• Identity and Contact Data: When you request a quote, book a device pickup, or submit a data recovery ticket, we collect your first name, last name, email address, telephone number, and physical pickup/delivery address.
• Financial and Billing Data: To process invoice payments for diagnostics, delivery, and successful recoveries, we collect necessary payment details (such as bank details, corporate tax identifiers, and transaction histories). Note: We do not directly store credit card numbers on our servers; payments are handled through secure, PCI-compliant third-party payment gateways.
• Customer Support and Communications: Any details, text, or files you provide when communicating with our support team via email, contact forms, or phone calls.

• Damaged Media Specifications: To log, track, and diagnose your order, we document the technical specifications of your submitted storage device. This includes the brand, model, serial number, storage capacity, file system type, interface type, and a description of the physical or logical failure.
• Website Usage and Technical Data: When you browse databacknow.com, we automatically log information transmitted by your browser. This includes your Internet Protocol (IP) address, browser type and version, time zone setting, operating system, referral source, page interaction data, and exact timestamps of your visits.

• No Digital File Uploads: Our website does not provide cloud storage, portal uploads, or digital file hosting. Users cannot upload the contents of their hard drives or files to our website servers.
• No Content Retention (0-Day Retention Policy): While we physically clone and manipulate your storage media in our local laboratory to extract your data, we enforce a strict 0-day retention window. Once the extracted data is transferred to the new return media device and delivered to you, all temporary images, files, and workspace fragments are immediately and permanently destroyed using secure cryptographic erasure standards. We do not retain copies of your recovered files under any circumstances.

• Performance of a Contract (Art. 6(1)(b) GDPR): Processing your contact details, address, and device metadata is strictly necessary for us to fulfill our contractual obligations to you—specifically, managing logistics, diagnosing the media, recovering the data, and returning the devices.
• Compliance with a Legal Obligation (Art. 6(1)(c) GDPR): We must process and retain your billing information, tax identifiers, and transaction history to comply with legal statutory obligations under Cyprus tax, VAT, and corporate accounting laws.
• Legitimate Interests (Art. 6(1)(f) GDPR): We process technical website data to protect our infrastructure against cyber attacks, prevent fraud, optimize website performance, and maintain service security.

• Logistics and Courier Partners: If we utilize independent courier networks instead of our in-house delivery team, we share your name, phone number, and physical address with them solely to facilitate the secure collection and return of your hardware.
• Payment Processors: Your billing information is shared directly with authorized financial institutions and secure payment gateway providers to validate transactions.
• Legal Authorities: We may disclose your information if legally required to do so by the courts or law enforcement authorities within the Republic of Cyprus to comply with legal procedures or protect public safety.

• Local Storage: All personal data (such as customer accounts and order histories) is stored and processed on secure servers located within the European Economic Area (EEA). Your physical storage media never leaves our secure laboratory facility in Nicosia, Cyprus.
• Technical Safeguards: We implement robust technical and organizational security measures—including SSL/TLS encryption for website traffic, firewalls, strict access controls, and laboratory surveillance—to prevent unauthorized access, alteration, or disclosure of your data.

• Customer Account and Billing Data: We retain your identity, contract, and invoice records for a minimum of 7 years to fulfill legal, tax, and accounting retention mandates under Cyprus legislation.
• Recovered Storage Content: As detailed in our 0-day retention policy, the actual contents recovered from your storage devices are held on our offline laboratory extraction units only until delivery is executed. They are erased instantly (0 days) following project closure.

• Right of Access: You have the right to request clear copies of the personal data we hold about you.
• Right to Rectification: You can request that we immediately correct any inaccurate or incomplete personal information.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data when it is no longer necessary for the purposes it was collected, subject to statutory tax retention laws.
• Right to Restrict or Object to Processing: You have the right to limit how we process your data or object to specific processing activities based on legitimate interests.
• Right to Data Portability: You can request that we transfer your personal data to another organization or directly to you in a structured, machine-readable format.
• Right to Lodge a Complaint: If you believe our processing violates data protection laws, you have the right to file an official complaint with the Cyprus Data Protection Commissioner (Office of the Commissioner for Personal Data Protection).

• E-mail: info@databacknow.com
• Location: Nicosia, Cyprus

Or use our Contact Form.