Privacy Policy

Last updated: November 2024

1. General Information

Eleftheriou & Eleftheriou LLC ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, and protect your personal data, in compliance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), as well as any other applicable local regulations. We aim to be fully transparent about the data we collect, why we collect it, how it is used, and your rights in relation to it.

This Privacy Policy applies to personal data collected via our website at www.eleftherioulaw.com (the "Website") and any data you voluntarily provide to us by phone, email, post, or in person. For a detailed version of our privacy and data protection practices, please contact us at info@eleftherioulaw.com.

2. Data Controller Information

Eleftheriou & Eleftheriou LLC, a law firm established under the laws of the Republic of Cyprus, acts as the data controller for personal data collected via this Website and through our interactions with clients and prospective clients. Our offices are located at [Insert Address Here], and we are regulated by the Cyprus Bar Association.

3. Types of Personal Data We Collect

We may collect and process different types of personal data depending on our relationship with you:

Contact Information: Name, postal address, email address, and phone number.
Identification Data: ID or passport number, nationality, date of birth, and in certain cases, data related to criminal convictions or background checks.
Employment Information: CV, employment history, educational qualifications, and any other data required for job applications.
Technical Data: IP address, browser type, access times, and details of your interaction with our Website.
Financial Data: Bank account details or other payment-related information if relevant.
Other Data: Any additional information you provide to us voluntarily, whether directly or through other parties involved in delivering our services, such as your representatives, affiliates, or business associates.

Please note that our client base typically consists of legal entities; however, in fulfilling our legal and contractual obligations, we may process personal data relating to individuals associated with our clients (e.g., shareholders, directors, employees, agents, and advisors).

4. Purpose of Data Collection and Processing

We collect and process personal data for the following purposes:

Provision of Legal Services: To assess and fulfill client requests, including legal consultation, representation, and transaction support.
Compliance with Legal Obligations: To meet anti-money laundering (AML) and other regulatory requirements.
Employment and Human Resources: For managing employment relationships, recruitment, equal opportunity assessment, and employee performance evaluation.
Website Operation and Communication: To enhance and personalize your experience on our Website, and to send you newsletters or legal updates if you subscribe.
Protection of Legal Interests: For the protection and enforcement of our rights and interests, including during any business restructuring or merger.
Other Legitimate Business Purposes: For internal administrative, operational, and reporting purposes.

5. Legal Basis for Processing Your Personal Data

We process your data based on one or more of the following legal bases:

Contractual Necessity: To fulfill our contractual obligations with you or your organization.
Legal Compliance: To comply with regulatory obligations, particularly in areas such as anti-money laundering.
Legitimate Interests: To pursue our legitimate business interests, balanced against your rights and freedoms.
Consent: Where you have explicitly provided your consent (e.g., subscribing to our newsletter). You have the right to withdraw your consent at any time.

6. Data Security and Storage

We implement strict security measures to protect personal data against unauthorized access, alteration, or destruction. Data is stored securely on servers located within the European Economic Area (EEA) and protected by physical, technical, and administrative safeguards. Our data storage is regularly reviewed and updated to ensure compliance with industry standards.

If any personal data is stored in physical form, it is secured in a designated location within our offices, where only authorized personnel have access.

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined above or as required by law. Retention periods may vary depending on the type of data and legal obligations. For example:

Client and Case Data: Retained for a minimum of six years after the conclusion of our engagement.
Employment Data: Retained for the period required by employment law and internal HR policies.
Job Applications: Retained for one year unless you request deletion or provide consent for longer retention.
Website Data: Retained until you withdraw your consent or unsubscribe from our services.

8. Sharing of Personal Data

We do not share your personal data with third parties without your consent, except in the following circumstances:

Service Providers: We may engage third-party service providers for IT support, data storage, recruitment, and other operational needs.
Legal Compliance: We may disclose your data to comply with legal obligations or respond to requests from regulatory or government authorities.
Professional Collaborations: We may share data with affiliated lawyers, experts, auditors, accountants, or other specialists involved in providing services on your behalf.
Business Transfers: If we undergo a merger, acquisition, or restructuring, personal data may be transferred as part of the transaction, with adequate protection in place.

9. Cross-Border Data Transfers

While we strive to process personal data within the EEA, certain service providers may be located outside the EEA. In such cases, we ensure appropriate safeguards are in place, including standard contractual clauses or other lawful transfer mechanisms as required by GDPR.

10. Your Rights

Under applicable data protection laws, you have the following rights:

Access: Request details of the data we hold about you and how it is processed.
Rectification: Correct inaccurate personal data.
Erasure: Request deletion of your data under certain conditions.
Data Portability: Request transfer of your data in a structured, machine-readable format.
Restriction: Request restriction of processing under specific circumstances.
Objection: Object to data processing based on legitimate interests.
Withdraw Consent: Withdraw consent for processing where applicable.
Complaint: Lodge a complaint with the Office of the Data Protection Commissioner if you believe your rights are violated.

Please contact us at info@eleftherioulaw.com to exercise any of these rights. We may require proof of identity to process your request.

11. Data Breach Response

In the event of a data breach, we will promptly assess and mitigate any risks to your personal data. Any breach posing a risk to individual rights and freedoms will be reported to the Office of the Data Protection Commissioner within 72 hours. If there is a high risk to your rights, we will also notify you directly.

12. Cookies and Tracking

Our Website uses cookies and similar tracking technologies to enhance your experience and collect data about how you interact with the Website. For more information on cookies, please refer to our Cookie Policy.

13. Links to Other Websites

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of these sites. Please review the privacy policies of any external sites you visit.

14. Updates to this Privacy Policy

We may update this Privacy Policy periodically. Any updates will be posted on this page, and significant changes will be communicated to you directly where possible. Please review this policy regularly to stay informed about our data practices.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Eleftheriou & Eleftheriou LLC

86 Agias Fylaxeos,

R.L.G. Georgiades Building,

2nd Floor, Office 201

3025 Limassol, Cyprus

P.O. Box: 51990, 3509 Limassol

Email: info@eleftherioulaw.com
Telephone: +357 25 322322

Fax: +357 25 322320