PRIVACY STATEMENT AND POLICY – GDPR

The Cyprus VAT Association (“CYVA”) (the “Controller”) strives to ensure the protection of your personal information through responsible practices.

This privacy statement and policy is given in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (the “GDPR”) on the protection of natural persons with regards to the processing of personal data and the free movement of such data, the Processing of Personal Data (Protection of Individuals) Law of 2001 (as amended from time to time) as well as any applicable laws in Cyprus.

(Reference to “us”, “we” or “CYVA” is a reference to the Cyprus VAT Association and references to “you” means any person or entity dealing with us in any capacity whatsoever).

We deploy all efforts to protect and respect the privacy of your personal information. We feel that it is important that you understand how and why we collect and use this information. This policy summarizes our personal data collection practices. We urge you to regularly refer to this Privacy Statement and Policy as it may be amended from time to time without any prior notification.

“Personal data” is defined as:

any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

“Processing” means:

any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

“Controller” means:

the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

We, being the Controller, collect your Personal Data, by receiving the completed form online through our website or by email. No information is collected automatically.

Unless it is necessary for a reason allowable in the GDPR, CYVA will always obtain explicit consent from a Data Subject to collect and process their Personal Data.

Your Personal Data will be collected for the purposes of existence and the objects of operation of CYVA, including but not limited for the following purposes:

• To forward to you information and updates in relation to the activities of CYVA (including but not limited to upcoming events, seminars, conferences etc.);
• To communicate with you in relation to any legislative changes or proposed legislations relating to VAT;
• To identify you as a member of CYVA.

Your Personal Data will not be shared with any third parties and we do not intend to transfer your Personal Data to any third countries.

The information collected might, at a later time, allow us to add customized elements to our website or to plan its content more appropriately, based on user interests.

At all times, the sender of an email prepared by CYVA is easily identifiable and reachable, via email or phone.

We will not, under any circumstances, share your personal data with other individuals or organisations without your permission, including private and public organisations, corporations or individuals, except when applicable laws require us to do so. We do not sell, communicate or divulge your information to any mailing lists.

We may be obliged to disclose your Personal Data if this is required and if we are ordered to do so by a Court of law or any regulatory body or law enforcement agency or to any such person to whom such information may have to be given in any part of the world pursuant to any applicable laws or regulations.

We use a component of your browser named a cookie to recognise your computer. Cookies are small data files that are saved on your hard drive when you visit websites. These files make browsing websites faster and easier.

We do not and cannot use cookies to retrieve your Personal Data from your computer. The information collected is used for statistical purposes, among others to compute the number of visitors and find out which pages are the most visited.

If you configure your browser to warn you before accepting cookies, a prompt will pop-up each time a site asks for permission to save a cookie on your computer. You can refuse cookies by configuring your browser to reject them.

We store your Personal Data ourselves. In addition, we use and apply the appropriate security measures to preserve the confidentiality of your information.

Your Personal Data shall be safely and securely retained for as long as we have your consent to do so. We may retain your Personal Data for a longer period if we consider this necessary in order to comply with the applicable laws. We take reasonable measures to protect your Personal Data from unauthorized access or misuse; however, we cannot guarantee or warrant its security, as the transmission of data through the internet is never absolutely secure.

CYVA notably uses software to monitor traffic on its network in order to detect unauthorised attempts to download or change information, or to otherwise damage the site. This software receives and records the IP address of the computer used by the person visiting our website, the date and time of the visit and the pages viewed. We do not attempt to make the connection between these addresses and the identities of the individuals who visit our site, unless an intrusion or disruption attempt is detected.

1. Right of access: you have the right of access and modification of your data;

 

2. Right of rectifications and erasure: you have the right to request the rectification of your data in case these are inaccurate as well as the right to request the erasure of such personal data (the right to be forgotten);

 

3. Right to object to or restrict the processing of personal data; this means that your Personal Data will be kept for the purposes of being identified as a member of CYVA but you have the right to object to receiving any information by telephone, email or otherwise in relation to the activities of CYVA. If you choose to exercise this right, you may still be contacted by CYVA for purposes relating to settlement of your subscription fee.

 

4. Right to data portability: you have the right to receive the personal data collected from CYVA in a structured, commonly used and machine-readable format as well as the right to request the transmission of those data to another controller;

 

5. The right to object to automated decision-making, including profiling: you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you;

 

6. The right to lodge a complaint with a supervisory authority: you have the right to submit a complaint with the supervisory authority in the particular Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your Personal Data infringes the provisions of the GDPR and/or applicable legislation;

 

7. The right to withdraw your consent: where the processing is based on your consent, you shall have the right to withdraw your consent at any time by contacting us at [email protected]. If you withdraw your consent for your Personal Data to be used for the above-mentioned purposes, we will process your request for such withdraw of consent and will thereafter cease to use your Personal Data and proceed with the erasure of your personal data within 30 (thirty) calendar days, unless this Personal Data information is necessary for complying with other legal obligations under European and national law. Your rights may be discussed with and/or exercised by contacting our appointed data protection officer who is the person responsible to address any issues related to personal data at [email protected] or by telephone at +357 22 558888.

CYPRUS VAT ASSOCIATION (CYVA)
12 Egypt Street, 1097 Nicosia, Cyprus
Telephone: +357 22 558888
Fax: +357 22 751474
Email: [email protected]

If, for any reason, you believe that CYVA violates the rights connected to your Personal Data information, you have the right to complaint to the Cyprus Commissioner of the Personal Data Protection at [email protected]

We reserve the right to amend this privacy statement and policy from time to time.