller for the processing of your personal data?
3. Our Data Protection Officer
4. Which personal data does OVACY collect, for which purposes, according to which legal basis and how long do we store it?
5. To whom do we disclose your personal data?
6. Where is your personal information held?
7. What are your rights?
8. Who should you contact?
9. Complaint guideline
10. Amendments of the Privacy Policy
1. When does this Privacy Policy apply?
This Privacy Policy applies to OVACY’s (hereinafter "OVACY", "we" or "our”) processing of personal data when you:
a) use or register as a user of OVACY’s website, use our chat, or sign up for OVACY’s newsletter;
b) provide personal data about yourself as part of creating an account to OVACY
c) follow OVACY on social media like Facebook, Twitter, Instagram or LinkedIn or our blog;
d) deposit your eggs.
The Privacy Policy also contains information on the processing of personal data for individuals employed by OVACY’s professional partners who act as contact persons in relation to OVACY. Therefore, companies partnering with OVACY should ensure that the relevant contact person is familiar with this Privacy Policy.
2. Who is the data controller for processing your personal data?
OVACY/OVACY EGG BANK are trade names of RGS Reproductive and Genetic Services Limited (Company registration Number: HE 363104) located at 6 Ioannis Clerides St., Nicosia 1070, Cyprus, Tel: +357 22257080, www.ovacy.com is the data controller for processing your personal data when you:
• provide us with your information when creating or setting up a customer relationship OVACY’s website or sign up for OVACY’;;
• use our chat;
• use our service Face Matching
• deposit your eggs with us;
• follow us on our Facebook Pages (OVACY Egg Bank - OVACY). For the information relating to this last processing, please see our egg donor privacy policies by clicking http://www.ovacy.com.............
3. Our Data Protection Officer
If you have any questions as to how OVACY processes your personal data, you are always welcome to contact our Data Protection Officer, Ms Fani Saxiate at [email protected].
4. Which personal data does OVACY collect, for which purposes, according to which legal basis and how long do we store it?
When you use OVACY’s website, use our chat or our service Face Matching, set up a user account, or sign up for our newsletter.
When we collect personal data about you as part of creating, setting up and maintaining a commercial customer relationship with OVACY.
When you follow OVACY on social media like Facebook, Twitter, Instagram, LinkedIn or our blog.
When you deposit your eggs with OVACY.
5. To whom do we disclose your personal data?
Your information can be accessed by staff employed with OVACY with a work-related need to access this information and who assist OVACY with administrative and technical tasks such as storage or retrieval of such information. The employees of OVACY are subject to confidentiality.
We will share your personal data with third-party service providers (like providers of marketing, IT or administrative services, courier and shipping companies) who will process such information on behalf of OVACY for the purposes described above. These data processors have been instructed by us only to process your personal data on our behalf and for the purposes specified by OVACY. We will only share your personal data where it is relevant and necessary to be able to offer the services set forth in this privacy policy.
OVACY has entered into cooperation agreements, including data processing agreements with our data processors. We oblige them to process your personal data confidentially and to take the necessary technical and organizational security measures against data being accidentally or unlawfully destroyed, lost or degraded, or come to the knowledge of unauthorised persons, misused or otherwise processed in violation of the regulations of the General Data Protection Regulation.
Private customer:
If you purchase eggs, we will disclose your name, your date of birth and information about your address and your order to the clinic to which you have requested us to send your order, in order for the clinic to identify you and further proceed together with you.
If you have consented to the service genetic matching, we will disclose your personal data in the form of a saliva or blood sample, and the DNA contained therein or your clinical genetic report in anonymised form to an external laboratory, which will perform the genetic matching between you and the given donor on behalf of OVACY. If you have consented hereto, we may in some cases share the result of the genetic matching with third parties pointed out by you.
If a serious adverse reaction or a serious adverse event occurs, including if a transmissible disease is found in the donor or a mix up is determined, we are obliged to disclose information in this regard to the regulatory authority, namely the Cyprus Ministry of Health pursuant to Sections 31 and 41 of the Standards of Quality and Safety (donation, procurement, testing, processing, preservation, storage and distribution) of Human Tissues, Cells and Derivative Products Law of 2007 (Law 187(I)/2007). Only the minimum necessary information will be disclosed.
When you deposit your eggs with OVACY:
If you have deposited your eggs with OVACY, your deposited eggs and your national id number will be disclosed to the clinic where the treatment is to take place.
If you are a depositor and thereby are to be screened for infectious diseases, we will use data processors in the form of accredited test laboratories and hospitals to do the relevant tests of the blood and urine samples submitted to us.
When you use OVACY’s website:
We will disclose information about your use of our website to our partners in social media, advertising partners and analysis partners. Our partners may combine this data with other information you have provided to them or which they have collected from your use of their services.
We will disclose information about your use of our website with Facebook Inc. Facebook Inc. may combine this data with other information you have provided to them or which they have collected from your use of their services. If you do not want ads on Facebook Inc., you need to change your settings on their site.
Information is disclosed to Facebook Inc. when Facebook Inc. uses personal data collected from OVACY’s Facebook page. See also Facebook's Data Policy. Please note that OVACY does not have full influence on Facebook Inc.'s data processing.
Other:
In the event that OVACY no longer runs a tissue centre business, the personal data described above, which OVACY is obliged to store in order to ensure traceability, will be transferred to another tissue centre in accordance with the requirement specified in article 44(4) of the Standards of Quality and Safety (donation, procurement, testing, processing, preservation, storage and distribution) of Human Tissues, Cells and Derivative Products Law of 2007 (Law 187(I)/2007).
Finally, we may disclose certain anonymised information internally in OVACY for research and statistics purposes.
Transfer to third countries
To deliver our products and services to you, it is sometimes necessary for us to share your personal information outside the European Economic Area (EEA), e.g.:
• with our service providers located outside the EEA;
• if you are based outside the EEA; and
• where there is an international dimension to the services we are providing to you
These transfers are subject to special rules under European and Cyprus data protection law.
To the extent where your personal data is transferred to third countries, i.e. countries outside the EU/EEA, we will provide a sufficient level of protection for such a transfer, e.g. by entering EU standard contracts with the receiver of such information.
We take measures so that your personal information will be given analogous protection to EU standards, specifically by signing with the party based outside the EU, in case it is a country for which there is no adequacy decision by the Commission pursuant to Article 45 GDPR, an agreement with the standard contractual clauses approved by the European Commission as per Article 46 GDPR committing them to afford your personal data sufficient data protection.
6. Where is your personal information held?
Information may be held at our offices in Cyprus and those of our collaborating clinics, third party agencies, service providers, representatives and agents as described above (see above: ‘To whom do we disclose your data?’).
Some of these third parties may be based outside the European Economic Area. For more information, including on how we safeguard your personal information when this occurs, see above: ‘Transfer to third countries’.
We also store personal data electronically, namely in databases we operate onsite or in servers located in the EU.
7. What are your rights?
You have certain rights available in connection with OVACY’s processing of information about you. These rights are described below but you are encouraged to contact with our DPO, Fani Saxiate, to receive additional details and any information you may need:
• You have a right to access information which OVACY is processing about you and to obtain access to certain additional information about how and why we process your personal data. This means that OVACY must provide a copy of the personal data we process about you.
• You have the right to obtain rectification of any incorrect personal data about you.
• In certain situations, you have the right to obtain erasure of information about you before the due time in which OVACY will delete it.
• In certain situations, you have the right to restrict the processing of your data. If you have the right to restrict the processing of your personal data, OVACY may, going forward, except for storage, only process your data in special circumstances and for special purposes.
• In certain situations, you have the right to object to OVACY’s processing of your personal data.
• In certain situations, you are entitled to receive the personal data provided by you in a structured, commonly used and machine-readable format, and to transmit such personal data from OVACY to another data controller.
• You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.
• In relation to the processing based on your consent or explicit consent, i.e., Article 6(1)(a) or Article 9(2)(a) of the GDPR, you can always withdraw your consent at any time by contacting our DPO, Fani Saxiate by email, the details of whom are stated at the beginning of this Privacy Policy. A withdrawal of your consent does not affect the lawfulness of OVACY’s processing of your information on the basis of your previously granted consent until the time when such consent is withdrawn. Accordingly, if you withdraw your consent, this will not take effect until from the time it is withdrawn. Moreover, withdrawing your consent will not prevent any processing that is required under the law in connection with the traceability and other legal requirements as explained above by reference to Articles 6(1)(c) and 9(1)(h) GDPR.
We have appropriate security measures to prevent personal information from being accidentally lost or used or accessed unlawfully. We limit access to your personal information to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
8. Who should you contact?
If you want us to update, rectify or delete the personal data we have registered about you or exercise any of your aforementioned rights, or if you have any questions about this Privacy Policy, please contact us here as follows:
In relation to personal data processed when you: provide us with your information when creating or setting up a customer relationship;
• speak with us through the web chat feature;
• deposit your eggs with us.
OVACY and its DPO at
In relation to personal data processed when you:
• use or set up a user profile on OVACY’s website, or sign up for OVACY’s newsletter;
• follow OVACY on social media like Facebook, Twitter, Instagram or LinkedIn or our blog.
OVACY and its DPO, Ms Fani Saxiate at [email protected]
Do not worry that you may not contact the right DPO. In all cases, you will be guided as necessary to be able to exercise your rights or receive the information you need.We will determine as soon as possible to which extent your request can be accommodated.
9. Complaint guidelines
We hope that this Privacy Policy has provided you with the information you need.
If you disagree with the way in which we are processing your personal data or the purposes for which it is processed, please contact us or our Data Protection Officer, which you can read about in section 3 of this Privacy Policy.
You can also submit a complaint to:
Ms Fani Saxiate
Office address: 6 Ioannis Clerides Str, 1070 Nicosia, Cyprus
Tel: +357 22257080
Email: [email protected]
10. Amendments of the Privacy Policy
We reserve the right to amend this Privacy Policy due to significant changes in legislation, legal practice, or our internal procedures.
11 / 09 / 2024