1. This privacy policy (henceforth referred to as the “Privacy Policy”) sets out the rules for the processing and protection of personal data provided by users in connection with the use of the services offered on the website https://G4Skins.com (henceforth referred to as the “Website”), owned by OXMIS LTD, HE 467004, Markou Drakou, 69, Mesa Geitonia, 4002, Limassol, Cyprus, and also contains information on the use of cookies by the Website.

2. The privacy policy is continuously available on the website https://G4Skins.com, in a manner that allows it to be obtained, reproduced, and recorded at any time by printing or saving it on a medium.

3. Matters relating to the provision of services via the Website are set out in the terms and conditions available on the Website.

1. The administrator of personal data is OXMIS LTD, HE 467004, Markou Drakou, 69, Mesa Geitonia, 4002, Limassol, Cyprus (henceforth referred to as: “Personal Data Administrator”).

2. The user may contact the Personal Data Administrator by traditional mail (address: Markou Drakou, 69, Mesa Geitonia, 4002, Limassol, Cyprus) or by email (email address: support@g4skins.com).

1. The user may log in to the Website only using an account on the STEAM online platform available at: steampowered.com. If the user grants the appropriate permissions, the Website will receive identification data about the user from their STEAM account, such as their Steam account name, avatar, trade URL, and Steamid64.

2. Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is understood as any individual who can be identified, directly or indirectly, by reference to such information, whether taken alone or in combination with other data.

1. The administrator processes users' personal data to the extent necessary to provide services and ensure the functionality of the website. The scope of data processed may include:

   1. Identification data: first name, last name, date of birth (if required by the operator, KYC or AML verification);

   2. Contact details: email address, phone number, mailing address;

   3. Transaction data: information about payments made, bank account number, data concerning purchased products;

   4. Technical data: IP address, browser type and version, language settings, operating system, device type, screen resolution;

   5. Data concerning activity on the website: browsing history, clicks, time spent on the website;

   6. Data obtained through cookies and similar technologies: session identifiers, user preferences, analytical data;

   7. Data collected via Hotjar, including: device and browser information (browser type, device type and model, operating system), data on user activity on the website (cursor movement, scrolling, clicks, subpages visited, time spent in individual sections), screen resolution, browser language, referring URL, responses to surveys or forms displayed by Hotjar (the Hotjar tool does not allow user identification, and the data is processed in an anonymized form);

   8. Data provided voluntarily by the User: information contained in contact forms, inquiries, opinions, comments.

2. The newsletter available on the Website constitutes digital content containing commercial information concerning the Administrator's current activities, including information about new products and promotions available on the Website. The newsletter is sent to the User after they have consented to receive commercial information. With regard to the newsletter, providing an email address by the user is voluntary, but necessary in order to receive the newsletter. The user may unsubscribe from the newsletter at any time free of charge.

3. The administrator does not process special categories of personal data (so-called sensitive data) within the meaning of Article 9 of the GDPR, such as data concerning health, political opinions, religious beliefs, or trade union membership.

4. Providing personal data is voluntary, but failure to do so may prevent you from using certain features of the website, such as contacting us via the form.

5. The administrator makes every effort to ensure that the personal data processed is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.

1. On the Website, personal data will be processed for the following purposes:

   1. with the user's consent, personal data may be processed for the purposes specified in the consent clause (legal basis: Article 6(1)(a) of the GDPR);

   2. concluding and performing a contract for the provision of electronic services, including maintaining an Account, handling payments, processing complaints and reports, and conducting ongoing correspondence with the User (legal basis: Article 6(1)(b) of the GDPR);

   3. fulfilling the legal obligations incumbent on the Administrator, in particular those resulting from tax law provisions (legal basis: Article 6(1)(c) of the GDPR);

   4. determining, investigating, or defending claims arising from or related to the services provided (legal basis: Article 6(1)(f) of the GDPR);

   5. marketing and promotional activities – sending newsletters, commercial information, presenting the Website's services in advertising channels (e.g., Google Ads, Meta Ads), through various means (such as email or SMS, if the user agrees to this), displaying advertisements tailored to the user's interests (profiling), after obtaining the user's consent (legal basis: Article 6(1)(a) of the GDPR);

   6. monitoring user activity on the website (traffic, sources of visits, interactions), conducting behavioral analyses to optimize the website's performance, improve the quality of services provided, test new functionalities, and prevent abuse (legal basis: Article 6(1)(f) of the GDPR);

   7. perform analytical and statistical activities using the Hotjar tool - to analyze how users use the Website, including, among other things, creating session recordings, analyzing clicks and cursor movements, usability studies, and surveys displayed to users (legal basis: Article 6(1)(a) of the GDPR).

1. Personal data will be stored for the period necessary to achieve the specified purposes:

   1. where the legal basis for processing is the user's consent (Article 6(1)(a) of the GDPR), the data is stored until the consent is withdrawn;

   2. where the legal basis for processing is the performance of a contract (Article 6(1)(b) of the GDPR), the data are stored for the duration of the contract (service) and then for the limitation period for claims related to the performance of the service;

   3. where the legal basis for processing is the necessity to fulfill a legal obligation (Article 6(1)(c) of the GDPR), the data is stored for the period specified in the law (e.g., tax law);

   4. where the legal basis for processing is a legitimate interest, e.g., direct marketing or the pursuit or defense of claims (Article 6(1)(f) of the GDPR), the data is stored until an effective objection to the processing of data for the specified purpose is lodged.

The Administrator may disclose users' personal data to third parties only to the extent necessary for the proper provision of services, fulfillment of legal obligations, and protection of the Administrator's legitimate interests. Data disclosure is carried out in accordance with applicable law, in particular the GDPR.

All subjects processing personal data on behalf of the Administrator operate on the basis of personal data processing agreements concluded with the Administrator and are obliged to apply appropriate technical and organizational measures to ensure data protection.

The administrator does not sell, commercially share, or disclose users' personal data to other entities, except in cases expressly indicated in this Privacy Policy or resulting from applicable law. Data processed through the Hotjar tool is stored on servers located in the European Union. In exceptional circumstances, it may be transferred outside the European Economic Area with appropriate safeguards in accordance with Articles 46-49 of the GDPR, in particular standard contractual clauses.

1. A user whose personal data is being processed may exercise the following rights:

   1. access to data – Article 15 of the GDPR;

   2. correction of data – Article 16 of the GDPR;

   3. erasure of data – Article 17 of the GDPR;

   4. data processing restrictions - Article 18 of the GDPR;

   5. data transfer - Article 20 of the GDPR;

   6. object to the processing of data - Article 21 of the GDPR

   7. in the case of personal data processing based on consent – to withdraw consent at any time.

2. In order to use any of the above rights, the user should contact the Personal Data Administrator. The user can contact the Administrator by email (email address: support@g4skins.com).

1. Due to the Administrator's use of external service providers, Users' personal data may be transferred to third countries, i.e. countries outside the European Economic Area (EEA), in particular to the United States of America.

2. Data transfer takes place only in cases where it is necessary for specific data processing purposes (e.g., statistical analysis, sending newsletters, operating marketing tools) and with appropriate personal data protection mechanisms in place.

3. In the case of data transfer to entities based in third countries, the Administrator ensures that this is done exclusively on the basis of:

   1. a decision by the European Commission confirming an appropriate level of protection for personal data (e.g., the Data Privacy Framework mechanism in the case of the US), or

   2. Standard Contractual Clauses (SCC) approved by the European Commission, or

   3. other instruments in accordance with Articles 46–49 of the GDPR.

4. Third parties that may process Users' personal data outside the EEA include, in particular: Google LLC (in relation to Google Analytics and Google Ads), Meta Platforms, Inc. (in relation to Facebook Pixel), and Hotjar Ltd. (in relation to certain features of the Hotjar tool).

5. The administrator provides that in each case of data transfer outside the EEA, appropriate legal, technical, and organizational safeguards are in place to protect the rights and freedoms of data subjects.

1. Cookies are small text files that are stored on your device when you use the Website. They are used to ensure the proper functioning of the Website's pages.

2. Cookies allow us to identify the software used and tailor the Website to individual needs.

3. When visiting the Website for the first time, the user is given the option to select cookie settings via a dedicated banner or consent management panel. Non-essential cookies (e.g., marketing or analytical cookies) are only installed after the user has given their explicit consent.

4. The user may change the settings for cookies at any time. These settings can be changed in particular to block the automatic handling of cookies or to inform the user each time they are placed on the device. However, restrictions on the use of cookies may affect some of the functionalities available on the Website.

5. The Website uses session cookies (stored on your device and remaining there until you close your browser) and persistent cookies (stored on your device and remaining there until you delete them).

6. The Website also uses cookies provided by Hotjar Ltd., which, after obtaining the user's consent to the use of analytical cookies, are used to analyze how the Website is used, including creating heat maps, session recordings, and analyzing user interaction with website elements.

7. The website uses the following types of cookies:

   1. Necessary – enable the website to function properly, e.g., navigation, access to secure areas (without them, the Website would not function properly);

   2. Functional – they remember selected user settings and personalize the interface (e.g., language selection);

   3. Analytical and statistical – collect data on how the Website is used for analytical and statistical purposes (e.g., number of visits, time spent on the site). This category also includes Hotjar cookies;

   4. Marketing and advertising – enable the display of personalized ads on external websites and measure their effectiveness.

1. The website uses cookies to:

   1. adaptation of the content of the Website to user preferences and optimization of website use

   2. creating statistics and viewership reports, and improving the functioning of the Website;

   3. maintaining the Website user's session, thanks to which the user does not have to re-enter their login and password on every subpage of the Website,

   4. providing users with advertising content that is more tailored to their interests through the use of profiling, i.e., verifying their interests and preferences based on an analysis of the websites they visit.

1. This policy shall come into effect on March 29, 2023.

2. The Administrator reserves the right to make changes to the Privacy Policy, in particular in the event of changes in the law regarding the protection of personal data, the implementation of new services, functionalities or technologies, or changes to the Administrator's data.

3. Users will be informed of important changes to the Privacy Policy via a message available on the Website or in another customary manner (e.g., email).

4. The amended Privacy Policy shall apply from the moment it is published on the website, unless a different date of entry into force is expressly indicated.