Policy Version: us updated on 13^th of March 2025.

This Privacy Policy (“Privacy Policy”) applies to the website: https:// https://enalian.com.cy/  (our Website).

This Privacy Policy has been drafted by and applies to Enalian Consulting, a registered tradename in Cyprus with registration number EE57711 for Michaella Th. Pillakouri & Partners LLC with registration number HE 398643 and all their subsidiaries (collectively, “ENALIAN“). (“we”, “our”, or “us”). We are the controller of personal data obtained via our Website, meaning we are the organization legally responsible for deciding how and for what purposes it is used.

Our Privacy Policy is comprehensive, clear and transparent. The principle of accountability is a cornerstone of the GDPR, and Enalian’s Consulting Privacy Policy demonstrates commitment to accountability. All employees and entities at Enalian Consulting have a responsibility to follow and abide by this Privacy Policy and have been professionally trained for this purpose.

Please read this Privacy Policy carefully as it contains important information on who we are and how and why we collect, store, use and share any information relating to you (your personal data) in connection with your use of our Website. It also explains your rights in relation to your personal data, defines our employees’ responsibilities and accountability for date protection, and how to contact us or a relevant regulator in the event you have a complaint.

At Enalian Consulting, we respect the privacy of our employees, clients, vendors and business partners. We are committed to managing personal data in a professional, lawful and ethical manner. We collect, use and are responsible for certain personal data about you. When we do so we are subject to the EU General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (EU GDPR) in relation to the activities we are undertakings the European Economic Area (EEA).

This version of our Privacy Policy is primarily written for adults, including parents and guardians of child users. This website is not intended to be used by children under the age of 14. We do not knowingly collect personal information directly from children under the age of 14 without parental consent. If we become aware that a child under the age of 14 has provided us with personal information, we will delete the information from our records.

This Privacy Policy is divided into the following sections:

•           What this policy applies to;

•           Personal data we collect about you;

•           How your personal data is collected;

•           How and why we use your personal data;

•           Who we share your personal data with;

•           How long your personal data will be kept;

•           Confidentiality and Security of your personal information;

•           Transferring your personal data out of the EEA;

•           Your rights;

•           Enquiries and Complaints;

•           Changes to this privacy policy;

•           Website Cookies;

•           How to contact us;

1.What this policy applies to:

This Privacy Policy relates to your use of our Website only.

Throughout our Website we may link to other websites owned and operated by certain trusted third parties. Those third-party websites may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to those third-party websites, please consult their privacy policies as appropriate. 

2.Personal data we collect about you:

The personal date we collect about you depends on the particular activities carried out through our website. We will collect and use the following personal date about you:

• Contact information including but not limited to names, postal addresses, email addresses, telephone numbers, the company you work for, social media accounts.
• Professional information.
• Information that you provide to us following a request submitted through our website requesting a service.
• Correspondence.
• Other information relevant to the provision of our Services

3.How your personal data is collected:

We collect personal data from you:

1. Directly, in the course of our business, when you contact or request information from us, when you engage our legal or other services, filling out engagement letters, retainers, or by correspondence by phone, email, fax, in person or otherwise; and

Indirectly, such us your browsing activity while on our website; we will usually collect information indirectly using the technologies explained in the section “Cookies” below.

4.How and why we use your personal data:

Under Article 6 of the EU GDPR, your personal data will be process only if and to the extent that at least one of the following applies:

1. Consent for processing personal data has been given;
2. For the performance of an obligation with you or to take steps at your request before entering into an agreement of cooperation;
3. To comply with our legal and regulation obligations;
4. Processing is necessary in order to protect the vital interests of an individual or legal person;
5. Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority bested in use;
6. Interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is child;
7. For our legitimate interests or those of a third party;

A legitimate interest is when we have a reason to use your personal data in the course of our activities, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own. You can obtain details of this assessment by contacting us (see ‘How to contact us’ below).

Below, it is explained what we use your personal data for and why:

What we use your personal data for

Cooperating with you and carry out services in accordance with your instructions.

Our reasons

To perform our services based on an agreed agreement of cooperation/engagement letter or to take steps at your request before entering into such agreement.

What we use your personal data for

Conducting checks to identify you and verify your identity or to help prevent and detect fraud against you or us.

Our reasons

To comply with our legal and regulatory obligations.

What we use your personal data for

Enforcing legal rights, undertaking legal proceedings, legal advice or to establish, exercise, or defend legal rights.

Our reasons

Depending on the circumstances:

—to comply with our legal and regulatory obligations.

—in other cases, for our legitimate interests, i.e. to protect the company, interests and rights.

What we use your personal data for

Communications with you about changes to our terms or policies or changes to our activities or other important notices.

Our reasons

Depending on the circumstances:

—to comply with our legal and regulatory obligations.

—in other cases, for our legitimate interests, i.e. to be as efficient as we can in the provision of our services.

What we use your personal data for

Protecting the security of systems and data used to perform activities, and protecting the rights, property or safety of us or third parties, including our other clients.

We may also use your personal data to ensure the security of systems and data to a standard that goes beyond our legal obligations, and in those cases our reasons are for our legitimate interests, i.e. to protect systems and data and to prevent and detect criminal activity that could be damaging for you and/or us.

Our reasons

To comply with our legal and regulatory obligations.

What we use your personal data for

Statistical analysis to help us understand visitors base.

Our reasons

For our legitimate interests, i.e. to be as efficient as we can in the provision of our services.

What we use your personal data for

Updating and enhancing visitors records.

Our reasons

To perform our services based on an agreed agreement of cooperation/engagement letter or to take steps at your request before entering into such agreement.

What we use your personal data for

Disclosures and other activities necessary to comply with legal and regulatory obligations that apply to our company, e.g. to record and demonstrate evidence of your consents where relevant.

Our reasons

To comply with our legal and regulatory obligations.

What we use your personal data for

To share your personal data with partners, employees, consultants, workers and data processors of our Company and/or third parties that will or may take control of some or all of the Company (and professional advisors acting on our or their behalf) in connection with a
significant activity or task. In such cases information will be anonymised where possible and only shared where necessary.

Our reasons

Depending on the circumstances:

—to comply with our legal and regulatory obligations.

— For our legitimate interests, i.e. to be as efficient as we can in the provision of our services.

What we use your personal data for

Carry out our legal obligations with local and foreign governmental Authorities.

Our reasons

To comply with our legal and regulatory obligations.

What we use your personal data for

Investigate or settle court cases, claims, inquiries or disputes.

Our reasons

Depending on the circumstances:

—to comply with our legal and regulatory obligations.

— To perform our services based on an agreed agreement of cooperation/engagement letter or to take steps at your request before entering into such agreement.

What we use your personal data for

Comply with any applicable law, court order, other judicial process, or the requirements of a regulator.

Our reasons

To comply with our legal and regulatory obligations.

What we use your personal data for

Internal record keeping (The Company may periodically send important announcement emails, news and articles, invitations or other information).

Our reasons

For our legitimate interests, i.e. to be as efficient as we can in the provision of our services.

What we use your personal data for

Ensure the security level of the Company’s employees, clients, any other individual entering the premises, and the premises (use of CCTV equipment in the areas of the premises).

Our reasons

For our legitimate interests, i.e. to protect the employees, clients, any other individual entering the premises of the Company.

What we use your personal data for

Use as otherwise required or permitted by law.

Our reasons

To comply with our legal or regulatory obligations.

The information is stored and encrypted locally in the Company’s internal server as well as in servers located in Cyprus and/or Member-States of the European Union and which are administered by third-party service providers with whom we collaborate in order to maintain our electronic database and back-up the data we collect (e.g. software service providers). Our client’s files are stored in hard copy and are securely held in our Company’s premises. Although we have taken all appropriate measures and security procedures, programs and features we cannot guarantee that certain email communications and/or data transmitted to us over email and/or other means of electronic transfer of documents is secure.

5.Who we share your personal data with:

We conduct an appropriate level of due diligence and put in place contractual documentation in relation to any disclosure of your personal data to third parties to ensure that they process personal data appropriately and according to our legal and regulatory obligations.

You agree that we have the right to share your personal data with: 

• Any partners, employees, consultants, workers and data processors of our Company.
• We may share your information in the extend required or permitted to do so with personnel, advisers, lawyers, banks, public authorities, Courts and Court personnel, clients, auditors, service providers, business associates, partners and any other third person or entity in connection with our services who are also obligated to comply with the European data protection standards and to provide appropriate safeguards in relation to your personal data.
• Regulators/tax authorities/corporate registries.
• Governmental or regulatory authorities.
• Third parties to whom we outsource certain services such as, without limitation, document service, processing and translation services, IT systems or software providers, IT Support service providers, document and information storage providers.
• Third parties engaged in the course of the services we provide to clients such as counsel, arbitrators, mediators, witnesses, cost draftsmen, court, opposing party and their lawyers, medical practitioners and experts.
• Third party postal or courier providers who assist us in delivering documents.

The above information will be disclosed where necessary for the performance of your instructions to our Company.

• For the purposes of complying with local and international regulations against money-laundering, fraud and the general prevention of crime and illegal activities and/or the cooperation with the authorities and/or the police we will also disclose your personal data to third parties If we are under a duty to disclose or share your personal data in order to comply with any legal and/or regulatory obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Enalian Consulting, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection, anti-money laundering and credit risk reduction.

Please note this list is non-exhaustive and there may be other examples where we need to share data with other parties in order to provide the Services as effectively as we can.

Who we share your personal data with—further information

If you would like more information about who we share our data with and why, please contact us (see ‘How to contact us’ below).

6.How long your personal data will be kept:

We will retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including to comply with legal, regulatory, tax, accounting, or reporting requirements.

            •           Data received on the basis of collaboration or based on our agreement of cooperation/engagement letter: If your data is collected as part of a collaboration or based on our agreement of cooperation/engagement letter, we will retain it for the duration of such cooperation and for a period of 6 years after its termination, in line with legal and accounting requirements.

            •           Legal and Compliance Purposes: In some cases, we may be required to retain data longer if necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

Once the retention period expires, we will securely delete or anonymize your personal data unless we are required to keep it for a longer period by law.

For more details on how we handle data retention, please contact us (see ‘How to contact us’ below).

7.Confidentiality and Security of your personal information:

We are committed to keeping the personal data provided to us secure and we have implemented appropriate information security policies, rules and technical measures to protect the personal information that we have under our control from unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss.

All of our partners, employees, consultants, workers and data processors (i.e. those who process your personal information on our behalf, for the purposes listed above), who have access to, and are associated with the processing of personal information, are obliged to respect the confidentiality of such personal information.

8.Transferring your personal data out of the EEA:

Countries outside the EEA have differing data protection laws, some of which may provide lower levels of protection of privacy.

It is sometimes necessary for us to transfer your personal data to countries outside EEA. In those cases, we will comply with applicable EEA laws designed to ensure the privacy of your personal data.

We may transfer your personal data to:

• our collaborators located outside the EEA;
• the transfer is necessary for the performance of a contract, for managing a contract or to take necessary steps prior to entering into a contract;
• the transfer is necessary for the establishment, exercise or defense of a legal claim;
• the transfer is necessary to satisfy an important reason of public interest;

Under data protection laws, we can only transfer your personal data to a country outside the EEA where:

• the European Commission has decided that the particular country ensures an adequate level of protection of personal data (known as an ‘adequacy decision’) further to Article 45 of the EU GDPR. A list of countries the European Commission has currently made adequacy decisions in relation to is available here.
• there are appropriate safeguards in place, together with enforceable rights and effective legal remedies for you, or
• a specific exception applies under relevant data protection law.

Where we transfer your personal data outside the EEA, we do so on the basis of an adequacy decision or (where this is not available) on the basis of legally-approved standard data protection clauses issued further to Article 46(2) of the EU GDPR. In the event we cannot or choose not to continue to rely on either of those mechanisms at any time we will not transfer your personal data outside the EEA unless we can do so on the basis of an alternative mechanism or exception provided by applicable data protection law and reflected in an update to this policy.

Any changes to the destinations to which we send personal data or in the transfer mechanisms we rely on to transfer personal data internationally will be notified to you in accordance with the section on ‘Changes to this privacy policy’ below.

Transferring your personal data out of the EEA—further information

If you would like further information about data transferred outside the EEA, please contact us (see ‘How to contact us’ below).

9.Your rights:

You generally have the following rights, which you can usually exercise free of charge:

• Access to a copy of your personal data (Article 15 of EU GDPR)

The right to be provided with a copy of the personal data we hold about you and information of how we process it.

• Correction (also known as rectification) (Article 16 of EU GDPR)

The right to require us to correct any mistakes in your personal data.

• Erasure (also known as the right to be forgotten) (Article 17 of EU GDPR)

The right to require us to delete your personal data—in certain situations.

• Restriction of use (Article 18 of EU GDPR)

The right to require us to restrict use of your personal data in certain circumstances, eg if you contest the accuracy of the data.

• Data portability (Article 20 of EU GDPR)

The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations.

• To object to use (Article 21 of EU GDPR)

The right to object:

—at any time to your personal data being used for direct marketing (including profiling).

—in certain other situations to our continued use of your personal data, eg where we use your personal data for our legitimate interests unless there are compelling legitimate grounds for the processing to continue or the processing is required for the establishment, exercise or defence of legal claims.

• Not to be subject to decisions without human involvement (Article 20 Section 4 of EU GDPR)

The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.

We do not make any such decisions based on data collected by our website.

• The right to withdraw consents (Article 7(3) of EU GDPR)

If you have provided us with a consent to use your personal data you have a right to withdraw that consent easily at any time.

Withdrawing a consent will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn.

• The right to lodge a complaint (Article 77 of EU GDPR)

The right to lodge a complaint if you believe that your personal data have been violated.

For further information on each of those rights, including the circumstances in which they do and do not apply, please contact us (see ‘How to contact us’ below).

If you would like to exercise any of those rights, call or write to us—see below: ‘How to contact us’. When contacting us please:

• provide enough information to identify yourself (e.g. your full name or matter reference) and any additional identity information we may reasonably request from you, and;
• let us know which right(s) you want to exercise and the information to which your request relates.

10.Enquiries and Complains:

Enalian Consulting has appointed a Data Protection Officer and all enquiries in respect to this Privacy Notice or to exercise any of the rights set out above you can contact our Data Protection Officer at info@enalian.com or by post at Spyrou Kyprianou Avenue no.32, Office 1, Vashiotis John Marie 4043 Limassol, Cyprus, marked “Confidential – For the attention of the Data Protection Officer” at Enalian Consulting.

You also have the right to lodge a complaint with:

• our lead supervisory authority in the EEA, which is the Commissioner for Personal Data Protection in Cyprus, Address: 15, Kypranoros Street, 1061 Nicosia, P.O. Box: 23378, 1682 Nicosia,          Phone: +357 22 818 456, Fax: +357 22 304 565, Email: commissioner@dataprotection.gov.cy, Website: http://www.dataprotection.gov.cy/, and;
• a relevant data protection supervisory authority in the EEA state of your habitual residence, place of work or of an alleged infringement of data protection laws in the EEA.

For a list of EEA data protection supervisory authorities and their contact details see here.

11. Changes to this privacy policy:

We may make changes to this Privacy Policy from time to time to reflect any changes to our use of your personal information. We may also make changes as required to comply with changes in applicable law or regulatory requirements. We encourage you to review this Privacy Policy periodically to be informed of how we use your personal information. 
 

Cookies are tiny files that are downloaded to your computer, to improve your online experience.

Our website uses cookies. The website does not use its own cookies but instead relies and uses the third-party basic Google Analytics installations which do not use display features or advanced tracking and therefore no personal information is stored, only anonymized data for demographics.

12. Website Cookies:

We use cookies to facilitate the overall functionality of our website as well as compile anonymous, aggregated statistics that allow us to understand how people use our website in order to help us improve our content. If you are not sure whether you need them or not, it is recommended that you leave on all cookies in case they are used to support a website function. Our website uses certain ‘necessary cookies’ which are essential to its operation as well as additional ‘analytics cookies’ operated on the basis of your consent.

You can control the setting of cookies by adjusting the settings on the consent prompt box during your first visit to our website.

13.How to contact us:

You may contact us if you have any enquiries or feedback on our personal data protection policies and procedures, or if you wish to make any request, or complaint via:

 Email: info@enalian.com

Phone Number: 25589058

Address: 32, Spyrou Kyprianou, VASHIOTIS JOHN MARIE, 4043 Limassol, Cyprus