1. Overview / Index / Introduction
The Engineering and Commercial Association Limited (referred to as ‘we’, ‘us’, ‘our’, and together with all its affiliated and associated companies referred to as ‘EKA GROUP’ or the ‘Group’) is committed to protecting your privacy and handling your data in an open and transparent manner. The personal data that we collect and process depends on the product or service requested and agreed in each case.
This Privacy Notice:
- provides an overview of how EKA GROUP collects and processes your personal data and tells you about your rights under the local data protection law and the EU General Data Protection Regulation (‘GDPR’),
- is directed to natural persons who are either current or potential customers of the EKA GROUP, or are authorised representatives/agents or beneficial owners of legal entities or of natural persons which/who are current or potential customers of EKA GROUP,
- is directed to natural persons who had such a business relationship with the GROUP in the past,
- contains information about when we share your personal data with other members of the Group and other third parties (for example, our service providers, contractors, subcontractors or suppliers).
In this privacy statement, your data is sometimes called “personal data” or “personal information”. We may also sometimes collectively refer to handling, collecting, protecting and storing your personal data or any such action as “processing” such personal data.
For the purposes of this statement, personal data shall mean any information relating to you which identifies or may identify you and which includes, for example, your name, address, identification number.
2. Who we are
- EKA GROUP is a multi-business organization operating in the building materials and systems markets of the construction sector. It was formed in 1946 in Limassol, Cyprus by Michael Th. Loizides and other prominent businessmen of the time and it continues to be a family business 70 years after.
- We have appointed a data protection officer (DPO) to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your Personal Data, please contact the DPO.
Address: Eleftherias Street 109, 3042, Limassol
P.O.BOX. 50101, 3601, Limassol
Local Phone: +357 25854444
Fax No: +357 25854545
E-mail: [email protected]
3. Other entities of our Group with which we may exchange Personal Data
EKA SWIMMING POOLS – C47441
Address: Eleftherias Street 109, 3042, Limassol
P.O.BOX. 50101, 3601, Limassol
Local Phone: +357 25854444
Fax No: +357 25854545
4. The type of Personal Data we collect and process
We will use data, contact details (such as name, address, email, contact no., fax no., P.O. BOX, mobile number), Architectural Drawing, in order to prepare proposals upon your requests.
Furthermore, in order to perform our obligations under the contract that we will enter to with you, we will need your ID no. or Company Registration No. (as applicable) and respective bank account details. Financial information, such as payment related information including bank account and payment card details may also be required.
Signatures under proposals and contracts.
Any other information you may provide to us during the course of our contractual agreement.
5. How, why and on what legal basis we collect and process Personal Data
How: We collect and process Personal Data through email, telephone and text message
Why: In order for us to identify our customers; to be able to carry out contracts and collection purposes as we usually give credit
Legal Basis: We use Personal Data for a number of legitimate interests, including to provide and improve our services, administer our relationship with you and our business, for marketing and in order to exercise our rights and responsibilities. More detailed information about these legitimate interests is set out below.
- to set up and administer your account, provide technical and customer support and training, verify your identity, and send important account, subscription and information about our services
- to administer our relationship with you, our business and our third-party providers (e.g., to send invoices)
- to personalize your experience with our services. We may sometimes share your Personal Data across our services so that we can make all of the services we deliver to you more intuitive (e.g., rather than requiring you to enter the same data many times)
- to contact you in relation to, and conduct, surveys or polls you choose to take part in and to analyze the data collected for market research purposes
- for internal research and development purposes and to improve, test and enhance the features and functions of our Services
- to provide you with marketing but only as permitted by law
- to meet our internal and external audit requirements, including our information security obligations
- to enforce our terms and conditions
- to protect our rights, privacy, safety, networks, systems and property, or those of other persons
- for the prevention, detection or investigation of a crime or other breach of law or requirement, loss prevention or fraud
- to comply with requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, including where they are outside your country of residence
- in order to exercise our rights, and to defend ourselves from claims and to comply with laws and regulations that apply to us or third parties with whom we work
- in order to participate in, or be the subject of, any sale, merger, acquisition, restructure, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings)
Where we rely on legitimate interests as a lawful ground for processing your Personal Data, we balance those interests against your interests, fundamental rights and freedoms. For more information on how this balancing exercise has been carried out, please contact our DPO at [email protected].
6. Your obligation to provide us with your Personal Data
If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you, or we may be prevented from complying with our legal obligations.
7. Consent requirement and your right to withdraw consent
In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your Personal Data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact our DPO at [email protected]. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
8. Change on Purpose
- We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
- Please note that we may process your Personal Data without your knowledge or consent, in compliance with the above rules, where it is required or permitted by law.
9. How we use particularly Sensitive Personal Data
“Special categories” of particularly sensitive Personal Data, such as information about political opinions, religion, health, racial or ethnic origin, sexual orientation or trade union membership, philosophical beliefs, genetic data, biometric data require higher levels of protection. We need to have further justification for collecting, storing and using this type of Personal Data. We have in place an appropriate policy document and safeguards which we are required by law to maintain when processing such data.
As a rule, we do not process Special Categories of Personal Data other than in the following limited circumstances:
- Where we need to carry out our legal obligations or exercise rights in connection with employment.
Less commonly, we may process this type of information with your consent where it is needed for the purposes of customizing our services to your explicit needs and requirements and/or to protect your interests (or someone else’s interests) during your physical presence at our premises although you may not be capable of giving your consent.
10. Sources and Recipients of Personal Data during the performance of our contractual and statutory obligations
In the course of the performance of our contractual and statutory obligations your personal data may be provided to various departments within the Company but also to other affiliated and/or subsidiary companies of the Company. Various service providers and suppliers may also receive your personal data so that we may perform our obligations. Such service providers and suppliers enter into contractual agreements with the Company by which they observe confidentiality and data protection according to the data protection law and GDPR.
It must be noted that we may disclose data about you for any of the reasons set out hereinabove, or if we are legally required to do so, or if we are authorized under our contractual and statutory obligations or if you have given your consent. All data processors appointed by us to process personal data on our behalf are bound by contract to comply with the GDPR provisions.
The following is a list of potential recipients of data (in each case including respective employees, directors and officers):
- Other professional advisers or providers of services acting as processors or joint controllers (including lawyers, legal consultants, banks or other financial institutions, auditors/accountants, financial or business advisors, Consultants in relation to any matter on which we are instructed) where disclosure to that provider of services is considered necessary to fulfil the purposes set out above
- Any distributors / suppliers / sub-contractors, agents or service providers of The Engineering and Commercial Association LTD and its subsidiaries (including couriers etc.)
- Regulators or other governmental or supervisory bodies with a legal right to the material or a legitimate interest in any material
- Debt collection agencies
- Credit Risk agencies
- Cloud Storage Companies
- Companies who assist us with the effective provision of our services to you by offering technological expertise, solutions and support and facilitating payments
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
11. Sharing of Personal Data with other entities in the Group
We will share your Personal Data with other entities in our group as part of our regular reporting activities on company performance, in the context of a business reorganization or group restructuring exercise, for system maintenance support and hosting of data.
