Last updated: January 2021

This Data Privacy Policy applies to Personal Data processed by our Firm as a controller and processor, in accordance with the UK General Data Protection Regulation (GDPR) (as may be amended or supplemented from time to time) (hereinafter the “GDPR” ) and in line with best practices applied.

PROTECTION OF YOUR PERSONAL DATA

Our Firm is committed to protecting your Personal Data and to achieving the best means of processing it in a fair and transparent manner.

We continuously reinforce our standards of technology, managerial measures and operational security, to ensure maximum protection of your Personal Data. Such measures include applying robust technical controls and procedures to restrict access as required as well as physical security measures by maintaining data at appropriately secured locations, and ensuring all our staff is educated and well-trained with regards to our privacy obligations, handling of Personal Data in strict confidence and applying appropriate measures when processing such data.

We have a duty to report certain Personal Data breached to the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. If the breach is likely to result in a high risk of adversely affecting your rights and freedoms, we will inform you without undue delay.

In the provision of our services, our Firm processes Personal Data collected / received from a range of sources e.g. from:

• data subjects, directly;
• parties acting on the data subject’s behalf;
• third parties e.g. agencies, credit institutions, etc.;
• publicly available sources, such as registries.

We have appropriate processes in place to check the accuracy of the data we collect, and we record the source of that data. We have a process in place to identify when we need to keep the data updated to properly fulfil our purpose, and we update it as necessary. We comply with the individual’s right to rectification and carefully consider any challenges to the accuracy of the personal data. 

Processing activities carried out by our Firm include:

• collection,
  
• recording,
  
• organisation,
  
• storage,
  
• use,
  
• disclosure by transmission or otherwise making available,
  
• destruction, etc.,
  

as may be required from time to time, for legitimate purposes and in the context of the carrying out of our professional activities / services.

We will only process Personal Data within the parameters permitted by law, which will most commonly include the following reasons:

• to perform our contractual obligations / provide a service which our Firm has been engaged to carry out, e.g. accounting services, banking services, etc.;
• for administration and operational purposes, including the provision of services by our Firm and our group of companies and affiliated companies;
• to comply with all legal and regulatory obligations we are subject to, including those required from time to time under the laws of the Republic of Cyprus, the European Union and other applicable laws, regulations and directives and obligatory guidelines set by our Supervisory Authority. Such legal and regulatory obligations may relate to the Prevention of Money Laundering, national and foreign security policy, prevention, investigation, detection or prosecution of fraud / criminal offences etc.;
• to perform a task carried out in the public interest;
• to manage our relationship with the data subject, e.g. regarding the management of fees, notifying the subject of changes to our Data Privacy Policy, etc.;
• on the basis of any other legitimate interest (including our legitimate interest and / or those of a third party).

As the protection of your Personal Data is of utmost importance for our Firm we make sure at all times to give careful consideration to and assess all legitimate interests that arise (including our legitimate interests, those of third parties and those of the data subject), against the data subject’s rights and potential impact thereon.

We may process Personal Data on more than one lawful ground, depending on the specific purpose for which we are using such data. Please contact us (at info@fiducicorp.com) for details about the specific legal ground(s) we are relying on in processing your Personal Data, should you wish to do so.

When processing Personal Data we are open and honest, and comply with the transparency obligations of the right to be informed.

In achieving the legitimate purposes for processing of Personal Data, we may have to share it with other parties which shall also act as processors or joint controllers of such Personal Data, e.g.:

Internal Third Parties

• other companies in our group of companies or to our affiliated companies.

External Third Parties

other service providers which our Firm cooperates with for the provision of further services / products, and of which our clients shall be informed of from time to time;

other professionals such as legal advisors, auditors, insurers, etc., as may be necessary from time to time, in assisting them in adhering to their legal obligations, carrying out their duties and providing the services which they have been engaged to carry out.

• other service providers which our Firm cooperates with for the provision of further services / products, and of which our clients shall be informed of from time to time;
  
• credit institutions and other financial institutions;
  
• third parties as and when explicitly requested / instructed by a data subject;
  
• Public / Semi-Public registries, maintained in the Republic of Cyprus or outside;
  
• regulatory and / or supervisory and / or other competent authorities, when we are obliged to so do under law or court order;
  
• other professionals such as legal advisors, auditors, insurers, etc., as may be necessary from time to time, in assisting them in adhering to their legal obligations, carrying out their duties and providing the services which they have been engaged to carry out.
  

We require all such parties to respect the security of your Personal Data and to treat it in accordance with the law.

Where such data is transferred to countries or territories outside the European Economic Area (not recognised by the European Commission as offering an adequate level of data protection), our Firm will ensure that appropriate data transfer mechanisms (as required) are put into place, such as EU Standard Contractual Clauses, to ensure protection of your Personal Data.

DATA SUBJECT’S LEGAL RIGHTS

Your Rights

Your rights are listed below and may be exercised to the extent permitted under the GDPR, in line and within the parameters of the legal and regulatory framework within which we - as a licensed Accounting and Administrative Services firm - operate, and in accordance with our Data Privacy Policy (as may be revised and communicated to you from time to time):

• to request for data portability; 
• to request for access to your Personal Data, e.g. for updating or rectification purposes (where practical);
• to request for rectification of inaccurate personal data;
• to be informed about the collection and use of your Personal Data;
• in some circumstances, to explicitly withdraw any consent provided to us, or limit such consent e.g. by requesting for the restriction of a specific processing of your Personal Data;
• in some circumstance, to request for erasure of your Personal Data;
• in some circumstances, to object to the processing of your Personal Data;

Your rights may be exercised by contacting: info@fiducicorp.com

Such requests shall not affect the lawfulness of any processing carried out before the exercise of your rights.

ACCOUNTABILITY AND GOVERNANCE 

We take responsibility for complying with the GDPR, at the highest managements level and throughout our organisation. We keep evidence of the steps we take to comply with the GDPR and review and update our accountability measures at appropriate intervals. 

If, despite our commitment and continuous efforts to protect your data you feel that your data protection rights are not being adequately safeguarded, you may lodge an official complaint with the Data Protection Commissioner: www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/home_en/home_en?opendocument.

What We Need From You

It is important that all Personal Data we maintain on you remains accurate and current at all times. Please keep us informed if any of your Personal Data changes during your relationship with us.

Time Limit to Respond

We will try to respond to all legitimate requests within one month, depending on the complexity and number of requests.

Our website uses cookies to track traffic, to ensure sites functionality and to improve the browsing experience.

You can also find general information about cookies and how to block or delete them at www.allaboutcookies.org   or www.cookiecentral.com/faq/.

Cookies are small pieces of information, which a website may put on your computer or mobile device when you first visit a site or page. The cookie will help the website to recognise your device the next time you visit and remember some information about your browsing activity on the website. Most cookies won’t collect information that identifies you, and will instead collect more general information such as how users arrive at and use the websites, or a user’s general location.

We use analytics which set cookies to get information on site usage, popularity and how it is found for the purposes of improving the site.

It is possible to block some or all cookies and to delete cookies already stored on your machine. Managing your cookies is done differently across different browsers. Please be aware that you may lose some functions on some websites as a result of altering cookie settings.

Further information on cookies and how you disable them on different browsers is available at www.allaboutcookies.org.