Privacy Policy
Welcome at N. PANAGIDOU LAW OFFICE website, your privacy is important to us.
N. PANAGIDOU LAW OFFICE (“NPL”, “we”, “us” or “our”) recognises and respects the privacy of personal information.
This privacy policy sets out our way of collecting and processing of personal data when you visit our website www.npl-office.com or when you engage with us and you rights regarding the personal data we use.
Use of our website or provision of personal data to us shall mean an acknowledgement of the terms of this privacy policy. If you do not agree to any of the terms of this privacy policy do not use this website and do not send us any information.
1. Who we are
NPL is a legal practice regulated by the Cyprus Bar Association and is committed to protecting your privacy and ensuring that any personal information it collects is processed in accordance with the EU General Data Protection Regulation (the “GDPR“) and applicable Cyprus legislation.
2. Scope of this Privacy Policy
This privacy policy applies when we may receive and collect Personal Data from you, our clients or third parties in a number of circumstances, including:
- when you or the organization you are employed by contact us to seek legal advice or services from us or provide services to us or our clients.
- when you or the organization you are employed by, make an enquiry or otherwise interact with our website, our office or engage with us in any way.
- when you or your organization offer to provide or provide services to us and/or clients.
- when you apply for an employment position.
- when you or the Organisation you are employed by are a counterparty, or provide services to a counterparty, of one or more of our clients.
- as a result of your relationship with any of our clients.
In some circumstances, we collect Personal Data about you from a third party source such as business associates, delivery services etc.
3. Personal Data collection
For the purposes of this privacy policy “Personal Data” means any personal information that enables you to be identified as an individual directly or indirectly by reference to other information we may have access to such as name, address, telephone contact email etc. Collection and use of personal data is collected based on the means you interact with us, whether online though our website and contact form, through email or through personal meetings and calls or through third parties.
4. The Personal Data we collect may include
- Personal Details such as your name, maiden name, surname, job title/profession, date of birth.
- Contact information, such as postal address, including residential address, where you have provided this to us, business address, telephone number, mobile phone number, fax number and email address.
- Identification data, such as ID number and/or passport number and all such other necessary documents required to enable us to undertake compulsory anti-money laundering checks and KYC procedures prior to engagement.
- Recruitment/selection data, such as academic qualifications, CV, application form, record of interview or interview notes and/or any other assessment material.
- Billing and financial data, such as bank account number, credit/debit card details and other related billing information.
- Information collected from third parties, such as the Registrar of Companies, credit agencies, regulators if this is relevant to the services offered to you.
- Special categories of personal data (sensitive data) in connection to the provision of legal services to you, information about your health, racial or ethnic origin upon your explicit prior consent.
- Technical data, including the Internet Protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone settings and location.
- Marketing and communication data such as preferences on receiving marketing materials from us or communication preferences.
- Details of your visits to our premises.
We collect most of this information voluntarily from you however, we may also collect information:
- from publicly accessible sources, e.g. the Registrar of Companies.
- social media websites such as LinkedIn.
- from Regulators, credit agencies.
- backround check providers.
- from your employer, colleagues or third party business associates who have referred you to us, or put you in touch with us.
- from a third party with your consent, e.g. your bank or building society, insurance providers, recruitment agencies.
If you also provide us with personal information about any other person, you confirm that the said person consents to our use of his/her personal data and that you have informed him/her of ur identity and provided him/her with a copy of this privacy policy.
5. Information we collect automatically
When you visit our Website, we may collect certain information automatically through your device.
Specifically, the information we collect automatically may include information like your IP address, Internet domain names, the web browser and operating system used to access the Website, the files or pages you visit the time spent in each file or page, and the time and date of each visit. We use this information in order to improve our Website, for example to enhance pages or features that are visited frequently.
Some of this information may be collected using cookies as explained further in our “Cookies Policy”.
6. Failure to provide personal data
Failure to provide personal data requested when required under law obligations or in order to process your instructions or perform an agreement we have with you or about to enter into with you we may not be able to process your instructions or perform an agreement with you. In such an event we will have to cancel our engagement or cancel the agreement with you and we will notify you about it.
7. The basis upon which we use personal information
Although the sections above describe our primary purpose in collecting and using your personal information, in many situations we have more than one purpose. For example, if you complete the online contact us form we may collect your information to contact you regarding your request to fulfil our contractual or regulatory obligations when providing services to clients. As a result, our collection and processing of your information is based in different contexts upon your consent, our need to perform a contract, our obligations under law, and/or our legitimate interest in conducting our business.
If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us.
8. Purpose of processing personal data
We use personal information held about you in the following circumstances:
- To on-board you as a client, associate, service provider etc.
- To process and respond to requests, enquiries or complaints received from you or the organization you are employed by.
- To provide services.
- To improve our Services to you or the organisation you are employed by.
- To maintain our relationship with you.
- To fulfil our contractual obligations arising from contracts entered into between us and you or the organization you re employed by.
- To exercise or defend our legal rights or to comply with court orders.
- To protect the security of our communications and other systems and to prevent and detect security threats, frauds or other criminal or malicious activities.
- For any purpose related and/or ancillary to any of the above or any other purpose for which your Personal Data were provided to us.
- To respond to any communication received from you.
- To notify you about changes to our service.
- To ensure that content on the Website is presented effectively.
- To manage access to our premises.
- To invite you to participate to seminars, marketing and networking events.
We will provide you with marketing and related information when we have a previous contractual relationship or a business relationship or you have signed to receive our news and updates email. You have the option to opt-out at any time receiving marketing and news emails as explained in the “Right to withdraw consent” further below.
9. Disclosure of Personal Data
We may share your Personal Data with third parties in the following circumstances:
- to third parties to whom we outsource certain services, for example IT support or software support services, accounting, auditing, tax and financial consulting services, document and information storage.
- to third parties engaged in the course of services provided to clients such as advisors, arbitrators, mediators, courts, opposing parties and their lawyers, litigators banking and insurance service providers.
- to other lawyers, legal specialists, consultants or other experts duly engaged with your instructions.
- to foreign law firms or other professional experts such as tax consultants for the purpose of obtaining foreign legal advice upon your instructions.
- where we are required to do so by law, regulators or authorities or where it is necessary for the purpose of, or in connection with, legal proceedings or in order to exercise or defend legal rights.
10. Transfer of Personal Data
In the event we need to transfer your personal data to other countries while providing you with legal services, we will use, share and safeguard the information as set out in this policy and take reasonable steps t ensure that personal data is treated securely and in accordance with applicable Data Protection Laws, including by signing of a data transfer agreement governed by the Standard Contractual Clauses if such transfer is in a country outside the EEA.
11. Personal Data Security
We have implemented information security policies, rules and technical measures to protect your data and prevent any unauthorized access, improper use or disclosure, modification and/or unlawful destruction and accidental loss. We hold personal data on secure electronic or paper format with access control limited to employees, partners, associates or other third parties with access only to such data as necessary or the fulfilment of business needs.
We have also implemented procedures to handle any suspected personal data breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
12. Data Retention
We will retain your Personal Data for the period necessary to fulfil the purposes for which it was originally collected and thereafter as required or permitted by law or as is necessary to enable us to assert or defend legal claims.
We will not keep personal your data for longer than necessary for the purposes set out in this policy. If you need further information on the specific retention periods applying to your file or personal data please contact us.
13. Cookies
Our website may use cookies to collect, store, and track information for statistical and analysis purposes to facilitate the functioning of our Website and Services.
Cookies are small bits of data stored as text files on a browser making your online experience easier by saving browsing information. Websites use cookies to track users, enable user specific features and in some instances to track user activities.
You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the features of the Website.
14. Third party websites
Our website may contain links to websites owned and operated by third party websites. You are urged to review the privacy policies of such websites before any use. Such links may be displayed for information purposes only and NPL disclaims any and all liability regarding the use of such websites and the protection and privacy of your personal data when using such websites.
15. Your rights
You have the following rights under the Data Protection Law which you can exercise under certain circumstances:
- Access: the right to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Rectification: the right to verify the data we hold and request to correct inaccuracy to your Personal data.
- Erasure: the right to request us to delete your Personal Data in certain circumstances.
- Restriction of processing: the right to require us to restrict processing of your personal data in certain circumstances.
- To object: the right to object to your personal data being processed for direct marketing or, in certain other situations, to our continued processing of your personal data.
- Data Portability: The right to receive, the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data you to a third party.
- Not to be subject to automated individual decision-making: the right not to be subject to a decision based solely on automated processing. This includes profiling or any other practice which produces legal effects or otherwise significantly affects you.
If you would like to exercise any of the above rights please contact us at dpo@npl-office.com We may request additional information to identify the legitimacy of your request we shall respond within a month.
16. How and where to complain
We would appreciate an effort to resolve any concerns or complains you may have regarding our use of your Personal Data or your rights regarding this Policy before submitting a complain to the Office of the Commissioner for Personal Data Protection, the Cyprus supervisory authority for data protection issues (http://www.dataprotection.gov.cy).
17. How to contact Us
For any questions or concerns regarding this Privacy Policy or should you wish to submit a complaint to us please contact us.
N.PANAGIDOU LAW OFFICE
Email address: dpo@npl-office.com
Postal address: 20C Dodekanisou Street, 3021 Limassol, Cyprus
Telephone number: +357 25-254118
18. Updates to this Privacy Policy
We reserve the right to update and amend this Privacy Policy from time to time in order to reflect changes to the way we process your Personal Data or any updates in legal requirements. In case of any such changes, we will publish the new version of the Privacy Policy on our website. The updated version will take effect as soon as published on this website.