Privacy Policy

 

The Water Board of Lemesos processes the personal data of its consumers for water supply purposes. To comply with the new legislation with regard to the processing of personal data, that was introduced with the Regulation (EU) 2016/679 the Water Board  has adopted and published this privacy policy on its official website, in order to fully inform the data subjects about the processes that their personal data undergo as well as their rights and how to pursue them, pursuant to the new Regulation (EU) 2016/679. The present document applies to all the personal data that the Waterboard collects and processes from the data subjects that are either provided by digital means or in person. In relation to its website the Waterboard cannot be held liable for links that may direct the user to third party websites and cannot under any circumstances guarantee the protection of the user’s personal data should he/she chooses to leave this website.

Data Controller’s Contact Information

The Water Board of Lemesos is the data controller. It has its seat in Limassol at 66 Fr. Roosevelt str. and can be contacted via telephone on +357 25830000 or via email on dpo@wbl.com.cy. The Water Board  has appointed a third party DPO and the data subject can contact them for any inquiries or requests.

Data Processing

The Water Board  collects, stores and further processes the personal data of its consumers in compliance with the legislation on municipal and other region water supply, i.e. the majority of its process activities is based on the law. Indicatively, the consumer can provide his/her personal data in order to apply for any of the following:

·         The water supply of his property

·         The installment of irrigation works in separation of buildings

·         Application for revision of the water bill due to an underground leakage

·         The rebate of your guarantee

·         To change his charge rate to industrial rates

·         To change his charge rate large household rates

·         To disconnect the water supply

·         To reconnect the water supply

·         To check the accuracy of the water meter

Furthermore, the Water Board  outsources call center activities and so its external partner may come in contact with your personal data. The Water Board  takes all the necessary and proportional measures to ensure compliance with the Regulation (EU) 2016/679. Another process based on legislation is the authority of the Chairman  of the Board to mandate an inspection of a property by authorizing a Water Board employee. The authority of the President and the purposes of the inspection are strictly mentioned in the legislation and no other purposes are allowed. Due to the economic crisis the Waterboard can under circumstances accept a written commitment of a gradual payment of a bill or a debt if the consumer can prove that there is a grave reason for his inability to pay. Pursuant to the Regulation (EU) 2016/679 the Water Board  is not informed of the reason nor does it keep copies of documents. The reason is proven through documents shown only to the employee who accepts or declines the commitment. The consumer can also provide his/her consent by filing an application either digitally or in person to get his bill via email. The consumer may also choose to pay their bills via automatic settlement of their bills on their due date. They have to provide a certificate by the Bank/Cooperative Bank, indicating the name of the beneficiary and his/her International Bank Account Number (IBAN).

Personal Data

The personal data collected are indicatively the full name, address, contact information, property, signature, Identification Document number, land contract etc. The Water Board, in accordance with the principle of data minimization, ensures that the data collected are absolutely necessary for the purposes that they are processed mainly to charge the correct consumer and property. The Water Board  also collects the consumption data from the water meter to charge and issue the consumer’s bill as per the relevant legislation. The Water Board  also acts as a data processor for the Sewerage Board of Limassol since it includes the consumer’s sewerage fee on its bills. Finally, the Water Board  does not transfer data to third parties that are not explicitly included in the present document unless it has to comply with a legal obligation of Union or Member State law and in accordance with article 23 of the Regulation (EU) 2016/679.

Erasure of Data

The Water Board  is in the process of adopting the necessary and proportionate procedures of erasure and/or anonymization of personal data that are no longer necessary so as to fully comply with the Regulation (EU) 2016/679. Currently, the Water Board  will erase personal data that are no longer accurate or to comply with a legitimate request of erasure made by a data subject. In relation to the data provided for the automatic settlement of their bills, the Waterboard will erase them following a withdrawal request or a correction.

Security

The Water Board has adopted all technical and organizational measures necessary to ensure the data’s availability, authenticity, integrity and confidentiality through Policies and Procedures that constitute its data protection and security scheme. The Scheme ensures the security of the natural as well as the digital files. It ensures that said Scheme is always up to date through its periodic examination and management to achieve the Schemes continuity considering the technological advances, legislation amendments and the Waterboards specific characteristics. Finally, the Waterboard examines the security provided to the personal data before selecting an external partner.

Data Subjects Rights

Pursuant to the Regulation (EU) 2016/679 the data subject can make the following requests.

Right of access: The right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information: (a) the purposes of the processing (b) the categories of personal data concerned (c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations etc.

Right to rectification: The right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her.

Right to erasure: The right to obtain from the controller the erasure of personal data concerning them under certain circumstances.

Right to restriction of processing: The right to obtain from the controller restriction of processing under certain circumstances.

Right to data portability: The right to receive their personal data in a structured, commonly used and machine-readable format.

Right to object: The right to object to a particular process.

Communication of a personal data breach to the data subject: The Water Board’s  obligation to communicate the personal data breach to the data subject without undue delay. The method, either via personal email or a public announcement will depend on the breach and the number of affected data subjects as well as the ability or inability to identify them.

The data subjects can exercise any of their rights by making filing a request document that they can find at the Water Board’s  cashiers or they can download it from our website and send it to our Data Protection Officer at dpo@wbl.com.cy. The applicant provides his (a) Full Name (b) Password Number (c) email and (d) Address that are necessary to identify them. The email and address are provided so that the Water Board  is able to send its decision and the consumer can choose if he wants to receive the decision via post or email. If he makes no choice the decision will be sent via email.

The applicant must choose the right or rights he wished to exercise and provide any and all information they find relevant to their request. The applicant signs and sends the document. The Water Board  will contact the applicant within a month either with the decision or to notify them of a delay that will not exceed another month. If following the decision, the data subject wants to further pursue their rights, they can address them to the Commissioner of Personal Data Protection at the following website:

http://www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/home_el/home_el?opendocument

http://www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/home_el/home_el?opendocument

 

Request Document.