Privacy Policy

Privacy Policy

ORGANIZATION ASSISTING SERVING INTENTIONALLY STRAGERS (OASIS)

Privacy Policy - GDPR

PREAMBLE

This Privacy Policy shall be in effect from the 25th of May of the year 2018 and shall incorporate each and all of the terms and conditions stipulated and/or dictated within the parameters of the General Data Protection Regulation (EC Regulation No. 679/16).

This Privacy Policy shall be updated and/or amended from time to time to effect and be in line with all and any amendments of the relevant legislation and/or EC regulations.

Our organization is a Non-Profit Association legally registered according to the Laws and regulation of the Republic of Cyprus, with registration number ΛΑΡ/Σ/21 and having its registered address in Larnaca, Cyprus.

Our organization, operates according to strict ethics and fully abides to the provisions of the Laws and Regulations of the Republic of Cyprus and the European Community Regulations and Directives.

Our organization operates a website which includes and/or requires the registration and input of personal data from users and as such, our officers are obliged to collect and process under strict confidence and in full compliance with the GDPR, all and any of the following personal information.

Please read thoroughly and fully this PRIVACY POLICY.

By reading this PRIVACY POLICY and by proceeding and/or accepting or confirming reading it, you hereby agree and affirm that you have provided your full and express consent to us and/or our officers authorized by the Association to collect, reserve and process your personal data.

By reading this PRIVACY POLICY and by proceeding and/or accepting or confirming reading it, you hereby agree, affirm and acknowledge your rights and obligations regarding the provision and processing of your personal data and your exclusive right to withdraw the aforementioned consent at any time provided that you inform our officers in writing.

Introduction

Personal data (usually referred to just as "data" below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.

Refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.

This privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control.

As well as this privacy policy, supplementary notices and/or amendments to this policy may be introduced from time to time and may contain further information in order to reflect local practices and applicable legal requirements and/or contain further contact details regarding the processing of personal data by our officers.

This privacy policy, explains what personal data is collected and processed, for which purposes do we process such data, how long we hold the personal data for, how to access and update your personal data, the options you have regarding your personal data and where to go for further information.

The rights of users and data subjects

With regards to the data processing to be described in more detail below, users and data subjects have the right:

• to confirm of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data

• to correct or complete incorrect or incomplete data

• to the immediate deletion of data concerning them or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;

• to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers

• to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR.

However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients. Likewise, users and data subjects have the right to object to the controller's future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

Security of your personal information

Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

Server data

For technical reasons, the following data sent by your internet browser to us or to our server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site.

The data thus collected will be temporarily stored, but not in association with any other of your data. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.

The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.

Why do we process any of our customers’ Personal Data – Personal information?

The personal data covered by this Privacy Policy is only processed:

• with your express and explicit consent; or • where it is necessary for any of our officers to comply with a legal obligation.

Where the processing of any of the user’s personal data is based on his/her express and explicit consent provided by visiting our store or website, you have the right to withdraw your consent at any time by notifying us in writing by any of the following method by emailing us at EMAIL

Your withdrawal shall not affect the validity of any of the processing prior to the withdrawal of your express consent.

Cookies and similar technologies

Our websites use “cookies” and similar digital and HTML technologies that collect and store information when you visit any of our websites. This is to enable us to identify your internet browser and collect data on your use of our website, which pages you visit, the duration of your visits and identify these when you return so that we can improve your experience when visiting our website(s).You can control and set your cookies preferences by setting your browser settings.

a) Session cookies

We use cookies on our website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address.

This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages or to offer a shopping cart function.

The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.

If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.

When you close your browser, these session cookies are deleted.

b) Third-party cookies

If necessary, our website may also use cookies from companies with whom we cooperate for the purpose of advertising, analyzing, or improving the features of our website. Please refer to the following information for details, in particular for the legal basis and purpose of such third-party collection and processing of data collected through cookies.

c) Disabling cookies

You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support. Browser settings cannot prevent so-called flash cookies from being set. Instead, you will need to change the setting of your Flash player. The steps and measures required for this also depend on the Flash player you are using.

If you have any questions, please use the help function or consult the documentation for your Flash player or contact its maker for support.

If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.

Communication and marketing

If you contact us via email or by the contact form, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all.

Please note that any such communication from our part shall effectively stop as soon as we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.

Newsletter

If you register for our free newsletter, the data requested from you for this purpose, i.e. your email address and, optionally, your name and address, will be sent to us. We also store the IP address of your computer and the date and time of your registration. During the registration process, we will obtain your consent to receive this newsletter and the type of content it will offer, with reference made to this privacy policy. The data collected will be used exclusively to send the newsletter and will not be passed on to third parties.

You may revoke your prior consent to receive this newsletter under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent or click on the unsubscribe link contained in each newsletter.

Right to data portability

You have the right to receive any of the personal data that concerns you and which you have provided to us, in a structured, digital form and transmit such data to another party, if this is technically feasible. Please contact us at PHONE NUMBER or at EMAIL in this respect.

Right to lodge a complaint

If you have any issues, queries or complaints regarding the processing of your personal data, please contact us at PHONE NUMBER or email us at EMAIL, for further information or for submitting such requests.

Special Notice – if you are under 18 years old. (a) The statutory age of adulthood in the Republic of Cyprus is 18th year of age of each individual. (b) Any person younger than 18 years of age is considered by law to be a minor. (c) We do not intentionally collect and/or process any personal data of those under 18 years of age. (d) If any of the viewers of this Website are under 18 years age, please do not send us your any of your personal data (for example, your name, address and email address). (e) No one under the age of 18 years shall be entitled to be registered as a member of our WEBSITE.

  1. Which Personal Data do we collect? (a) Our officers may collect personal data about of USERS visiting this Website.

(b) The Personal Data and/or Personal Information collected and processed by our officers may consist of:

1.1 Personal Data and/or Information provided to us by any customer registering with our loyalty program. (a) When each USER applies to be registered with our website or volunteer program, we will ask for his/her full name, date of birth, and email address, physical and/or correspondence address and mobile phone number.

(b) We may also request further personal data necessary for the performance of such services and/or the completion of questionnaires and surveys regarding our services and our purposes.

(c) Such information may include electronic device information, IP addresses, log-in information, browser type and preferences (should any of the purchases be online or through any of our websites and/or affiliates and/or associate website and online order points), location information, online identifiers to enable ‘cookies’ and similar technologies.

(d) Each customer’s purchase history may be collected and reserved and may include data regarding (i) specific products you buy, (ii) the total amount of your purchases per transaction, (iii) the time and place of the purchases you make and (iv) the payment method you use.

  1. USERS’ Personal Data. (a) We aim to keep and safeguard your personal data and/or personal information as accurate as possible. (b) You can access your personal data at any time, request correction or deletion of all or of any part of your personal data provided to us (but only where it is no longer required for a legitimate business purpose such as completing a retail transaction) or request that the processing of the personal data is restricted. (c) Such amendments can be carried out at any time by amending the forms you had completed and signed upon your registration, and/or by emailing us at the email addresses indicated above.
  2. Right to data portability You have the right to receive any of the personal data that concerns you and which you have provided to us, in a structured, digital form and transmit such data to another party, if this is technically feasible. Please contact us at PHONE NUMBER or EMAIL in this respect.
  1. Security of your personal information (a) Our ORGANIZATION is using and has implemented technology and policies with the objective of protecting your private and personal data and information provided to us and kept at our premises. (b) Your personal data and/or personal information is filed and stored using an encryption in our servers and all hard copies are stores in a secured and locked location at our premises. (c) We safeguard your personal data and/or personal information from unauthorised access and improper use at all times.
  2. Who will you share my personal data with? (a) Your personal data is exclusively processed for the purposes referred to above and will only be shared on a strict need to know basis with: • Any competent public authority, government, regulatory or fiscal agency where it is necessary to comply with any legal or regulatory obligation to which are subject to or as permitted by applicable local law; • Any person to whom we may presently and/or in the future transfer any of its rights and/or duties. (b) Except as set out in this Privacy Policy, we will not disclose any personal data without your permission unless we are legally entitled or required to do so or if we believe that such action is necessary to protect and/or defend our rights, property or personal safety and those of our customers or other individuals. Only if we are required to do so by law, will your personal data be provided to supervisory agencies, fiscal authorities and investigative agencies.
  3. If you communicate with us through social media (a) If you choose to interact with us or our products and services through social media such as LinkedIn, Facebook and/or Twitter, your personal data (such as your name and the fact that you are interested in our Companies and/or our products) may also be visible to all the visitors of your personal webpage on LinkedIn, Facebook and/or Twitter, according to your privacy settings on the social media services.

We are NOT responsible for the processing of such personal data or the privacy policy of such social media websites. (b) When you communicate with us through social media (for example, when you post a comment, upload media, send a personal message or become a fan of us and/or any of our social media pages by clicking the "Like" button, we may indirectly receive personal data and/or personal information about you (such as your (user) name, profile photo, your hometown, your email address and your gender). We will use the data received from social media in accordance with this Privacy Policy.

  1. How long do we retain your data. (a) Any Personal data and/or personal information collected and processed by us and/or our officers, shall be processed according to this Privacy Policy and shall be deleted or rendered anonymous (such that it will no longer be possible to identify you) on the following instances: • Immediately upon receiving your proper withdrawal of consent in writing and in accordance to the provisions of this Privacy Policy OR • If we don’t receive any such notice of withdrawal from you, within 36 months from the date of your last recorded purchase of our products using your loyalty card. • In relation to your financial transactions your personal data may be held for a period of 10 years from the transaction and/or as we are legally obliged by any tax or other authorities of the Republic of Cyprus.
  2. Changes to this Privacy Policy (a) This Privacy Policy may be changed and/or amended and or replaced from time to time. (B) You are advised to regularly review this Privacy Policy for possible changes but if the changes are significant, we will provide you with an appropriate notice, including e-mail or an SMS notification if necessary.
  3. Customer Choices & Obligations Regarding any personal data that we are processing as aforementioned: • Delete Data: You can ask us to erase or delete all or some of your personal data (e.g., if it is no longer necessary to provide Services to you) by contacting us at PHONE NUMBER or EMAIL • Change or Correct Data: You can edit and/or ask us to change, update or fix your data in certain cases, particularly if it’s inaccurate and/or if any of your personal data has been altered and/or amended. • Object to, or Limit or Restrict, Use of Data: You can ask us to stop using all or some of your personal data (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your personal data is inaccurate or unlawfully held).