Introduction
This document sets out the personal data / privacy policy of Cronje & Yiannas Actuaries and Consultants Ltd (hereinafter “We” or “C.Y Actuaries”) in relation to the Professional Training Services we offer and covers the following:
- What kind of personal data we collect
- How we collect personal data
- How we store personal data
- How we use personal data
- Personal data sharing with third parties
- Retention period
- Use of cookies
- Your rights
- Contact us
The purpose of this document is to provide you with all the information relating to your personal information. We are committed to protecting your privacy, hence your personal data is dealt with in a confidential manner and securely by the C.Y Actuaries team and in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the national legislation in relation to Personal Data, L.125(I)/2018, as may be amended from time to time.
For the purposes of the GDPR, personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
1. What kind of personal data we collect
C.Y Actuaries as a consulting firm which offers professional training services receives a significant amount of personal data, , for the provision of Professional Training Services.
Personal data of potential attendees, include, for example (the below is a non-exhaustive list):
- Name (including middle names and surname);
- Company name / Employer’s name
- Role / Occupation / Employment status (e.g., unemployed)
- Eligibility for HRDA sponsorship and HRDA registration number
- Phone number
2. How we collect personal data
We will collect your personal data when you directly provide us with it, through the online form you submit in order to reserve your spot in one of the Professional Training Courses we offer and/or through email and/or phone
In some instances, we may collect personal data relating to you through referees or third parties (including employers/past employers).
We request solely the necessary data for the purposes collected (more information below). In case we receive personal data that is considered unnecessary, we will delete and destroy that data.
3. How we store personal data
We aim in protecting your personal information and endeavour to ensure that no unauthorized access and/or misuse of your personal data occurs. To this end, we have put in place all necessary organizational and technical measures. We have implemented design mechanisms in the way data is stored and privacy settings have been set at a high level by default.
We have adopted by default systems and technology designed in such a way to ensure that data processing is limited to what is necessary for the purpose for which the data was collected and only the members of the team who need to access the personal data are allowed with access.
4. How we use personal data
For the purposes of GDPR we are controllers in relation to your personal data. That means that we will determine the means and purposes of the processing of your personal data, the way we will use them, store them, how long we retain them and more.
We will use your personal information lawfully, fairly and in a transparent way. We shall use it to provide our service to you (i.e. the professional training course(s) you select to participate in). This includes reserving you spot, participating in the professional course(s), contacting you in the course of the service provided communicating with you for updates or requesting additional information or assisting with the HRDA subsidy or for potential upcoming and/or future courses, provided you have given your consent to receive marketing communication by C.Y Actuaries. We will not use such information for any other purposes, not disclosed to you. In addition, we may use personal data we collect about you to comply with legal or regulatory requirements.
We treat personal data with caution. We may use such data to evaluate whether additional arrangement need to be made for any particular Professional Training Course offered to you and/or in case of a disability.
In accordance with the GDPR, we may only process your personal data:
- Based on the explicit, unambiguous consent of the data subject;
- When processing is necessary to perform a contractual obligation;
- When processing is necessary to comply with a legal obligation;
- When processing is necessary for the legitimate interests pursued, except where such interests are overridden by the rights and freedoms of the data subject, in particular where the data subject is a child;
- When processing is necessary in order to protect your vital interests or of another natural person;
- When processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Marketing and Archival Purposes
During our professional training courses and/or events, photos and/or filming might take place for archival and/or promotional purposes, in order to showcase our work and promote future courses. Such photos and/or filming may be used in our website and/or social media channels, including the website(s) and/or social media channels of our trusted service providers.
For this processing we rely on legitimate interest and your consent to ensure lawful processing.
In case of photos and/or filming, you will be provided with prior notice and only with your explicit written consent we will proceed. In case you object to such processing you will be provided with an alternative option (such as a designated non-photographed area).
This Privacy Policy and our Professional Training Courses and/or events are not addressed to minors, however in case any photo or other process contain personal data of minors, prior parental consent will be required.
You can withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of any prior processing. In case you withdraw your consent, we will make every effort to remove and/or delete(modify) any phottos which might have been published in our website and/or social media that affect you; notign that published photos in magazines and/or other printed meidums cannot be revoked.
In case of unpublished photos and/or footage we will make best efforts not to use and/or retain any photos of you.
5. Personal data sharing with third parties
We may share your personal data with our trusted service provider(s) in the course of our professional training purposes only. Our Professional Training Courses are provided through EFACT SERVICES LIMITED, an approved Vocational Training Center certified by HRDA (Κέντρο Επαγγελματικής Εκπαίδευσης/ΚΕΚ). We may also share your data with third-party service providers for the purposes of adopting appropriate security measures for the protection of your personal data. Lastly, we may share your data with public bodies, auditors, accountants and legal consultants, if necessary to comply with a legal or regulatory obligation.
We will only transfer personal data to any third parties, upon receiving confirmation that the said third party is aware of the GDPR provisions and has complied with those, or is taking steps to ensure compliance. Such third parties have been evaluated and approved by C.Y Actuaries and the necessary agreements are in place, in accordance with the applicable legislation (including the required documents and agreements that clearly define the roles/responsibilities between each third-party and C.Y Actuaries, in the context of processing personal data and the general cooperation between the parties).
6. Retention Period
We will retain your personal data for a period of 2 years from the date you provide us with it. We will keep the data for this period so that we can contact you for upcoming and/or future professional training courses we might offer (with your explicit consent) and also to be able to keep records in case of an allegation or legal claim being pursued relating to the services offered. Kindly ensure that your data is kept up to date and remains accurate.
We may keep your personal data for a longer period if necessary for legal, regulatory or technical reasons.
Data that we keep for any reason after the retention period expires, will be completely anonymised.
7. Use of cookies
We use "cookies" to help you personalize your online experience. Cookies are also used to protect you from security risks. Please refer to our Cookie Policy for more details and information.
8. Your rights
Under the appropriate circumstances, you have the right:
- to receive information on the personal data we hold about you and how such personal data is used (right to access);
- to rectify inaccurate personal data concerning you (right to data rectification);
- to delete/erase your personal data (right to erasure/deletion, “right to be forgotten”);
- to receive the personal data provided by you in a structured, commonly used and machine-readable format and to transmit those personal data to another data controller (right to data portability);
- to object to the use of your personal data where such use is based on our legitimate interests or on public interests (right to object); and
- in some cases, to restrict our use of your personal data (right to restriction of processing).
You can exercise these rights by contacting us (as per the contact information mentioned below).
You also have the right to complain to the Office of the Commissioner for Personal Data Protection, for more information you can visit https://www.dataprotection.gov.cy .
9. Contact us
We have appointed a Data Protection Officer to ensure compliance with applicable legislation as well as this privacy notice. You can contact our DPO for any queries at
