ΙδιώτεςPrivacy Policy for customers

    PRIVACY POLICY FOR CUSTOMERS

    At Cryos, your privacy and personal data security is our top priority. It is important for us to ensure the best possible protection of your personal data, and to ensure clarity and transparency regarding the different processing activities which your personal data is subject to.

      In this Privacy Policy, you can find information about the following:

      1. When does this Privacy Policy apply?
      2. Who is the data controller for the processing of your personal data?
      3. Our Data Protection Officer
      4. Which personal data does Cryos collect, for which purposes, according to which legal basis and how long do we store it?
      5. To whom do we disclose your personal data?
      6. Where is your personal information held?
      7. What are your rights?
      8. Who should you contact?
      9. Complaint guideline
      10. Amendments of the Privacy Policy

      In addition to this Privacy Policy, our Cookie Policy also applies https://www.cryosinternational.com/en-gb/cy-shop/donor/legal/cookie-policy/

      1. When does this Privacy Policy apply?

      This Privacy Policy applies to Cryos' (hereinafter "Cryos", "we" or "our”) processing of personal data when you:

      a) use or register as a user of Cryos' website, use our chat, book a call or sign up for Cryos' newsletter;
      b) provide personal data about yourself as part of creating or setting up a customer relationship with Cryos;
      c) place an order in our webshop;
      d) follow Cryos on social media like Facebook, Twitter, Instagram or LinkedIn or our blog;
      e) have a sperm analysis done;
      f) deposit your sperm or eggs.

      The Privacy Policy also includes information regarding the processing of personal data about persons employed with one of Cryos' professional cooperation partners and who acts as a contact person in relation to Cryos. Thus, companies cooperating with Cryos must make the relevant contact person familiar with this Privacy Policy.

      2. Who is the data controller for processing your personal data?

      Cryos International - Cyprus Limited, Company Registration Number ΗΕ 381787, Prigkipos Karolou 6, Ayios Dometios, 2373 Nicosia, Cyprus is the data controller for processing your personal data when you:

      Cryos International ApS, Company Registration Number 29 42 18 38, Vesterbro Torv 3, 5th floor, DK-8000 Aarhus C, Denmark, is the data controller for processing of your personal data when you:

      • use (for purposes not mentioned above) or set up a user profile on Cryos' website, book a call or sign up for Cryos' newsletter;
      •  follow Cryos on social media like Facebook, Twitter, Instagram or LinkedIn or our blog.

      3. Our Data Protection Officer

      If you have any questions as to how Cryos processes your personal data, you are always welcome to contact our Data Protection Officer at [email protected] or by calling +357 22377863 in relation to the processing for which the data controller is Cryos International - Cyprus Limited.

      In relation to the processing for which the data controller is Cryos International ApS, the DPO can be reached at [email protected].

      4. Which personal data does Cryos collect, for which purposes, according to which legal basis and how long do we store it?

      5. To whom do we disclose your personal data?

      Your information can be accessed by staff employed with Cryos International Cyprus Ltd or other companies in the Cryos Group with a work-related need to access this information and who assist Cryos with administrative and technical tasks such as storage or retrieval of such information. The employees of Cryos are subject to confidentiality.

      We will share your personal data with third-party service providers (like providers of marketing, IT or administrative services, courier and shipping companies) who will process such information on behalf of Cryos for the purposes described above. These data processors have been instructed by us only to process your personal data on our behalf and for the purposes specified by Cryos. We will only share your personal data where it is relevant and necessary to be able to offer the services set forth in this privacy policy.

      Cryos has entered into cooperation agreements, including data processing agreements with our data processors. We oblige them to process your personal data confidentially and to take the necessary technical and organizational security measures against data being accidentally or unlawfully destroyed, lost or degraded, or come to the knowledge of unauthorised persons, misused or otherwise processed in violation of the regulations of the General Data Protection Regulation.

      Private customer:

      If you purchase sperm/eggs, we will disclose your name, your date of birth and information about your address and your order to the clinic to which you have requested us to send your order, in order for the clinic to identify you and further proceed together with you.
      If you have consented to the service genetic matching, we will disclose your personal data in the form of a saliva sample, and the DNA contained therein or your clinical genetic report in anonymised form to an external laboratory, which will perform the genetic matching between you and the given donor on behalf of Cryos. If you have consented hereto, we may in some cases share the result of the genetic matching with third parties pointed out by you.

      If a serious adverse reaction or a serious adverse event occurs, including if a transmissible disease is found in the donor or a mix up is determined, we are obliged to disclose information in this regard to the regulatory authority, namely the Cyprus Ministry of Health pursuant to Sections 31 and 41 of the Standards of Quality and Safety (donation, procurement, testing, processing, preservation, storage and distribution) of Human Tissues, Cells and Derivative Products Law of 2007 (Law 187(I)/2007). Only the minimum necessary information will be disclosed.

      When you deposit your sperm/eggs with Cryos:

      If you have deposited your sperm/eggs with Cryos, your deposited sperm/eggs and your national id number will be disclosed to the clinic where the treatment is to take place.
      If you are a depositor and thereby are to be screened for infectious diseases, we will use data processors in the form of accredited test laboratories and hospitals to do the relevant tests of the blood and urine samples submitted to us.

      When you use Cryos’ website:

      We will disclose information about your use of our website to our partners in social media, advertising partners and analysis partners. Our partners may combine this data with other information you have provided to them or which they have collected from your use of their services.

      We will disclose information about your use of our website with Facebook Inc. Facebook Inc. may combine this data with other information you have provided to them or which they have collected from your use of their services. If you do not want ads on Facebook Inc., you need to change your settings on their site.

      Information is disclosed to Facebook Inc. when Facebook Inc. uses personal data collected from Cryos' Facebook page. See also Facebook's Data Policy. Please note that Cryos does not have full influence on Facebook Inc.'s data processing.

      Other:

      In the event that Cryos no longer runs a tissue centre business, the personal data described above, which Cryos is obliged to store in order to ensure traceability, will be transferred to another tissue centre in accordance with the requirement specified in article 44(4) of the Standards of Quality and Safety (donation, procurement, testing, processing, preservation, storage and distribution) of Human Tissues, Cells and Derivative Products Law of 2007 (Law 187(I)/2007).

      Finally, we may disclose certain anonymised information internally in the Cryos Group for research and statistics purposes.

      Transfer to third countries

      To deliver our products and services to you, it is sometimes necessary for us to share your personal information outside the European Economic Area (EEA), e.g.:

      • with our service providers located outside the EEA;
      • if you are based outside the EEA; and
      • where there is an international dimension to the services we are providing to you

      These transfers are subject to special rules under European and Cyprus data protection law.

      To the extent where your personal data is transferred to third countries, i.e. countries outside the EU/EEA, we will provide a sufficient level of protection for such a transfer, e.g. by entering EU standard contracts with the receiver of such information. This may be the case where your information is accessible by the member of the Cryos Group in the USA (Cryos International USA), when technical service providers we use store information outside in data centres outside the EU or when you ask for your deposit to be sent to a clinic or hospital outside the EU. In the latter case, the transfer will be necessary for the performance of a contract with you or for your interest in accordance with Article 49.

      In the rest of the cases, we take measures so that your personal information will be given analogous protection to EU standards, specifically by signing with the party based outside the EU, in case it is a country for which there is no adequacy decision by the Commission pursuant to Article 45 GDPR, an agreement with the standard contractual clauses approved by the European Commission as per Article 46 GDPR committing them to afford your personal data sufficient data protection.

      6. Where is your personal information held?

      Information may be held at our offices in Cyprus and those of our, third party agencies, service providers, representatives and agents as described above (see above: ‘To whom do we disclose your data?’).

      Some of these third parties may be based outside the European Economic Area. For more information, including on how we safeguard your personal information when this occurs, see above: ‘Transfer to third countries’.

      We also store personal data electronically, namely in databases we operate onsite or in servers located in the EU.

      7. What are your rights?

      You have certain rights available in connection with Cryos' processing of information about you. These rights are described below but you are encouraged to contact with our DPO to receive additional details and any information you may need:

      • You have a right to access information which Cryos is processing about you and to obtain access to certain additional information about how and why we process your personal data. This means that Cryos must provide a copy of the personal data we process about you.
      • You have the right to obtain rectification of any incorrect personal data about you.
      • In certain situations, you have the right to obtain erasure of information about you before the due time in which Cryos will delete it.
      • In certain situations, you have the right to restrict the processing of your data. If you have the right to restrict the processing of your personal data, Cryos may, going forward, except for storage, only process your data in special circumstances and for special purposes.
      • In certain situations, you have the right to object against Cryos' processing of your personal data.
      • In certain situations, you are entitled to receive the personal data provided by you in a structured, commonly used and machine-readable format, and to transmit such personal data from Cryos to another data controller.
      • You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.
      • In relation to the processing based on your consent or explicit consent, i.e., Article 6(1)(a) or Article 9(2)(a) of the GDPR, you can always withdraw your consent at any time by contacting our DPO by email or otherwise, the details of whom are stated at the beginning of this Privacy Policy. A withdrawal of your consent does not affect the lawfulness of Cryos’ processing of your information on the basis of your previously granted consent until the time when such consent is withdrawn. Accordingly, if you withdraw your consent, this will not take effect until from the time it is withdrawn. Moreover, withdrawing your consent will not prevent any processing that is required under the law in connection with the traceability and other legal requirements as explained above by reference to Articles 6(1)(c) and 9(1)(h) GDPR.

      We have appropriate security measures to prevent personal information from being accidentally lost or used or accessed unlawfully. We limit access to your personal information to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
      We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

      8. Who should you contact?

      If you want us to update, rectify or delete the personal data we have registered about you or exercise any of your aforementioned rights, or if you have any questions about this Privacy Policy, please contact us here as follows:

      In relation to personal data processed when you: provide us with your information when creating or setting up a customer relationship;

      • speak with us through the web chat feature;
      • place an order in our web shop;
      • have a sperm analysis done;
      • deposit your sperm or eggs with us.

      Cryos International – Cyprus Ltd and its DPO at [email protected]

      In relation to personal data processed when you:

      • use or set up a user profile on Cryos' website, book a call or sign up for Cryos' newsletter;
      • follow Cryos on social media like Facebook, Twitter, Instagram or LinkedIn or our blog.

      Cryos International ApS and its DPO at [email protected].
      Do not worry that you may not contact the right DPO. In all cases, you will be guided as necessary to be able to exercise your rights or receive the information you need.

      We will determine as soon as possible to which extent your request can be accommodated.

      9. Complaint guideline

      We hope that this Privacy Policy has provided you with the information you need.
      If you disagree with the way in which we are processing your personal data or the purposes for which it is processed, please contact us or our Data Protection Officer, which you can read about in section 3 of this Privacy Policy.

      You can also submit a complaint to:
      Cyprus Commissioner for Personal Data Protection
      Office address: Iasonos 1, 1082 Nicosia, Cyprus
      Postal address: P.O.Box 23378, 1682 Nicosia, Cyprus
      Tel: +357 22818456
      Fax: +357 22304565
      Email: [email protected]


      For the processing conducted by Cryos International ApS, you can submit a complaint to:

      The Danish Data Protection Agency
      Carl Jacobsens Vej 35
      DK-2500 Valby
      Phone +45 33 19 32 00
      Email: [email protected]

      10. Amendments of the Privacy Policy

      We reserve the right to amend this Privacy Policy due to significant changes in legislation, legal practice, or our internal procedures.


      24-02-2023