1. Lawful basis
We process personal data on the basis of contract performance, legal obligation, legitimate interest, or consent — depending on the activity.
2. Data subject rights
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
3. Retention
Personal data is retained only for as long as required to deliver the service or to meet legal, accounting and tax obligations.
4. International transfers
Where data is processed outside the EU/EEA, we use appropriate safeguards such as Standard Contractual Clauses.
5. Supervisory authority
You have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.
This is a placeholder document. Replace with your final, legally reviewed GDPR statement.