Privacy Policy

This Privacy Policy explains how Nexia Poyiadjis Limited ("we", "us", "our") collects and uses personal data when you visit or contact us through this website (www.nexia.com.cy). It also explains your rights and how to exercise them.

It should be read together with our Cookie Policy, which describes the cookies and similar technologies used on this website and how you can control them.

1. Who we are

Nexia Poyiadjis Limited is the data controller responsible for the personal data described in this policy. If you have any questions, or wish to exercise any of your rights, please contact us at info@nexia.com.cy.

2. Information we collect

a) Information you give us. When you complete a form on this website, subscribe to our newsletter, or send us a CV or job application, we collect the information you provide. This typically includes your name, email address, telephone number, the content of your message, and — for job applications — your CV and any other details you choose to send us.

b) Information collected automatically. Our web server records standard technical information each time the site is accessed, such as your IP address, browser type and version, the pages requested and the time of the request. This information is used only to operate and secure the website and to diagnose faults. It is not used to build a profile of you.

c) What we do not collect. We do not use analytics services, advertising pixels, behavioural tracking or marketing cookies on this website. We do not sell or share personal data for advertising purposes.

3. Cookies and similar technologies

This website uses a small number of technical cookies and, where you consent, loads optional external content such as Google Maps and YouTube. Details of each cookie, how long it lasts and how to change your choice are set out in our Cookie Policy. You can change or withdraw your consent at any time using the "Cookie settings" link in the footer of this website.

4. Why we use your information

To respond to your enquiry — for example a question sent through our contact form. Lawful basis: our legitimate interest in responding to you, and your consent where you have given it.

To consider a job application — to assess your suitability for the role you have applied for. Lawful basis: our legitimate interest in recruitment, and steps taken at your request before entering into a contract.

To send you our newsletter — where you have subscribed to it. Lawful basis: your consent. You can unsubscribe at any time using the link in any newsletter, or by contacting us.

To operate and secure the website — including fault diagnosis and protection against abuse. Lawful basis: our legitimate interest in keeping the website available and secure.

To meet our legal obligations — for example accounting, tax and record-keeping requirements. Lawful basis: compliance with a legal obligation.

5. How long we keep your information

We keep personal data only for as long as it is needed for the purpose it was collected for, and then delete or anonymise it. Enquiries are normally kept for up to 24 months. Job applications are normally kept for up to 12 months. Newsletter subscriptions are kept until you unsubscribe. Server logs are kept for a short period for security and troubleshooting purposes.

6. Who we share it with

We do not sell, rent or trade personal data. We share it only where necessary, and only with:

service providers who help us operate the website and our business — for example our hosting provider and our email provider — acting on our instructions;
our webfont provider, Monotype (fast.fonts.net), whose delivery service is protected by Cloudflare. This involves a technical security cookie, __cf_bm, used to filter automated traffic;
Google and YouTube, but only where you have consented to optional external content and such content is actually loaded;
professional advisers, and public authorities, where we are required by law to do so.

Anyone processing personal data on our behalf is required to keep it confidential and to use it only for the purposes we specify.

7. International transfers

Some of our service providers may process personal data outside the European Economic Area. Where that happens, we take steps to ensure your data receives an equivalent level of protection — for example by relying on an adequacy decision of the European Commission, or on standard contractual clauses.

8. Your rights

You have the right to:

be told what personal data we hold about you, and to receive a copy of it;
have inaccurate or incomplete data corrected;
have your data erased, where there is no good reason for us to continue to hold it;
ask us to restrict how we use it, or to object to certain uses;
receive the data you gave us in a portable format, or have it sent to another organisation;
withdraw any consent you have given at any time. This does not affect processing carried out before you withdrew it.

To exercise any of these rights, contact us at info@nexia.com.cy. We will respond within one month. We may ask you to confirm your identity first.

9. How to complain

If you are unhappy with how we have handled your personal data, please contact us first so that we can try to put it right. You also have the right to lodge a complaint with the supervisory authority in Cyprus, the Commissioner for Personal Data Protection (www.dataprotection.gov.cy).

10. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration. Data submitted through this website is transmitted over an encrypted connection (HTTPS). No method of transmission or storage is completely secure, but we work to protect your information and to limit access to those who need it.

11. Changes to this policy

We may update this Privacy Policy from time to time, for example if our services or the law change. The current version is always the one published on this page.

12. Contact

Questions, requests and complaints about privacy can be sent to info@nexia.com.cy.