Privacy Policy

Privacy Notice

1. Introduction – Who we are?

Salamis Shipping Services Ltd provides transport and shipping services to corporate and individual clients. Salamis Organisation respects your rights including your right to the protection of personal data and privacy and measures have been implemented to ensure that we protect your privacy and secure your personal information.

Salamis Tours Limited hereinafter referred as “Salamis Shipping Services Ltd”, “We” or “us” is a data controller within the meaning of the General Data Protection Regulation (“GDPR”) who collects, holds and process your personal data in compliance with the GDPR legal obligations. This means that we are responsible for deciding how we hold, use, process and transfer your personal information.

This Privacy Notice explains how Salamis Shipping Services Ltd collects and uses your personal data, why your personal data will be used, for how long it will usually be retained, which are your rights and how you can exercise them and in general provides all necessary information to ensure that you are aware about the processing of your personal data and that you have their control.

Please note that this Privacy Notice may be amended from time to time, but we will manage to inform you about it. The amended Privacy Notice will be found in our website and we encourage you to review the Privacy Notice in our website periodically to be informed of how we use your personal data.

2. How we collect your personal data?

We collect your personal data either from you directly, or from a member of your family or from your employer or the person who receive our services on your behalf.

3. What data we collect?

In order for us to be able to provide you with our services we need to collect and use personal data and other people such us those people on your booking. We will not collect sensitive information about you, however, in some specific cases such as health conditions and ability to travel, your sensitive data will need to be collected.

The term personal data means any information relating to an identified or identifiable natural person such as name, email, address, ID etc.

The personal data that we usually collect may vary from the service that we provide to you and they may include, without limitation, the following:

Identity data: first name, last name, ID number, passport number
Contact details: email address, telephone number, address;
Financial data: billing information and payment card details;
CCTV Footage in case you visit our offices

We only use your personal data for the purposes defined in this Privacy Notice. If we intend to use your personal data for another purpose, we will inform you prior to the processing.

4. How will we use your personal data?

We will use your personal data only in the following cases:

To provide the services you request

We collect and process personal data to be able to provide our services

Please bear in mind that in case you do not wish to provide us with your personal data we might not be able to provide you with our services.

To ensure the safety and security of and in our premises

In our premises we operate closed circuit television ("CCTV") to ensure the security and safety of our employees, customers and visitors, to detect and prevent criminal offences and to protect our facilitates. These CCTV cameras record continually and images of you may appear in these recordings.

Communicate with you

We may use your contact details to communicate with you in the course of our business or to provide you information about changes to the time schedule of the vessel schedule or to respond to any question you may communicate to us.

Marketing communication:

Except of the service related communication, we will use your contact details to communicate to you, our offers, promotions and other relevant marketing materials if you have agreed to receive marketing and promotional material from us.

Claim Management:

We may use and process your personal data to manage and/or settle any claim or dispute you may have and/or to initiate or defend any legal action.

5. Which is the legal basis we use for processing your personal data

We will only use your personal data when the law allows us to. Most commonly, we will collect, use and process your personal data based on at least one of the following legal grounds:

Where we need to perform the contract, we have entered into with you;

We will process your personal data when it is necessary to perform our contractual obligations such as the contract between us to provide you with our services.

Where we have your consent to do so:

When you subscribe to receive marketing and promotional material from us you consent to process your contact details for this purpose. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal.

When it is necessary to comply with a legal obligation:

For example, we may be obliged by law to share your personal data with regulatory authorities. Likewise, we are obliged by tax laws to retain certain data for specific time period

Where we have legitimate interests or third party’s legitimate interest. In this case we will ensure that there is a balance between our legitimate interests and your fundamental rights and freedoms.

For instance the CCTV in our stores is based on legitimate interest we seek. These legitimate interests are the ensure your safety and security, our customers, visitors, our facilities and our employees. Likewise, when a complaint is made, our legitimate interests are to handle your complaint and resolving the dispute. Also, we are conducting processes to manage and develop our business activities, including the improvement of our products and services based on our economic interests.

6. Sharing your personal data

We recognize that your personal data is valuable, and we take all reasonable measures to protect them while it is in our care. In doing so, we only share the personal data that is absolute necessary. We may also share your personal data with other internal departments within the Salamis Organization.

In certain cases it may be necessary to transfer your personal data to third countries outside EU. In such cases, we will proceed with the transfer only if the conditions set out in data protection laws are met, for example if there is an adequacy decision meaning that the third country ensures an adequate level of protection, or we may use appropriate safeguards such as binding contracts with those parties. We never transfer personal data outside EU unless the protection of such data is guaranteed from the third party.

We do not sell any of your personal data to any third party.

7. Retention period

We will not retain your data for longer than is necessary to fulfil the purpose it is being processed for. To determine the appropriate retention period, we consider the amount, nature and sensitivity of the personal data, the purposes for which we process it and whether we can achieve those purposes through other means. We must also consider periods for which we might need to retain personal data in order to meet our legal obligations or to deal with complaints, queries and to protect our legal rights in the event of a claim being made.

When we no longer need your personal data, we will securely delete or destroy it.

For example:

Your contact details which are used for marketing communication will be processed until the day you withdraw your consent or until you object to the processing.
The footage collected from the CCTV is stored for a three months period and then is deleted.
Your financial information will be stored for the period of at least 6 years in accordance with tax laws.

8. Security of processing of your personal data

In order to protect your privacy and protect your personal data against unauthorized access, improper use or disclosure, unauthorized modification, accidental loss, destruction or damage we have implemented appropriate organizational measures such as policies and procedures and technical measures.

9. Your legal rights

You have the following rights in relation to the personal data we hold about you:

Request access and information in relation to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data under certain circumstances
Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
Object to automated decision-making including profiling, that is not to be subject of any automated decision-making by us using your personal information or profiling of you.
Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
Request transfer of your personal information in an electronic and structured form to you or to another party (commonly known as a right to “data portability”). This enables you to take your data from us in an electronically useable format and to be able to transfer your data to another party in an electronically useable format.
Withdraw consent. In circumstances where you may have provided your consent to the processing of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
Lodge a complaint with the supervisory authority. If you have a concern about any aspect of our privacy practices, including the way we have handled your personal data, you can report it to the relevant Supervisory Authority.

Please note that some of the above rights may be limited where we have an overriding interest or legal obligation to continue to process the data or where data may be exempt from disclosure due to professional secrecy obligations.

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances. We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

If you have a concern about the way we are collecting or using your personal data or wish to make an internal complaint, you may contact us by e-mail, whose details are defined below or directly raise your concern to the Data Protection Commissioner’s Office at http://www.dataprotection.gov.cy.