- Who we are
Nicos M. Elia LLC (“NME”) is a licensed law firm registered in Cyprus under registration number HE 261804 having its registered office at Kennedy 45, IRIS BUILDING, Floor 6, Flat 28, 1076 Nicosia, Cyprus.
If you have any questions regarding how we use your personal data, you can contact us at email@example.com or call us at 22517771.
- What personal data we process and where we collect it from
We collect and process different types of personal data such us name, middle name, surname, telephone number, address, email, identification data, ID or passport, birth date, employment status, source of income, source of assets, bank account details.
We collect personal data by data subjects directly or their representative or our alternative channels of communication such our website.
We may also collect and process personal data which we lawfully obtain from third parties such us public authorities, persons that introduce you to us, etc.
We may also collect and process personal data from publicly available sources such us the Department of Registrar of Companies and Official Receiver, the Land Registry, commercial registers, the press, media and the Internet, which we lawfully obtain and we are permitted to process.
- The purposes of the processing
We process personal data in order to be able to proceed with a business relationship with you or another person (for example, a legal entity for which you are the authorized representative / agent or beneficial owner) and to be able to provide our services to you.
We are furthermore obliged to collect and process personal data in order to comply with money laundering law.
- The legal basis for the processing
We collect and process personal data for one or more of the following reasons:
- To perform a contract
We process personal data in order to provide our services based on contracts with our clients or others but also to be able to enter into a contract with prospective clients or others.
- To comply with a legal obligation
We process personal data to comply with our professional duties and legal obligations emanating from the anti-money laundering law.
- To safeguard legitimate interests
We process personal data to safeguard the legitimate interests pursued by us or by a third party. Examples of such processing activities include:
- Debt collection
- Initiating legal claims and preparing our defence in litigation procedures
- Maintaining an internal client registry
- To manage business and for further developing of services
- In the context of the operation and security of the company
- If consent is provided
We may process personal data if you have given us your consent to do so. You have the right to revoke your consent at any time. Any processing of personal data prior to the receipt of your revocation will not be affected.
- Who receives your personal data
In the course of the performance of our contractual and statutory obligations your personal data may be provided to various employees of NME as well as associates of NME such us external associate lawyers, accountants, auditors, etc.
Furthermore, recipients of personal data may be supervisory and other regulatory authorities as well as public authorities.
We also note that we may disclose your personal data for any of the reasons set out hereinabove, or if we are legally required to do so, or if we are authorized under our contractual and statutory obligations or if you have given your consent.
- Whether you have an obligation to provide us with your personal data
In order to be able to start or maintain a business relationship with you or another relevant person (for example, a legal entity for which you are the authorized representative / agent or beneficial owner), you must provide your personal data to us which are necessary for the performance of our contractual obligations.
We are furthermore obligated to collect such personal data in order to comply with the money laundering law.
Please note that if you do not provide us with the required data, we will not be able to start or maintain a business relationship with you or any other relevant person.
- Transfer of your personal data to a third country or to an international organisation
Your personal data may be transferred to third countries, namely countries outside of the European Economic Area, if such data transfer is required by law (i.e. reporting obligation under law) or if you have given us your consent to do so. Processors in third countries are obligated to comply with the European data protection standards and to provide appropriate safeguards in relation to the transfer of your personal data.
- How long we keep your personal information for
We will keep your personal data for as long as we maintain a business relationship with you or another person (for example, a legal entity for which you are the authorized representative / agent or beneficial owner).
Once our business relationship with you or that other person comes to an end, we may keep your data for up to ten years.
We may keep your data for longer than 10 years if we cannot erase it due to legal, regulatory or technical reasons.
If you are a prospective client or prospective employee, we shall keep your personal data for six months.
- Automated decision-making and profiling
We do not use any automated decision-making or profiling.
- Your data protection rights
- Right of access
You have the right to have access to your personal data and be informed as to whether or not your personal data is being processed. You have the right to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Right to rectification
You have the right to have any incomplete or inaccurate data we hold about you corrected.
- Right to erasure
You have the right to require us to erase your personal data where there is no good reason for us to continue to process it. However, we reserve the right to deny the erasure, if the processing of personal data is necessary for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
- Right to data portability
You have the right to receive your personal data, in a structured and commonly used and you have the right to transfer this data to a third party under certain circumstances.
- Right to object to processing
Where we are relying on a legitimate interest, you have the right to object to processing. If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.
- Right to restricting of processing
You have the right to ask us to restrict the processing of your personal data, namely to use it only for certain things, if it is not accurate, it has been used unlawfully but you do not wish for us to delete it, it is not relevant any more, but you want us to keep it for use in possible legal claims, or you have already asked us to stop using your personal data, but you are waiting us to confirm if we have legitimate grounds to process your data.
- Right to withdraw consent
You have the right to revoke your consent at any time. The lawfulness of any processing of personal data prior to the receipt of your revocation will not be affected.
To exercise any of your rights, or if you have any other questions about our use of your personal data, please contact us at firstname.lastname@example.org or call us at 22517771.
- Your right to lodge a complaint
If you have exercised any or all of your data protection rights and still feel that your concerns about how we use your personal data have not been adequately addressed by us, you have the right to complain to the Office of the Commissioner for Personal Data Protection.
You may visit their website to make find out how to submit such complaint (http://www.dataprotection.gov.cy).
- Changes to this privacy statement
We may modify or amend this privacy notice from time to time.
We will reasonably endeavour to notify you when we make changes to this privacy notice and we will amend the revision date at the bottom of this page. We do however encourage you to review this statement periodically in order to always be informed about how we are processing your personal data.