Privacy notice
This notice explains how For The Way Ltd collects and uses personal data. It is written to meet Articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679, as applied in the Republic of Cyprus.
1. Who we are
For The Way Ltd, Limassol, Cyprus, is the data controller for the personal data described here.
For any question about this notice or about your data, use the contact form and mark it for our privacy contact. We have not appointed a Data Protection Officer, as we are not required to under Article 37.
2. Job applicants
Most of the personal data we hold belongs to people who apply to work with us. If you contact us about a role through the form on our site, we collect what you send: your name, email address, the role you are interested in, any link you provide, and whatever you write in your message. During a process we also create notes, interview feedback and, where relevant, the results of technical exercises.
| Purpose | Lawful basis |
|---|---|
| Assessing your application and running the interview process | Article 6(1)(b) — steps prior to entering a contract, at your request |
| Keeping your details on file for future roles | Article 6(1)(a) — your consent, which you may withdraw at any time |
| Verifying right to work and, for a successful candidate, immigration sponsorship | Article 6(1)(c) — legal obligation |
| Defending against a claim arising from a recruitment decision | Article 6(1)(f) — our legitimate interests |
Retention. If we do not make you an offer, we delete your application and any related notes twelve months after the process ends, unless you have asked us to keep them on file. If you ask us to, we hold them for two years and then delete them. You can ask us to delete them sooner at any time, and we will.
We do not use automated decision-making or profiling to assess applications. Every application is read by a person.
3. Visitors to this website
This site sets no cookies, runs no analytics and embeds no tracking pixels. Fonts are served by Google Fonts, which receives your IP address in order to deliver the font files; see Google’s own privacy notice for what it does with that. Our hosting provider keeps standard server logs, including IP addresses, for a short period for security and diagnostics.
4. People who contact us
If you write to us through the contact form about anything other than a role, we keep the correspondence for as long as it is useful and then delete it. We do not add you to a mailing list; we do not operate one.
5. Who we share data with
We do not sell personal data and we do not share it for marketing. We disclose it only to:
- service providers who process it on our instructions under Article 28 — email and file storage, and our hosting provider;
- professional advisers, where we need legal or accounting advice;
- public authorities, where the law requires it.
Some of these providers are established outside the European Economic Area. Where that is the case, transfers are made under the European Commission’s Standard Contractual Clauses or an adequacy decision.
6. Your rights
Under the GDPR you have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you may withdraw it at any time without affecting what we did before you withdrew it.
Send a request through the contact form and we will respond within one month. If you are not satisfied, you can complain to the Office of the Commissioner for Personal Data Protection, 15 Kypranoros Street, 1061 Nicosia, Cyprus — dataprotection.gov.cy.
7. Changes
If we change this notice we will update the date at the top. Where a change materially affects people whose data we already hold, we will contact them directly.