Lapwings Maritime Services Ltd respects your privacy and your personal data. We are also committed to safeguarding your personal data. Whenever you provide such data, we are legally obliged to use it in line with all relevant laws concerning the protection of personal information. This policy explains to you how we process and use the personal data we collect and lists, inter alia, your rights and our obligations for such collection, process and use of your personal data under the law.

By submitting any personal data via this website, you agree to its possible use, processing and storing. The Lapwings Maritime Services Ltd. website may include, however, links and information to/from other third party and external websites which are not covered by this privacy statement.

About us
Lapwings Maritime Services Ltd, established in Limassol (Cyprus) is your Global Spare Parts and Services Partner. With experience in the industry for more than 20 years we provide our clients and partners with superior quality of services and solutions such as Spare Parts, Information Technology consultancy, Communication, Navigation and Repairs.

Controller of your personal data
The controller of the personal data we keep in order to provide to you our services is Lapwings Maritime Services Ltd with Address: Vasili Michaelide 38, Epsilon Court II, Apt/Office 24, 3026 Limassol, Cyprus, Tel: +357-70002326.

Type of Personal Data we collect
In case that you are one of our clients or an authorised representative, officer, registered shareholder and/or beneficial owner of a legal entity or other body we deal with it in business, we may collect your personal data including: name and surname, telephone numbers, email address, authentication data (e.g. signature). Depending on the kind of the service(s) we provide to you we may collect additional personal data such as: profession, current employment position, other professional activities (e.g. as per corporate certificates of directors/shareholders), curriculum vitae etc. Also, when it is necessary, we may additionally collect some of your sensitive personal data such as: your marital status, religion or ethnicity. Also we may collect other personal data which may not be obvious to you such as: your internet protocol address and/or your current geo-location.

How we collect your Personal Data
Personal data may be obtained by us:

• Directly from you by filling data forms and/or through our communication;
• from our clients in person or via their representatives or via our associates, in the context of our business relationship;
• from other entities or other third parties including companies that introduce you to us
• from other entities that provide information for regulatory and/or legal compliance;
• from publicly available sources (e.g. the Department of Registrar of Companies and Official Receiver, commercial registers/catalogues, the internet, adverts etc)

What are your rights?
According to the GDPR, you, as data subject, have the following rights:
a) The right to be informed about our collection and use of your personal data. This Privacy Policy should tell you everything you need to know but you can always ask for additional information and/or clarifications.
b) The right to access the personal data we hold about you. This means that you can ask us details of your personal data and for a copy of it if this is available.
c) The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete.
d) The right to erase your personal data (partially or in total), subject to the limitations referred to in the present Policy and/or of any law or regulation.
e) The right to be informed regarding rectification, erasure or restriction of data processing that affect your personal data.
f) The right to object to us using your personal data for a particular purpose or purposes subject to the limitations referred to in the present Policy and/or of any law or regulation.
g) The right to object to processing your personal data for direct marketing and/or automated processing including profiling which is related to direct marketing.
h) The right to data portability meaning that you can ask to obtain a copy of your personal data in a structured, commonly used and machine readable format. You also have the right to ask for your personal data to be transmitted directly to another data controller in case such transmission is technically feasible.
i) The right to revoke the consent at any time if we use your personal data based on your written consent. It is clarified that any processing prior to the receipt of such revocation will not be affected.
j) The right to be notified in case of high risk of data breach which affecting your personal data.

All above rights -except right in paragraph (j) – can be exercised by placing a request in writing as described in the Contact Us section of this Privacy Policy. You can also request clarifications or lodge a complaint against the way we process your personal data.
Upon receiving your request we will respond to your request (free of charge but in case that your request is ‘manifestly unfounded or excessive’ a fee for our administrative costs may be charged) within reasonable time not exceeding one month.
In case we have not complied with your request or you are not satisfied with our response you have the right to lodge a complaint with the Office of the Data Protection Commissioner.
All above rights are limited and subject to the provisions of Regulation (EU) 2016/679 and/or limited and subject to the provisions of the current Privacy Policy.

Your Obligation to provide Personal Data
You need to provide us with Personal Data which are absolutely necessary in order to:
a) commence and proceed with a business relationship with you or with the legal entity or body for which you are the authorized representative, officer or owner and provide you or such legal entity or body with legal, advisory, administrative, arbitration, consultation or other services and/or
b) perform of our contractual obligations and/or
c) comply with our legal or regulatory or statutory obligation including the money laundering laws which require that we verify your identity before we enter into a contract or a business relationship with you or the legal entity for which you are the authorized representative, officer or owner
We notify you that if you do not provide us with the required data, then we will not be able to commence or continue our business relationship either to you as an individual or as the authorized representative, officer or owner of a legal entity or body.

Ways of Use of Your Personal Data
Your personal data may be used for the following purposes:
Performance of a contract
We process personal data in order to provide our services based on contracts with our clients but also to be able to complete our procedures including due diligence and know your client procedure so as to enter into a contract with prospective clients. The purposes of processing personal data are relevant to the requested services and the contract terms and conditions.
Compliance with legal, regulatory and law enforcement request

We process personal data in order to comply with number of laws, statutory requirements and regulations to which we are subjects including Tax laws and Anti-Money Laundering Laws as amended from time to time.
Such obligations and requirements impose on us necessary personal data processing activities for identification, identity verification, compliance with such authorities’ decisions or orders, compliance with court decisions/ court orders or other reporting obligations and anti-money laundering controls.
We hereby inform you that we cooperate and we shall cooperate with government and law enforcement officials and private parties to enforce and comply with the law and/or regulations to which we are subjects. This means that we will disclose – which is kind of process – any information about you and any personal data of you to such government or law enforcement officials or private parties as we believe necessary or appropriate to respond to claims and legal process to protect our property and rights or the property and rights of a third party, to protect the safety of the public or any person, or to prevent or stop activity we consider to be illegal.
In such case and only if we are legally entitled to notify you, we will take reasonable steps to give a notice to you for the disclosure of your personal data to such third parties as part of legal process.

Safeguarding or servicing legitimate interests
We advise you that we may process personal data so as to safeguard the legitimate interests of us or of any third party. In simple words, legitimate interest is when we have a business or commercial reason to use your data always respecting the principle of proportionality and necessity.
Protection of vital interests
We can process your personal data if it is necessary to protect and service your Vital Interests and/or the Vital Interests of your Organisation (Company) and/or the Vital Interests of another natural person(s).

Acquisition of data subject consent
We have the right to process your personal data for any reasons other than the reasons referred above provided that you have given us your specific consent for such process.

Retention Policy
We will keep your personal data for as long as we have a business relationship with you as an individual or in respect of our dealings with a legal entity or body you are authorized to represent as an authorised representative, officer, registered shareholder and/or beneficial owner. After the expiry of such business relationship, we may keep your data for as long as we are obliged and/or entitled to keep such data in accordance to any law or regulation to which we are subjects.
For prospective clients (or authorized representatives, officers or owners of a legal entity prospective clients) we shall keep your personal data for six (6) months from the date of conclusion of all communications which did not lead to cooperation or provision of services.

Sharing of Personal Data
As already mentioned herein, we may share certain personal data with third parties if a legal obligation, court or authority order, legitimate public or private interest, contract or consent exists. Some examples are:

• Supervisory and other regulatory and public authorities
• Our employees and our subsidiary and affiliated companies and their employees
• Other firms, management or trust companies, mainly subsidiary or connected companies of us
• According to our procedures for combating money laundering and financing of terrorism, the entities that provide information on regulatory compliance
• External legal or other consultants and associates.
• Auditors
• Companies that developed, hosting and maintaining our information technology infrastructure and/or other systems
• Companies which cooperate with us or help us in order to provide you with an effective provision of our services by offering technological expertise, compliance expertise, solutions and support and facilitating trading.
  If any of your personal data is acquired by a third party as described in the paragraph above, we will take reasonable steps to ensure that your personal data is safely processed.

How you can contact us
If at any time you have questions about our practices or any of your rights described above, you may contact us by email at: legal@lapwingsservices.com

Amendments
We are able to change or amend this Privacy Policy from time to time. This could happen, for example, because of law changes, or if we change our business or our practices.
In such cases, we shall post a Notice of Change under our News Section of our Website: www.lapwingsservices.com
You shall be deemed to have accepted such amendments immediately after their publication as described above. Thus, we encourage that you read our Privacy Policy from time to time.