Privacy Policy

 

1. Introduction

Welcome to Windstorm Trading & Investments Limited (“we”, “us”, “our”, “Windstorm”). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit or use our website https://windstorm.com.cy (the “Website”), regardless of where you visit from.

By using or accessing our Website, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

 

2. Who we are – Data Controller

The data controller for your personal data collected via the Website is:

Windstorm Trading & Investments Limited
Address: Stadiou 126, 2nd Floor, 6020 Larnaca, Cyprus
Email: dpo@windstorm.com.cy
Phone: +357 24505757

If you have any questions about this Privacy Policy or how we handle your personal data, you may contact us at the above contact details.

You have the right to make a complaint at any time to The Commissioner for Personal Data Protection, the Cypriot supervisory authority for data protection issues whose contact information is as follows:

Address: Kypranoros 15, Nicosia 1061, Cyprus
Email: commissioner@dataprotection.gov.cy
Postal address: P.O.Box 23378, 1682 Nicosia, Cyprus
Phone: +357 22818456
Fax: +357 22304565

We would, however, appreciate the chance to deal with your concerns before you approach the Commisioner, so please contact us in the first instance.

 

3. What personal data we collect & how

We may collect and process the following categories of personal data when you interact with our Website (e.g., contact form, career application, general enquiry, or other modules):

  • Identity & Contact Data: e.g., first name, last name, email address, phone number, any other contact details you provide.
  • Technical & Usage Data: e.g., IP address, browser type and version, device information, operating system, pages visited, time and date of visit, referring/exit pages.
  • Communications Data: any messages, CVs, requests, or information you submit through our contact or career forms.

We collect this data when you voluntarily provide it (e.g., by filling in a form).

Personal Data Provided for Job Applications

If you choose to apply for a position by sending your CV or other application materials to us by email (as indicated on our Website), we will process the personal data you provide for the purpose of assessing your application, communicating with you, and managing the recruitment process. This may include your contact details, employment history, qualifications, and any other information contained in your CV or cover letter.

We retain job application data only for as long as necessary to complete the recruitment process, or for a limited period afterward in accordance with applicable law and our internal retention policies. If you wish for your CV to be deleted sooner, you may contact us at dpo@windstorm.com.cy

 

4. Purpose and legal basis for processing

We process your personal data for the following purposes:

  • To respond to your inquiries, requests or applications (e.g., contact form, submission of CV through email)
    To maintain and improve our Website (security, performance)
    To comply with legal obligations (e.g., accounting, audits, statutory requirements)
  • Legal Basis / Justification Performance of a contract or pre-contractual steps; or our legitimate interest to provide requested services or information
    Our legitimate interest in operating and improving our digital presence
    Legal obligations under applicable law

We will only use your personal data when there is a legitimate basis to do so, and we do not retain data longer than necessary for the purpose it was collected.

 

5. Data retention

We will keep your personal data only for as long as necessary to fulfil the purposes for which it was collected (e.g., responding to your enquiry, processing a job application), and as required by law (e.g., record-keeping for audits or compliance). Once data is no longer needed, we will securely delete or anonymize it.

 

6. Disclosure of personal data

We will not share, sell, or lease your personal data to third parties, except in the following cases:

  • If required to comply with a legal obligation or court order;
  • If necessary to exercise or defend legal claims;
  • If we engage third-party service providers (e.g., hosting, IT support, analytics) to assist with the operation of the Website. In such cases, these providers act as “processors” and are contractually bound to protect your data and use it only as instructed by us.

Where such third-party processing occurs, we ensure it is carried out under appropriate safeguards and in accordance with applicable data-protection law.

 

7. Your rights under GDPR / Data subject rights

If you are a resident of the European Union (or otherwise covered under GDPR), you have the following rights regarding your personal data:

  • Right of access — you may request a copy of the personal data we hold about you;
  • Right to rectification — you may request correction of inaccurate or incomplete data;
  • Right to erasure (“right to be forgotten”) — you may request deletion of your personal data under certain conditions;
  • Right to restriction of processing — you may ask us to limit how we process your data;
  • Right to data portability — you may request your data in a commonly used, machine-readable format;
  • Right to object — you may object to certain processing (e.g., marketing, analytics) based on our legitimate interests;
  • Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at office@windstorm.com.cy. We will respond within a reasonable timeframe and in accordance with GDPR obligations.

 

8. Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Only authorised personnel have access to personal data, and any third-party processors we use are required to maintain strict data-security standards.

 

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time (for example, to reflect changes in our practices, legal requirements, or website features). The “Last updated” date at the top will reflect the version.

We encourage you to review this Privacy Policy regularly. Where required by law, we will notify you of significant changes and if applicable, ask for your consent again.

 

10. Contact us

If you have any questions, requests, or concerns about this Privacy Policy or our data-protection practices, please contact:

Windstorm Trading & Investments Limited
Email: dpo@windstorm.com.cy
Phone: +357 24505757
Address: Stadiou 126, 2nd Floor, 6020 Larnaca, Cyprus