Privacy Policy

Last Update: September 04, 2025

This Privacy Policy applies to all relationships in connection with REVERA's (“we”, “us”, “our”) processing of information that may directly or indirectly identify you (the “personal data”) users of cyprus.revera.legal (the “Website”), customers and contractors, job candidates, and other entities.

Information about the data controller:

Name: REVERA (CYPRUS) LTD, a company incorporated and existed under the laws of Cyprus

Address: 78 Spyrou Kyprianou, Magnum Business Center 3rd floor, 3076 Limassol, Cyprus

E-mail: cyprus@revera.legal

Please read this Privacy Policy carefully as it contains important information about the following:

How do we collect your personal data?
How do we process your personal data?
When can we share your personal data?
How long do we retain your personal data?
Do we use automated decision-making or refer to the automated profiling?
What rights do you have?

We may update this Privacy Policy from time-to-time to keep it in conformity with the relevant legislation, including the Regulation of the European Parliament and of the Council (EU) 2016/679 (the “GDPR”).

1. How do we collect your personal data?

We collect personal data if you provide it to us or automatically by electronic means. If you contact us in messengers or social networks, we may also collect information about you available on such messenger or social network.

2. How do we process your personal data?

We respect your privacy and aim to limit the personal data that we collect from you to the amount which is strictly necessary to fulfil the purposes of processing.

Categories of personal data that we process are specified below:

Email newsletters and marketing communications You can subscribe on our Website to receive useful updates – for example, news about changes in legislation, new case studies, informational and reference materials, promotional content, and announcements of upcoming events organized by REVERA (either independently or together with partners). We will only send such communications if we have a valid legal basis to process your data.
Categories of data subjects	Individuals who subscribe to our newsletter
Processed personal data	E-mail Name (optional) Company name (if the subscriber is employed by a REVERA client)
Legal basis for the processing	Consent
Data retention period	3 years from the date of subscription (unless you withdraw your consent earlier)
Ensuring participation at events organized by REVERA or REVERA partners When you register for events organized by REVERA, either independently or together with partners, we may send you informational messages such as registration confirmations, updates to the event program, reminders about the date, time, and venue, as well as useful follow-up materials (for example, speaker presentations and other related content).
Categories of data subjects	Individuals who register for an event
Processed personal data	First and last name E-mail Company name (optional) Industry (optional)
Legal basis for the processing	Our legitimate interest in ensuring your participation in the event and your interest in receiving material from the event and answering emerging questions
Data retention period	3 months from the date of registration for the event
Consideration of an application for a job or internship, invitation to an interview
Categories of data subjects	Candidates applying for employment Candidates applying for internships (practical training)
Processed personal data	Personal data contained in an application form or résumé, including first name, last name, and contact details.
Legal basis for the processing	Consent by clicking on the “Send” button
Data retention period	In case of refusal of employment – 1 year
Responding to inquiries about REVERA services, providing information, and conducting pre-contract discussions You may contact REVERA at any time with a question or request regarding our legal services. REVERA offers several ways to communicate with us: you can submit a consultation request or leave a question using the relevant form on the Website, ask about our services via the Website chatbot, or send a request directly to a specific lawyer through the Website.
Categories of data subjects	Person who made a request for legal services
Processed personal data	Name Content of the inquiry Contact details, depending on the chosen communication method (e.g., phone number, email address, or messenger username)
Legal basis for the processing	Our legitimate interest in receiving communication from you and reacting to it and your interest in getting our response
Data retention period	2 months from the date of response to the request
Conclusion, performance, amendment and termination of client contracts
Categories of data subjects	Person authorized to sign the contract
Processed personal data	Personal data provided by the client (his/her representative) as part of the conclusion and performance of the contract
Legal basis for the processing	Processing is necessary for the performance of a contract to which the client is party or in order to take steps at the request of the client prior to entering into a contract
Data retention period	For the term of the contract and as required by applicable law
Conclusion, execution, amendment and termination of contracts with contractors
Categories of data subjects	Person authorized to sign the contract
Processed personal data	Personal data provided by the contractor (his/her representative) as part of the conclusion and performance of the contract
Legal basis for the processing	Processing is necessary for the performance of a contract to which the contractor is party or in order to take steps at the request of the contractor prior to entering into a contract
Data retention period	For the term of the contract and as required by applicable law

3. When can we share your personal data?

In certain cases, we may share your personal data with third parties. We do this only in the situations described in this Privacy Policy. In any case, we strive to transfer your personal data in a secure manner and, if required by applicable law, based on an agreement between us and each recipient. We will make all reasonable efforts to ensure that each recipient understands the principles of the data protection directive and complies with them in accordance with the law and/or the specific agreement.

We share your personal data to third-party as follows:

to our affiliates

We may share your personal data with our parent company or companies, affiliates or subsidiaries and keep some of your personal data in our business records for the accounting and compliance purposes. Similarly, we will transfer your personal data in the event of a merger, acquisition, reorganization, bankruptcy or other similar event, your personal data may be transferred to our successor or assignee.

to third parties as required by law

We may share your personal data in cases where we are required to do so by law, by court order, or in other situations where we have reasonable grounds to believe that the transfer of your personal data is necessary to initiate legal proceedings in the event of a violation of the Terms or any applicable laws. We may also share your personal data if we have reasonable grounds to believe that it is necessary to prevent fraud or other activities that are contrary to applicable law.

to accomplish the purposes set forth above

In some cases, to achieve processing goals, we collaborate with partners who assist us in various aspects of our activities.

In each case, we carefully select partners to collaborate with and ensure that such companies implement adequate legal, organizational, and technical measures to protect personal data from unauthorized access. However, despite our careful vetting of our partners, it is important to understand that we cannot guarantee absolute compliance with data protection laws in all cases.

We transfer your personal data to the following categories of recipients:

Hosting providers

We are diligent in safeguarding your personal data and only use trusted partners to store your personal data. Although hosting providers may have access to the personal data we store, we enter into personal data processing agreements with them that require them to treat it in accordance with relevant privacy laws and regulations.

Marketing Partners

We may send you notices and, subject to your consent, send you marketing and informational mailings. In order to conveniently administer this mailings, we engage third parties to help us carry it out.

4. How long do we retain your personal data?

We retain your personal data for no longer than it is necessary to fulfill the purposes specified in the section “How do we process your personal data”. Except for any legal obligation that sets a longer data retention period, at the end of these periods, the personal data processed will be deleted or anonymized.

5. Do we use automated decision-making or refer to the automated profiling?

We neither use automated decision-making nor refer to the automated profiling.

6. What rights do you have?

As a data subject, you have some rights associated with the personal data processing. We are committed to upholding these rights and ensuring that you can exercise them effectively, but please keep in mind that GDPR that current legislation, in particular the GDPR, imposes certain restrictions on the exercise of certain rights. For this reason, we will analyze the request to exercise the rights described below on a case-by-case basis for compliance with the law.

Below, you can find the information regarding your rights as a data subject under GDPR:

Right of access

You have the right to obtain from us the confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data, as well as other supplementary information.

Upon receiving your request, we will provide you with a copy of the personal data we process in the form in which you have requested the provision of this information (or in a commonly used electronic form).

Please note that in some cases, we may charge you a reasonable fee for providing this information based on administrative costs. If we are unable to fulfill your request for any reason, we will provide you with an explanation and inform you of your rights to appeal the decision.

Right to restrict processing

You have the right to restrict processing of your personal data if:

(a) the accuracy of the personal data is contested by you,

(b) the processing is unlawful and you oppose the erasure of the personal data,

(c) we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims, and

(d) you have objected to processing pending the verification whether the legitimate grounds override this.

We will not process your data (except for storage) unless it is based on consent, or to assert, exercise, or contest legal claims and actions, or to protect the rights of another person or entity, or for reasons of important public interest.

Right to erasure of personal data

You can request the deletion or destruction of your personal data in certain circumstances, such as:

(a) the personal data are no longer required in relation to the purposes for which it was gathered or processed in another way;

(b) you withdraw your consent concerning processing subject to consent;

Note, that we can retain your personal data as necessary to comply with our legal obligations or resolve disputes.

Upon receiving your request for erasure, we will assess whether the conditions for erasure are met and, if so, without undue delay delete or anonymize your personal data from our systems and notify any third parties to whom the data have been disclosed.

Right to rectification

You have the right to request REVERA to correct your personal data if they are incomplete or inaccurate.

Upon receiving your request for rectification, we will review the accuracy and completeness of your personal data and make any necessary corrections or updates.

Right to data portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and, if technically feasible, transmit it to another data controller.

Note that this right applies when we process your personal data with your consent or based on a contract.

Upon receiving your request for data portability, we will provide you with a copy of your personal data in the requested format, where technically feasible.

Right to object to the processing of your personal data

Where we are relying on a legitimate interest and there is something about your particular situation that makes you want to object to the processing on this ground.

Upon receiving your objection to processing, we will not process your personal data unless we can demonstrate that there are compelling legitimate reasons that override your interests, rights, and freedoms, or if it is necessary for legal claims and legal actions.

Right to withdraw consent

If personal data processing is based on your explicit consent, you have the right to withdraw your consent at any time.

If we do not have any other legal basis for processing your personal data, we will stop processing it once we receive your request to withdraw consent.

Right to lodge a complaint

If you believe that our processing of your personal data violates applicable legislation, you have the right to lodge a complaint with a supervisory authority.

Since we are registered under the law of the Cyprus, the personal data authority overseeing us regarding the personal data processing is Commissioner for personal data Protection. You always have the right to make a data protection related complaint at any time to a supervisory authority. You may also contact your local data protection authority. A list of local data protection authorities is available here.

Be aware that these rights are subject to certain limitations and exceptions as provided by law. To exercise any of these rights or for further inquiries, please contact us using the provided contact information (via e-mail address or at our legal address).

We will review your request as soon as possible, but not more than within one (1) month. Please keep in mind that this period may be extended for an additional two (2) months, if necessary, based on the complexity and number of your requests. In that case, we will tell you about the extension within one (1) month of receipt of your request and explain the reasons for the delay.

7. Age limits

We do not knowingly collect or solicit your personal data to anyone under the age of 16. If you are under the age of 16, please do not provide any personal data to us. If we learn that we have collected personal data about a child under the age of 16, we will delete that personal data as soon as possible. If you believe that we might have any personal data from or about a child under the age of 16, please contact us at the e-mail indicated in the contact details.

8. Changes to the Privacy Policy

This Privacy Policy may be changed from time to time due to the implementation of new technologies, laws’ requirements or for other purposes. Your continued use of the Website after the effective date of the updated Privacy Policy will be subject to the new Privacy Policy. If we make any major changes to our Privacy Policy and will need your explicit consent for further processing of your personal data, we will request your consent or your renewed consent (in case it was obtained previously).

9. Links to other websites

Our Website may include links to websites or services operated by third parties that are not under our control. If you click on a link to a third-party website or service, you will be redirected to that website or service. We recommend reviewing the privacy terms of each website or online service you visit. We have no control over and do not assume any responsibility for the content, privacy terms, or practices of third-party websites or services.