Privacy Policy

2. Who We Are

For the purposes of applicable data protection legislation, including the EU General Data Protection Regulation (GDPR), the data controller responsible for personal data collected through this website is:

Company name: KSENOS GroupRegistered address: Troodous 2, Agios Athanasios, 4100, Limassol, CyprusEmail: info@ksenos.com.cyWebsite: https://www.ksenos.com.cy/

For any questions about this Privacy Policy or the handling of your personal data, you can contact us using the details above.

3. Personal Data We Collect

The personal data we collect depends on how you interact with our website and our Group.

3.1 Information You Provide to Us

When you contact us, submit an enquiry or communicate with us, we may collect:

• Your name and surname.
• Your email address and telephone number.
• The company or organisation you represent, where applicable.
• The subject and content of your enquiry or message.
• Any other information you voluntarily choose to provide.

Please avoid including sensitive personal information in website forms or general correspondence unless it is specifically required and requested.

3.2 Information Collected Automatically

When you visit our website, certain technical information may be collected automatically, depending on the website's configuration and your cookie preferences. This may include:

• Your IP address.
• Browser type and version.
• Device and operating system information.
• Pages visited and interactions with the website.
• Date, time and duration of your visit.
• Referring website or source of your visit.
• Cookie identifiers and related usage information.

We use this information where necessary to operate, maintain, secure and improve our website and understand how visitors use it.

3.3 Information from Other Sources

We may receive information about you from publicly available sources, business contacts or third-party platforms when this is relevant to a legitimate business interaction with you and permitted by applicable law.

For example, if you contact us through a social media platform, we may receive the information associated with your message or profile that the platform makes available to us.

4. How We Use Your Personal Data

We may process your personal data for the following purposes:

• Responding to enquiries: To answer questions, respond to requests and provide information about KSENOS Group and its businesses.
• Business communications: To communicate with clients, prospective clients, partners, suppliers and other business contacts.
• Website operation: To maintain the functionality, performance and accessibility of our website.
• Website analytics: To understand website traffic and visitor behaviour and improve our online content, where applicable and permitted.
• Security and fraud prevention: To protect our website, systems, business and visitors against unauthorised access, misuse and security threats.
• Legal compliance: To comply with applicable legal obligations and respond to lawful requests from competent authorities.
• Marketing communications: To send corporate news, updates or promotional communications where permitted by law and, where required, with your consent.

We will not use your personal data for purposes incompatible with those explained in this Policy without providing further information where required.

5. Legal Bases for Processing

Under the GDPR, we process personal data only where an appropriate legal basis applies. Depending on the circumstances, these bases may include:

• Consent: Where you have given consent, for example for certain non-essential cookies or marketing communications.
• Legitimate interests: Where processing is necessary for our legitimate business interests, such as responding to general business enquiries, maintaining website security or improving our services, provided those interests do not override your rights.
• Pre-contractual steps or contractual necessity: Where processing is necessary to respond to a request you make before entering into a contract or to perform a contract.
• Legal obligations: Where processing is necessary to comply with applicable law.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to ensure the website functions properly, remember preferences, analyse website traffic or support other website features.

Cookies may include:

• Strictly necessary cookies: Required for the website to operate or provide a service you request.
• Preference cookies: Used to remember settings and preferences.
• Analytics cookies: Used to understand how visitors interact with the website.
• Marketing cookies: Used to measure or support advertising and marketing activities, if these technologies are implemented.

Where required by law, we will request your consent before placing non-essential cookies or using similar technologies. You can manage your preferences through the website's cookie settings, where available.

You may also manage cookies through your browser settings. Disabling certain cookies may affect some website functionality.

For further information about the specific cookies used on this website, please consult our Cookie Policy or cookie preference tool, if available.

7. How We Share Personal Data

We do not sell your personal data.

We may share personal data where necessary and lawful with the following categories of recipients:

• Companies within the KSENOS Group: Where necessary to direct your enquiry to the relevant business or respond to your request.
• Service providers: Such as website hosting providers, IT support providers, email service providers and website analytics providers.
• Professional advisers: Including legal, accounting and other professional advisers where necessary.
• Public authorities: Where disclosure is required by law or is necessary to protect our legal rights.
• Business transaction parties: In connection with a proposed or completed merger, restructuring, acquisition or sale of relevant business assets, subject to applicable legal requirements.

Third-party service providers may process personal data on our behalf and are required to handle it in accordance with applicable data protection obligations.

Where we share personal data with another company within the Group, the receiving company will process it in accordance with applicable law and any relevant privacy notice.

8. International Data Transfers

Some of our service providers or business partners may process personal data outside Cyprus or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will ensure that the transfer complies with applicable data protection legislation. Depending on the circumstances, this may involve transferring data to a country recognised by the European Commission as providing an adequate level of protection or implementing appropriate safeguards, such as Standard Contractual Clauses.

You may contact us for further information about applicable safeguards, where relevant.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including responding to enquiries, maintaining business records, complying with legal obligations and resolving disputes.

Retention periods depend on the nature of the information, the purpose of processing and any applicable legal requirements.

When personal data is no longer required, we will take reasonable steps to delete it or securely anonymise it, in accordance with applicable law.

10. Data Security

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

These measures may include access controls, appropriate security procedures and the use of reputable service providers.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure. While we take reasonable steps to protect personal data, we cannot guarantee absolute security.

11. Your Data Protection Rights

Subject to applicable law and the circumstances of the processing, you may have the right to:

• Access your personal data and obtain a copy.
• Rectify inaccurate or incomplete personal data.
• Erase your personal data where the legal conditions for erasure are met.
• Restrict the processing of your personal data in certain circumstances.
• Object to processing based on legitimate interests, including certain forms of direct marketing.
• Data portability, where the applicable legal conditions are met.
• Withdraw consent where processing is based on your consent.

To exercise these rights, please contact us using the details in Section 2. We may need to verify your identity before responding.

You also have the right to lodge a complaint with the competent data protection supervisory authority. In Cyprus, this is the Office of the Commissioner for Personal Data Protection.

Website: https://www.dataprotection.gov.cy/

12. Marketing Communications

If we send you marketing communications, we will do so in accordance with applicable law.

Where consent is required, we will obtain it before sending such communications. You may unsubscribe or object to direct marketing at any time by using the unsubscribe link provided in the message, where available, or by contacting us directly.

Even if you opt out of marketing communications, we may still send you non-marketing messages where necessary, such as responses to enquiries or communications relating to an existing business relationship.

13. Third-Party Websites and Services

Our website may contain links to websites, platforms or services operated by third parties, including the websites of individual KSENOS Group companies and external business partners.

These third parties may have their own privacy policies and data handling practices. We do not control third-party websites and are not responsible for their privacy practices.

We encourage you to review the relevant privacy policy before providing personal data through any third-party website or service.

14. Children's Privacy

This website is intended for a general audience and is not specifically directed at children.

We do not knowingly collect personal data from children where doing so would be contrary to applicable law. If you believe that a child has provided personal data to us inappropriately, please contact us so that we can assess the situation and take any necessary action.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, business activities, data processing practices or legal requirements.

Any updated version will be published on this page with a revised “Last updated” date. We encourage you to review this page periodically.

16. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights or would like further information about how we handle personal data, please contact:

KSENOS GROUPEmail: info@ksenos.com.cyAddress: Troodous 2, Agios Athanasios, 4100, Limassol, CyprusWebsite: https://www.ksenos.com.cy/

We will handle your request in accordance with applicable data protection legislation.