Privacy & Cookie Policy

1. Who we are

Inova Group ("we", "us", "our") is the data controller for personal data collected through this website. Registered office: 140 Athalassas Avenue, Second Floor, Strovolos, Nicosia, Cyprus, 2024. Company registration number: HE 472867. Contact for data protection queries: info@inovagroup.org. We have not appointed a Data Protection Officer, as one is not required for the scale and nature of our processing; the contact above handles all data protection matters.

2. What we collect

We only collect what you give us directly:

• Your name, email address, and message, when you use the contact form
• Your CV, cover letter, and any other application details you choose to share, if you apply for a role via our Careers page
• Basic technical data every website receives automatically — such as IP address, browser type, and pages visited — via standard web server logs, for security and to keep the site running reliably

We do not collect special category data (health, religion, etc.) and ask that you don't include it in any message to us.

3. Why we process it, and our legal basis

We process enquiry and application data to respond to your request or assess your application — legal basis: legitimate interest (responding to enquiries; keeping the site secure) and, where you apply for a role, steps taken at your request prior to entering a contract. Where we rely on consent (e.g. the contact form checkbox, or optional cookies), you may withdraw it at any time without affecting anything we did before you withdrew it. Providing this data is voluntary, but we won't be able to respond to your enquiry or consider your application without it.

4. Who we share it with

We don't sell your data, and we don't share it for marketing purposes. We use a small number of trusted service providers ("processors") to run this website and handle enquiries — for example, our web hosting provider and email delivery service. These providers only process data on our instructions and under contractual confidentiality and security obligations; they don't use your data for their own purposes.

5. International transfers

Where any of our service providers are located outside the European Economic Area (e.g. in the UK or US), we ensure an appropriate safeguard is in place — such as an adequacy decision or Standard Contractual Clauses approved by the European Commission — before any data is transferred there.

6. How long we keep it

Enquiry data is kept for up to 12 months, or until you ask us to delete it. Job application data is kept for up to 24 months for future-role consideration, unless you ask us to delete it sooner. Basic web server logs are kept for a short rolling period (typically 30–90 days) for security purposes, then automatically deleted.

7. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. Every enquiry and application is reviewed by a person.

8. Your rights under GDPR

• Access the data we hold about you
• Correct inaccurate or incomplete data
• Request erasure ("right to be forgotten")
• Restrict processing, or object to it
• Request data portability
• Withdraw consent at any time, where we rely on it
• Lodge a complaint with a data protection authority

To exercise any of these rights, contact us at info@inovagroup.org. As we're based in Cyprus, you can also complain directly to our local supervisory authority:

Office of the Commissioner for Personal Data Protection
15 Kypranoros Street, 1061 Nicosia, Cyprus
www.dataprotection.gov.cy

If you're located elsewhere in the EU/EEA, you're free to complain to your own local data protection authority instead.

9. Children's privacy

This website is intended for businesses and professional visitors. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.

10. How we protect your data

We use reasonable technical and organisational measures to protect the personal data we hold — including restricting access to those who need it, using reputable, security-conscious service providers, and reviewing our practices as the site evolves.

11. Cookies we use

We use the categories below. Non-essential categories only load after you actively opt in via the cookie banner.

You can change your preference anytime using the cookie icon in the bottom-left corner of the site, or via the link in the footer. Once an analytics or marketing tool is selected, this table will be updated to name the specific cookies, their duration, and provider.

12. Changes to this policy

We may update this policy from time to time — for example, if we start using a new service provider or add analytics. The "last updated" date below will change whenever we do, and significant changes will be highlighted on this page.

Last updated: to be set when this policy is finalised for launch.

13. Contact

Questions about this policy, or about your data: info@inovagroup.org.