Privacy Policy

Download this policy:

Introduction

This Privacy Statement describes how the University of Limassol, hereinafter referred to as "UoL", “we”, “our”, “us”), collects, uses, and discloses certain personal information, our principles in regard to the data protection and our commitment to have in place measures and mechanisms in order to ensure the protection of the rights and the freedoms for any data subject.

Who we are

The University of Limassol is a progression of the Cyprus International Institute of Management (CIIM), a renowned business school operating in Cyprus since 1990 when it was founded as a Private School of Higher Education, by a group of leading executives of the Cypriot economy and renowned academics from leading Universities overseas.

The University of Limassol respects your privacy, and we are committed to protect your personal data in accordance with the privacy and data protection regulation (GDPR). Therefore, you are kindly asked to read carefully the above privacy policy for your information and please do not hesitate to contact us for any further clarification you might need.

Our headquarters are at Nicosia Campus, 21 Akademias Avenue Aglandjia, Nicosia 2107 and you may contact us by using the following details:

• by email: info@uol.ac.cy
• via telephone: 77772446

How we collect / obtain your information

• Directly from you and/or
• Through third parties from your employer, or your agent etc, and/or
• Through this website.

Information Collection and Use through our website

In general, you can visit UoL Web Site maintaining your anonymity. However, occasionally UoL may ask you to provide personally identifiable information, such as your name, company, e-mail address, phone number and address (“Personal Information”). The purpose of requesting such information/data may involve, corresponding with and/or contacting you, responding to your requests, or informing you about an optional subscription to a newsletter or publication, or notifying you about events. Where applicable, we will differentiate between personal data fields that are optional and those that are mandatory in order for you to obtain the requested information.

Categories of Personal Information we collect

• information you provide to the university by filling in the forms we initially requested from you;
• information you provide to the university when you submit your consent or when you report a problem through the Website;
• information provided by you (including email addresses) in case you contact us;
• Information you provide us when you submit your applications;
• Information you provide us as a registered student or potential student;

Purpose of the process and / or use of your Personal Information

• to provide you with our services i.e. during your enrolment as a student in University’s programs of study;
• to enable you to access and use the Site or our platforms;
• to provide you any services which you have requested i.e. communication with you to provide information about programs and / or services of the University
• for customer management purposes – to provide you with the customer support including any notice, for example changes about any service we offer;
• compliance- in order to comply with our legal obligations i.e. reports to the national regulatory authorities such as information requested for Immigration purposes in case of third country students or Data record for historical, statistical and research purposes;
• in the context of our business and/or academic relationship;
• to administrate the applications linked to the website;
• advertising – in case you have provide us with a consent, we may communicate with you in order to inform you about services and/or products offered by us or other third parties for which you might be interested;
• security purposes – in order to detect and/or prevent to actual or potential fraud, illegal activities, or any intellectual property infringement.

Types of data / personal information

The University of Limassol may hold the following information:

• Your contact details
• Your biographical and health information
• Details of your education
• Your personal university identifiers
• Details about your family
• Socio-financial information relating to you and your family
• Your student academic achievements as well as examination scripts and results
• Information about your areas of interest
• Technical Data such as your internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions.

Applications

Prospective students or participants in seminars, conferences or workshops (hereinafter referred to as Users) can register through the University's Site by completing the relevant interest form and providing personal data. All information requested on the online data entry form will be transmitted as part of the registration process. As part of the registration process you will be asked to give your consent to certain types of processing such as the transmission of demographic information to the Ministry of Education.

Registration

Upon approval of your application, your data will be processed pursuant to the contract you maintain with the University or in the context of providing the services you may request. User registration is necessary to provide certain content and services on our website, including creating and managing user accounts, participating in surveys, managing applications for admission and qualifying exams, organizing exams, registering for courses, events, examinations and the administrative tasks related to them.

Online Teaching and Learning

If need further information regarding the processing of the personal data in the courses of Distance Learning programs of study and online examinations, you can read the relevant policy Audio & Video Recording Policy.

Use of other platforms/applications

The University may use third-party platforms and applications for the efficient execution of certain services such as access to online courses and lectures, electronic library, materials, etc such as Moodle for example.

Registering in these applications or enabling these connections may allow third parties to collect or share data about you. The providers of such services have access to certain personal data provided by users during registration or when using the specific platform/application.

Any data used by third parties is used only to the extent necessary to perform the services we request. Any use for other purposes is strictly prohibited. In addition, any data processed by third parties will be processed in accordance with the terms of this Privacy Policy. Finally, we assure you that data is accessed under Data Processing Agreements and additional security measures are taken to protect the Privacy of information.

Advertising

You will be receiving advertising materials from UoL, only if you have provided your explicit consent. In the case you feel that you need to revoke this consent, you will be provided with an automated way to opt out (unsubscribe) from that communication or from all marketing e-mails sent by UoL. Please follow the instructions on the e-mail you received to do so. In the unlikely case that you have received unwanted e-mail from our Company, please forward a copy of that e-mail to our Data Protection Officer, to dpo@uol.ac.cy .

Data Sharing

We may share Personal Information among our affiliates for purposes of responding to your requests or otherwise as necessary for the purposes described above.

We may also in limited circumstances share Personal Information with government authorities or others, as this is required in order to protect the interests of UoL or others, as necessary in connection with the sale or transfer of all or a portion of the business. It may be required by the applicable law or court order.

By consenting to supply UoL with personally identifiable data, such as your name, address, email address and passport details, UoL will not, in any way, directly or indirectly, sell or transfer any of this information to any third party. Any information supplied will be confidential and will be handled in accordance with the applicable laws and regulation.

List of recipients we might disclose information

A. Affiliate companies – service providers (Law and Accounting Firms for legal, book-keeping and audit purposes, Agents for the payments of the agreed fees, or providers of e – learning platforms for academic purposes).

B. Third parties such as Governmental Institutions, Career Promotion Organizations, authorities, agents and administrative personnel in various countries (Tax Authorities, Bank Institutions etc.)

C. Legal Successors – we might disclose personal information to a buyer or a successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or sale or transfer of some or all of our assets.

Transfer of the data in countries out of the European Economic Area

Unless you, as individual, have specifically consented to the transfer, we will only transfer personal data outside the European Economic Area (EEA) where:

• we transfer the data to a country or international organisation which the EU Commission has decided ensures an adequate level of protection for your personal data;
• the transfer of your personal data is subject to adequate safeguards, which may include binding corporate rules or standard data protection clauses adopted by the EU Commission; or
• one of the derogations in the GDPR to transfer personal data outside the EEA applies.

Legal bases for the Collection, process, disclosure and use of Personal Information

The collection, disclosure, process and transfer of personal data must meet the below circumstances, which are used to establish our legal basis:

• it is necessary for us to perform a contract between you and the university;
• it is necessary in order for us to take measures to enter a contract with you where it has requested us to do so;
• it is necessary for us to establish, exercise or defend legal claims;
• it is necessary for us to be compliant with our legal obligations or
• if none of the conditions listed above apply, you have explicitly consented to the overseas transfer.

How long do we store information about you for

We follow a data retention policy, depending on the activity for which the data have been collected. The retention policy determines the retention time of each data and when to destroy information that is no longer needed for legal, regulatory or commercial reasons.

In general, UoL is obliged by the Tax Authorities to keep the data up to 7 years after the ceasing of the business relationship. Upon termination of the period of 7 years, UoL will destruct the related data as our legal obligation will not be valid anymore.

However, this may be longer in some instances, for example when dealing with a claim we may need to hold the information for a period of time relevant to the one the claim is being handled. Furthermore, for academic purposes and in order for us to be able to print and certify transcripts validity and/or issue certificates, we may keep your data for up to 50 years.

For other jurisdictions we will be subject to the requirements of the relevant jurisdiction in question, and this may not always reflect those of the Republic of Cyprus.

Overall, the criteria used to establish the period for which personal data will be stored is determined by regulatory or legal requirements. This is also supported by UoL Data Protection Policy that such information must not be kept for any longer than necessary to fulfil the purposes for which it was collected. Personal data may be stored for longer periods, as long as the personal data will only be processed for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, and as long as the appropriate technical and organizational measures are applied that requirements of the GDPR and relevant laws to ensure the rights and freedoms of the data subject.

Security of Personal Information

UoL takes appropriate security measures to ensure the protection of the Personal Information from any unauthorised access or disclosure. In addition, all employees had been trained on how to use, handle and process personal data, according to the provisions of Personal Data Law. Furthermore, UoL has upgraded technical measures and has transformed the policies and procedures in order to comply with the General Data Protection Regulation.

Access and Correction

If you wish to access or update the Personal Information you submitted using UoL website, or to make any inquiries about the processing of your information, please contact us. We provide individuals with access to their Personal Information as required by applicable data protection and privacy laws. In addition, please see below our Data Protection Officer’s contact details.

Individual’s Rights

The Individuals have the following rights:

1. Right of access - request access to any personal data we hold about them;
2. Right of rectification - have any personal data which we hold about them which is inaccurate or incomplete rectified;
3. Right to be forgotten - have personal data erased;
4. Right to restriction of processing - have the processing of individual’s personal data restricted;
5. Right of portability – To be provided with the personal data that the individual has supplied to us in a portable format that can be transmitted to another organisation without hindrance;
6. Right to object - object to certain types of processing, including processing based on legitimate interests, automated processing (which includes profiling) and processing for direct marketing purposes; and
7. Right to object to automated processing, including profiling - not be subject to a decision that is based solely on automated processing which produces a legal effect, or which has a similar significant effect for the individual.

If the individual wishes to exercise any of the rights set out above, he/she must make the request in writing to the Data Protection Officer, at dpo@uol.ac.cy. Please note some of these rights are restricted in some circumstances.

If the individual has provided his/her consent to any of the processing of his/her personal data, he/she has the right to withdraw his/her consent to that processing at any time, where relevant. He/she must contact the Data Protection Officer if he/she wishes to do so.

If he/she objects to processing based on legitimate interests, we must no longer process that personal data unless we can demonstrate compelling legitimate grounds for the processing which override his/her interests, rights and freedoms or that the processing is required for the establishment, exercise or defence of legal claims.

Cookie Policy

A cookie is a small file which asks permission to be placed on your computer’s hard drive. For full details of our cookie policy please refer to our main internet site or click here .

Social Media

UoL does not in any way control the data that are subsequently transmitted and/or that may be collected and/or processed by the respective social media, nor can it affect in any way the collection and/or processing of such data.
In this respect, we strongly recommend you to carefully read the relevant privacy policy of the respective social network, which provides information on the collection and processing of your data by the respective social media, as well as information on the rights and available privacy settings. The table below lists these privacy policies of the aforementioned social networks.

Platform Privacy/Policy Link
Facebook Facebook Privacy Policy
LinkedIn LinkedIn Privacy Policy
YouTube YouTube Community Guidelines
Twitter (X) X Privacy Policy (2023-09-29)

Use of Plugins/ Social Networks

UoL uses social network plugins on its website. The plugins are usually identified by the logo of each social network. Specifically:

• Facebook: the "share" and/or "share with friends" option of the Facebook social network is managed by Meta Platforms Ireland Limited, with registered office at Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland, and is responsible for the websites operating in European Union countries for the social networks Facebook and Instagram

• LinkedIn any information related to European residents which may be provided to, or collected by or for, or processed in connection with LinkedIn Services, is managed by LinkedIn Ireland Unlimited Company, with registered office at Wilton Place, Dublin 2, Ireland.YouTube is part of Google and complies with Google's privacy policies and principles. For users of Google services located in the European Economic Area or Switzerland, the data controller is Google Ireland Limited, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland

• Twitter (X) if you live in the European Union, EFTA States, or the United Kingdom, the data controller responsible for your personal data is Twitter International Unlimited Company, with an address of: Twitter International Unlimited Company / Attn: Data Protection Officer / One Cumberland Place, Fenian Street Dublin 2, D02 AX07 IRELAND. If you live in Switzerland, you can also contact the appointed representative at the following address: Twitter Switzerland GmbH / Attn: Data Protection Officer c/o Wasag Treuhand AG Bolligenstrasse 18 Bern, 3006, Switzerland

How you can petition for complaints

It is very important the principles of privacy to be followed, and we should take all the appropriate measures to avoid any breach or loss of these data. We ensure that the personal data you disclosed to us, are saved in a platform which is protected with additional security factors. Any breach of the GDPR and/or other relevant Data Protection Acts will be taken seriously and if you consider that the data protection principles have not been followed in respect of personal data about yourself or others you have the right to lodge a complaint with the relevant data protection supervisory authority. Our Protection Supervisory Authority is the Personal Data Protection Bureau (Independent Supervisory Authority for the Protection of Individuals). If you have any issues with our processing of your personal data and would like to make a complaint, you may contact the Personal Data Protection Bureau on (+357) 22 818 456 or at 1 Iasonos, 1082 Nicosia, Cyprus.

Data Protection Officer

You may contact UoL Data Protection Officer by sending an email at dpo@uol.ac.cy. If you require this Privacy Policy to be provided to you in paper form and/ or need any further clarification, please contact our Data Protection Officer using the contact details as described above.

Revisions to this Privacy Policy

UoL reserves the right to change this Privacy Policy from time to time. Please check the Privacy Policy frequently and particularly before you submit additional personal information via the Website. All revisions of this Privacy Policy will be posted on the web site via a link from the homepage. We also display the effective date of the Privacy Statement on the top of this page.