Privacy Policy

Our Commitment to Your Privacy

At Noesis Data, we recognize that your privacy is fundamental. This policy explains how we collect, use, protect, and handle your personal information when you interact with our website and services. We are committed to transparency and ensuring you have control over your data.

We operate in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and Cyprus data protection legislation. This privacy policy applies to all personal data we process in connection with our business intelligence services and website operations.

What Personal Data We Collect

Information You Provide Directly

When you interact with our website or services, you may choose to provide us with certain information:

• Contact Information: Name, email address, phone number, and company details when you fill out contact forms or request information about our services
• Communication Content: Messages, questions, or feedback you send to us through our contact forms or email
• Service Information: Details about your business needs, data challenges, and project requirements when you engage with our consulting services

Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies and similar technologies:

• Usage Data: Pages visited, time spent on pages, links clicked, and navigation patterns within our website
• Device Information: Browser type, operating system, device identifiers, and screen resolution
• Location Data: General geographic location based on IP address (country and city level)
• Referral Information: The website or search term that directed you to our site

Legal Basis for Data Processing

We process your personal data based on the following legal grounds:

• Consent: When you voluntarily provide information through forms or accept cookies
• Contractual Necessity: To fulfill service agreements and respond to your inquiries
• Legitimate Interests: To improve our services, ensure website security, and conduct business operations
• Legal Obligations: To comply with applicable laws and regulations

Data Retention Periods

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy. Contact form submissions are typically retained for three years unless you request deletion sooner. Analytics data is aggregated and anonymized after 26 months. Service-related data is kept for the duration of our business relationship plus seven years for legal compliance purposes.

How We Use Your Personal Data

Primary Uses

Your personal data helps us provide and improve our services in several ways:

• Service Delivery: Responding to your inquiries, providing consultations, and delivering the business intelligence services you've requested
• Communication: Sending you information about our services, responding to your questions, and maintaining our professional relationship
• Website Improvement: Understanding how visitors use our site to enhance user experience, content, and functionality
• Security: Protecting our website and services from fraud, abuse, and security threats

Third-Party Data Sharing

We share your personal data only when necessary and with appropriate safeguards:

• Service Providers: We work with trusted third-party providers for website hosting, email services, and analytics. These providers are contractually obligated to protect your data and use it only for specified purposes
• Analytics Platforms: With your consent, we use analytics services to understand website traffic and user behavior. These services may collect anonymized or pseudonymized data
• Legal Requirements: We may disclose information when required by law, legal process, or governmental request
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity

We do not sell your personal data to third parties for marketing purposes.

Marketing Communications

If you've provided your email address through our contact form, we may occasionally send you information about our services, industry insights, or company updates. These communications are sent only with your consent or based on legitimate interest where permitted by law. Every email includes an unsubscribe option, and we honor all opt-out requests promptly.

Analytics and Website Improvement

We use analytics tools to understand how visitors interact with our website. This helps us identify which content is most valuable, where users encounter difficulties, and how we can improve the overall experience. Analytics data is typically aggregated and anonymized, meaning individual users cannot be identified from this information.

How We Protect Your Data

Security Measures

We implement comprehensive security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard SSL/TLS protocols
• Secure Storage: Personal data is stored on secure servers with restricted access and regular security updates
• Access Controls: Only authorized personnel have access to personal data, and access is limited to what's necessary for their role
• Regular Audits: We conduct periodic security assessments to identify and address potential vulnerabilities

Data Encryption and Storage

Personal data you provide through contact forms is encrypted during transmission and stored on secure servers located within the European Union. We use industry-standard encryption methods for data at rest and in transit. Our hosting providers maintain ISO 27001 certification and comply with GDPR requirements.

Access Controls and Monitoring

Access to personal data is restricted based on role-based permissions. We maintain audit logs of data access and modifications. Our systems are monitored for unusual activity that could indicate a security incident. All staff members with data access undergo privacy and security training.

Breach Notification Procedures

In the unlikely event of a data breach that affects your personal information, we will notify you and relevant supervisory authorities within 72 hours, as required by GDPR. The notification will include details about the nature of the breach, the data affected, and steps we're taking to address the situation. We maintain an incident response plan that outlines procedures for detecting, responding to, and recovering from security incidents.

Your Privacy Rights

Under applicable data protection laws, you have several rights regarding your personal data. We are committed to facilitating the exercise of these rights promptly and transparently.

Right to Access Personal Data

You have the right to request a copy of the personal data we hold about you. We'll provide this information in a structured, commonly used, and machine-readable format. This includes details about what data we have, how we use it, who we share it with, and how long we keep it.

Right to Rectification and Erasure

If your personal data is inaccurate or incomplete, you can request that we correct it. You also have the right to request deletion of your personal data in certain circumstances, such as when it's no longer necessary for the purposes it was collected, you withdraw consent, or you object to processing. We'll honor these requests unless we have legitimate grounds to retain the data.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used, machine-readable format. Where technically feasible, we can transmit this data directly to another service provider at your request. This right applies to data you've provided to us based on consent or contract performance.

Right to Object to Processing

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. If you object to marketing communications, we'll stop processing your data for that purpose immediately. For other objections, we'll cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

How to Exercise These Rights

To exercise any of these rights, contact us using the details provided at the top of this page. Please include sufficient information to verify your identity and specify which right you're exercising. We'll respond to your request within one month, though complex requests may take up to three months. We'll inform you if an extension is necessary.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

Avoid filling out contact forms, account registrations, or any data-submitting features
Disable cookies through your browser settings (see our Cookie Policy for more details)
Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided at the top of this page. We will process your request promptly.

Supervisory Authority

If you believe we haven't addressed your privacy concerns adequately, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus or your local data protection authority.

Noesis Data