PRIVACY POLICY

We strive to ensure the highest level of information security for data that may be used, directly or indirectly, to identify an individual. This Personal Data Privacy Policy (hereinafter referred to as the “Privacy Policy”) applies to all information that ONEX (hereinafter referred to as ONEX.AM), operating under the domain https://onex.am/ (as well as its subdomains), and through the ONEX mobile application, may obtain about the User during the use of the website, mobile application, as well as their services and products. If you do not agree with all the terms of this Privacy Policy, please refrain from using the Service.

1. MAIN TERMS

1.1 The following key terms are used in this Privacy Policy:

1.1.1. ONEX.AM - a legal entity operating in accordance with the legislation of the Republic of Armenia, which manages the website, organizes and processes personal data, determines the purposes of personal data processing, the scope of personal data to be processed, and the actions performed with personal data.

1.1.2. Personal Data - any information relating to an identified or identifiable individual (personal data subject), including (but not limited to) name, contact details, and online identifiers.

1.1.3. Processing of Personal Data - any operation or set of operations performed in accordance with applicable legislation, with or without the use of automated means, including collection, recording, systematization, organization, storage, correction (updating, modification), deletion, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction of personal data.

1.1.4. Website User (hereinafter referred to as the “User”) - an individual who has access to the Website via the Internet and uses the Website for their own purposes.

1.1.5. Blocking of Personal Data - temporary suspension of the processing of personal data (except in cases where processing is necessary to clarify personal data).

1.1.6. Anonymization of Personal Data - actions resulting in the impossibility of determining the ownership of data to a specific data subject without the use of additional information.

1.1.7. Confidentiality of Personal Data - the obligation of the Operator or any other person who has access to personal data to prevent the dissemination of personal data without the consent of the personal data subject or other legal grounds.

1.1.8. “Login and Password” - a unique combination of words, numbers, and symbols that allows the User to access and use all functionalities of the Website.

1.1.9. Cookies - small data files sent by a web server and stored on the user’s computer, which the client or web browser sends to the web server with each HTTP request when opening the relevant website page.

1.1.10. IP address - a unique numerical address of a host through which the User accesses the Website.

2. GENERAL PROVISIONS

2.1. The User’s use of the website constitutes acceptance of this Privacy Policy and the terms of processing of the User’s personal data.

2.2. By registering on the website, the User voluntarily and unconditionally accepts the terms and provisions of the User Agreement and voluntarily consents to the processing of their personal data in accordance with this Privacy Policy. The User is informed and agrees that their consent provided electronically on the Website fully complies with the requirements of the Law of the Republic of Armenia “ON PROTECTION OF PERSONAL DATA”. If the User does not agree with the terms of the Privacy Policy, they must cease using the website.

2.3. When registering on the Website, it should be understood that the User provides accurate information about themselves. The Website administration is not obliged to verify the accuracy of the information provided.

2.4. Users have the right to withdraw their consent at any time, which will not affect the lawfulness of processing based on consent prior to its withdrawal.

3. SUBJECT OF THE PRIVACY POLICY

3.1. This Privacy Policy applies only to the website “www.onex.am”. The Website administration is not responsible for and does not control third-party websites that the User may access via links available on this website.

3.2. This Privacy Policy establishes the obligations of the Website administration not to disclose personal data provided by the User for various requests on the Website (for example, when registering on the website, placing an order, subscribing to notifications, etc.).

3.3. Personal data permitted for processing under this Privacy Policy is provided by the User by filling out special fields on the Website and usually includes the following information:

3.3.1. User’s first name and last name,

3.3.2. User’s phone number,

3.3.3. Email address (e-mail) and other data necessary for the provision of services,

3.3.4. Information about the shipment (name, quantity, value, and other data required for customs clearance in accordance with applicable customs legislation).

3.4. The Website administration also takes measures to protect personal data that is automatically transmitted when visiting the Website pages:

• IP address,
• information from cookies,
• information about the browser (or another program used to access the Website),
• access time,
• addresses of visited pages,
• referrer (address of the previous page), etc.

4. PURPOSE OF PERSONAL DATA COLLECTION

4.1. The purpose of processing the User’s personal data is to provide the User with access to the services, information, and/or materials available on the website www.onex.am.

4.2. The User’s personal data may be used by the Website administration for the following purposes:

4.2.1. Identification of the User registered on the Website for further authorization,

4.2.2. Providing the User with access to personalized resources of the Website,

4.2.3. Establishing feedback with the User, including sending notifications, handling inquiries regarding the use of the Website, and processing User requests,

4.2.4. Verification of the accuracy and completeness of personal data provided by the User,

4.2.5. Creating an account for the use of certain sections of the Website, if the User has agreed to create an account,

4.2.6. Sending the User notifications related to the provision of services (for example, order status, delivery, system changes) via email, SMS, or messenger. Promotional, informational, or special offer messages are sent to the User only based on their prior and explicit consent, which the User may withdraw at any time,

4.2.7. Providing the User with effective customer service and technical support in case of issues related to the use of the Website,

4.2.8. Providing the User, on behalf of the Website, with special offers, news, and other information with their consent and with the option to opt out,

4.2.9. Processing of the User’s personal data for the purpose of customs clearance, including the transfer of shipment-related data (name, quantity, value), as well as identification and contact details to customs authorities, customs brokers, customs representatives, or other recipients provided for by law for the implementation of relevant procedures.

5. METHODS AND TERMS OF PERSONAL DATA PROCESSING

5.1. The User’s personal data is processed during the period in which the User maintains an active account. After the account is closed, the data is retained only for the period necessary and permitted or required by applicable legislation, after which it is subject to deletion or anonymization. In certain cases, the data may be retained for a longer period if required by law or in the course of fulfilling undertaken obligations (for example, if an order is in transit or there is an undelivered order), or upon a lawful request of a competent authority. Deletion or anonymization is carried out within the timeframes established by legislation, taking into account the relevant technical and operational processes.

5.2. The User’s personal data may be transferred to the customs authorities of the Republic of Armenia, customs brokers, persons providing customs representation, or other recipients provided for by law, for the purposes of customs clearance, organization of transportation services, and fulfillment of obligations established by legislation.

5.3. In the event of a breach of personal data security, loss, or unauthorized disclosure, the Website administration is obliged to take the necessary measures to mitigate the consequences thereof, as well as, in the cases and in the manner prescribed by the legislation of the Republic of Armenia, to immediately notify the authorized body and the affected Users.

6. USER RIGHTS AND OBLIGATIONS

6.1. Users have the right to:

• Request access to their personal data and obtain information regarding the processing of their personal data,
• Request correction of inaccurate or incomplete data,
• Request deletion of personal data when it is no longer necessary for processing,
• In certain cases, object to the processing of data,
• Where applicable, request data portability.

6.2. The User undertakes to:

• Provide correct and truthful information regarding personal data necessary for the use of the Website,
• Update and supplement the information provided about personal data if such information changes.

6.3. The Website administration undertakes to:

• Use the received information exclusively for the purposes specified in Clause 4 of this Privacy Policy,
• Not disclose the User’s personal data, except as provided in Clause 5.2 of this Privacy Policy,
• Block personal data related to the relevant User for the period of verification from the moment of a request or complaint by the User or their legal representative or the authorized body for the protection of the rights of personal data subjects, in case of detection of inaccurate personal data or illegal actions.

7. LIABILITY OF THE PARTIES

7.1. The Website administration is responsible for the deliberate disclosure of the User’s personal data in accordance with applicable legislation, except for the cases provided for in paragraphs 5.2 and 7.2 of this Privacy Policy.

7.2. In the case of loss or disclosure of personal data, the Website administration is not responsible if such confidential information:

7.2.1. Had been included by the User in publicly accessible sources of personal data before its loss or disclosure,

7.2.2. Was received from a third party prior to its receipt by the Website administration,

7.2.3. Was obtained by third parties through unauthorized access despite the security measures taken by the Website administration,

7.2.4. Was disclosed with the consent of the User.

7.3. The User is responsible for the legality, correctness and veracity of the provided Personal Data in accordance with applicable law.

8. DISPUTE RESOLUTION

8.1. Prior to filing a claim in court regarding disputes arising from the relationship between the User and the Website administration, it is mandatory to submit a corresponding claim (a written proposal for voluntary settlement of the dispute).

8.2. Within 30 (thirty) calendar days from the date of receipt of the claim, the User or the Website administration shall notify the applicant of the claim in writing of the results of the consideration of the claim.

8.3. If no mutual agreement is reached, the dispute is subject to referral to the competent courts of the Republic of Armenia.

8.4. The current legislation of the Republic of Armenia applies to this Privacy Policy and the relationship between the User and the Website administration.

9. ADDITIONAL TERMS

9.1. The Website administration has the right to make changes to this Privacy Policy in order to comply with changes in legislation or operational needs. In the event of changes, Users shall be notified thereof within a reasonable period via the Website and/or other means of electronic communication. The new version comes into force from the moment of its publication on the Website, unless otherwise provided by the relevant amendment.

9.2. The new Privacy Policy comes into force from the moment it is posted on the Website, unless otherwise provided by the new edition of the Privacy Policy.

9.3. All suggestions or questions regarding this Privacy Policy should be sent to the email address [email protected].

9.4. The current Privacy Policy is published on the website www.onex.am.