Privacy Policy

Last updated: 5 October 2026

1. Who We Are

Eirini Kontogianni Private Employment Office (“we,” “us,” or “our”) is the trading name of Ms. Eirini Kontogianni.

Ms. Eirini Kontogianni is the data controller for personal data processed for the purposes described in this Privacy Policy. Where we process personal data solely on a client’s instructions, for example when providing certain payroll or bookkeeping services, our responsibilities are governed by the applicable data-processing arrangements with that client.

We are committed to protecting personal data in accordance with the EU General Data Protection Regulation (“GDPR”) and applicable Cyprus data-protection legislation.

This Privacy Policy explains how we collect, use, share and retain personal data in connection with our employment, recruitment, immigration-support, accounting and administrative services, and our website, www.eirinikontogianni.com.

References to “you” and “your” mean individuals whose personal data we process.

2. Who This Policy Applies To

This Privacy Policy applies to:

  • visitors to our website and individuals making enquiries;

  • prospective, current and former clients;

  • candidates seeking employment and individuals involved in recruitment or placement procedures;

  • employers and their representatives;

  • shareholders, directors, employees and other individuals connected with our business clients;

  • family members or dependants whose information is required for a requested service; and

  • suppliers, collaborators and other business contacts.

3. When We Collect Personal Data

We may collect personal data when:

  • you contact us about our services;

  • you submit an enquiry through our website, by email, by telephone or through other communication channels;

  • you register as a candidate, submit your CV or seek employment;

  • you engage us to recruit staff or assist with employment-related procedures;

  • you provide documents for immigration, residence, accounting, payroll, tax or Social Insurance procedures;

  • you provide goods or services to us; or

  • you visit our website.

Where necessary, we may also receive information from employers, authorised representatives, recruitment partners, relevant authorities or other sources connected with the requested service.

If you do not provide information necessary for a service or procedure, we may be unable to provide the requested assistance. Where relevant, we explain which information is required and why.

4. Types of Personal Data We Collect

Depending on the service requested, we may collect:

  • Personal and contact details: name, date of birth, nationality, address, email address and telephone number.

  • Identification and immigration information: identity documents, passports, residence permits and supporting application documents.

  • Recruitment and employment information: CVs, qualifications, employment history, references, interview notes and information relevant to employment opportunities.

  • Accounting and financial information: invoices, payment details, accounting records, tax information, payroll records and Social Insurance information.

  • Family and supporting information: information about family members or dependants where necessary for the requested procedure.

  • Correspondence and service records: enquiries, instructions, agreements and communications.

  • Website information: information submitted through forms and technical information such as IP address, browser and device information, and pages visited.

Where a procedure requires health information or other special-category personal data, we collect only what is necessary. We process it only where an appropriate lawful basis and an applicable additional condition under data-protection law are available. Where we rely on explicit consent, we obtain it separately for the specified purpose.

Information about criminal convictions or offences, where required for a procedure, is handled only where permitted by applicable law and subject to the required safeguards.

5. Purposes and Lawful Bases for Processing

We process personal data to:

  • respond to enquiries and communicate with clients, employers and candidates;

  • provide recruitment services and match candidates with prospective employers;

  • prepare and coordinate immigration, residence and employment-related applications;

  • provide bookkeeping, accounting, payroll, VAT, tax and Social Insurance services;

  • manage agreements, instructions, invoices and payments;

  • meet applicable statutory and recordkeeping obligations; and

  • protect our systems and manage complaints or disputes.

Depending on the activity, we rely on:

  • Contractual necessity: to perform an agreement with you or take steps at your request before entering into an agreement.

  • Legal obligation: to comply with applicable statutory requirements.

  • Legitimate interests: to manage our business relationships, respond to enquiries, protect our systems and handle complaints or disputes, provided those interests are not overridden by your rights and freedoms.

  • Consent: for specific activities where we request your permission.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing lawfully carried out before withdrawal.

This Privacy Policy is an information notice. Reading or accepting it does not constitute consent to every use of your personal data.

6. Sharing Your Personal Data

Where necessary for the relevant purpose and supported by an appropriate lawful basis, we may share information with:

  • prospective employers and recruitment partners involved in your application or placement;

  • government departments and authorities responsible for employment, immigration, taxation and Social Insurance;

  • providers supporting our website, email, IT systems, storage and business administration;

  • accountants, auditors, insurers, translators, couriers and other providers involved in the requested service; and

  • other recipients where disclosure is required by law or you have instructed or authorised us to make it.

Our website is hosted by Squarespace, which processes certain visitor information to operate and secure the website.

We limit disclosures to information necessary for the relevant purpose. Providers processing personal data on our behalf must be subject to appropriate data-protection arrangements. Some recipients, including authorities and prospective employers, process information under their own responsibilities and privacy notices.

7. Information About Other Individuals

If you provide information about another person, such as an employee, candidate or family member, please ensure that you are authorised to provide it and that the person is informed about its disclosure to us and this Privacy Policy.

We remain responsible for meeting our own applicable data-protection obligations.

8. Cookies and Website Data

Our website uses cookies and similar technologies to support its operation. Depending on the features enabled, these technologies may also be used to understand website traffic and activity.

Essential cookies support functions necessary for the website to operate. Where consent is required for non-essential cookies, such as certain analytics or advertising cookies, those cookies should only be activated after you have given consent through the website’s cookie controls.

Continuing to browse the website does not, by itself, constitute consent to non-essential cookies.

You can also manage cookies through your browser settings. Blocking essential cookies may affect certain website functions.

Information about Squarespace’s use of cookies is available at https://www.squarespace.com/cookie-policy.

9. International Data Transfers

Some technology providers or recipients involved in a requested service may process personal data outside the European Economic Area (“EEA”).

Where we transfer personal data outside the EEA, we must ensure that the transfer meets applicable data-protection requirements. Depending on the destination and circumstances, this may involve an applicable European Commission adequacy decision or appropriate safeguards, such as approved Standard Contractual Clauses together with any necessary supplementary measures.

You may contact us for information about transfers relevant to your personal data and the safeguards used, including how to obtain a copy where applicable.

10. Retention of Personal Data

We retain personal data only for as long as necessary for the relevant purpose, taking account of applicable recordkeeping obligations and the need to manage complaints or disputes.

Retention depends on the information and service concerned:

  • Enquiries: for the time needed to respond and manage relevant follow-up.

  • Client and application records: for the service concerned and any applicable subsequent recordkeeping period.

  • Accounting, payroll, tax and Social Insurance records: according to applicable requirements and our role in providing the service.

  • Candidate information: for the relevant recruitment or placement process. Where we request consent to retain it for future opportunities, we explain the retention period when obtaining that consent.

We consider whether the information remains necessary, whether an applicable statutory period requires retention and whether an unresolved matter justifies continued retention.

When information is no longer required, we securely delete or anonymise it, as appropriate.

11. Security and Confidentiality

We take appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.

Access should be limited to individuals who need the information for their responsibilities. Providers processing information on our behalf must also apply appropriate safeguards.

No method of electronic transmission or storage is completely secure. Please avoid sending unnecessary sensitive documents through website enquiry forms. Contact us to arrange an appropriate method of providing documents required for your service.

12. Your Rights

Subject to applicable conditions and exceptions, you have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete information;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • receive eligible personal data in a structured, commonly used and machine-readable format and request its transfer to another controller; and

  • withdraw consent where processing relies on consent.

Withdrawal of consent does not affect processing lawfully carried out before withdrawal.

These rights are not absolute. For example, certain information may need to be retained to meet statutory obligations.

You also have the right to lodge a complaint with the Commissioner for Personal Data Protection in Cyprus, or another competent supervisory authority.

13. How to Contact Us

For questions about this Privacy Policy or to exercise your data-protection rights, please contact:

Eirini Kontogianni Private Employment Office
Data controller: Ms. Eirini Kontogianni
Email: ekontogianni.employment@gmail.com
Telephone: +357 96 665612

We may request information necessary to verify your identity before responding to a request concerning personal data.

We normally respond to rights requests within one month. Where an extension is permitted because of the complexity or number of requests, we will inform you within that initial period and explain the reason.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, practices or applicable requirements.

The current version will be published on www.eirinikontogianni.com, with the date of the latest update shown above. Where required, we will also notify you of significant changes.