Privacy Notice

Last updated on   25 May 2018

At Lellos P. Demetriades Law Office LLC we are committed to ensuring your privacy and the security of your personal data. References in this notice to “LD Law”, “we”, “us” or “our” are references to Lellos P. Demetriades Law Office LLC.

Personal data is information that identifies and relates to you or other individuals. This Privacy Notice (“Notice”), explains the types of personal data we collect and process, how we collect, transfer, process and use your personal data, who we may share it with and your rights as a data subject. It also contains information about the security practices we apply in order to protect your personal data.

Please note that this Notice applies to:

  • Our prospective and current clients
  • Job applicants and interns (both full and part time) at LD Law
  • Visitors to our website

1. Who we are

Lellos P. Demetriades Law Office LLC is a Lawyers’ Limited Liability Company incorporated under the laws of the Republic of Cyprus with registration number ΗΕ 230116, which offers a wide range of legal and corporate services. For more information please visit the Company Profile section of our website.

We are responsible for your personal data as a data controller. A “data controller” is a person or organisation that alone or jointly determines the purposes for which, and the manner in which, any personal data is, or is likely to be processed.

If you have any queries or requests concerning this Notice, or how we handle your data more generally, please get in touch with us using the following details:

Address: The Chanteclair House, 2 Sophoulis Str., 9th floor, 1096 Nicosia
Telephone: (+357) 22 676060
Fax: (+357) 22 676061
Email: info@ldlaw.com.cy

2. Personal data we collect

We may collect personal from you in the course of our business, when you contact or request information from us, and when we provide our services to you. For more information regarding our services please visit the Services section of our website. In general, we will collect all necessary personal data relevant to the purposes of the collection and processing. For example, we will collect all necessary personal data in order to provide legal services to you or to proceed with the filling of any Action and/or Appeal and/or Application before the competent Courts of the Republic of Cyprus. We may collect and process the following categories personal data:
  • Contact details, including name and surname, address, telephone number and email
  • Identification information, including date of birth, passport number, ID number, and other information relevant to your identification
  • Know your client information. We collect the necessary information in order to comply with our legal and regulatory obligations under the applicable Anti Money Laundering laws, Anti-Bribery laws, FATCA and CRS, or any orders and decrees issued by the Cyprus Bar Association
  • Financial information, including bank account numbers, credit/debit card numbers, and other financial information required for receiving payments and fraud prevention
  • Business related information, information provided to us in the course of our contractual or client relationship with you and/or your organisation
  • Technical information, including information collected during your visits to our website, the Internet Protocol (IP) address, browser version and type, device type, time zone setting, browser plug-in versions and types, operating system and platform
  • Recruitment related information, including curricula vitaeeducational or professional background, job title, employment history and other information relevant to potential recruitment
  • Any other categories of personal data you may provide to us in the course of our relationship
  • Special categories of personal data (sensitive) personal data: In some instances, we may represent you and/or your organisation in legal matters where the collection and processing of special categories (sensitive) of personal data is required.
Special categories of personal data include data concerning sexual orientation or sex life, health (physical or mental), biometric or genetic data, and data revealing racial or ethnic origin, political opinions, information relating to criminal offences, religious beliefs and trade union activities. Information about other individuals In case you provide us with personal data relating to other individuals, you must ensure that the said individuals understand how their personal data will be used and processed by us. It is your responsibility to inform the said individuals about the content of this Notice and ensure that they have understood and accepted how we use their Personal Data.

3. How do we use your personal data?

We may use your personal data for the following purposes:
  • Provision and improvement of our services. We will collect and process personal data in the course of and in connection with the services we provide to our clients. For example, we will collect all necessary personal data in order to proceed with the filling of any Action and/or Appeal and/or Application before the competent Courts of the Republic of Cyprus.
  • To manage and administer our relationship with you. We may manage your payments, provide you with updates in relation to pending legal procedures where we are acting as your legal representatives, or inform you about events/seminars organised by LD Law.
  • For recruitment purposes. To assess your suitability for any position for which you may apply at LD Law. This also includes training contracts or summer internships.
  • For protecting our rights and rights of third parties and for establishing, exercising or defending our legal claims. In some cases, we may need to use your personal data to handle and resolve legal disputes.
  • Legal and regulatory obligations. To comply with our legal and regulatory obligations such as any applicable Anti Money Laundering laws, Anti-Bribery laws, FATCA and CRS, or any orders issued by the Cyprus Bar Association.
  • IT Security. To protect our website, online platforms, networks and software systems.
Physical Security. To ensure the safety of our employees and visitors at our premises. To protect our property including hardware and equipment.

4. Not providing your personal data

In case we need to collect personal data due to our legal obligations or under the terms of a contract or an agreement we have concluded with you and you fail to provide that data if we request so, we may not be able to perform our services under the said contract or agreement. In this case, we may not be able to perform our services and as a result we may have to terminate our contract or engagement with you.

5. How do we collect your personal data?

  • Directly from you: When you interact directly with our staff through email, telephone and meetings. This will mostly occur when you or the organisation you represent require our services.
 
  • Third parties: This includes other individuals or organisations, Public and Government authorities, credit reporting agencies, information service providers and publicly available records.
 
  • Our seminars and publications: When you register for a seminar or event organised by us or you subscribe to receive our publications.
 
  • Our website: During your visits to our website or social media platforms, the use of our digital platforms and/or when you provide us with your feedback.

6. Legal justifications for using your personal data

In accordance with applicable data protection laws we need a “legal justification” or “lawful basis” for the collection and process of your personal data.  The legal justifications on which we rely in order to process your personal data for the purposes set out in this Notice are the following:  
  • Compliance with our legal and regulatory obligations. In some occasions we use personal data to comply with the legal and regulatory obligations we are subject to.
 
  • Initiation, establishment, exercise or defence of in court and out of court legal claims.
 
  • Performance of a contract, agreement or instructions you give to us. We provide our services on the basis of a contract, agreement or instructions and in order to do so we need to process personal data.
 
  • Our (or third party) legitimate interests. In general, our legitimate interests will be used as a legal justification for the use of your personal data if your fundamental rights do not override the legitimate interest invoked. For example, we have a legitimate interest to apply certain measures to prevent fraud or to ensure the security of our website, online platforms, networks and software systems.
 
  • Your consent. In general, we will not use your consent as a legal justification for the collection and use of your data. In case we do use consent in the future, you will be informed accordingly and we will request your consent in a clear, precise and unequivocal manner.

7. With whom do we share your personal data?

We may, in some instances, share your personal data with certain trusted third parties which are carefully selected and required to use appropriate measures in order to ensure the protection of your personal data.   The third parties we share your personal data with include:  
  • Our professional advisors and auditors;
  • Financial institutions when this is required due to the nature of the services we provide;
  • Courts, public and law enforcement authorities, regulators, government officials or advocates and/or other parties, such as experts, where it is reasonably necessary for the establishment, exercise or defence of a legal or equitable claim, or for the purposes of a confidential alternative dispute resolution process; or
  • Our third-party service providers, such as IT support, couriers, consultants, translators in the course of the services we provide to you.

8. International Transfers of Data

In some occasions we may transfer your personal data to countries outside the European Economic Area (“EEA”). This may be due to the fact that the parties that we engage to process personal data on our behalf are based outside the EEA. Whenever we transfer your personal data out of the EEA, we ensure that an equivalent level of protection is provided to the said data by the application of appropriate safeguards such as the use of specific contracts for the transfer of data approved by the European Commission.   If you would like additional information about the mechanisms used by us when transferring your personal data out of the EEA please let us know through one of the methods set out in Section 16 of the Notice below (Contact us).

9. Personal data security

We have, in accordance with applicable data protection laws, implemented a variety of technical and organisational measures with the aim of preventing any accidental loss, unauthorised use or access, alteration or disclosure of your personal data.   Additionally, we have implemented procedures to deal with any suspected personal data breach and will notify you and the Commissioner for the Protection of Personal data in case of a breach in case we are legally required to do so.

10. Your rights

You have certain rights with respect to our use of your personal data; these rights include the right to:  
  • request a copy of your personal data held by us;
  • request the correction and/or deletion of your personal data, or to restrict or object to the processing of your personal information;
  • withdraw your consent to the processing of your personal data at any time, where we process your personal data based on your consent;
  • request to obtain and reuse your personal data in a format that is structured and commonly used. You may also request us to transmit such data to other organisations;             and/or
  • lodge a complaint to the Office of the Commissioner for the Protection of Personal Data, in cases where you believe that your data protection rights have been infringed or we have not adequately addressed one of your data rights related requests.
  If you would like exercise any of the rights contained in the section and if any of the information that we hold about you is inaccurate or out of date, please let us know by getting in touch using one of the methods set out in Section 16 of this Notice (Contact us).

11. How long do we keep your personal data for?

We will only keep your personal data for as long as it is necessary to fulfil the purpose(s) of their collection and use. We will keep your personal data for the purposes of complying with any legal, regulatory, accounting, reporting requirements, to provide our services and for the establishment or defence of our and your legal claims.   We determine the appropriate retention period for personal data, by taking into account the volume, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use, loss or disclosure of your personal data, the purposes of processing personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

12. Cookies

To enhance your experience while visiting our website, we may use “cookies”. A cookie is a unique numeric code that is transferred to your computer’s browser to track your interests and preferences and to recognise you as a return visitor.   We use cookies for different purposes:  
  • Essential Operations: these cookies are necessary to allow us to operate our website.
 
  • Performance/Analytics: they allow us to recognise and count the number of visitors and to see how visitors use our website. In this way we may improve the user experience, for example, by ensuring that users can easily find what they are looking for.
 
  • Functionality: these cookies are used in order to recognise users when they return to our website. This enables us to personalise our content for you and remember your preferences (for example, your choice of language and high visibility setting).
  A number of web browsers allow you to manage your cookie preferences. You may set your browser to refuse cookies or to delete certain cookies. Please note that certain features of our websites will not be available if cookies are disabled.

13. Links to other websites

Our website may from time to time contain links to third party websites which are outside our control and are not covered by this Notice. Please ensure that you have checked the privacy notices or policies posted on each of these websites you access before providing any personal data.

14. Updating personal data about you

If any of the personal data you have provided to us change, for example if you change your email address, or if you become aware that any of the personal data we hold about you is inaccurate, please let us know by using one of the methods set out in Section 16 of this Notice (Contact us). We will not be responsible for any loss arising from any inaccurate, inauthentic, deficient or incomplete personal data that you provide to us.

15. Changes to our Privacy Notice

We reserve the right to update and change this Notice from time to time in order to reflect any changes to the way in which we process your personal data or changing legal and technological requirements. Any changes we may make to our Notice in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our Notice.

16. Contact us

In case you have any questions, comments and requests regarding the content of this  Notice, your rights in relation to data,  or how we use your personal data, please contact us by email at info@ldlaw.com.cy  or by post at:

The Chanteclair House
2 Sophoulis Str., 9th floor
1096 Nicosia