Privacy Policy

This Privacy Policy explains how Enflamex Limited (“IXIANTA”, “Company”, “we”, “our” or “us”) collects, uses, discloses and protects your personal data when you use our websites, platform and related services (collectively, the “Services”).

We are committed to protecting your privacy and complying with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.

1. Information About IXIANTA

Enflamex Limited, a company registered in the Republic of Cyprus with company registration number HE 399056 and having its registered address at Agias Zonis & Thessalonikis, NICOLAOU PENTADROMOS CENTER, Floor 10, Office 1001A, BLOCK B, 3026, Limassol is the controller of your personal data. We trade under the name IXIANTA, and use that name in these Privacy Policy to refer to Enflamex Limited.

2. Categories of Personal Data We Collect

We collect the following categories of data depending on your relationship with us:

2.1 Account and Contact Data

First name, last name, geographical address, date of birth, email address, phone number, company name, job title, billing address.

2.2 Candidate and Assessment Data

Information provided by employers about job applicants and employees.

Test responses, scores, logs of activity during assessments.

Uploaded CVs, profiles, or other documents.

Optional video/audio recordings if enabled in assessments.

2.3 Payment Data

Billing address, tax information, payment method details, transaction history

We do not store full credit/debit card details; payments are processed by third-party providers.

2.4 Usage and Technical Data

IP address, browser type, operating system, device identifiers

Log files, telemetry, crash reports, performance data.

Cookies and similar technologies (see Section 7).

2.5 User Generated Content (UGC)

Messages, comments, leaderboard entries, chat/forum content.

2.6 Marketing Data

Newsletter subscriptions, communication preferences, survey responses.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as it does not directly or indirectly identity you. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we will treat the combined data as personal data which will be used in accordance with this policy. Personal data you provide to us.

From time to time you may provide to us personal data as follows:

(a) Information you provide when you use our platform ixianta.com (the “platform”). This includes information provided by you at the time you place an order for any of our products or services. We may also ask you for information if you report a problem with our platform.
(b) If you contact us by email, through our contact form, by telephone or in writing, We may keep a copy of that correspondence or communication.
(c) Details of any transactions you carry out with us through the platform or by any other means, including those contained in an order form, and of fulfilment of your orders.
(d) Details of your visits to the platform and the resources that you access.

Personal data we automatically collect about you:

When you use our platform, we may automatically collect and store information about your Technical Data and Usage Data for the purposes of research and analysis. Some of this information is collected using cookies and similar tracking technologies. If you want to find out more about the types of cookies we use, why, and how you can control them, please see our Cookies Policy/paragraph 7 below.

Personal data we receive from others

We may receive personal data about you from our third party service providers, including our payment service providers and our analytic service providers.

If you have provided us with the personal data of another person, you confirm that he/she consents to the processing of his/her personal data and that you have informed him/her of our identity as a data controller and provided him/her with a copy of our Terms and Conditions and this policy.

We also monitor visitors to and content on our message board and blog sites to meet our obligations to ensure that rules as to content are being followed. We will review and, if appropriate, edit content on these sites.

3. Purposes of Processing

We can process personal data on various legal bases.

For processing operations for which we obtain consent for a specific processing purpose, Article 6(1)(a) of the GDPR is our legal basis.

If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as for example when processing operations necessary to provide our service, the processing is based on Article 6(1)(b) of the GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services.

If our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, our processing is based on Article 6(1)(c) of the GDPR.

Finally, we can base our processing operations on Article 6(1)(f) of the GDPR: this legal basis is used for processing operations which are not covered by the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

We use personal data for the following purposes:

To create and manage user accounts.

To provide and maintain the Services.

To enable employers to assess candidates.

To enable candidates to participate in assessments.

To process payments and manage subscriptions.

To provide customer support.

To send administrative and service-related notifications.

To send marketing communications (where legally permitted).

To ensure platform security and prevent fraud.

To perform analytics, research, benchmarking and product improvement.

4. Sharing of Data

We may receive personal data about you from our third party service providers:

Service providers (hosting, payment, analytics, customer support);
Employers and recruiters where you are a candidate;
Professional advisers (auditors, lawyers);
Regulators and authorities if legally required;
Business transferees in case of merger or acquisition.

We do not sell your personal data.

5. International Transfers

Your personal data may be transferred outside the EEA, for example to hosting providers in the US. Where this happens, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

6. Cookies and Similar Technologies

We may collect information about your mobile phone, computer or other device from which you access the website. Such information may include your domain name and IP address, details of your computer operating system and browser, the website you visited prior to visiting our website and unique number identifiers that are automatically generated by our systems when you visit our website. This will include details of the choices you make on our website indicating whether you wish to receive information on other products and services.

Some of this information is retained in “cookie” files on your computer. These files retain useful information that can speed your navigation through frequently visited sites. They can also retain records that track site usage, preferences and passwords. These cookies can be disabled or deleted by activating the setting on your browser if you do not wish them to be used. However, if you select this setting you may be unable to access certain parts of our website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log in to our website.

Please note that our advertisers may also use cookies, over which we have no control.

You can control cookies through your browser or opt-out via our cookie banner.

7. Data Retention

We take appropriate measures to ensure that any information collected from you is kept only for so long as is necessary for the purpose for which such information is used.

We normally update your personal data within seven (7) working days of any new or updated personal data being provided to us, to ensure that the personal data we hold We may also be required to retain personal data for a particular period of time to comply with legal, auditory or statutory requirements. To determine the appropriate retention period for personal data, we consider the type of the personal data, the potential risk of harm from unauthorised use or disclosure of the personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means.

Where we have no legal basis for continuing to process your personal data, we shall either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

For the avoidance of doubt, we may use Aggregated Data and Usage Data for research or statistical purposes indefinitely without further notice to you.

8. Security

We apply appropriate technical and organizational measures, including:

Encryption of data in transit and at rest.
Access controls and role-based permissions.
Regular backups and monitoring.
Incident response procedures.

No system is completely secure; we cannot guarantee absolute protection.

If you discover a vulnerability, we would like to know about it so we can take steps to address it as quickly as possible. We would like to ask you to help us better protect our clients and our systems.

9. Your Rights under GDPR

9.1. Right of access

The GDPR gives you the right to access information held about you. If you wish to exercise such right, please submit a request to us in writing at ixianta.com.

Any access request shall be subject to your providing acceptable proof of identification.

If we are processing your personal data, we will provide you with a copy of that personal data.

9.2. Right of rectification

You are entitled to have your personal data rectified if it is inaccurate or incomplete.

You should instruct us to correct or update any personal data we hold about you (for instance, if you change your address or your name).

You can instruct us to do this at any time by contacting us at ixianta.com.

9.3. Right to erasure

You have a right to have your personal data erased and to prevent processing in specific circumstances. If you wish to exercise such right, please submit a request to us in writing at ixianta.com. However, whilst we respect your right to be forgotten, we may still retain your personal data in accordance with applicable laws and when we respond to your request we shall notify you of any specific legal reasons that we have to retain your personal data

9.4. Right to restrict processing

If you believe our processing impacts on your fundamental rights and freedoms, you have the right to obtain from us restriction of processing (especially when the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data).. However, we may demonstrate that we have legitimate grounds to process your personal data not withstanding your rights and freedoms.

9.5. Right to withdraw your consent

In certain circumstances, we must have your consent before we contact you. You have the right to withdraw your consent to processing of your personal data at any time by contacting us at ixianta.com.

9.6. Right to data portability

You have the right, in certain circumstances, to obtain personal data you have provided us with, in a structured, commonly used and machine-readable format, and to reuse it elsewhere or ask us to transfer this to a third party of your choice.

9.7. Right to object

You have the right to object to:

Processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling).

Direct marketing (including profiling).

Processing for purposes of scientific/historical research and statistics.

9.8. Rights related to automated decision making and profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, as long as the decision is not necessary for entering into, or the performance of, a contract between you and us; or is not based on your explicit consent.

9.9. Right to lodge a complaint with a supervisory authority.

If you believe your data protection rights have been violated, you can contact us or lodge a complaint with the supervisory authority: Office of the Commissioner for Personal Data Protection (Cyprus)

https://www.dataprotection.gov.cy

10. Children’s Data

The Services are not directed at children under 16. We do not knowingly collect such data. If discovered, it will be deleted.

11. Marketing Communications

You may receive marketing communications if you opted in or are an existing customer. You can unsubscribe at any time by clicking the link in the email.

12. Links to Other Websites

Our website offers links to many third-party websites. We are not responsible for the accuracy or efficacy of the information or data policies or procedures of these third parties. If you access these sites using the links provided on our website, you should satisfy yourself as to the relevant data policies in effect on these sites

13. Changes to this Policy

We may update this Policy from time to time. Please check this page occasionally to ensure you are happy with any changes.