2. HOW WE SHARE YOUR DATAWe share your data only in limited cases with the following recipients:
- affiliates and other companies of our group to efficiently perform our business activities,
- SaaS, hosting service providers for the use of SaaS software and hosting our IT systems we employ to process your data,
- new business owner if we ever sell our business, governmental agencies, courts if required by any law order,
- professional advisors, such as lawyers, bankers, auditors, and insurers, where necessary in the course of the professional services that they render to us.
Our Services may contain links to sites operated by third parties. We are not responsible for your data when you access these links or engage with third party services, and you should ensure you review the relevant third party's privacy statement which will govern your data privacy rights.
3. HOW WE TRANSFER DATA OUTSIDE OF THE EEAWe do our best to keep your data inside the EEA area. With that, some processes require use of foreign service providers to be efficient.
The countries to which we transfer your data not always have the same data protection laws as your jurisdiction. We take reasonable measures to ensure your data is adequately protected when outside of the EEA, for example, we sign Standard Contractual Clauses (SCC) adopted by the European Commission with our providers and other recipients in third countries, assess the risks of the international data transfers to adopt additional security measures, etc.
You may also obtain a copy of relevant SCCs by contacting us, as specified in Section 6 (Contacts).
4. WHAT ARE YOUR RIGHTSUnder the GDPR you have certain legal rights, which are briefly summarised below, in relation to any personal data about you which we hold:
Accessing dataYou have the right to ask us to provide information on how we process your data. As well you can request copies of your personal data we hold about you.
Data portability You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
Changing or updating dataYou have the right ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Deleting data You have the right to ask us to delete or remove your data in certain circumstances. For instance, if you withdraw consent and believe that is no good reason for us continuing to process it. In some cases, we may be required to continue storing data for regulatory purposes even though you require us to delete it. Should this be the case, we will provide you with further information.
Objecting, restricting processing You have the right to request that we stop using all or some of your personal data, or that we limit (restrict) our use of their data. This includes objecting to use of personal data that is based on legitimate interests. If we process your personal data for direct marketing purposes, we will stop such processing without any exceptions after we receive such a request from you. But, in other cases we may continue to process data after such objection or request to the extent required or permitted by law.
Revoking consentYou have the right to withdraw your consent at any time after which we will stop any processing of your data for such purposes. Specifically, you can withdraw your consent to direct marketing by following the “unsubscribe” link or contacting us in accordance with Section 6 (Contacts) below.
Complaints If you believe we have violated your rights you may lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus) via their
website. Nevertheless, we kindly ask to contact us first to see if we can resolve your issue amicably.
If you would like to exercise the rights above, please contact us, as specified in Section 6 (Contacts). We will aim to respond to you within 1 month. In some cases, we may need to ask for additional information before we are able to disclose any data to you.
5. THE SAFETY AND SECURITY OF DATANo IT system or online communication 100% safe. But we do our best to ensure security of your personal data. We take technical, organisational and legal measures, including, where suitable, encryption, to ensure that your personal data are protected from unauthorised or accidental access, deletion, modification, blocking, copying and dissemination.
Access to your account is authorised using your login (e-mail address) and password. You are responsible for keeping the credentials confidential. If you suspect any misuse or loss of, or unauthorised access to your data, you should let us know immediately.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
6.CONTACTSIf you have any questions regarding this Policy or how we process your personal data, please contact us:
- by email: legal@hwgroupcy.com, or
- by mail: Andrea Miaouli, 52, Flat/Office 101, Lakatamia, 2320, Nicosia, Cyprus (HW Group (Cyprus) Ltd.)
Please, specify your name and other information necessary for full and complete consideration of your request.
Last update: 2024/03/01