Privacy Policy
Last updated 18 March 2025
Who we are
Our website address is: https://www.icon.cy
PK ICON SOFTWARE & WEB SOLUTIONS LTD (“us”, “we”, or “our”) operates the https://www.icon.cy website (“Service”). We are a company incorporated and registered in Cyprus with company number HE 419286 and whose office is at Griva Digeni 42-44, 1080, Nicosia, Cyprus ( info@icon.cy, +357 99513735). For the context of this Privacy Notice, we are the data controllers.
This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from https://www.icon.cy/.
PURPOSE OF THE PRIVACY NOTICE
We are fully committed to comply with applicable data protection laws, when providing our Services. It is one of our fundamental business principles that ensuring data protection forms the basis of trustworthy business relationships.
This Privacy Notice ensures the level of data protection compliance prescribed by the European Union Data Protection Regulations (the General Data Protection Regulation, Regulation (EU) 2016/679-“GDPR”) and relevant national Data Protection Laws (such as the Law of the Republic of Cyprus providing for the Protection of Natural Persons regarding the Processing of Personal Data and for the Free Movement of such Data of 2018 (Law 125(I)/2018)).
This Privacy Notice applies to all Service users, regardless of whether they are ICON employees or not.
WHAT PERSONAL DATA WE COLLECT AND WHY
During the provision of our Service, we will process the following types of personal information about you:
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/.
Comments: after approval of your comment on our website, your profile picture is visible to the public in the context of this comment.
Images: if you upload images to our website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on our website.
LEGAL BASIS
Under the applicable data protection laws, the lawful bases we rely on for processing this information are:
- (a) Your consent.
- (b) We have a contractual obligation.
- (c) Our legitimate interest to provide and continuously improve the Service.
EMBEDDED CONTENT FROM OTHER WEBSITES
Articles on our website may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Please note that each website is considered an independent data controller and therefore we are not responsible for the processing of your personal data outside our Service.
HOW DO WE COLLECT YOUR PERSONAL INFORMATION
These are the main ways we collect your information:
HOW DO WE KEEP PERSONAL DATA SAFE
Personal information must be collected and dealt with appropriately. Therefore, safeguards must be in place to ensure this. Although data transmission over the Internet cannot be guaranteed to be secure, we work hard to maintain physical, electronic and procedural safeguards to protect your information in accordance with applicable data protection requirements.
We use technical and organizational security measures including encryption and authentication tools to protect your personal information, against manipulation, loss, destruction, and access by third parties. Our main security measures are:
For users that register on our website(if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
For users that fill out the contact form on our website, we only store the information you provided for record-keeping purposes. This is so we can associate new and old queries you might have.
WHAT RIGHTS YOU HAVE OVER YOUR DATA
You can exercise the following rights, by sending an email at: info@icon.cy. Their assertion is to be handled immediately by the responsible unit and cannot pose any disadvantage to you.
Right of Access by the Data Subject: You shall have the right to receive information from us regarding the processing of your personal data.
Right to Rectification: You shall have the right to demand that we correct your personal data which are incorrect and/or incomplete.
Right to Erasure: You shall have the right, if the requirements specified in Art. 17 of the GDPR have been met, to demand the deletion of your data. Thus, in accordance with this Art. 17, for example, you may demand the deletion of your data insofar as these data are no longer required for the purposes for which they were collected. Furthermore, you may demand the deletion of these data if we process your data based upon the consent which you have granted, and you then withdraw this consent.
Right to Restriction of Processing: You shall have the right to demand the restriction of the processing of your data if the requirements specified in Art. 18 of the GDPR have been fulfilled.
Right to Object: If the processing is based upon an overriding interest or your data are used for the purposes of direct advertising, you shall have the right to object to the processing of your data.
Right to Data Portability: Insofar as the data processing is undertaken based upon a consent or a fulfilment of a contractual agreement and this is also undertaken while using an automated processing system, you shall have the right to receive your data in a structured, commonplace and machine-readable format and to transfer these data to another data processing service provider.
Right of Revocation: If the data processing is undertaken based upon a consent, you shall have the right to withdraw your consent for the data processing, with effectiveness for the future, at any time and upon a free-of-charge basis, by using the following address: info@icon.cy.
Right to Complain: You shall also have the right to complain to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (more information can be found here) regarding our processing of your data.
WHERE YOUR DATA IS SENT
Visitor comments may be checked through an automated spam detection service. All contact form entries are sent to info@icon.cy.
Your personal data is stored in cloud servers based in the EU and the US.
INTERNATIONAL DATA TRANSFERS
In the event that we transfer personal data outside the European Union, including potential transfers to the United States, we have implemented appropriate measures, such as standard contractual clauses, to ensure that these transfers comply with data protection requirements and safeguard the rights of individuals.