Privacy Policy

FF Clear Path LLC, with registered office at 8 The Green Ste R, Dover, Delaware, 19901, United States, formed under the laws of the State of Delaware, Tax Identification Number (EIN): 612207644, is the Controller of the personal data collected by the Service.

§ 1. General Provisions and Definitions

Controller may be contacted via email at [email protected].

Definitions:

Personal data – information about an identified or identifiable natural person. An identifiable natural person is a person that may be directly or indirectly identified.

Processing – means an operation or a set of operations performed on personal data or sets of personal data in an automated or non-automated manner, such as collection, recording, organizing, arranging, storage, adaptation or modification, downloading, viewing, use, disclosure by transmission, distribution or any other means of making available, matching or merging, limiting, deleting or destroying.

Service – electronic services for downloading software application(s), provided according to the Terms and Conditions.

Device – an electronic device that allows software application(s) to be downloaded, such as a smartphone, mobile phone, tablet, and/or computer used by the User.

User – an entity who downloads software applications(s) to the benefit of whom services may be provided by electronic means in accordance with the law or with whom a contract on the provision of services by electronic means may be concluded.

Terms and Conditions – a document that sets out the terms and conditions of use of the Service, available at https://zonavpn.online/terms-of-use.

The use of Service does NOT require any identification of any User, or collection of any personal data of anyone. Thus, Controller does NOT collect, store or otherwise process any personal data unless explicitly mentioned and/or described in this Privacy Policy.

§ 2. Legal Basis and Purposes of User’s Data Processing

Personal data collected by Controller shall be processed in accordance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”), the Act of 10 May 2018 on the protection of personal data (Journal of laws from 2019, item 1781) and the Act of 18 July 2020 on the provision of services by means (OJ L 2020, item 344).

Controller only processes data made available by User in connection with the use of Service, for the purposes of:

establishing connections that allows downloading of software applications (scope of data: IP addresses) - pursuant to Article 6(1)(b) of the GDPR, i.e. due to the fact that the processing is necessary for the performance of an implied contract, to which the data subject is a party,
the fulfilment of the legal obligations incumbent on Controller in connection with running a business activity (scope of data: any and all data received from the User) - pursuant to Article 6(1)(c) of the GDPR, i.e. due to the fact that the processing is necessary to fulfil the legal obligation incumbent on Controller.

No other data shall be processed by Controller, unless previously agreed with User and for processing of which the explicit consent was given by User.

§ 3. Data Collected by Controller

Controller collects or may collect the following data through Service: details of the Device used by the User (IP-address).

Controller may also collect other data voluntarily provided by User when contacting Controller, including his contact details and other data not listed above.

Browsing the content of Service does not require User to provide personal data other than the automatically retrieved connection parameters.

§ 4. The Processing Time of Personal Data

Personal data will be processed for the period of time:

necessary for provision of services as defined in Terms and Conditions;
until the revocation of the consent granted or the objection to the processing of data - in cases where the personal data of the User have been processed on the basis of separate consent.

Controller shall also store the personal data of the Users when it is necessary to maintain security, prevent fraud and abuse, especially duties arising from the Act on Combating Money Laundering and the Financing of Terrorism of 1 March 2018.

§ 5. User Rights

Controller shall ensure that Users may exercise the rights referred to in item 2 below. In order to exercise the rights, User shall send an appropriate request via e-mail to: [email protected].

User shall have the right:

of access to the data content - pursuant to Article 15 of the GDPR,
to rectify/update the data - pursuant to Article 16 of the GDPR,
to erasure of the data - pursuant to Article 17 of the GDPR,
of restriction of processing of the data - pursuant to Article 18 of the GDPR,
to transfer the data - pursuant to Article 20 of the GDPR,
to object to the data processing - pursuant to Article 21 of the GDPR,
to withdraw the consent granted at any time, provided that the withdrawal of consent shall not affect the lawfulness of the processing, which has been done based on the consent prior to its withdrawal - pursuant to Article 7(3) of the GDPR,
to file a complaint to the supervisory authority, i.e. the President of the Office for the Protection of Personal Data - pursuant to Article 77 of the GDPR.

Controller shall process the requests without undue delay, however not later than within one month from their receipt.

§ 6. Necessity of Data Provision

Submission of personal data through Service is voluntary and is NOT necessary to benefit from the full functionality of Service, unless specified in this Privacy Policy.

Where any data are provided for the purpose of using Service, failure to provide such data may disable the possibility to download the software applications.

§ 7. Data Sharing

Controller shall not share data collected from Users with any third party, unless otherwise is prescribed by applicable law.

§ 8. Technical Measures

Controller shall use its best efforts to secure and protect User data from any actions by third parties and shall supervise the data safety throughout the entire period of owning such data in such a manner as to protect the data against unauthorized access, damage, distortion, destruction or loss.

Controller uses the necessary server, connection, and website security measures. Nevertheless, the actions taken by Controller may not be sufficient if User does not follow the security rules.

§ 9. Transfer of Personal Data Outside the EEA

The personal data of Users shall not be transferred to countries outside the EEA. Controller uses servers located in the EEA countries for the purpose of storing such data.

§ 10. Data Processors Acting on Behalf of the Controller

The personal data of the Users may be entrusted to Google Analytics for statistical purposes. All data protection obligations of Controller remain unaffected.

§ 11. Change of the Privacy Policy

Controller has the right to amend this document. Users shall be notified of any such changes in a manner allowing them to familiarize themselves with the modifications before they enter into force, for example, by providing notice via e-mail or other means of direct communication available to the Controller.

Should User have any objections to the changes made, User may request the deletion of their personal data on Service. The continued use of Service after the publication or notification of changes to this document shall be considered to be consent to the collection, use and sharing of User personal data according to the updated content of the document.

This Privacy Policy shall not restrict any rights granted to User in accordance with generally applicable laws.