Privacy Policy

Types of Data Collected

Among the types of Personal Data that this Application collects, by itself or through third parties, there are: Cookies, Usage Data, email address, username, country, the contact details you choose to send us in support chat, and the device and browser characteristics described under “Device Fingerprinting for Fraud Prevention” below.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.

Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application.

Unless specified otherwise, all Data requested by this Application is mandatory and failure to provide this Data may make it impossible for this Application to provide its services. In cases where this Application specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service.

Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.

Any use of Cookies – or of other tracking tools – by this Application or by the owners of third-party services used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy.

Users are responsible for any third-party Personal Data obtained, published or shared through this Application and confirm that they have the third party’s consent to provide the Data to the Owner.

Device Fingerprinting for Fraud Prevention

When a page on this Application loads, your browser is asked for a set of characteristics that it exposes to every website, and those characteristics are combined into a single identifier — a device fingerprint. The characteristics are: your browser and operating system as reported in the user-agent string, the platform, your preferred languages, your time zone, screen size and colour depth, the number of CPU cores, the approximate amount of device memory, the number of touch points, the name of the graphics adapter, the way your browser draws a test image and renders a test sound, which fonts are installed, and a short list of browser feature flags.

We do not collect — and no website can collect — your MAC address, a disk serial number or any other hardware ID. Everything listed above is information a browser hands to any site it visits.

Where a record is created it holds that identifier, the raw characteristics above, your IP address, the country the address resolves to, the page you were on and your user-agent string, with the time we saw it. The record can also carry an email address or an order number where we connect a device to a specific order while investigating a case.

Why we do this. A block by IP address takes about a minute to defeat — a new address and a private window are enough. A device fingerprint survives both, so it is the only practical way for us to notice that someone we already blocked for payment fraud is back under a new email address. The legal basis is our legitimate interest in preventing fraud, Art. 6(1)(f) GDPR.

Who this applies to. A fingerprint is stored only when the request resolves to a country we currently review by hand for fraud — at the time of writing that is Türkiye and nothing else. For every other visitor, including visitors in the EU and the EEA, the fingerprint is discarded the moment it reaches our server and nothing at all is written to our database.

No automated decisions. A stored fingerprint never blocks an order by itself and never changes a price. It appears in an internal list that a member of our team reads, and any block is that person’s decision. When a device that was blocked earlier is seen again, our system posts a short internal notice — the identifier, IP address and country — into the private Telegram channel our team uses for operations.

How long we keep it. Fingerprint records are kept for as long as the fraud-prevention purpose lasts. We do not currently delete them on a fixed schedule, so in practice a record stays until we no longer need it or until you ask us to remove it. We would rather say that plainly than quote a retention period we do not enforce.

How to object. Because this processing rests on legitimate interest, you may object to it at any time under Art. 21 GDPR. Write to support@fastaccess.gg from the address you use with us, or quote your order number, and we will delete the fingerprint records linked to it. Browsing with JavaScript disabled for this site, or with a browser’s anti-fingerprinting protection switched on, also stops the signature from being taken in the first place; nothing else about your order changes if you do.

Google Customer Reviews

After an order is delivered we display an opt-in card provided by Google Customer Reviews. If — and only if — you tick that box, we pass your email address, order number, order country and delivery date to Google so that Google can email you a short survey about your purchase. You are not required to opt in, and declining changes nothing about your order, your account or your support.

Survey answers are collected by Google and reach us only as anonymous aggregate ratings — we cannot see who wrote what. Google processes this data under its own Privacy Policy. To withdraw, use the unsubscribe link in the survey email or write to us at support@fastaccess.gg and we will ask Google to remove your address.

Mode and Place of Processing the Data

Methods of processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.

The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.

Legal basis of processing

The Owner may process Personal Data relating to Users if one of the following applies:

• Users have given their consent for one or more specific purposes.
• Provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof.
• Processing is necessary for compliance with a legal obligation to which the Owner is subject.
• Processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner.
• Processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

Place

The Data is processed at the Owner’s operating offices and in any other places where the parties involved in the processing are located. Depending on the User’s location, data transfers may involve transferring the User’s Data to a country other than their own.

Retention time

Personal Data shall be processed and stored for as long as required by the purpose they have been collected for. Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.
• Personal Data collected for the purposes of the Owner’s legitimate interests shall be retained as long as needed to fulfill such purposes.

Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

The Purposes of Processing

The Data concerning the User is collected to allow the Owner to provide its Services, as well as for the following purposes:

• Providing the Service: creating, paying for and delivering your order
• Registration and authentication
• Handling payments
• Contacting the User about an order
• Support chat, including replies drafted by an automatic assistant
• Fraud prevention, including device fingerprinting
• Analytics on our own servers (traffic and checkout measurement)
• Advertising conversion measurement
• Collecting reviews you opt in to
• Hosting and backend infrastructure

Detailed Information on the Processing of Personal Data

The Rights of Users

Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to:

• Withdraw consent at any time.
• Object to processing of their Data.
• Access their Data and obtain a copy.
• Verify and seek rectification (update or correct).
• Restrict processing under certain circumstances.
• Have Personal Data deleted or removed (right to be forgotten).
• Receive and transfer Data to another controller.
• Lodge a complaint with their competent data protection authority.

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document (support@fastaccess.gg). These requests can be exercised free of charge and will be addressed by the Owner within one month.

Definitions