1. FRANGOS & ASSOCIATES LLC(“we”,“us” or “our” in this privacy notice) respects your personal data and commits to being transparent during the data collection and processing. We also commit to operating in compliance with the Cypriot or European Legislation in the areas of personal data processing, privacy and data security. The legislation includes, inter alia, the General Data Protection Regulation (GDPR) and the National legislation for the personal data protection. We also consider the Guidelines issued by the Office of the Commissioner for Personal Data Protection in Cyprus.This Privacy Notice refers to the personal data of employees working for our Company and job applicants applying for the available job positions, including job candidates sending their CVs voluntarily for consideration for future employment opportunities (hereinafter “Employees” or “Job Applicants” or “you”).

   It is important that you read this privacy notice together with any other privacy notice we may provide on certain occasions when we are collecting or processing your personal data so that you are fully aware of how and why we are using your data. This privacy notice supplements any other notices and is not intended to override them.
    
   1. Important Information
   Data Controller
   The data controller processing your personal data is BYBLOSERVE MANAGEMENT LIMITED, a duly registered limited liability company in Cyprus under registration number 252361 with its registered office at 57 Spyrou Kyprianou Avenue,Bybloserve Business Center, Larnaca 6051, Cyprus
    
   Data Protection Officer (DPO)
   If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact our DPO using the details set out below.
    
   DPO Contact Details:
   Name: Georgia Thoma
   Email address: dpo@bybloserve.com
   Address: 10 Patron street, 6051 Larnaca
   Tel: 24812575
    
   CHANGES TO THE PRIVACY NOTICE AND YOUR DUTY TO INFORM US OF CHANGES 
   It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
    
   Any changes to this privacy notice will be posted on our website and where appropriate notified to you in writing.
    
    
   2. What personal data do we collect about you?
   Personal data is any information relating to an identified or identifiable person. We may collect, use, store and transfer different kind of personal data relating to you which we have grouped together as follows: 

For employees: 

• Identity Data: name, surname, ID or Passport number, date of birth, gender, domicile, nationality, tax identification number, social security number, as well as, name and surname of people that we will contact in a case of an emergency. 

• Data on marital status: marital status (single, married, divorced), name and surname of spouse, number of children, children’s date of birth, as well as, name, surname and further details of other dependent members (if any) 

• Contact Details: home address, email address, telephone or fax numbers, personal corporate phone number, last home address abroad (for foreign citizens), as well as, home address, telephone number and email address of persons that we will contact in a case of emergency. 

• Data relating to the education, professional experience and other characteristics of the employee: qualifications, employment history, seminar attendance certifications, IT knowledge, knowledge of foreign languages, driving license, recommendation letters, fulfillment of military obligations, work permit (for foreign citizens). 

• Data relating to health: medical history, health certificate, including doctor’s certificate for sick leave and doctor’s certificate for maternity or paternity leave. 

• Financial Data: bank account details, payroll, social security’s statement, transaction history from our Company’s debit cards. 

• Data relating to the use of our electronic systems: corporate email addresses, user details (usernames) 

• Data relating to the contracts: employment contract, contract amendments, termination agreements (termination or resignation) 

• Data collected from the security systems: records from the cameras through the Closed-circuit television (CCTV). 

 
For job applicants:
We may collect your CV together with your job application for the available job position.  These documents may contain the following personal data: 

• Identity Data: name, surname, date of birth, place of birth, domicile, photo of potential employee, ID number or passport number 

• Data relating to the education, expertise, and other characteristics of the employee: qualifications, employment history, seminar attendance certifications, IT knowledge, knowledge of foreign languages, driving license, recommendation letters, fulfillment of military obligations, work permit (for foreign citizens) 

• Contact details: home address, email address, telephone number 

• Data collected from the security systems: records from the cameras through the Closed-circuit television (CCTV). 

• Data provided to us during an interview. 

 
3. How do we collect your personal data?
For employees:
We collect your personal data from you. We may also use the information that you provided us during the recruitment process through your job application, CV or resume, references supplied by former employers, or in any other way.
 
For job applicants:
We collect your personal data during the recruitment process through you, your job application, CV or resume, cover letter, references supplied by former employers, interviews or other forms of assessment. Your CV and/or job application may be received through third-party websites that they post our vacancies.
 
4. Why do we collect and process your personal data?
We use your personal data only for the following purposes:
For employees: 

• When it is necessary for performing the employment agreement. This includes, inter alia: 

• Payroll and payment processing 

• managing the employment relationship and providing the necessary equipment to the Employees 

• ensuring the security of our premises 

• When it is necessary for protecting our legitimate interests as long as the individual’s fundamental rights and freedoms do not override these interests, especially for: 

• collecting and analysing personal information for statistical purposes after having taken the appropriate security measures, 

• preventing and detecting security threats, frauds or other criminal or malicious activities, 

• purposes of risks insurance coverage, 

• exercising or defending our legal rights or for complying with court decision or orders 

• controlling the access on our premises for security purposes 

 
Closed-circuit television (CCTV) is also used for purposes of our legitimate interests, especially for: 

• the crime prevention and detection 

• the security and protection of our premises 

• the security of Clients and Employees 

• assuring the Clients and Employees of their security thanks to the measures that have been taken and thus reducing the fear of crime 

• assisting the local law enforcement authorities with the crime detection and prevention, including the fight against terrorism.