Data Controller’s Contact Information
Personal Data Processes
The Water Board of Larnaka, collects, keeps and further processes the data of its consumers according to the legislation in force that was issued pursuant to the law on water supply (municipal and other areas). The majority of its processes are dictated by law. More specifically, the data is gathered through applications that the data subject can fill and file with the Water Board either in person or via email. Indicatively the data subject can file the following applications:
- The water supply of the property
- Changes on the name of the bill as depicted on the last bill of the previous beneficiary
- The payment of a bill in installments
- The request of a special domestic charging system
- The disconnection of the water supply of a house or building
- The request of a discount on a very high bill
- The charging and billing of the property. This process is conducted by a data processor that is selected by public tender.
Another process that takes place, pursuant to the law, is the authority of the President of the Board or an authorized employee to conduct an inspection of the property within the authority and solely for the duties that are expressly provided by the law and not for any other purpose.
The Water Board can also process the emails of its consumers in order to send them their bills electronically. This process is based on consent and the consumers can withdraw their consent whenever they want. If the consent is withdrawn the Water Board will send the bill at the address of the property.
Consumers can also register on the Water Board’s Customer Web Portal in order to manage their bills and file applications digitally.
The payment of the bill can be made via bank transfer orders by filing an application with the Water Board and the basis for the process is the contract pursuant to article 6 par. 1(b) of the (EU) 2016/679 Regulation. The consumer can withdraw from the order by filing a withdrawal application. The data collected for the process are necessary for its purpose (Name, Surname, Address, Bank, Bank Account, Beneficiary and Signature).
The Water Board of Larnaka uses CCTV on the entrance of its buildings to ensure the security of its assets based on legitimate interests pursued by the Board (art. 6 par. 1(f) EU Regulation 2016/679).
The data collected is: Name, Surname, Telephone and Mobile Number, Address, Ownership Share, Address for the bills (if it is different from the billing address), Ownership Title, Signature, Identification Number, and information that is necessary to identify a consumer and property, mainly to avoid billing mistakes.
Moreover, consumption data is also gathered though property’s water meter to apply the correct charges on the bill.
For the registration on the Customer Web Portal the consumer must provide his installation number, Identification Number (ID or Passport) and email so as to manage his account and access his charges and consumption data via the Board’s Portal as well as contact the Board. This application is provided via JCC Smart who is an associate of the Board. Neither have access to the personalized accounts of the consumers.
Storage of Data
Pursuant to the principle of Storage Limitation of the (EU) 2016/679 Regulation the Water Board will adopt an official procedure applying to data erasure or anonymization. Until that time data will be deleted if an application rectification of data is filed, or an application to delete data is found justified.
Protection of Data
The Water Board has adopted all technical and organizational measures necessary to ensure the data’s availability, authenticity, integrity and confidentiality through Policies and Procedures that constitute its data protection and security scheme. The measures adopted ensure the security of the natural resources as well as the digital files. The measures are examined regularly to achieve its continuity. The examination takes into account the technological advances, legislation amendments and the Water Board’s specific characteristics. Finally, the Water Board examines the security provided to the personal data before selecting an external partner.
Data Subjects Rights
Pursuant to the Regulation (EU) 2016/679 the data subject can make the following requests:
- Right of access: The right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information: (a) the purposes of the processing (b) the categories of personal data concerned (c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations etc.
- Right to rectification: The right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her.
- Right to erasure: The right to obtain from the controller the erasure of personal data concerning them under certain circumstances.
- Right to restriction of processing: The right to obtain from the controller restriction of processing under certain circumstances.
- Right to data portability: The right to receive their personal data in a structured, commonly used and machine-readable format.
- Right to object: The right to object to a particular process.
- Communication of a personal data breach to the data subject: The Water Board’s obligation to communicate the personal data breach to the data subject without undue delay. The method, either via personal email or a public announcement will depend on the breach and the number of affected data subjects as well as the ability or inability to identify them.
The applicant must choose the right or rights he wished to exercise and provide any and all information they find relevant to their request. The applicant signs and sends the document. The Water Board will contact the applicant within a month either with the decision or to notify them of a delay that will not exceed another month. If, following the decision, the data subject wants to further pursue their rights, they can address them to the Commissioner of Personal Data Protection at the following website: