Draft – this text will be legally reviewed before launch. TODO: legal review.
Privacy policy
Protecting your data matters to us. This page explains which data we process when you visit our website or contact us, based on the General Data Protection Regulation (GDPR) and Cyprus Law 125(I)/2018.
1. Controller
TODO: Firmenname (… Ltd), TODO: eingetragener Sitz (Registered Office)
Phone: TODO: Telefonnummer (Anzeige, z. B. +357 99 123456) · Email: TODO: E-Mail-Adresse
2. No tracking, no cookies
We do not use cookies, analytics or tracking tools, or advertising networks. Fonts are stored on our own server, so no data is sent to font providers.
3. Hosting and server log files
Our website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Pages). Cloudflare delivers the pages through a global server network. Data may be transferred to the USA in the process; Cloudflare is certified under the EU-US Data Privacy Framework.
When you visit the website, the server automatically stores information sent by your browser (server log files): IP address, date and time of access, page requested, referrer URL, browser type and operating system.
This data is technically necessary to deliver the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). Log files are deleted after TODO: retention period days.
4. Contact by phone or email
When you call or email us, we process your details (e.g. name, phone number, email address, content of your enquiry) to handle your enquiry.
The legal basis is Art. 6(1)(b) GDPR where a rental contract is concerned, otherwise Art. 6(1)(f) GDPR. We delete the data once it is no longer needed and no statutory retention obligations apply.
5. Contact via WhatsApp
You can message us via WhatsApp. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Tapping a WhatsApp button takes you to WhatsApp; no data is sent to WhatsApp before that.
WhatsApp processes its own data, including your phone number and metadata, and may transfer data to the USA on the basis of the EU-US Data Privacy Framework. If you don't want this, please use phone or email instead.
The legal basis for our processing is Art. 6(1)(b) or (f) GDPR.
6. Google Maps
Our site lets you display a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The map is only loaded when you click “Load map”. Data such as your IP address is then transferred to Google, possibly also to the USA (EU-US Data Privacy Framework). Google may set cookies.
The legal basis is your consent under Art. 6(1)(a) GDPR. We do not store your consent: the map is hidden again the next time you open the page. You can withdraw your consent at any time by reloading the page.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3)).
Simply send us an email to the address above.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. In Cyprus, this is the Commissioner for Personal Data Protection (Office of the Commissioner for Personal Data Protection), Kypranoros 15, 1061 Nicosia, Cyprus, email: commissioner@dataprotection.gov.cy.
9. Last updated
TODO: add date of final version.