At ETET TRADING COMAPNY LTD (hereinafter “we”, “us” or “our”) the protection of your personal data is a top priority. Keeping your data secure and private is part of our philosophy for delivering high standards of services.
The new European Union (EU) Data Protection Law, the General Data Protection Regulation ("GDPR"), comes into effect on 25th of May 2018. The GDPR (EU) 2016/679 gives individuals in the EU more control over how their data is used and places certain obligations on businesses that process the information of those individuals.
ETET TRADING COMPANY LTD, a Cyprus private limited liability company, having registration number HE 289906, is the "Data Controller” pursuant to the GDPR, and related Cyprus Law, and determines how your personal data is kept and processed.
The main establishment and the central administration of the Data Controller is situated at Arch. Makariou III 40, Raptopoullos Building, 3021, Limassol, Cyprus.
The DPO/ Responsible Person for GDPR may be contacted directly with regards to all matters concerning this policy and the processing of your personal data including the enforcement of all applicable and available rights.
Official requests may be made by post at Arch. Makariou III 40, Raptopoullos Building, 3021, Limassol, Cyprus, or electronically at .
We collect and process different types of personal data which we receive from our clients in person or via our online website.
We do not collect any cookies.
We collect and use several types of information the individuals we co-operate with, including information by which you may be personally identified and that is defined as personal data under applicable law such as your first and last name, address, contact details (telephone, email).
Should there be a need to further process the personal data for a purpose other than that for which they were initially collected, you will be informed in advance about the additional purpose and the relevant details in respect to the further processing.
With your explicit consent we may collect special categories of personal data. Pursuant to the definition given by the GDPR, these data may include racial or ethnic origin, political opinions, religious or philosophical beliefs, health data, trade union membership, the processing of genetic data, biometric data, data concerning health, sex life or sexual orientation and criminal records.
In order to proceed with a business relationship our clients must provide their personal data to us which are necessary for the required commencement, execution and continuation of a business relationship. This is a requirement under the relevant Anti-Money Laundering Law and the regulations of our Regulator (ICPAC- Institute of Certified Public Accountants Cyprus).
Failure to provide us with personal data prevents us from commencing or continuing a business relationship with the clients.
In accordance with GDPR we may rely on the following lawful reasons when we collect and process personal data to operate our business and provide our services:
We aspire to be transparent when we collect and use personal data and tell you why we need it, which typically includes:
In the course of our business relationship our clients’ personal data may be provided to various departments within our Company.
Furthermore, the following third parties may also be the recipients of the personal data under the certain circumstances:
- Server providers
- Company accountants
- Courier companies
Third parties to whom we may disclose Personal Data may have their own privacy policies which describe how they use and protect Personal Data. If you want to learn more about their privacy practices, we encourage you to visit the websites of those third parties.
We have put in place appropriate technical and organizational measures including physical, electronic and procedural measures to protect personal data from loss, misuse, alteration or destruction. We restrict access to information at our offices so that only officers and/or employees who need to know the information have access to it. Those individuals who have access to the data are required to maintain the confidentiality of such information. In addition, we have trained our employees on how to handle, manage and process personal data, applied upgraded technical measures and transformed our policies and procedures in a way that will comply with the GDPR.
Please be aware that the transmission of data via the Internet is not completely secure. Users should also take care with how they handle and disclose their personal data and should avoid sending personal data through insecure email.
We will keep our clients’ personal data for as long as we have a business relationship.
Once our business relationship has ended, we will hold your personal data on our systems for the longest of the following periods:
a) any retention period that is required by law or professional standards;
b) the end of the period in which litigation or investigations might arise in respect of the services or
c) as directed by our own internal retention policies or practices, the length of which may vary depending on the nature of the information that is held.
The personal data processed for the purposes of sending newsletters shall be kept with us until you notify us that you no longer wish your personal data to be used for this purpose.
Subject to the provisions of the GDPR, you have certain rights regarding the Personal Data we collect, process or disclose and that is related to you, including the right:
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information or to exercise any of your other rights. This helps us to ensure that personal data is not disclosed to any person who has no right to receive it. No fee is required to make a request unless your request is clearly unfounded or excessive. Depending on the circumstances, we may be unable to comply with your request based on other lawful grounds.
To exercise any of the above rights, or for any questions or complaints about our use of your personal data, please contact our Data Protection Officer/ Responsible Person for GDPR, either by post at Arch. Makariou III 40, Raptopoullos Building, 3021, Limassol, Cyprus, or electronically at.
Complaints may also be lodged to the supervisory authority in Cyprus (Office of the Commissioner for Personal Data Protection, by post at 1 Iasonos Str. 1082, Nicosia, Cyprus. More information can be found at .