Privacy Policy

LACON LTD (“LACON”, “we”, “us”) respects the privacy and protection of the personal data of its customers, partners, website visitors and any person who communicates with us.

This Privacy Policy explains how we collect, use, store and protect personal data, as well as your rights under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the applicable legislation of the Republic of Cyprus.

1. Data Controller

The controller responsible for the processing of the personal data described in this Policy is:

LACON LTD 118B Strovolos Avenue, Apartment 401 2042 Strovolos, Nicosia Cyprus

Telephone: +357 22499640 Email: laconcy@lacon.cy

For any matter concerning the protection of your personal data or the exercise of your rights, you may contact us using the above details.

2. Personal data we may collect

Depending on the way in which you communicate or cooperate with LACON, we may process different categories of personal data.

These may include:

identification details, such as your full name; contact details, such as your address, telephone number and email address; professional information, such as your company, capacity or job position; information you provide when communicating with us or submitting a request; information required for the provision of LACON's audit, inspection, certification or other services; information contained in applications, contracts, certificates, audit reports and related documents; billing and transaction information; information you provide in connection with a job application, such as your CV, professional experience, education and contact details; technical data generated when you visit our website, such as your IP address, device or browser information and data relating to the operation and security of the website; and other information you voluntarily provide to us.

We do not seek to collect special categories of personal data through our public website unless this is necessary and permitted by applicable law.

3. How we collect personal data

We may collect personal data:

directly from you when you communicate with us by telephone or email; when you submit a request or application to LACON; when you apply for or receive our services; during our contractual or professional relationship; in the context of audits, inspections and certification procedures; when you apply for employment; through your use of our website; from organisations, businesses or other persons with whom you cooperate, where this is necessary for the provision of our services; and from publicly available sources or competent authorities, where this is permitted or required by law.

4. For what purposes we use your data

LACON may process personal data for purposes such as:

managing requests and communications; providing information about our services; managing customers and partners; evaluating applications for services; entering into and performing contracts; planning and conducting audits and inspections; assessment and certification procedures; issuing and managing certificates and related documents; managing complaints, appeals and other requests; invoicing, accounting and financial management; complying with legal, regulatory and accreditation requirements; maintaining records required in connection with our activities; managing job applications and recruitment procedures; ensuring the security of our information systems and website; preventing misuse, fraud or other unlawful activities; establishing, exercising or supporting legal claims; and improving the operation and security of our website and services.

5. Legal bases for processing

Personal data is processed only where there is an appropriate legal basis under the GDPR.

Depending on the circumstances, processing may be necessary:

For the performance of a contract or in order to take steps prior to entering into a contract, for example when you apply for certification or audit services.

For compliance with a legal obligation, where LACON is required to retain or process specific information under legislation or other binding obligations.

For the purposes of the legitimate interests of LACON or a third party, where such interests are not overridden by your rights and freedoms. Such interests may include the security of our systems, the administrative operation of the company, the protection of our legal rights and the improvement of our services.

On the basis of your consent, where the law requires consent for a specific processing activity.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. With whom we may share personal data

We do not sell personal data.

Where necessary and lawful, personal data may be disclosed to:

authorised LACON personnel and partners; information systems, hosting and technical-support providers and other service providers; accountants, auditors, legal advisers and other professional advisers; laboratories or other external partners where required in connection with a specific service; accreditation bodies, competent authorities or supervisory organisations where required; public authorities, courts, police or other competent authorities where there is a relevant legal obligation or lawful request; and other recipients where you have requested or authorised the relevant disclosure.

Partners who process personal data on our behalf are required, where applicable, to process such data in accordance with our instructions and to implement appropriate safeguards.

7. Transfers of data outside the European Economic Area

Certain technology or other service providers that we use may process data outside the European Economic Area.

Where such a transfer takes place, we apply an appropriate mechanism provided for under the GDPR, where required, such as an adequacy decision of the European Commission or appropriate contractual safeguards.

For further information regarding specific transfers and the relevant safeguards, you may contact us.

8. Retention period

We retain personal data only for as long as necessary for the purpose for which it was collected.

The retention period may depend, among other things, on:

the duration of the contractual or professional relationship; the requirements of the applicable certification or accreditation scheme; tax, accounting or other legal obligations; limitation periods; the need to establish, exercise or defend legal claims; and security and business-continuity requirements.

After the required retention period has expired, the data is deleted or anonymised unless there is a lawful reason for its further retention.

9. Security of personal data

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful access, use, alteration, disclosure, loss or destruction.

Access to personal data is restricted to persons who require it for the performance of their duties and is subject to appropriate access controls and confidentiality obligations.

10. Your rights

Under the GDPR and subject to the conditions provided by law, you may have the right to:

Access the personal data concerning you.

Rectification of inaccurate or incomplete personal data.

Erasure of your personal data in certain circumstances.

Restriction of the processing of your data.

Object to processing, particularly where it is based on legitimate interests.

Data portability, where the relevant conditions are met.

Withdraw your consent at any time where processing is based on consent.

Lodge a complaint with the competent supervisory authority.

These rights are not absolute and, in certain circumstances, may be restricted by applicable law.

To exercise any of the above rights, you may contact us at laconcy@lacon.cy.

We may request additional information where necessary to verify your identity before satisfying a request.

The rights of access, rectification, erasure, restriction, objection and portability are central requirements of the GDPR.

11. Automated decision-making

LACON does not use, through this website, solely automated decision-making that produces legal effects concerning you or similarly significantly affects you.

If this changes in the future, the information and safeguards required by applicable law will be provided.

12. Cookies and website technologies

The website may use cookies or similar technologies that are necessary for its operation, security or other functions.

Further information regarding the cookies used, their purposes and the available choices will be provided in the separate Cookie Policy.

13. Third-party links and services

Our website may contain links to third-party websites or services.

LACON does not control the personal-data protection practices of independent third parties. We recommend that you review the relevant privacy policies when visiting external websites or using third-party services.

14. Job applications

When you apply for employment with LACON through our website, we may process information such as your full name, email address, telephone number, country of residence, CV or a link to it, cover letter, information concerning your education, professional experience and professional qualifications, as well as information concerning your salary expectations and any other information you choose to provide to us as part of your application.

This data is used to assess your suitability for the specific job position, communicate with you and manage the selection and recruitment process.

Processing is generally carried out because it is necessary in order to take steps at your request prior to entering into a potential employment contract and, where applicable, for the purposes of LACON's legitimate interests in connection with the recruitment process.

If we wish to retain your application or CV for possible future job opportunities beyond the specific recruitment process, the appropriate legal basis will apply and, where required, your consent will be requested.

15. Right to lodge a complaint

If you believe that the processing of your personal data infringes applicable law, you have the right to lodge a complaint with the competent supervisory authority.

In the Republic of Cyprus, the competent supervisory authority is the Office of the Commissioner for Personal Data Protection.

Office of the Commissioner for Personal Data Protection

The Commissioner's current official website lists the following contact details:

Nicosia 1061 P.O. Box 23378 1682 Nicosia Telephone: +357 22 818456 Email: commissioner@dataprotection.gov.cy

16. Changes to this Policy

LACON may amend this Privacy Policy where necessary due to changes in legislation, our services, the technologies we use or the manner in which personal data is processed.

The current version will be published on this page and will state the date of the latest update.