We PETROLINA SOLAR LIMITED are a member entity of Lefkaritis Private Group as noted in Section 1. Who we are - Petrolina Group and we have endorsed and apply this Privacy Policy Statement.
___________________________________________________________________
Petrolina Group (or “Petrolina”) is committed to protecting your privacy and handling your personal data in a transparent and legal manner. The personal data that we collect, and process will vary depending on the product or service we provide to you or to any other legal relationship with you. This notice statement applies to personal information held by members of the Petrolina Group as data controllers, as described below. It continues to apply even if your agreement or relationship and services with us ends.
This privacy policy statement (“Privacy Policy’’ or “Statement”) applies to Petrolina Limited, its subsidiaries and all of the affiliates within Petrolina Group (please refer to Section 1. Who We Are).
We have developed this Statement to explain our practices regarding the personal information we collect from you or about you either through our websites or via our apps, or due collaboration (or intended cooperation or collaboration with Petrolina Group) through written or other form of communications with any member of Petrolina Group, when you visit either of Petrolina Group properties, or from other sources (such as through social media).
Specifically, this Privacy Policy:
For the purposes of this Privacy Policy:
Notice: Some of the links on our websites lead to other Petrolina Group entities or non- Petrolina websites with their own privacy notices, which may be different to this notice. You will need to make sure you are happy with their privacy notices when using those other sites.
Petrolina Group (or “Petrolina”) is a group of affiliated entities by virtue of shareholding or common management control or affiliation under Petrolina Limited (a private limited company, registered in the Republic of Cyprus under registration number HE856, having its registered office and head offices at 1 Kilkis, 6015 Larnaca, Cyprus).
Petrolina Group consists and is segregated in two sub-groups of companies; (i) “Petrolina Public Group” – those companies controlled by or directly associated or subsidiaries to Petrolina (Holdings) Public Ltd (a public listed company in the Cyprus Stock Exchange (CSE), registered in the Republic of Cyprus under registration number ΗΕ1018, having its registered office and head offices at 1 Kilkis, 6015 Larnaca, Cyprus) and (ii) “Lefkaritis Private Group”
– those private companies affiliated or controlled or being subsidiaries of Petrolina Ltd and in which Petrolina (Holdings) Public Ltd has no direct shareholding.
Petrolina Public Group |
Lefkaritis Private Group |
Petrolina (Holdings) Public Ltd |
Petrolina Ltd |
Petrolina Aviation Ltd |
Lefkaritis Bros Ltd |
P&S LPG Gas Ltd |
Linco Insurance Agent, Sub-agent and Consultants Ltd |
PPT Aviation Services Ltd* |
Famagusta Citrus Waste Control Company Ltd |
LCA Aviation Fueling System Ltd* |
Lefkaritis Industries Ltd |
VLPG Plant Ltd* |
Petrolina Solar Ltd |
Hellenic Aviation Fueling Company |
Petrolina Electric Ltd |
SA* |
|
Petrolina Terminals Ltd |
Petrolina Energy Ltd |
|
Centragaz Ltd |
|
Petrogaz Ltd |
|
Agip Cyprus Co Ltd |
|
Petrolina Crude Oil Trading Ltd |
|
Lefkaritis Estates (Pyla) Ltd |
|
Hassapis & Lefkaritis (Adm) Ltd |
|
Lefkaritis Bros Ocean Ltd |
For the purposes of this Privacy Policy, when we refer to Petrolina Group, we refer to all the above mentioned companies, in the sub-group structure depicted, except for those companies marked (*) which have their own, separate privacy policy statements due to their business model and operational structure.
This Privacy Policy relates to personal data collected and enforced by any Petrolina Group member listed above and any other entities that may at any time become affiliated with Petrolina Limited and are to be included herein as the case may be; and as this Privacy Policy shall be updated and revised from time to time.
If you have any questions about our privacy statement or wish to obtain more details in relation to the personal data we hold and process about you, please contact our Data Protection Officer in writing at 1 Kilkis, 6015 Larnaca, Cyprus or via email at DataProtection@lefkaritisgroup.com.cy or via telephone at 24 84 80 00.
We obtain your personal data mainly through any information you provide directly to us or through information provided by third parties. Below is a list of ways in which we collect your personal data.
a. Personal data collected directly from you, including:
b. Personal data collected from other sources, including:
c. Personal data collected from publicly available sources, including:
We may collect the following personal data from you depending on the product or service we provide to you or which we receive from you:
Recording: To help keep you and our business interests safe (including our premises and use of business secrets), we may record details of your interactions or working with us. We may keep track of conversations you have with us including phone calls, face-to-face meetings, letters, emails, applications, live chats, video chats and any other kinds of communication. We
may use these recordings to check your (or our) instructions to us (to you), assess, analyse, and improve our service, train our people, manage risk or to prevent and detect fraud and other crimes. We may also capture additional information about these interactions, e.g. telephone numbers that you call us from (or use of our devices made available to you in the course of our business or products) and information about the devices or software that you use in relation to offering services or products to us or vice versa.
We shall process and use your information where we have your consent, or we have lawful reason for using it subject to applicable law. Most commonly, we will use your personal data in the following circumstances:
a. Where we need to perform the contract or arrangement we have entered or agreed with you or in order to take certain steps prior to entering into a contract with you
Processing is necessary for us in order to provide you with our products or services or information, and more specifically in order to:
b. Where we need to comply with a legal obligation
When we are required to comply with certain legal and regulatory obligations which may involve the processing of personal data. Such obligations and requirements impose on us necessary personal data processing activities for compliance with customs department, port authorities, airport authorities, other governmental regulatory bodies, court orders, tax law and/or or other reporting obligations (e.g. regulatory compliance credit checks from credit institutions or other authorities are carried out in the context of combating money laundering and fraud) for carrying out our business and be compliant with regulatory obligations imposed on us.
c. Where we have appropriate legitimate interests to use your personal data
In some cases, we may process your personal data to pursue legitimate interests of our own or those of third parties, provided your interests and fundamental rights are not overridden by our interests. More specifically, we may process your personal data in order to:
d. Where you have given us your consent
In some cases, you will have given us your consent to the processing your personal data for one or more specific purposes (e.g. for marketing purposes). You may withdraw your consent to such processing at any time. Please note that any processing that was carried out prior to the withdrawal of your consent shall not be affected in any way.
If you wish to withdraw your consent you should notify our Data Protection Officer in writing at 1 Kilkis, 6015 Larnaca, Cyprus or via email at DataProtection@lefkaritisgroup.com.cy.
4.2 Sensitive data
We will only process sensitive data if one of the following conditions is met:
We may share your personal data with third parties as listed below. When we do so, we request from such third parties to have appropriate technical and organisational measures in place to protect your personal data. We will not share any of your personal data for any purpose other than the purposes described in this Privacy Policy, nor will we sell your personal data to anyone.
Although we do not share any of your personal data with recipients located in third countries (i.e. countries outside the European Economic Area (EEA)), in case we ever do, we will require recipients in third countries to comply with European data protection standards and to provide appropriate safeguards in relation to the transfer of your data in accordance with GDPR.
We use a range of administrative, technical, and technological measures to keep your information safe and secure both physically and electronically. We require our staff and any third parties who carry out any work on our behalf or at our premises or servers to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.
We may use your personal data to tell you about products, services and offers that may be of interest to you or your business.
Marketing: The personal data that we process for this purpose consists of information you provide to us and data we collect and/or infer when you use our services or buy our products or submitted through our social media or apps. We will use your information to provide you with information about Petrolina Group products and services, and products and services from our partners. This includes marketing by post, email, telephone, text, secure messages or advertising to you and other people online and on social media. We study all such information to form a view on what we think you may need or what may interest you. We can only use your personal data to promote our products and services to you if we have your explicit consent to do so.
Market Research: We may use your information for market research and to identify trends. Market research agencies acting on our behalf may get in touch with you by post, telephone, email, or other methods of communication to invite you to take part in research. We will not invite you to take part in research using a communication method if you have asked us not to get in touch that way. Any responses that you provide whilst participating in market research will be reported back to us anonymously unless you give us permission for your details to be shared.
You have the right withdraw your consent to the processing of your personal data for marketing purposes. If you wish to withdraw your consent you should notify our Data Protection Officer in writing at 1 Kilkis, 6015 Larnaca, Cyprus or via email at DataProtection@lefkaritisgroup.com.cy or by visiting the Data Protection section on our website.
Unless a longer retention period is required by applicable laws, we will retain your information for as long as we have a business relationship with you.
Once our business relationship with you has ended, we may keep your personal data for the longest of the following periods:
In principle we normally keep data for a period of seven (7) years from the end of our relationship with you. This enables us to comply with legal and regulatory requirements or use it where we need to for our legitimate purposes such as processing any disputes or claims pending for any services or products.
We may need to retain your information for a longer period where we need the information to comply with regulatory or legal requirements or where we may need it to protect legitimate company interests (e.g. statute of limitations periods).
You have the following rights in terms of the personal data and information we hold about you:
Exercise of Your Rights: To exercise any of your rights, or if you have any other questions about our use of your personal data, please contact our Data Protection Officer using the contact details set out in Section 1 of this Privacy Policy or may complete the relevant Form posted on our website or by visiting our offices or by telephone. We aim to respond to your request as quickly as possible. In some instances, this could take up to one month (if legally allowed). Should we require more time to complete your request, we will let you know how much longer we need and provide reasons for the delay.
In certain cases, we may deny your request. If it is legally permitted, we will let you know in due course why we denied it. We endeavour to address all requests promptly. Should you not be satisfied with the way we have responded to your concerns you have the right to submit a complaint to us (please refer to Section 10. Right to complain).
Accuracy of personal data information: We endeavour to keep personal data collected as accurate, complete, and current taking into consideration the purposes for which it was collected and is being used.
We rely on you to maintain the accuracy and completeness of the personal data provided by you and so you should inform us if your personal details change, including the context in which the personal data was provided, e.g. in connection with promotion of a specific product or service or employment application.
If you have exercised any or all of your data protection rights, or otherwise still feel that your concerns about the use of your personal data have not been adequately addressed by us, you have the right to complain by contacting our Data Protection Officer using the contact details set out in Section 1 of this Privacy Policy or visiting the Data Protection section on our website. You also have the right to complain to the Office of the Commissioner for Personal Data Protection. You can visit their website at https://www.dataprotection.gov.cy.
We may amend and update this Privacy Policy from time to time without prior notice.
We will post the changes on this Privacy Policy on our website and update the revision date at the bottom of this page. We do however encourage you to review this statement periodically as to be always informed about how we are processing and protecting your personal information.
We do not use automated decision making. Automated decision making means a decision that produces legal effects concerning you or which significantly affects you and which is based solely on automated processing of data (i.e. no human intervention in the process).