Welcome to the Privacy Policy of Venia Hadjimichael & Co LLC (“VHLaw”). We are committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR) and relevant local laws. This policy outlines how we collect, use, and protect your data when you interact with our website. By using our website, you agree to the terms outlined in this policy.

1. What Data is Collected

We do not collect personal data directly from visitors through the website (vhlaw.cy) except for the following:

• Cookies: We use essential cookies that help ensure the proper functionality of the site. Additionally, we use cookies that require user consent, which may include information such as IP addresses, browser type, and session data. You can manage and modify these preferences via the cookie settings on your browser or by clicking the icon at the bottom of the screen. You can change your consent at any time.
• Contact Form Data: Name, email address, telephone number, and any information you submit through our contact form. This data is collected voluntarily for communication purposes only.
• Usage Data: This includes data such as page visits, session duration, and click interactions to help improve the website and enhance user experience.

2. Data Controller

VHLaw is the Data Controller for any personal data collected via our website (vhlaw.cy).
For any inquiries related to data protection, please contact us at info@vhlaw.cy. 

2.1 Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: When you voluntarily provide personal data or accept cookies.
• Contractual Necessity: To fulfill any inquiries or communication with you.
• Legal Obligation: To comply with legal and regulatory requirements.
• Legitimate Interests: To ensure the security and functionality of our website.

For any inquiries regarding data protection, please contact VHLaw (info@vhlaw.cy) directly. Additionally, you can contact the Commissioner for Personal Data Protection in Cyprus at commissioner@dataprotection.gov.cy.

3. How We Use Your Data

The data we collect is used for the following purposes:

• Functionality: To ensure the website operates securely and efficiently.
• Communication: To respond to inquiries submitted through our contact form.
• Analytics: To improve our website’s performance by analyzing traffic and user interactions.
• User Experience: To remember your preferences and provide a more tailored browsing experience.

4. Data Sharing

We do not sell or rent your personal data. We may share your data with third-party service providers (Data Processors) who assist us in maintaining our website (such as hosting providers). These partners are carefully selected, and they comply with GDPR standards..

5. Data Retention

We retain your personal data only for as long as is necessary for the purposes outlined in this policy unless otherwise required by law. For data submitted through our contact form, we will retain the information for communication purposes until it is no longer relevant.

6. How We Protect Your Data

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure. These measures include encryption, secure storage, access controls, and regular audits. We ensure that third-party processors follow the same level of data protection.

7. Incident Response Policy

In the event of a data breach involving the website’s data (such as personal information collected via contact forms or cookies), we will notify the relevant data protection authorities and affected individuals within the timeframes set by the GDPR. Specifically, we will notify the Data Commissioner of Cyprus within 72 hours of becoming aware of the breach. If a more detailed report is required, it will be provided as soon as possible, within the relevant required timeframe. The report will include the nature of the breach, the affected data, and any corrective actions taken. The Data Controller will also identify the individuals whose data has been affected and notify them promptly, especially if the breach poses a high risk to their rights and freedoms.

If the data breach does not pose a significant risk to the rights and freedoms of the individuals involved, notifications to affected individuals may not be necessary.

8. Children’s Data

We do not knowingly collect data from individuals under the age of 18. Any personal data voluntarily provided by minors (e.g., through the contact form) will only be processed for the purpose of the request submitted, and any such data will be handled with additional precautions.

9. Your Rights

Under the GDPR, you have the following rights:

• Right to Access (Article 15): You may request access to the personal data we hold about you.
• Right to Rectification (Article 16): You may request that we correct any inaccurate data.
• Right to Erasure (Article 17): You may request the deletion of your data if it is no longer needed.
• Right to Restriction of Processing (Article 18): You may request restrictions on data processing under certain conditions.
• Right to Data Portability (Article 20): You may request that we provide your data in a structured, commonly used format.
• Right to Object (Article 21): You may object to the processing of your data, including data collected by cookies.

To exercise any of these rights, please contact info@vhlaw.cy. We will respond to your request in accordance with the GDPR requirements, typically within one month.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience. Cookies are small text files stored on your device when you visit our website. We use essential cookies, which are necessary for the operation of the website, and may use additional cookies that require user consent.

You can manage your cookie preferences through the cookie settings available via the icon at the bottom of the screen. For more information on the cookies we use, please consult our cookie settings page.

11. Third-Party Services

Our website may contain links to third-party websites or services, such as payment processing or event registration, that are not operated by us. We are not responsible for their privacy practices, so please review their respective privacy policies before providing any personal data.

12. Complaint Mechanism

If you have any concerns regarding the processing of your personal data or wish to raise a complaint, we encourage you to contact us directly at info@vhlaw.cy. We are committed to resolving any concerns in a timely and professional manner. Additionally, you have the right to lodge a complaint with a supervisory authority. In Cyprus, this is the Commissioner for Personal Data Protection, who can be reached at commissioner@dataprotection.gov.cy. 

13. Changes to This Policy

We may revise this Privacy Policy from time to time. The revised Privacy Policy will apply to the use of our website from the date of publication of the revised terms and conditions on our website. Please check this page regularly to ensure you are familiar with the current version.

14. Contact Information

For any questions or concerns about this Privacy Policy, you may contact us at:

• Address: 34 Falirou Street, Office 104, 2066 Strovolos, Nicosia, Cyprus
• Call us: +357 22 264 236
• Email us: info@vhlaw.cy