GB CY Association
Privacy Policy
Great Britain – Cyprus Business Association (“GBCY”, “we”, “our” or “us”) respects the privacy of visitors and members of its website (https://www.gbcy.business/) (the “Website”) and is committed to protecting any personal data you share with us. This Privacy Policy explains how we collect, use, store and disclose personal data, and your rights with respect to that data.
Controller
The data controller for the purposes of this Privacy Policy is GBCY. If you have any questions or wish to exercise your rights under this Policy, you may contact us at:
Email: [email protected]
Scope of This Policy
This Privacy Policy applies to all personal data collected or processed by GBCY via the Website. It covers data you provide voluntarily (e.g., through registration, subscription forms, contact forms, membership applications) as well as data collected automatically (e.g., via cookies, analytics, server logs).
Personal Data We Collect
Depending on how you interact with our Website and services, GBCY may collect the following categories of personal data:
- Contact information: name, email address, postal address, phone number (if provided)
- Membership / business information: company name, business details, professional information, as provided when applying for membership or sponsorship
- Subscription information: email address (for newsletter or e-newspaper subscription), preferences, consent status
- Usage and technical data: IP address, browser type and version, device information, pages visited, time and date of visits, referral source, cookies and similar tracking technologies, analytics data
How We Collect Data
- Directly, when you submit information via registration forms, membership application, contact forms, newsletter subscription, event sign-up, or other voluntary submissions.
- Automatically, via cookies, web server logs, and analytics tools when you browse the Website.
Purposes and Legal Basis for Processing
We process your personal data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| To provide you with services you request (e.g., membership management, newsletter delivery, event registration) | Performance of a contract / legitimate interest |
| To communicate with you (e.g., send updates, newsletters, respond to inquiries) | Legitimate interest / your consent |
| To operate, maintain, and improve the Website and our services (including analytics, monitoring, security, debugging) | Legitimate interest |
| To comply with legal or regulatory obligations | Legal obligation |
Where required (e.g. non-essential cookies, marketing communications), we will obtain your explicit consent before processing your data.
Data Sharing and Disclosure
We may share your personal data with:
- Third-party service providers and partners who assist us in operating the Website, delivering services (e.g. hosting providers, email service providers, analytics tools, marketing tools), under agreements that require them to protect your data.
- Authorities or other third parties if required by law or legal process, or to protect our rights, property or safety, or those of others.
- Any affiliated entities or business partners if you explicitly consent (e.g., for sponsorship or membership referrals).
We do not sell or rent your personal data to third parties for their marketing purposes without your explicit consent.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected (e.g., membership duration, newsletter subscription, ongoing communications), or to comply with legal obligations. When data is no longer needed, it will be deleted or anonymised.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include — but are not limited to — secure server infrastructure, encrypted communications (HTTPS), access controls, and periodic review of our security procedures.
International Transfers
If we transfer your personal data to service providers or partners outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses) to comply with applicable data protection laws.
Your Rights
Under applicable data protection laws (including GDPR), you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure of your personal data (“right to be forgotten”), subject to any overriding legal obligations.
- Restrict or object to the processing of your data under certain circumstances.
- Request portability of your data (in a structured, commonly used, machine-readable format).
- Withdraw your consent at any time where processing is based on consent (without affecting the lawfulness of past processing).
- Lodge a complaint with the relevant supervisory authority (in Cyprus, the Office of the Commissioner for Personal Data Protection) if you believe your data rights have been violated.
To exercise any of these rights, please contact us via the provided contact details.
Children and Minors
Our Website and services are not directed to individuals under the age of 18. We do not knowingly collect or store personal data of children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such data.
Cookies, Tracking & Analytics
We use cookies and similar tracking technologies to improve user experience, analyse trends, administer the Website, track users’ movements around the site, and gather demographic information about our user base. We will inform you about non-essential cookies and request your consent where required.
Changes to This Privacy Policy
We may update this Privacy Policy periodically (e.g. when we introduce new services or third-party tools, or to comply with legal changes). We will post the updated version on the Website with a revised “Last Updated” date. Continued use of the Website after changes constitutes your acceptance of the updated Policy.
Contact Information
If you have any questions about this Privacy Policy, or wish to exercise your rights, please contact us at:
Email: [email protected]