A. Rationale and purposes of processing
When using our website to contact us, we allow visitors to register their personal details with us, specifically their full name, and email address. This is allowable irrespective if such visitors are acting in their personal capacity, or as representatives of legal persons. The data provided for the registration process, must be valid and correct when they are declared to us, as they form a critical part of the mechanisms and functionality which supports the purposes of processing described in the next paragraph.
This process is designed to allow users who want to contact Laiko Group for any reason to personalize their preferences regarding their use of functionality and information offered by us through the website. Such personalization may include users declaring to us their consent for specific purposes, for example to receive Laiko Group newsletters. It may also include allowing users to contact Laiko Cosmos in relation to inquiries they may have. Finally, the website allows the submission of CVs, in relation to potential employment opportunities with Laiko Group.
B. Retention period
The personal data we process as a result of the specific website-operated workflows are retained until either you withdraw your consent for the processing or until the expiration of the defined retention periods, whichever is earliest. At that point, the respective personal data shall be deleted and / or destroyed from our systems (in electronic and physical form respectively) unless you decide to provide us with a new consent for processing your personal data. The applicable retention periods are shown below:
C. Intended Recipients
The personal data you share with us, may be accessed by authorized Laiko Group personnel who have a valid business need for such access. Where necessary, your personal data shall also be accessible by carefully selected and authorized partners and collaborators such as, external or internal auditors, IT service providers, marketing and communications service providers and other 3rd party providers with a valid operational need for such access.
D. Privacy Protection Measures
Your right to privacy and the protection of your personal data is very important to us. Therefore, although in the technologically advanced age we live, no one can guarantee that such data will never be accessed by unauthorized personnel or misused, we inform you that we use appropriate technical and organizational means designed to protect the confidentiality, integrity and availability of your data. Such measures include a number of specialized tools and technologies for network and information security, targeted implementation and compliance procedures which are consistent with GDPR, restrictions and limits even to authorized members of our team when accessing your personal data, and other equally important protection and security measures. More details over the technical and organisational measures we employ can be found at http://laiko-group.com/wp-content/uploads/2020/03/20-02-27_Laiko_Privacy-Policy_EN.pdf
E. Data Subjects’ Rights under GDPR
Under GDPR, you have certain rights in relation to your personal data. Specifically, you have the right to request access to any of your personal data we hold, store and / or process, the right to request such personal data’s amendment or correction, the right to object to certain types of processing (including automated processing), the right to withdraw a previously provided consent (without however affecting the processing before the date of such withdrawal), the right to request from us to provide your personal data to you in an easily accessible form, and under specific circumstances the right to request that we completely delete your personal data.
In relation to the latter right, this is subject to our legal, regulatory and professional obligations and may not be executed so long as a valid legal basis of continuing the processing exists. Even where the right to deletion is accepted, please be advised that we reserve to retain certain anonymised data for various operational and / or statistical purposes. Such data however, shall not be identified or connected to you.
F. DPO Contact Details
To exercise any of the above rights, please send an email with your request to DPO@laiko.com.cy . You may also send queries or inform us of any concerns regarding your personal data, by contacting our Data Protection Officer at the email address above. If despite our responses and actions to address your concerns, you are not satisfied, you have the right to address the matter to the Data Protection Commissioner whose offices are at Iasonos 1, 1082 Nicosia, Cyprus. The Commissioner’s office can be reached on +357 22818456, their email address is commissioner@dataprotection.gov.cy and their website is http://www.dataprotection.gov.cy
