General Data Protection Regulation on Editing – Revision Date: 14/07/2026

HANDY’S Security Systems Ltd (the “Company”) provides services in the Security Systems sector, including the supply, installation, maintenance, repair of security systems, and 24-hour Alarm Receiving Centre (ARC) monitoring services (collectively referred to as the “Services”).

Company Details

HANDY’S Security Systems Ltd
30 Vyzantiou Street, 2064 Strovolos, Nicosia, Cyprus
Telephone: 77778787 / +357 22311143
Email: [email protected]

Data Protection Officer (DPO)

Any individual wishing to exercise their rights under the General Data Protection Regulation (GDPR), or who has any questions regarding the processing of their personal data, may contact the Company’s Data Protection Officer (DPO):

Data Protection Officer
Telephone: +357 25108600 / +357 99661756
Email: [email protected]

Our Commitment

HANDY’S Security Systems Ltd is committed to protecting the privacy of its employees, customers and business partners and to processing personal data in a transparent, lawful and secure manner.

The personal data collected and processed by the Company are directly related to the provision of the Services offered by the Company.

The Company processes personal data in accordance with this Privacy Policy and the applicable legal and regulatory framework, including:

  • Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
  • The Protection of Natural Persons against the Processing of Personal Data and the Free Movement of such Data Law of 2018 (Law 125(I)/2018), as amended from time to time;
  • and any other applicable data protection legislation in force in the Republic of Cyprus.

Personal Data Processed by the Company and Legal Basis for Processing

In order to provide its Services, the Company is required to collect and process the minimum amount of personal data necessary for the performance of its contractual obligations towards its customers and business partners.

The categories of personal data that may be collected include:

  • Demographic Data: Name, title.
  • Identification Data: Customer number.
  • Contact Details: Mobile telephone number, business telephone number, personal email address, business email address, residential address and business address.
  • Financial and Banking Information: IBAN, bank account number, payment card details and banking information.
  • Family Information: Names of spouse and/or children.
  • Voice Recordings: Recordings of incoming and outgoing telephone calls, including recordings of internal telephone conversations where applicable

The above personal data are collected, processed and retained for one or more of the following lawful purposes:

  • Performance of a contract between the Company and the customer or business partner.
  • Facilitating communication arising from the business relationship.
  • Pursuing the Company’s legitimate business interests, where such interests are not overridden by the rights and freedoms of the data subject.

Where a customer or business partner has provided explicit consent for the processing of personal data for purposes other than those described above, such processing shall be based on that consent.

The data subject has the right to withdraw such consent at any time. Withdrawal of consent shall not affect the lawfulness of any processing carried out prior to its withdrawal.

Additional Processing Based on Legitimate Interests

In addition to the above, where necessary, the Company may collect and process personal data beyond those strictly required for the performance of its contractual and/or legal obligations, where such processing is necessary to safeguard the legitimate interests of the Company or the legitimate interests of third parties associated with the Company.

Such personal data and/or information may be processed for purposes relating to the Company’s business and commercial activities, while taking into consideration the interests, fundamental rights, freedoms and reasonable expectations of its customers and business partners.

Such processing may include, but is not limited to:

  • Preparation and submission of quotations.
  • Connection of customer systems to the Company’s Alarm Receiving Centre (ARC).
  • Processing of payments.
  • Performance and administration of contractual obligations.
  • Customer satisfaction surveys, market research and service quality assessments, provided that the customer or business partner has not objected to the processing of their personal data for such purposes.
  • Implementation of security measures and procedures, including Closed-Circuit Television (CCTV), Access Control Systems and measures to prevent unauthorised access to the Company’s premises.

Recipients of Personal Data

Within the Company, personal data are processed only by authorised departments and employees who require access to such information in order to perform their duties. All authorised personnel are bound by confidentiality obligations and, where applicable, have signed Confidentiality and Non-Disclosure Agreements (NDAs). Personal data are processed only to the extent necessary for the fulfilment of the Company’s contractual and legal obligations, where consent has been provided by the customer or business partner, or where processing is based on the Company’s legitimate interests.

The Company may also obtain or share personal data with carefully selected service providers and suppliers with whom it maintains contractual relationships. Such providers are contractually required to maintain the confidentiality and security of personal data in accordance with applicable data protection legislation.

Under no circumstances will the Company disclose personal data to third parties for their own marketing, advertising or promotional purposes.

The Company may disclose personal data to public authorities where required by law, pursuant to a legal obligation, court order or other applicable statutory requirement, or where the data subject has provided explicit consent for such disclosure.

Retention of Personal Data

Personal data are retained in either electronic and/or hard copy format for the duration of the contractual relationship between the Company and the customer or business partner.

Where required by applicable legislation, or where necessary for the establishment, exercise or defence of legal claims, the Company may retain personal data for a longer period in accordance with the relevant legal requirements.

Throughout the retention period, the Company implements appropriate technical and organisational measures to ensure the security, confidentiality and integrity of personal data.

Automated Decision-Making

Automated decision-making occurs where an electronic system processes personal data and reaches decisions without human intervention.

The Company does not currently carry out automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Should such processing be introduced in the future, affected individuals will be informed in accordance with the requirements of the General Data Protection Regulation (GDPR).

Data Subject Rights

Under the applicable data protection legislation, customers and business partners have the following rights in relation to their personal data:

Right of Access

You have the right to obtain access to your personal data. This enables you to receive a copy of the personal data held by the Company. To request a copy of your personal data, you may contact the Company.

Right to Rectification

You have the right to request the correction of inaccurate or incomplete personal data held by the Company.

Right to Erasure (“Right to be Forgotten”)

You have the right to request the deletion of your personal data where there is no lawful reason for the Company to continue processing or retaining such data. However, the Company may retain personal data where it has another lawful basis for doing so.

Right to Object

You have the right to object to the processing of your personal data where you have grounds relating to your particular situation.

Where an objection is submitted, the Company will cease processing your personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

You also have the right to object where your personal data are processed for direct marketing purposes relating to the Company’s services.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. This means that the Company may continue to store your personal data but will process them only in limited circumstances, including where:

i. the accuracy of the personal data is contested, pending verification;
ii. the processing is unlawful but you oppose the erasure of the data;
iii. the Company no longer requires the personal data but you require them for the establishment, exercise or defence of legal claims;
iv. you have objected to the processing and verification is pending as to whether the Company’s legitimate grounds override your objection.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit those data to another organisation for your own purposes.

You also have the right to request that the Company transfers your personal data directly to another organisation, where technically feasible.

Right to Withdraw Consent

Where the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time.

Withdrawal of consent shall not affect the lawfulness of any processing carried out prior to its withdrawal.

Contacting the Company

Should you wish to exercise any of the above rights, or if you have any questions regarding the processing of your personal data, you may contact the Company by telephone or by email at:

Email: [email protected]

Right to Lodge a Complaint

If you have exercised one or more of your data protection rights and you remain dissatisfied with the manner in which your personal data have been processed, or if your concerns have not been addressed satisfactorily by the Company, you have the right to lodge a complaint with the Company’s Data Protection Officer (DPO).

Telephone: +357 25108600 / +357 99661756

Email: [email protected]

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

Changes to this Privacy Policy

The Company reserves the right to amend and/or revise this Privacy Policy whenever it considers this necessary.

Customers and business partners are encouraged to review this Privacy Policy periodically in order to remain informed about how the Company collects, processes and protects their personal data.

This Privacy Policy shall be reviewed and updated at least once every year.

Andys Sofroniou

(Managing Director of Handy’s Security Systems Ltd)