PRIVACY POLICY
I. E. Athletic Tourism (CYPRUS) LTD is determined to ensure the accuracy, confidentiality and security of the personal data the company processes on you. This data protection policy is intended to inform you about which personal data the company collects, how I. E. Athletic Tourism (CYPRUS) LTD uses the data and who has access to the data.
This data protection policy applies to the personal data of I. E. Athletic Tourism (CYPRUS) LTD’s customers. This policy will refer to I. E. Athletic Tourism (CYPRUS) LTD as we or us and to customers as you.
If you are in any doubt about how this policy apply to you, please contact hello@cyprusathletictourism.com for further information.
1.Purpose and legality
I. E. Athletic Tourism (CYPRUS) LTD endeavours to meet the requirements of all applicable data protection legislation and this policy is based on the Cypriot Act no. 2016/679 on the protection of privacy as regards the processing of personal data (“Data Protection Legislation”), as amended.
2.What is personal data?
Personal data within the meaning of this policy is information about an identified or an identifiable person, i.e., information that can be directly or indirectly linked to a particular person. Data that is unidentifiable or anonymous is not considered to be personal data.
3.Personal data that I. E. Athletic Tourism (CYPRUS) LTD collects and processes
In connection with our communication and collaboration with you, we may collect personal data about you. Different personal data may be collected on different parties and the processing and collection of personal data may depend on your relationship with us.
Our customers are mainly individuals, but they may also be legal persons. When customers are legal persons they have representatives and employees whose personal data we may process. The personal data is primarily contact information, e.g., name, email address, job title and phone number.
Regarding our communication with you we may need to process a variety of personal data e.g.:
- contact information e.g: name, address, phone number and email address;
- interests;
- travel period;
- information on the purpose of the trip and special wishes for the trip;
- information regarding the combination of the travel group;
- health and religion information;
- country of residence;
- IP number, when needed; and
- billing information.
In addition to the aforementioned information, I. E. Athletic Tourism (CYPRUS) LTD may collect and process other data that you provide to the company, e.g., photographs, as well as data that is essential for the company’s business.
In general, I. E. Athletic Tourism (CYPRUS) LTD obtains the personal data directly from you. If data is obtained from a third party the company will endeavor to inform you.
4.Why do we collect and process personal data and on what grounds?
The processing of personal data about you is mainly based on our agreement with you, or the party which you work for. This includes contact information so we can contact you and send invoices.
Personal data may also be processed based on your request to enter into an agreement. This includes data on interests, travel period, information on the purpose of the trip and special wishes for the trip.
Sensitive personal data will only be processed based on your explicit consent. Such data is only collected when deemed necessary.
In addition, personal data may be processed on the ground of our legitimate interests, e.g., when your email address is used to send customer surveys and, as appropriate, direct marketing.
If you do not provide I. E. Athletic Tourism (CYPRUS) LTD the necessary information the company may not be able to enter into an agreement with you, or the legal person you represent, for the requested service and/or the company may be unable to fulfil its obligations on the basis of the agreement.
If the collection and processing is based on your consent, you can always withdraw the consent. All communications relating to such withdrawal or changes to the consent shall be directed to hello@cyprusathletictourism.com
I. E. Athletic Tourism (CYPRUS) LTD undertakes to ensure that all processing of personal data is lawful, fair and transparent. Data will only be collected for a specific, explicit and legitimate purpose and collecting and processing will not go beyond what is necessary for the purpose of the processing. The processing shall always be adequate, relevant and limited to what is necessary for the purpose for which they are processed.
5.Disclosure to third parties
I. E. Athletic Tourism (CYPRUS) LTD may disclose your personal data to contractors, consultants and suppliers in relation to their work for the company. Therefore, personal data may for example be disclosed to external parties that provide us with IT services, but also to service providers of trips that we book on your behalf.
Third parties who provide us with service as described above could be located outside of Cyprus. I. E. Athletic Tourism (CYPRUS) LTD will not disclose data to parties located outside of the European Economic Area unless such transfer is permitted according to appropriate data protection legislation. I. E. Athletic Tourism (CYPRUS) LTD endeavors to inform you about any disclosure of personal data to countries outside of the European Economic Area, but I. E. Athletic Tourism (CYPRUS) LTD can provide further information. Finally, your personal data may be disclosed to the extent permitted or required by applicable legislation or regulations or to respond to legal actions such as search of premises, subpoenas or court rulings. Disclosure may also be necessary in emergency situations to ensure the safety of the employees of I. E. Athletic Tourism (CYPRUS) LTD or third parties.
6.How is the safety of personal data secured?
I. E. Athletic Tourism (CYPRUS) LTD endeavors to take appropriate technical and organizational measures to protect the safety of your personal data, with special regard to the nature of the data. For example, I. E. Athletic Tourism (CYPRUS) LTD has access controls to systems which store data about you. These measures are meant to secure personal data against accidental destruction or alteration and against unauthorized access, duplication, use or disclosure of the personal data.
7.Retention of personal data
I. E. Athletic Tourism (CYPRUS) LTD will endeavor to retain your personal data only for as long as necessary for the purpose of the processing, unless otherwise permitted or obligated by law.
The retention time of personal data is further determined in I. E. Athletic Tourism (CYPRUS) LTD Data Retention Policy (see below).
8.Your rights regarding the company’s processing
You are entitled to request access to the personal data we process on you and information on the processing. You may also be entitled to a copy of the personal data undergoing processing.
Under certain circumstances you may have the right to request that we erase personal data concerning you without undue delay. You may also have the right to obtain from us the restriction of processing, where certain requirements are fulfilled. You are also entitled to request rectification of inaccurate data on you. It is therefore important that if your personal data happens to change during the course of your relationship with I. E. Athletic Tourism (CYPRUS) LTD, that you keep us informed of such changes.
You may furthermore be entitled to a copy of the personal data that you have provided to us in electronic form, or request that we transmit them direct to a third party.
When we process your personal data based on legitimate interests you are at any time authorized to object to the processing.
The aforementioned rights are however not without limitation. Laws and regulations may authorize or oblige the company to deny your request. However, your right to object the processing of your personal data for direct marketing purposes is unconditional.
9.Inquiries and complaints to the data protection authority
If you wish to exercise your rights according to Clause 8 of this policy, or if you have any questions regarding this data protection policy or how we process your personal data, please contact hello@cyprusathletictourism.com who will seek to answer any inquiries you may have and instruct you on your rights pursuant to this policy.
If you are not satisfied with the company’s processing of your personal data you can send a complaint to The Data Protection Authority (http://www.dataprotection.gov.cy).
10.Communication with the company
Within I. E. Athletic Tourism (CYPRUS) LTD the Quality & IT department is responsible for the enforcement of this data protection policy. Below you can find the contact information:
hello@cyprusathletictourism.com
The company’s contact information:
I.E. Athletic Tourism (CYPRUS) LTD
7, Rigenis Street 8200, Geroskipou, Paphos, Cyprus
11.Review
I. E. Athletic Tourism (CYPRUS) LTD reserves the right to review this policy in accordance with changes to applicable legislation or regulations or in relation to changes in the company’s processing of personal data. You will be notified of any changes made to this policy with an updated version, in the same manner that this policy was presented to you.
Any amendments that may be made to the policy will take effect after the updated version has been presented to you.
This data protection policy was made on 7th of January 2023.
Learn more about I. E. Athletic Tourism (CYPRUS) LTD Cookie Policy here.
I. E. Athletic Tourism (CYPRUS) LTD’S DATA RETENTION POLICY
i. E. Athletic Tourism (CYPRUS) LTD is determined to ensure the accuracy, confidentiality and security of the personal data the company processes on you. This retention policy is intended to inform you about the retention time of the personal data the company processes on you.
This data retention policy applies to the personal data of I. E. Athletic Tourism (CYPRUS) LTD’s customers. This policy will refer to I. E. Athletic Tourism (CYPRUS) LTD as we or us and to customers as you.
If you are in any doubt about how this policy applies to you, please contact hello@cyprusathletictourism.com for further information.
Communication with the company
Within I. E. Athletic Tourism (CYPRUS) LTD, the Quality & IT department is responsible for the enforcement of this data retention policy. Below you can find the contact information:
hello@cyprusathletictourism.com
The company’s contact information:
I. E. Athletic Tourism (CYPRUS) LTD
7, Rigenis Street 8200, Geroskipou, Paphos, Cyprus
Review
I. E. Athletic Tourism (CYPRUS) LTD reserves the right to review this policy in accordance with changes to applicable legislation or regulations, or in relation to changes in the company’s processing of personal data. You will be notified of any changes made to this policy with an updated version, in the same manner that this policy was presented to you.
Any amendments that may be made to the policy will take effect after the updated version has been presented to you.
What to know about cookies
We want you to have the best possible experience using I. E. Athletic Tourism (CYPRUS) LTD’s website, and to achieve that we use cookies on www.cyprusathletictourism.com.
What are cookies?
A cookie is a small encrypted text file stored on your web browser from websites. They are widely used by online businesses to collect data to learn more about their visitors in general. Some of the data collected includes origins of web traffic, number of visitors and a visitors’ operating systems and browser types.
To read more a detailed explanation of cookies, please visit www.allaboutcookies.org
Why do we use cookies?
In short, they make our website’s navigation and content better for you. Please keep in mind that certain features of our website may require the use of cookies in order to function properly and provide you with the best user experience.
Learn more about the type of cookies we use below.
Internal cookies
We use our own cookies to ensure that some of our website’s features properly function, for example currency conversions, package searches, date selections and bookings. Please note that disabling I. E. Athletic Tourism (CYPRUS) LTD’s cookies may result in incorrect or incomplete bookings.
External cookies
When visiting www.cyprusathletictourism.com, third parties may also place cookies on your browser for targeted advertising and analytical purposes.
We use remarketing tools from advertising platforms like Google AdWords and Facebook Pixel in order to tailor better messages to you as you browse the website. They also help us identify how our website is being used and how effective our sources of web traffic are.
Furthermore, we use analytical tools like Google Analytics and Facebook pixel Analytics to collect information on how, and from where, visitors navigate our website. This is done so that our website and product offerings are better adapted to our diverse clientele.
Please be assured that we do not collect or store your personal information (e.g., your name or address) and that cookies cannot be used to personally identify you.
Cyprus Athletic Tourism is committed to protecting the privacy of our users. This privacy policy explains how we collect, use, and protect personal data that is collected through our website and services.
Data Controller and Data Processor
Cyprus Athletic Tourism is the data controller for the personal data collected through our website and services. Cyprus Athletic Tourism will also act as the data processor for any personal data collected in the course of providing our services.
Personal Data Collected
We collect personal data from users of our website and services for the following purposes:
- To provide and improve our services
- To communicate with users about our services and related matters
- To comply with legal and regulatory requirements
The types of personal data we collect may include name, contact information, payment information, and other information relevant to the purposes listed above.
Data Storage
Personal data collected through our website and services will be stored in Cyprus for a period of 6 months. In some cases, personal data may be transferred to and stored in a third-party service provider's location outside of the Cyprus. Any transfer of personal data to a third party will be in compliance with relevant laws and regulations, including the General Data Protection Regulation (GDPR).
Data Security
We take appropriate technical and organizational measures to protect personal data from unauthorized access, use, or disclosure. These measures include:
- Encrypting personal data to prevent unauthorized access
- Using secure servers to store personal data
- Implementing access controls to restrict access to personal data to authorized personnel only
- Regularly updating security systems and software to prevent vulnerabilities
- Conducting background checks on employees who have access to personal data
- Implementing strict password policies to prevent unauthorized access
- Regularly monitoring and testing systems to identify and address potential vulnerabilities
- Providing training to employees on data protection and security
- Implementing measures to prevent data breaches, such as firewalls and intrusion detection systems
It's important to note that the specific security measures implemented will depend on the nature of the personal data being collected and the potential risks to that data. It may be necessary to implement additional measures for particularly sensitive personal data or for data that is at high risk of being accessed or disclosed without authorization.
Data Subject Rights
Under the GDPR, data subjects have the following rights with respect to their personal data:
- The right to access their personal data and receive a copy of it
- The right to rectify any inaccuracies in their personal data
- The right to erase their personal data in certain circumstances
- The right to restrict the processing of their personal data in certain circumstances
- The right to object to the processing of their personal data in certain circumstances
Data subjects may exercise these rights by contacting us at hello@cyprusathletictourism.com.
Data Subject Consent
We will obtain explicit consent from data subjects before collecting, using, or processing their personal data for any purpose.
.svg)
