Welcome to Andreakos Law privacy notice
Scope & Contact
Andreakos Law respects your privacy and is committed to protecting your personal data. This privacy notice will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.
This Privacy Policy applies to personal data collected by the Andreakos Law on websites (including mobile sites and apps) which link to this Privacy Policy, via registration forms, surveys, competition entries, at events (including awards), or if you contact us (online, by post, telephone or social media).
Personal date includes cookies and other Identifiers consist of portions of code installed in the browser that assist the Andreakos Law in providing the Service according to the purposes described. Some of the purposes for which Cookies are installed may also require the User’s consent.
It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them
Where the installation of Cookies is based on consent, such consent can be freely withdrawn at any time following the instructions provided in this document.
Controller
This Privacy Policy is issued from Andreakos Law so when we mention “Andreakos Law”, “we”, “us” or “our” in this Privacy Policy, we are referring to the relevant website (www.andreakoslaw.com) responsible for processing your personal data (being the “data controller”).
If you have any questions about this privacy notice, including any requests to exercise your legal rights (as set out below), please contact us using the details set out below.
Contact details
Andreakos Law
Email address: info@andreakoslaw.com
Postal address: 2 Apostolou Andrea, Parekklisia, 4520, Limassol, Cyprus
Telephone number: +357 97 899145
Fax: +357 25 103200
You have the right to make a complaint at any time to the Office of the Commissioner for Personal Data Protection, the Cyprus supervisory authority for data protection issues (http://www.dataprotection.gov.cy). We would, however, appreciate the chance to deal with your concerns before you approach the Office of the Commissioner for Personal Data Protection so please contact us in the first instance.
What Personal Information we Collect
You do not have to give us any personal information in order to browse our websites.
However, if you wish to register on our websites, subscribe to a service, book places at events, request further information, contact us, complete any surveys, enter competitions, or provide content for inclusion on our websites (e.g. blogs or other online forums) we will collect certain data, including personal data. The data we collect may include:
· title, name, address, business phone number(s), email address and gender;
· employment details, such as your current role and responsibilities, experience, seniority, salary and education;
· information about your organisation and the industry that you work in;
· areas of interest which you have notified us about, as well as what we can infer from your engagement with our products and services;
· your CV;
· your marketing preferences;
· your newsletter preferences;
· your job alert preferences;
· any data recoverable from social networking sites, where permission from you has been obtained; and
· any other information that you submit to us.
We may receive the above information directly from you or from your colleague or corporate contact who registers for a subscription or event on your behalf.
Please note that not all of the information we request is mandatory to provide you with the service. You are not required to provide any optional information.
Event filming and photography: We may photograph, film, broadcast or record our events in which case we may process information such as your voice, likeness and image if you are identifiable from such photograph, film, broadcast or recording.
Financial Information: We will keep a record of any financial transaction you make with us. Online payments made through our websites are processed securely by the following third party payment providers: Datacash, Stripe, Authorize.net and Paypal. Please refer to Datacash’s privacy policy at www.datacash.com/mcdatacash/privacy/privacy.html, Stripe’s privacy policy at https://stripe.com/gb/privacy, Authorize.net’s privacy policy at https://www.authorize.net/company/privacy/ and Paypal’s privacy policy at https://www.paypal.com/uk/webapps/mpp/ua/privacy-prev for details of how your payment card data is processed by them. We do not directly collect or process your debit or credit card information, except in limited circumstances where you provide us with new debit or credit card details over the phone, and we update Authorize.net with these details, or we take a debit or credit card payment over the phone and input these details into Datacash. In such circumstances, we do not retain a copy of your debit or credit card details.
Device and browsing data: In addition, we may automatically collect information about any website that you came from or are going to. We also collect information about the pages of our websites which you visit, the links you click on, IP addresses, the type of browser you use and the times you access our websites. Some of this information is aggregated and is not used to identify you, but we also use analytics software on our websites which allows us to link information about your use of our websites back to you, where you have logged into your account. We may observe your use of our websites, whether you open emails we have sent to you and/or events that you attend (where you use the bar coded name badge which we issue) and your activities at those events (such as the exhibitors you interact with). We may infer and derive certain information from these observations such as what additional brands, subscriptions and events you or a user similar to you may be interested in. This information will be used for our own internal and marketing purposes.
Cookies: We use cookies to collect information about you online. Please read our Cookie Policy for further information on the cookies we use and how you can enable/disable them.
How we use your Personal Data Information
In accordance with data protection legislation, we will only process your personal data where we have a lawful basis for doing so. These bases are: (i) where it is necessary for the performance of a contract we have with you; (ii) where you have provided your consent; (iii) where it is necessary for us to comply with a legal obligation that we are subject to; or (iv) where it is in our (or a third party’s) legitimate interests and such interests are not overridden by your interests or fundamental rights and freedoms.
Specifically, we’ve set out in this Privacy Policy the purposes for which we process your personal data and the lawful basis on which we carry out such processing.
The personal information we collect allows us to:
· provide the products and services you have ordered or signed-up to (necessary for a contract);
· register you for events and administer those events (including informing the venues where our events are hosted of any dietary or access requirements you may have told us about) (necessary for a contract and necessary to comply with our legal obligations);
· notify you of key information in relation to your subscription or any events you are attending (necessary for a contract and legitimate interests, of our customers, to ensure they are up to date with necessary information);
· verify your identity and details of your payment method or credit card amount (where payments are required) (necessary to comply with our legal obligations);
· administer our website (such as access controls) and provide customer services (legitimate interests, of us and our customers, to ensure a good quality of service and security);
· aggregate information about you with other users (legitimate interests, of us, to better understand what services our users will be interested in);
· meet legal, regulatory and compliance requirements (necessary to comply with our legal obligations);
· monitor and analyse the use of any account to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime (legitimate interests, of us and our users, for security);
· gather information to form statistical and trend analysis including to monitor user demographic (legitimate interests, of us, so we can better understand those that use our products and services and improve our products, services, events and marketing practices);
· monitor your use of our products and services and attendance at events and to build up customer profiles (including through use of analytics software) (legitimate interests, of us, to help us identify content and marketing materials which will be of interest to you and other customers like you);
· monitor interactions at events including what exhibition stands are visited by attendees during events (legitimate interests, of us, to gain insights into our events and to help us better understand how best to run future events);
· communicate with you including responding to your enquiries (necessary for a contract, or consent);
· contact you to seek your feedback (legitimate interests, of us, in helping us improve);
· investigate any complaints about our websites, products, services or events (legitimate interests, for us and our customers, to ensure that we maintain high service levels);
· personalise your experience of our website, products, services and events, for example, by displaying targeted advertising and content which we believe likely to be relevant and of interest to you (please see below for further details) (legitimate interests, of our advertising partners, so that they can show you the most appropriate adverts); and
· provide you with the prize for competitions you enter and win (necessary for a contract) and to comply with regulatory requirements to disclose a competition winner’s name and county (necessary to comply with our legal obligations).
Marketing Communications
Where we have told you that we will do so (such as during the registration process to our websites/website services and events (as applicable)) we may from time to time contact you by email, SMS, telephone or post about our products and services (including from all our brands within our business) that may be of interest to you (legitimate interests, of us, to promote our products and services, and of our customers, to keep them up to date with promotions, events and subscriptions which may be relevant to their professions and job roles). Further information about such marketing is below.
From the brand with whose website or event you registered: We will also use your personal information to send you business-to-business marketing about products, services and events of the brand with whose website or event you have registered.
From other brands within our business: We may also send you business-to-business marketing about products, services and events of other brands within our business which we think may be of interest to you.
Third party marketing: We may share your registration information (including name, job title and contact details) with third parties for marketing purposes, but we will only do this where you have provided consent for us to do so.
Opting-out: Our customers always have the right to let us know that they no longer want to be contacted for marketing purposes. If at any point you would like to opt-out of receiving such marketing communications from us, or would like to change the channels that we use to contact you.
Other ways in which we use and share your personal information
Events (including awards): Where you are attending an event organised by us we may share your name, job title and company with the other attendees of the event (including making this information available via the event app, on social media sites and/or in our event guide). Generally we will ask for your consent to share this information, but for some of our events, such as our awards and round table events (and any other events which we inform you of) we rely on legitimate interests to share this information because it is a fundamental part of such events (for example, for table plans and networking purposes).
We will share your registration information with the sponsors of our events who may contact you for marketing purposes (legitimate interests, of us, to attract the most appropriate sponsors for the event and of our sponsors, to facilitate business-to-business communications between them and our registrants before, during and after our events). We or our sponsors may contact you ahead of our events to enquire whether you’d like to set up a meeting with our sponsors at the relevant event.
Where you register to attend certain seminars or presentations at our events hosted by a third party, we may share your registration information with such third party (legitimate interests, of our hosts, so they know who has attended their events and so they can contact attendees about their goods and services).
Where you indicate that you want us to share your details with exhibitors at events (for example, by scanning your event badge at an exhibitor’s stand) we share your information with those exhibitors who may contact you about their goods and services (consent).
Event filming and photography: We process your personal data comprised in the film, photograph, broadcast or recording of the event so that we have a record of our events for our own internal purposes such as training (legitimate interests, of us, to train our staff and help us better understand how best to run future events), to create marketing content for our promotion of future events (legitimate interests, of us, to encourage future sponsorship, attendance and awards entries), to supplement editorial content on an event (legitimate interests, of us, to provide fuller and more engaging content). We may also share this with future sponsors (legitimate interests, of us, to show potential sponsors what the event is like and to encourage sponsorship) and existing sponsors and clients (legitimate interests, of us and our sponsors and clients, to share potential marketing material with our sponsors and clients so that they can promote their involvement in the event).
Sponsored webinars and whitepapers: Where you sign up for a sponsored webinar or to access sponsored content such as whitepapers, we share your sign-up details with that sponsor who may contact you (legitimate interests, of us, to enable us to offer our users premium business content free of charge, and of our sponsors, to facilitate business-to-business relationships). We use a third party technology service provider to help faciliate this. If you do not wish for your details to be shared we usually offer an alternative means of accessing this content.
You employer: Where your subscription to our service is a part of a wider corporate subscription (i.e. your employer obtains a subscription for all of its employees) we may share information about your use of the service with your employer (legitimate interests, of your employer, so they can understand how their staff are making use of the resources they have purchased).
Service providers: We may employ the services of third party service providers to help us in certain areas, such as website hosting, maintenance, call centre operation and the operation of events. In some cases the third party may receive your personal data (legitimate interests, of us, for service efficiency and to benefit from third party expertise, and our customers so they experience a good quality of service). However, at all times, we will control and be responsible for the use of your personal data and we will endeavour to ensure that our service providers are bound by contractual obligations to only process your personal data in accordance with our instructions.
Aggregate information: As mentioned above, we may use aggregated information so we can administer and improve our website, analyse trends and gather broad demographic information and detect suspicious or fraudulent transactions. We may pass this information to third parties. In most cases this information will be anonmyised, meaning that you will not be able to be identified from it.
Online advertising: We may share some of your information with advertisers, ad servers and ad networks to deliver targeted advertising both on our websites and on selected partner websites but this will not include any information which directly identifies you (legitimate interests, for advertising purposes). However, by interacting with or viewing an advert, you should be aware that the third party may make the assumption that you meet the targeting criteria used to display the advert.
Surveys: If you complete a survey, unless we inform you otherwise, your answers will be aggregated and anonymised for research and analysis purposes. However, if you choose to provide any information in your response to a survey which identifies you (e.g. name, job title), we may be able to identify you from this. If you choose to submit your email address to enter into any prize associated with the survey, this will be used to administer the prize only and will not be linked to your survey responses (necessary for a contract). We may share your responses in an aggregated and anonmyised form with third parties carrying out research relating to the topics covered in the survey or, if the survey relates to your use of one of our subscription products, and this forms part of a corporate subscription taken out by your employer for you and other employees, we may share information provided in your survey responses about your use of the subscription with your employer (legitimate interests, for research purposes). If you have included information about yourself in your survey responses (e.g. name, job title), third parties or your employer (as appropriate) may be able to identify you from this.
Administration of justice: We may occasionally be required by law, court order or governmental authority to disclose certain types of personal data (necessary to comply with a legal obligation, or for legitimate interests in connection with a legal claim against us). Examples of the type of situation where this would occur would be:
· in the administration of justice; or
· where we have to defend ourselves legally.
Other:
We process personal data about individuals who feature in our publications, content and products, including information we have researched from publically available sources (legitimate interests and for journalistic purposes).
We also use publically available sources to research prospective customers in order to send them marketing information about products and services relevant to them (legitimate interests, to grow our business).
If you are submitting personal data on behalf of another or are submitting personal data which may be used publicly on our products, you should only do so where you have the consent of the individual and it will be your responsibility to ensure that the individual is made aware of this Privacy Policy and our processing of their personal data.
Disclosure of your Personal Information
We may have to share your personal data with the parties set out below for the purposes set out in the table in paragraph 4 above.
• External Third Parties:
Service providers acting as processors who provide IT and system administration services.
Professional advisers acting as processors including bankers, auditors and who provide consultancy, banking, legal, insurance and accounting services.
Regulators and other authorities acting as processors who require reporting of processing activities in certain circumstances.
• Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
Fraud Prevention & Automated Decision- Making
If you provide a credit or debit card, we may also use third parties to check the validity of the sort code, account number and card number you submit in order to prevent fraud as well as to process any transaction you attempt via our websites. Any decision to deny you services based on the validity of your card details will be made solely by automated means. If you are denied a service because of this automated decision-making you are entitled to request us to further investigate. Please contact us at info@andreakoslaw.com where you have been denied access to a service based on your card details being declared invalid and you consider this to be in error. It may also be the case that you will need to contact your bank / payment provider.
If false or inaccurate information is provided and fraud is identified, details may be passed to fraud prevention agencies. Law enforcement agencies may access and use this information. We and other organisations may also access and use this information to prevent fraud and money laundering, for example when:
· checking details in applications for credit and credit related or other facilities;
· managing credit and credit related accounts or facilities;
· recovering debt;
· checking details on proposals and claims for all types of insurance; and
International Transfer
We do not transfer your personal data outside of the European Economic Area (EEA)
Links
Our site contains links to other websites over which we have no control. We are not responsible for privacy policies or practices of other websites to which you choose to link from this site. We encourage you to review the privacy policies of those other websites so you can understand how they collect, use and share your personal information.
Security
We have implemented reasonable technical and organisational measures designed to secure your personal information from accidental loss and from unauthorised access, use, alteration or disclosure. However, the Internet is an open system and we cannot guarantee that unauthorised third parties will never be able to defeat those measures or use your personal information for improper purposes.
Your Legal Rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data.
Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
If you wish to exercise any of the rights set out above, please contact us at info@andreakoslaw.com
Updating your personal information
You may review, correct, update or change your personal information at any time by contacting us at info@andreakoslaw.com Often, where you have signed up for an online account on one of our websites you can also amend your details via that online account.
Retention of the data
We will retain your personal data for the period necessary to fulfil the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. Accordingly, your personal data shall be maintained for up to seven years following the end of the services we provide to you / your last contact with us. This retention period may be extended if any applicable statutory or regulatory obligation requires us to hold information for a longer period.
Changes to Our Privacy Policy
If our Privacy Policy changes in any way, we will place an updated version on this page and we will take reasonable steps to make you aware of material changes to it. Regularly reviewing this page ensures that you are always aware of what personal information we collect, how we use it and under what circumstances, if any, we will share it with other parties.
How to conduct us
As a reminder, if you have any questions about this statement or your personal information, please contact us at info@andreakoslaw.com