Privacy Policy

August 8, 2022

WEYAND INVESTMENTS LIMITED respects your privacy rights and advocates for strict adherence to personal data protection laws.

WEYAND INVESTMENTS LIMITED notifies you that it will process your personal data following the provisions of Regulation (EU) 2016/679 (“GDPR”) for the purposes and on legal bases stated in this Notice.

We encourage you to read this Privacy Notice (“Notice”) carefully to better understand how we treat your personal data.

In this Notice we are willing to inform you of the following:

1. Scope of this Notice
2. Important information about us, including our contact details, and our role in personal data processing activity;
3. Personal data we process and sources of personal data;
4. Purposes and legal bases for processing;
5. Personal data retention;
6. Disclosure of your personal data;
7. International transfers;
8. Your rights as a data subject.
9. Changes and updates to the Notice

Scope of this Notice

This Notice covers the collection and processing of your personal data, when:

1. You access and use the website weyandinvestments.com (“Website”);
2. You directly contact us on general matters or to find out more about our Services through available means of communication, including our email address and contact form on the Website.

Information about us and our role in the personal data processing

WEYAND INVESTMENTS LIMITEDisa company registered under the legislation of the Republic of Cyprus with its company number HE 384649 and its registered address at Veroias, 3 Monovolikos 4, Kato Polemidia, 4150, Limassol, Cyprus (hereinafter the “Company”, “We”).

You can always contact us at [email protected] or through the contact page of the Website for any personal data protection matters (e.g., obtain more information about personal data processing or exercise your data subject rights).

We notify you that within the scope of this Notice the Company acts as a controller according to the GDPR.

Personal data we process and sources of personal data

We process different categories and types of your personal data. Nevertheless, we are trying to limit the personal data collected to a strict minimum that is necessary to achieve the purposes outlined in this Notice.

Personal data we collect include:

1. Personal data collected directly from you

• Contact data and communication records. When you contact us via the interface of the Website and or via the e-mail address available for contacts, you hereby provide us with your name, the name of the organization you represent and your position, your e-mail address, and records of communication with you including all the personal data it contains.

2. Personaldata collected indirectly

• Technical data. When you access, use and navigate the Website, we automatically collect some personal data from your browser. This personal data might include your IP address, information about your location, information about your mobile operator or Internet provider; data related to your device (its operating system, browser type, and version, screen resolution, set time zone, language settings); information about your browsing session and any interaction with the Website interface (for example, the number of pages you visited, the number of pages you clicked, time spent on the Website); information about the source from which you visited the Website.
• Research data: the name of the organization you represent and the sphere and territory of activity; information about you available on the organization’s website, public pages, and social networks. We work primarily with business persons, so when you contact us on behalf of the organization interested in our Services, we may analyze open-source information about you and the organization.

3. Personal data collected through cookie files

We may collect personal data through cookies. We use them for technical and security reasons and sometimes to collect information about your preferences.

Find out more in our Cookie Notice.

Purposes and legal bases for processing

To be compliant with the lawfulness and purpose limitation principles we process your personal data for explicit purposes and on appropriate legal bases.

Thepurposes and legal bases for processing your personal data are detailed below:

• To provide the functionality of the Website and make it usable. To make the Website available to you we process Technical data. The legal basis for this processing is our legitimate interest.
• To analyze the Website’s performance and functioning. To analyze the Website and enhance its operation we process Technical data. The legal basis for this processing is our legitimate interest.
• To keep the Website safe and secure. To ensure that our Website and its users are protected against any malicious actions and attacks we process Technical data. The legal basis for this processing is our legitimate interest.
• To process your questions, queries, or feedback and effectively communicate with you. To communicate with you both on general matters and in negotiations before entering into the contract with the organization you represent, we process Contact data and communication records, Research data, and Technical data. The legal basis for this processing is our legitimate interest.
• To analyze and anticipate the context of future business relations with prospective clients. When you contact us on behalf of the organization interested in our Services, we are trying to understand how can we effectively and efficiently help our potential clients. For this purpose, we process Contact data and communication records, and Research data. The legal basis for this processing is our legitimate interest.

Retention of your personal data

We will not keep your personal data longer than necessary for the purposes outlined in this Notice. We will store your personal data no longer than six (6) years following the termination of relationships with you unless otherwise required by applicable legislation.

Disclosure of your personal data

We may share your personal data with others in the following way:

1. For external processing

We provide your personal data to our service providers to process it according to this Notice and data processing agreement with them.

• Consultants, lawyers, accountants, and other professional service providers – to receive professional services and advice.
• Analytics providers – toanalyze your interaction with the Website.
• IT security providers – to protect the Website and our technical infrastructure.

2. For legal reasons in the event of a dispute

We may share your personal data when it is needed for the establishment, exercise, or defense of legal claims, and enforce Weyand Investments Limited Terms and Conditions.

Personal data transfers

We notify you that some personal datais accessed and processed by service providers outside the European Economic Area. To secure an adequate level of protection of your personal information, we:

1. only transfer personal data to third countries where such transfer is based on adequacy decision of the relevant regulator(s);
2. enter into agreements with service providers based on the standard data protection clauses adopted by the relevant regulator(s), so they are bound to preserve at least the same level of personal data protection as it is granted by the law applicable to us;
3. when none of the other transfer mechanisms are available, we may rely upon certain derogations to the prohibition on transfers outside the European Economic Area such as your explicit consent, the performance of a contract involving the data subject, important public interest, legal claims or defenses.

Automated decision making

We notify you that we do not make decisions related to you solely by automated means.

Your data subject rights

Under the GDPR you are entitled to exercise the following rights:

1. The right to access (Article of the 15 GDPR). You have the right to receive confirmation from us as to whether your personal data are being processed, as well as to receive a copy of your personal data.
2. Right to rectification (Article 16 of the GDPR). You have the right to request the rectification of your personal data if the data are inaccurate, as well as the complete the data if the data are incomplete.
3. Right to erasure (Article 17 of the GDPR). You have the right to request the erasure of your personal data. This right applies if:

• Your personal data is no longer required for the purposes for which they were collected;
• Personal data are processed unlawfully;
• We do not need to store your personal data in order to comply with applicable law;
• In other cases where deletion is required or permitted by applicable law.

4. Right to restriction of the processing (Article 18 of the GDPR). You have the right to request the restriction of the processing of your personal data in the following cases:

• If you contest the accuracy of your personal data, we will restrict the processing of such data until we verify their accuracy;
• If you object to the processing of personal data based on our legitimate interest, we will restrict the processing of such data until the legitimate interest is confirmed;
• If the processing is unlawful, you can object to the deletion of personal data and request the restriction of their use instead;
• If we no longer need personal data, but you need it to establish, exercise, or defense legal of legal claims.

5. Right to object (Article 21 of the GDPR). You have the right to object to the processing of your personal data based on our legitimate interests. We will not continue to process personal data if we are unable to demonstrate the existence of compelling legitimate grounds for processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
6. Right to lodge a complaint (Article 77 of the GDPR). You can always contact us with any questions regarding the processing of your personal data. However, if you believe that your rights have been violated, you can file a complaint with the Commissioner for the Protection of Personal Data in Cyprus here.

If you are within the EU, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence or place of work. You can find the list of data protection authorities in the EEA here.

Changes and updates to the Notice

We reserve the right to update, modify and amend this Notice to be usually compliant with the data protection laws and for business reasons. The current version of the Privacy Notice will be posted on the Website.