Privacy Policy
Chania Luxury Estates collects, holds, uses, verifies and discloses (“processes”) information about corporates and individuals which may constitute personal data, under applicable data protection and privacy laws in Europe. Please read this Privacy Policy to understand how we process your personal data. The personal data we collect regarding you comes primarily from information that you submit to us or that is otherwise captured during the course of your relationship with us. For clients, we obtain personal data about you from the forms and documents used from your transactions with us and from your access to or use of our services. For employees or applicants for employment, we obtain personal data about you from your resume or job application form. We can also obtain personal data from our service providers acting on our behalf, from third parties authorised to provide us with such information, such as credit reporting bodies, other credit providers or other agencies used for running due diligence checks, authorised third parties performing identity verification procedures on our behalf and/or from third parties who provide services to you such as your financial adviser, financial planner, dealer group, accountant or other professional adviser. Some of this information is publicly accessible and/or reliable and independent databases that we access through an authorised third party to whom we disclose your personal data for the purpose of performing required identity verification procedures. Where you are an individual associated with a corporation or institution with whom Chania Luxury Estates does business, your personal data will also be provided to us via that corporation or institution. Such personal data includes personal and contact details, financial information, identification documents and, where permitted by applicable law and only to the extent needed, information relating to political affiliations, trade union membership or criminal convictions. We are not allowed to process personal data if we do not have a valid legal ground. Accordingly, we, our associated firms and/or other persons acting on our or their behalf will only process and use your personal data: 1. if necessary for our legitimate interests or necessary for taking steps to enter into or executing a contract with you for the services you request, or for carrying out our obligations under such a contract; 2. When dealing with us as an individual, where necessary for taking steps to enter into or executing a contract with you for the services you request; or for carrying out our obligations under such a contract, in this case, the provision of your personal data is a requirement necessary to enter into a contract with us, meaning that you are obliged to provide your personal data to us in order to carry out the relevant contract (which otherwise, we will not be able to do).
HOW WE SECURE YOUR DATA
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
