In legal terms, we are the data controller, as we determine the means and/or purposes of the processing of the personal data held by us. We might be the data processors in the case that we are performing a process on behalf of another legal entity that is defining the means and/or purpose of the processing.
The General Data Protection Regulation (GDPR) governs how we take care of the information we hold about you. The first principle of the Regulation is that your personal information must be processed fairly and transparently. We have an obligation to let you know how we will securely maintain the information about you and what we will use it for.
What personal data do we collect about you?
Why do we need your personal data?
We collect and use your information under the following lawful bases:
Who will we share your information with:
If it is necessary to share your information with other parties, it will be subject to strict controls and data processing agreements describing to what extent and how it may be used. We may share your information with:
Security of personal data
We take appropriate operational and technology security measures (including physical, electronic and procedural measures) to safeguard your Personal Information from unauthorized access, disclosure, loss, corruption and/or destruction.
How long do we retain your data?
Under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 Law 125(I)/2018, you are granted several rights regarding your personal data. You have the right to request from us access to and rectification of your personal data. If you have provided consent for the processing of your data, you have the right (in certain circumstances) to withdraw that consent at any time which will not affect the lawfulness of the processing before your consent was withdrawn.
1. Right to be informed
2. Right to access
3. Right to correction
4. Right to erasure
5. Right to restriction of processing
6. Right to data portability
7. Right to object to processing
8. Right not to be subject to automated decision making
For further information on how we process your personal data or how to exercise your rights you can contact our Data Protection Officer. If you would like to exercise one of the rights please complete and send to our Data Protection Officer the “Data Subject Request Form” that can be found here.
The contact information of our Data Protection Officer is as below:
Phone Number: +357 24 841568
For further information on the GDPR, your rights or to lodge a complaint, you can contact the office of the Commissioner for the Protection of Private Data at the following address:
Office of the Commissioner for the Protection of Private Data
1 Iasonos st.
Telephone number: 22818456
Fax number: 22304565