GDPR Compliance
GDPR COMPLIANCE
KARMA WATER PURIFICATION SYSTEMS LTD
Last updated: 31 October 2026
1. Our Commitment to Data Protection
At KARMA Water Purification Systems Ltd (“KARMA Water”, “we”, “us” or “our”), we recognise the importance of protecting personal information and respecting the privacy rights of our customers, employees, business partners and website visitors.
We are committed to handling personal data responsibly, transparently and securely in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable data protection legislation in Cyprus.
Our approach to data protection is based on transparency, accountability, confidentiality and respect for the rights of individuals.
2. What Is GDPR?
The General Data Protection Regulation (GDPR) is European Union legislation designed to protect the personal data and privacy of individuals within the European Economic Area.
It establishes rules governing how organisations collect, use, store, share and protect personal information.
The GDPR also provides individuals with specific rights and greater control over how their personal data is processed.
As a company operating in Cyprus, KARMA Water is committed to complying with the GDPR requirements applicable to our business activities.
3. How We Protect Your Personal Data
We take appropriate technical and organisational measures to protect the personal information entrusted to us.
Our data protection practices include:
- Collecting only personal information that is necessary for legitimate business purposes.
- Processing personal data lawfully, fairly and transparently.
- Restricting access to personal information to authorised personnel.
- Maintaining appropriate electronic and physical security measures.
- Using appropriate safeguards when working with external service providers.
- Retaining personal information only for as long as necessary or legally required.
- Taking appropriate action in the event of a personal data breach.
- Reviewing our data protection practices as our business and technology evolve.
We aim to ensure that personal information is handled with appropriate care throughout its lifecycle.
4. Your Rights Under the GDPR
Under the GDPR, you have several rights regarding your personal data.
Depending on the circumstances and applicable legal conditions, these include:
Right to Be Informed
You have the right to receive clear information about how your personal data is collected, used, stored and shared.
Right of Access
You may request confirmation of whether we process your personal data and obtain a copy of the information we hold about you.
Right to Rectification
You may request the correction or completion of inaccurate or incomplete personal information.
Right to Erasure (Right to Be Forgotten)
You may request the deletion of your personal data where the legal conditions for erasure are met. Certain information may need to be retained where we have a legal obligation or another valid legal basis to do so.
Right to Restriction of Processing
You may request that we temporarily restrict the processing of your personal information in certain circumstances.
Right to Data Portability
Where applicable, you may request to receive personal data you have provided to us in a structured, commonly used and machine-readable format, or request its transfer to another organisation.
Right to Object
You may object to certain types of processing, particularly where processing is based on our legitimate interests.
You have an absolute right to object to the processing of your personal data for direct marketing purposes.
Right to Withdraw Consent
Where we process your personal data based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Rights Relating to Automated Decision-Making
Where applicable, you have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you, subject to the exceptions provided by the GDPR.
These rights are subject to certain conditions and exceptions established by data protection legislation.
5. How to Exercise Your GDPR Rights
If you wish to exercise any of your data protection rights or have questions about how KARMA Water handles your personal information, you may submit a request by contacting us directly.
Contact Details
KARMA WATER PURIFICATION SYSTEMS LTD
Email: info@karmawatercy.com
Please include sufficient information to help us understand and process your request.
For security reasons, we may request additional information to verify your identity before providing access to personal data or making changes.
We will respond to your request without undue delay and, in principle, within one month of receiving it.
Where necessary, this period may be extended by up to a further two months, taking into account the complexity and number of requests. If an extension is required, we will inform you within the initial one-month period and explain the reasons.
Requests are generally handled free of charge, unless the GDPR permits a reasonable fee or refusal in specific circumstances.
6. Data Protection and Third-Party Service Providers
In order to operate our business and provide our products and services, KARMA Water may work with trusted third-party service providers, including IT providers, accounting services, website hosting providers and other business partners.
Where these providers process personal data on our behalf, we take appropriate steps to ensure that suitable data protection agreements and safeguards are in place, as required by the GDPR.
We do not sell or commercially trade personal information belonging to our customers or website visitors.
For further information, please refer to our Privacy Policy.
7. Personal Data Breaches
KARMA Water takes appropriate measures to prevent unauthorised access, accidental loss, destruction or disclosure of personal information.
In the event of a personal data breach, we will assess the incident and take appropriate steps in accordance with GDPR requirements.
Where a breach is likely to result in a risk to the rights and freedoms of individuals, we will notify the competent supervisory authority within the applicable legal timeframe.
Where a breach is likely to result in a high risk to individuals, we will also communicate the breach to affected individuals as required by law.
8. Your Right to Lodge a Complaint
If you believe that your personal data has been processed in a way that does not comply with applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.
In Cyprus, the competent supervisory authority is:
Office of the Commissioner for Personal Data Protection
Republic of Cyprus
Website: https://www.gov.cy/dataprotection/
Email: commissioner@dataprotection.gov.cy
Telephone: +357 22 818 456
Address: 15 Kypranoros Street, 1061 Nicosia, Cyprus.
You may contact the Commissioner if you believe your data protection rights have been violated or if you are dissatisfied with how an organisation has handled your personal data.
You may also contact KARMA Water directly so that we can review and address your concerns.
9. Continuous Commitment to Compliance
Data protection is an ongoing responsibility.
KARMA Water is committed to reviewing and improving its data protection practices to reflect changes in applicable legislation, business operations and technology.
We aim to maintain a responsible approach to personal information and to ensure that the privacy rights of our customers, employees, partners and website visitors are respected.
10. Contact Us
For any questions, concerns or requests relating to GDPR compliance or the processing of your personal data, please contact:
KARMA WATER PURIFICATION SYSTEMS LTD
Email: info@karmawatercy.com
Website: www.karmawatercy.com
We are committed to treating all data protection enquiries with care, confidentiality and transparency.