Personal Data:

Thanos Hotels & Resorts is a “data controller.” As your employer, we are responsible for deciding how we hold and use personal information about you.

Data Protection Principles:

• Used lawfully, fairly, and transparently.
• Collected only for valid purposes explained to you.
• Relevant and limited to those purposes.
• Accurate and kept up to date.
• Kept only as long as necessary.
• Stored securely.

The Kind of Information We Hold:

Personal data, or personal information, refers to any information about an individual from which a person can be identified. Sensitive personal data requiring a higher level of protection includes health conditions, criminal convictions, etc.

How We Use Your Information:

• Determining terms of employment.
• Processing payments, tax, and benefits.
• Conducting performance reviews and managing career progress.
• Ensuring compliance with health and safety obligations.
• Preventing fraud and ensuring IT security.
• Equal opportunities monitoring.

Data Retention:

We retain personal information for as long as necessary to fulfill the purposes for which it was collected. After termination of employment, personal data will be securely retained for six years, after which it will be destroyed.

Your Rights:

You have the right to:

• Request access to your personal data.
• Request correction or erasure of your personal data.
• Restrict processing or object to data usage in certain circumstances.
• Request the transfer of your data to another party.

Contact Us:

For any queries, contact our Data Protection Officer at dpo@thanoshotels.com. You can also file complaints with the Commissioner for the Protection of Personal Data in Cyprus.

Changes to This Policy:

We reserve the right to update this privacy notice at any time. Significant changes will be communicated to you.