SL Recruitment Services · Cyprus
Privacy Policy
Last updated: 21 October 2026
SL Recruitment Services ("we", "us", "our") is committed to protecting your privacy and processing your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Cyprus Personal Data Protection Law (Law 125(I)/2018).
1. Data Controller
SL Recruitment Services is the Data Controller responsible for any personal data you submit through this website.
Address: 1 Stasinou Avenue, Mitsi Court 1, 3rd Floor, Office 18, 1060 Nicosia, Cyprus.
Email: info@slrecruitment.com.cy.
Licensed by the Republic of Cyprus, Department of Labour | Licence No. 259.
2. What Data We Collect
When you submit a contact, employer inquiry, candidate application, or domestic worker request form, we collect:
- Full name
- Email address
- Phone number
- Company name (where applicable)
- Message content, including any details you choose to provide about your recruitment, employment, or staffing needs
If you use our residence-permit renewal calculator and send us your details, we also receive your answers: permit type, permit expiry date, whether you stay with the same employer, CY Login status, and the calculated quote. If you send us your CV, we receive the CV file and its contents.
On our Case Status & Support page, a status lookup sends the ID or registration number you enter, and a question to our office sends your question, the contact details and name you give, and any images you attach.
Our hosting provider (Netlify) automatically collects basic technical data such as IP address, browser type, and access times for security and performance purposes.
3. How We Use Your Data
We process your personal data for the following purposes:
- To respond to your inquiry and provide the recruitment, immigration, or staffing service you requested
- To match candidates with available employment opportunities
- To communicate with you regarding your application or request
- To comply with legal obligations under Cyprus labour and immigration law
- To maintain internal records of communications
4. Legal Basis for Processing
We process your personal data on one or more of the following legal bases under Article 6 GDPR:
- Consent — where you voluntarily submit information through our forms
- Contractual necessity — to provide the recruitment services you have requested
- Legitimate interest — for the operation and security of our website and to maintain communication records
- Legal obligation — to comply with applicable Cyprus law
5. Who We Share Your Data With
We do not sell your personal data. We share it only with:
- Web3Forms — our form-processing service, which transmits form submissions to our email
- Netlify — our website hosting provider, which also receives and stores submissions of our CV and residence-permit renewal forms
- Google — our website's fonts are loaded from Google Fonts on every page, and the candidate list and photos on our domestic-worker pages from Google Sheets and Google Drive; your browser connects to Google's servers for this, so Google receives your IP address and browser details
- Google Cloud (Google Cloud EMEA Limited) — runs our Case Status & Support service (status lookups and questions to our office) and receives what you submit there; it is hosted in the EU (Belgium)
- Google Analytics (Google Ireland Limited) — visitor statistics, only if you accept cookies (see section 8)
- OpenStreetMap Foundation — the map on our Contact page is loaded from OpenStreetMap, which receives your IP address
- Prospective employers or candidates — only with your express consent and only the information necessary for the recruitment process
- Cyprus government authorities — where required by law (e.g. Department of Labour, Migration Department) for visa or work permit applications you have asked us to process
All third-party processors are bound by data processing agreements and provide appropriate safeguards.
6. International Data Transfers
Some of our service providers (such as Web3Forms) may be located outside the European Economic Area. Where this is the case, we ensure that appropriate safeguards under GDPR are in place, such as Standard Contractual Clauses or adequacy decisions.
Google services (such as Google Fonts and Google Analytics) may transfer data to Google LLC in the United States, which is certified under the EU-U.S. Data Privacy Framework (an EU adequacy decision). The OpenStreetMap Foundation is based in the United Kingdom, which also has an EU adequacy decision.
7. Data Retention
We retain your personal data only as long as necessary for the purposes stated above:
- Inquiry data: up to 24 months from last contact, unless a recruitment relationship is established
- Candidate profiles: up to 36 months, after which we will request your renewed consent
- Records related to placements or visa applications: as required by Cyprus law (typically 6 years)
You may request earlier deletion at any time.
8. Cookies
Essential (always on): we store your language and your cookie choice in your browser. They are needed for the site to work and do not identify you.
Statistics (only with your consent): if you click "Accept" in the cookie banner, we use Google Analytics 4 to understand how the site is used — which pages are visited, roughly from which country or city, on what type of device, how visitors arrived, and which actions were completed — for example that a form was sent and through which channel, or that a case status was looked up and for what type of application. Google Analytics never receives your name, contact details or what you wrote. Google Analytics sets the cookies _ga and _ga_XE6P0S9YX9, which expire after up to 2 years. Google Analytics 4 does not store IP addresses. If you click "Decline", Google Analytics is never loaded.
The legal basis is your consent (Article 6(1)(a) GDPR). You can change your choice at any time with "Cookie settings" at the bottom of every page; withdrawing consent stops Google Analytics and deletes its cookies.
We do not use advertising cookies.
9. Your Rights
Under GDPR you have the following rights regarding your personal data:
- Right of access — to request a copy of the data we hold about you
- Right to rectification — to correct inaccurate or incomplete data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing based on legitimate interest
- Right to withdraw consent at any time
To exercise any of these rights, please email info@slrecruitment.com.cy. We will respond within 30 days.
10. Right to Complain
If you believe we have not handled your personal data in accordance with the law, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus:
Website: www.dataprotection.gov.cy
Email: commissioner@dataprotection.gov.cy
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page with the "Last updated" date shown above.
12. Contact Us
For any questions regarding this Privacy Policy or how we process your personal data, please contact us at info@slrecruitment.com.cy or +357 22014880.