This Privacy Policy explains how Olinio (“we”, “us”, “our”, or “Olinio”) processes personal data of individuals who visit our website at https://olinio.com.cy, use our services, or interact with us in any capacity. This policy informs you about your privacy rights and how data protection law protects you.
This Privacy Policy applies to natural persons who are current or potential customers of Olinio, website visitors, newsletter subscribers, job candidates, or anyone who provides personal data to us through any means.
We comply with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and any applicable local data protection laws.
Effective Date: 16.09.2025
Last Updated: 16.09.2025
Olinio is a leading recruitment company specialising in comprehensive talent acquisition solutions for businesses. We provide recruitment services, talent acquisition strategy, executive search, and workforce planning services to help companies find and hire the best candidates for their organisations.
Contact Information:
For all privacy-related inquiries, including requests to exercise your legal rights, please contact our Data Protection Officer at [email protected].
We may collect, use, store, and transfer the following categories of personal data:
3.1 Contact Information
3.2 Technical and Usage Data
3.3 Service-Related Information
3.4 Candidate Personal Data
3.5 Financial Information
3.6 Marketing and Communication Data
3.7 Special Categories of Data
In the course of recruitment services, we may process special categories of personal data, including:
Such processing occurs only with explicit consent, legal requirement, or substantial public interest, and appropriate safeguards are implemented.
4.1 How We Collect Data
Direct Collection:
Automated Collection:
Third-Party Sources:
4.2 Why We Process Your Data
We process personal data for the following legitimate business purposes:
Recruitment Services:
Business Administration:
Marketing and Communication:
Legal and Security:
4.3 Legal Basis for Processing
We process your personal data under the following lawful bases:
Contract Performance: When processing is necessary for performing our contract with you or taking steps at your request before entering into a contract.
Legitimate Interests: For our legitimate business interests, including:
Legal Obligation: When we must process data to comply with legal requirements, including employment law and background check requirements.
Consent: For special categories of data, direct marketing to non-clients, diversity data, and certain cookies (where required).
Substantial Public Interest: For processing related to employment, social security, and social protection requirements.
We may share your personal data with:
5.1 Service Providers
5.2 Business Partners
5.3 Candidates and Employers
5.4 Legal Requirements
5.5 Business Transfers
In the event of a merger, acquisition, or sale of business assets, personal data may be transferred to the acquiring entity.
All third parties are contractually obligated to protect your data and use it only for specified purposes in accordance with our instructions and applicable data protection laws.
Some of our service providers and clients are located outside the European Economic Area (EEA). When we transfer personal data outside the EEA, we ensure adequate protection through:
For more information about our international transfer safeguards, contact our Data Protection Officer.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
Client Service Data: For the duration of our business relationship, plus 7 years for financial records
Candidate Data: Up to 2 years for unsuccessful candidates (unless consent given for longer retention), up to 7 years for placed candidates
Website Data: Up to 2 years for analytics purposes
Marketing Data: Until you unsubscribe or withdraw consent
Legal Requirements: As required by applicable employment laws and regulations
We regularly review our data retention practices and securely delete or anonymise data when no longer needed.
We implement appropriate technical and organisational measures to protect your personal data, including:
While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security. However, we will notify the Cyprus Commissioner for Personal Data Protection and affected individuals within the timelines required by GDPR.
Cyprus Commissioner for Personal Data Protection: Website: https://www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/home_en/home_en?opendocument Address: Kypranoros 15, Nicosia 1061, Cyprus
You have the following rights regarding your personal data:
9.1 Right of Access
Request a copy of the personal data we hold about you
9.2 Right to Rectification
Request correction of inaccurate or incomplete data
9.3 Right to Erasure (“Right to be Forgotten”)
Request deletion of your personal data in certain circumstances
9.4 Right to Restrict Processing
Request a limitation of processing in certain situations
9.5 Right to Data Portability
Request the transfer of your data to another organisation
9.6 Right to Object
Object to processing based on legitimate interests or for direct marketing
9.7 Rights Related to Automated Decision-Making
Rights regarding automated decision-making and profiling in recruitment processes
To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond within one month of receiving your request.
Where we rely on your consent for processing, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
To withdraw consent for marketing communications, use the unsubscribe link in our emails or contact [email protected].
We use cookies and similar technologies to:
You can control cookie settings through your browser preferences. For detailed information about our cookie usage, please see our Cookie Policy.
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will delete it promptly.
We may send you marketing communications if:
You can opt out of marketing communications at any time by:
We have appointed a Data Protection Officer responsible for overseeing data protection compliance. Contact our DPO for:
DPO Contact: [email protected]
If you believe we have not handled your personal data properly, you can:
Cyprus Commissioner for Personal Data Protection: Website: https://www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/home_en/home_en?opendocument Address: Kypranoros 15, Nicosia 1061, Cyprus
We may update this Privacy Policy periodically to reflect:
We will notify you of significant changes through:
For any questions about this Privacy Policy or our data practices:
Olinio
Email: [email protected]
Website: https://olinio.com.cy
Data Protection Officer
Email: [email protected]
This Privacy Policy was last updated on 16.09.2025 and is effective as of 16.09.2025.
Registered Company in Cyprus
License Number 478
© All rights reserved.