Privacy Policy

Island Energies Holdings Limited and our affiliated and/or subsidiary companies (together, “Island Energies”, “we”, “us” or “our”) welcome you to our website and thank you for your interest in our company.

We are committed to protecting your privacy and to handling your personal data openly, transparently and in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Cyprus Law 125(I)/2018. This Privacy Policy explains what personal data we collect when you visit our website, how we use it, who we share it with, and what rights you have.

Who We Are

The data controller responsible for your personal data is Island Energies Holdings Limited, 145-149, Chr. Chatzipavlou street, Christiel Building, 3036, Limassol, Cyprus, together with any affiliated or subsidiary company operating the specific website you are visiting. If you have any questions about this Policy or how we handle your personal data, you can contact our Data Protection Officer at dpo@island-oil.com.

Data We Collect Automatically

Whenever you visit our website, our server automatically records certain information for the duration of your visit. This includes so-called “usage data”, consisting of:

the site from which the file was requested;
the file name requested;
the date and time of the request;
the volume of data transmitted;
the access status (e.g. file transmitted, file not found);
a description of the type of web browser used; and
the requesting computer’s IP address.

This data is used for system security, to detect and prevent attacks on our website, and to optimise the performance of our website and services. Where we store your IP address, we do so only for as long as reasonably necessary to identify, limit and remedy any attack on our website, after which it is erased or shortened so that it can no longer be linked to you. Usage data is otherwise stored and evaluated only in an anonymised, statistical form, and our legal basis for this processing is our legitimate interest in the security and performance of our website (Article 6(1)(f) GDPR).

Data You Provide to Us

We do not collect additional personal data, such as your name, address, telephone number or email address, unless you choose to provide it to us — for example, by contacting us by email, completing a form on our website, or corresponding with us for a business purpose. Where you provide such data, we will only use it for the purpose for which it was provided (for example, to respond to your enquiry), unless we are required by law to use or disclose it for another purpose, or you have separately and specifically consented to another use, such as marketing or market research.

Our legal basis for processing data you provide to us is typically your consent, the steps necessary to enter into or perform a contract with you, or our legitimate interest in responding to your enquiries and maintaining our business relationships, depending on the context in which you provided it.

Analytics

We may use analytics tools, such as Google Analytics, provided by Google Ireland Limited / Google LLC (“Google”), to help us understand how visitors use our website and to improve its design and content. These tools use cookies to generate pseudonymised usage statistics and to recognise returning visitors.

Where analytics tools transfer data to servers outside the European Economic Area, such as in the United States, the transfer is protected by an appropriate safeguard, such as the European Commission’s Standard Contractual Clauses or the recipient’s certification under the EU-U.S. Data Privacy Framework, together with IP anonymisation where available so that your IP address is truncated before being stored. We only deploy analytics cookies with your prior consent, which you can withdraw at any time via our cookie settings. Further information about how Google processes data is available in Google’s own privacy policy.

Who We Share Your Data With

We do not sell your personal data. We may share personal data with:

trusted service providers who process data on our behalf, such as website hosting, IT support and analytics providers, under a written data processing agreement;
other companies within the Island Oil Group, where necessary for the purposes described in this Policy;
professional advisers, regulators and law enforcement authorities, where required or permitted by law; and
a buyer or successor in the event of a merger, acquisition or reorganisation of our business.

International Data Transfers

Where personal data is transferred outside the European Economic Area, we ensure an appropriate safeguard is in place, such as an adequacy decision of the European Commission, the European Commission’s Standard Contractual Clauses, or (for transfers to certified US recipients) the EU-U.S. Data Privacy Framework. You may contact our DPO for further information about the safeguards applicable to a specific transfer.

Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, or as required by applicable law, after which it is securely deleted or anonymised.

Data Security

We take our security obligations in respect of your personal data seriously and have implemented appropriate technical and organisational measures designed to protect your data against unauthorised access, alteration, disclosure or destruction.

Your Rights

Subject to applicable law, you have the right to:

request access to a copy of the personal data we hold about you;
request that we correct any inaccurate or incomplete personal data;
request that we erase your personal data in certain circumstances;
request that we restrict our processing of your personal data in certain circumstances;
receive certain personal data you have provided to us in a structured, commonly used, machine-readable format;
object to our processing of your personal data, including for direct marketing; and
withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at dpo@island-oil.com. We will respond within one month of receiving a valid request, and may ask you to verify your identity before we do so.

Please note that certain rights are subject to exceptions under applicable law: for example, we are not required to erase or amend your data where doing so would prevent us from meeting a contractual obligation to you, or where we are required to process or retain your data for a lawful purpose under the GDPR.

Complaints

If you are unhappy with how we have handled your personal data, please contact our DPO in the first instance at dpo@island-oil.com. You also have the right to lodge a complaint directly with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, or with the supervisory authority in your own EU member state of residence or work.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Any changes will be posted on this page with an updated “last updated” date, and where required by law we will notify you or obtain your consent before making a material change. Your continued use of our website following any update constitutes your acknowledgement of the revised Policy.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact: dpo@islandenergies.com