Privacy Policy

We respect your rights and privacy!

Last update: January 26, 2022

This Privacy Notice (Notice) is aimed to explain to you in an easy way who we are, what personal data we collect about you, why we collect it, and what we do with it.

We notify you that we will process your personal data following the provisions of Regulation (EU) 2016/679 (GDPR) for the purposes and on legal bases outlined in this Notice.

Please read this Notice attentively to be aware of our privacy practices. It will take about 7-10 minutes.

  1. Applicability of this Notice

This Notice covers the collection and processing of data related to you, when:

  • You access and use the website crstlmedia.com (Website),
  • You directly contact us on general matters or to find out more about our services through the contact page on the Website, email [email protected] or other available means of communication.
  1. Company details and role in the personal data processing

CRSTL MEDIA LIMITED, a company registered under the law of the Republic of Cyprus, company number ΗΕ 430236, Louki Akrita, 21-23 BELLAPAIS COURT, 7th floor, Flat/Office 46 1100, Nicosia, Cyprus (Company, we), makes core decisions on the purposes and means of the processing of personal data within the scope of this Notice.

It means that the Company acts as a controller according to Article 4(7) of the GDPR.

In case of any questions on privacy matters send an email to our email address [email protected]. We will try to assist you and help to exercise your rights.

  1. Types of personal data that we collect and process

We process different categories and types of your personal data. Nevertheless, we are trying to limit the personal data collected to a strict minimum that is necessary to achieve the purposes of processing outlined in this Notice.

Personal data that we may collect and process may include:

  1. Personal data we collect from you (Data collected from you). These personal data you give directly and voluntarily when you contact through the contact page on the Website, email, other means of communication. In this case, we may collect directly from you:
  • Your name;
  • Email address;
  • Telephone number (if applicable);
  • Any information you voluntarily provide us in your message.
  1. Personal data we obtain through the automated collection (Automatically Collected Data). When you access and use the Website your browser sends us some kinds of personal data and if needed, we may automatically collect them:
  • IP address, information about your location, information about your mobile operator or Internet provider;
  • Device and browser data: its operating system, browser type, and version, screen resolution, set time zone, language settings, device type: model and manufacturer (if applicable);
  • Data on your interaction with the Website interface;
  • Information about the source from which you visited the Website.
  1. Personal data we collect from open sources (Research data). These personal data we may collect from your open accounts on social media, public pages, and the website of the company you represent. These personal data may include information about:
  • The name of the company you represent, sphere and territory of activity;
  • Your position in the company and professional experience.
  1. Purposes and legal bases for personal data processing

We ensure you that we process your personal data for explicit purposes and use appropriate legal bases:

  1. Provision of the Website’s functionality and usability. We process Automatically Collected Data to make the Website available and useful. The legal basis for this processing is our legitimate interest.
  2. Analysis of the Website’s performance and functioning. We process Automatically Collected Data to analyze how the Website works and enhance its operation. The legal basis for this processing is our legitimate interest.
  3. Security of the Website. We process Automatically Collected Data to ensure that our Website and its users are protected against any unlawful actions. The legal basis for this processing is our legitimate interest.
  4. Processing of your questions, queries, or feedback and effective communication with you. We process Data collected from you, Research data, and Automatically Collected Data to communicate with you both on general matters and in negotiations before entering into the contract with the company you represent. The legal basis for this processing is our legitimate interest.
  5. Analysis and anticipation of future business relations with prospective clients. When you contact us on behalf of the company interested in our services, we should understand the specifics of the sphere and activity of the company and estimate an approximate scope of necessities and expectations of the prospective clients to offer the best services.
  1. Storage period for personal data

We adhere to the storage limitation principle and ensure you that we store your personal data in a form that permits identification no longer than it is necessary to achieve the purposes stipulated in this Notice.

Thus, we establish the following periods for the storage of personal data:

Automatically Collected Data (except for cookie data). We will store Automatically Collected Data no longer than 14 (fourteen) months from your last visit to the Website.

Data collected from you, Research data. We need these personal data during our communication with you. When the purpose of our communication with You is reached, we erase or anonymize these data. 

In the event of any dispute with you, we will store your personal data for as long as necessary to resolve the dispute.

  1. Special note about children

Our Website and services are not adopted for users under the age of 18 years old. Thus, we do not intentionally process personal data of children. If you become aware that we occasionally process personal data of a child, please contact us and we will erase such personal data.

  1. Disclosure of personal data and transfers outside the EU

When it is necessary, we may engage a wide range of specialists, consultants, services providers, and other vendors to operate our Website and conduct our business. Accordingly, they may access your personal data.

We notify you that we may share your personal data with the following recipients:

  • Employees, contractors, agents, affiliates, external consultants.
  • IT services providers (hosting and analytics providers).

All engaged persons are obliged to ensure the security and confidentiality of personal data processed and comply with this Notice and applicable data protection laws.

For international transfers outside the EEA, we use appropriate safeguards, including Standard Contractual Clauses, in case of the absence of an adequacy decision.

  1. Data subject rights

Under the GDPR you are entitled to exercise data subject rights. To exercise your rights please contact us directly via email address [email protected].

  1. The right to access (Article of the 15 GDPR). You have the right to receive confirmation from us as to whether your personal data are being processed, as well as to receive a copy of your personal data.
  2. Right to rectification (Article 16 of the GDPR). You have the right to request the rectification of your personal data if the data are inaccurate, as well as the complete the data if the data are incomplete.
  3. Right to erasure (Article 17 of the GDPR). You have the right to request the erasure of your personal data. This right applies if:
  • Your personal data is no longer required for the purposes for which they were collected;
  • Personal data are processed unlawfully;
  • We do not need to store your personal data in order to comply with applicable law;
  • In other cases where deletion is required or permitted by applicable law.
  1. Right to restriction of the processing (Article 18 of the GDPR). You have the right to request the restriction of the processing of your personal data in the following cases:
  • If You contest the accuracy of your personal data, we will restrict the processing of such data until we verify their accuracy;
  • If you object to the processing of personal data based on our legitimate interest, we will restrict the processing of such data until the legitimate interest is confirmed;
  • If the processing is unlawful, you can object to the deletion of personal data and request the restriction of their use instead;
  • If we no longer need personal data, but you need it to establish, exercise, or defense legal of legal claims.
  1. Right to object (Article 21 of the GDPR). You have the right to object to the processing of your personal data based on our legitimate interests. We will not continue to process personal data if we are unable to demonstrate the existence of compelling legitimate grounds for processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
  2. Right to lodge a complaint (Article 77 of the GDPR). You can always contact us with any questions regarding the processing of your personal data. However, if you believe that your rights have been violated, you can file a complaint with the Commissioner for Personal Data Protection of the Republic of Cyprus (jurisdiction of our registration). Commissioner’s website: http://www.dataprotection.gov.cy.

If you are within the EU, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence or place of work. You can find the list of data protection authorities in the EEA at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

  1. Changes and amendments to the Notice

We reserve the right to update, modify and amend this Notice to be usually compliant with the data protection laws. The current version of the Notice will be posted on the Website.