Privacy Policy

Information You Provide Directly

When you contact us or use our services, you may provide personal information including your name, email address, phone number, details about your property transaction, and any other information you choose to share in correspondence or forms. This information is provided voluntarily when you reach out for legal services or consultation.

Legal Basis: Consent and contract performance

Automatically Collected Information

When you visit our website, we automatically collect certain technical information including your IP address, browser type, device information, pages visited, time spent on pages, referring website, and general location data derived from your IP address. This helps us understand how visitors use our website and improve user experience.

Legal Basis: Legitimate interests in website operation and improvement

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content. You can control cookie preferences through our Cookie Policy page and your browser settings. Some cookies are essential for website functionality, while others require your consent.

Legal Basis: Consent for non-essential cookies, legitimate interests for essential cookies

Client Matter Information

If you engage our legal services, we collect detailed information relevant to your property transaction including property details, financial information related to the transaction, copies of documents, correspondence with third parties, and any other information necessary to provide effective legal representation. This information is protected by attorney-client privilege where applicable.

Legal Basis: Contract performance and legal obligations

Security Measures

We implement appropriate technical and organizational security measures to protect your personal data including secure data encryption during transmission, restricted access to personal information on a need-to-know basis, regular security assessments and updates, secure data storage with backup systems, and employee training on data protection and confidentiality.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Client matter files are retained according to legal and professional requirements, typically for seven years after matter completion. Marketing data is retained until you withdraw consent. Website analytics data is retained for two years. After retention periods expire, data is securely deleted or anonymized.

International Data Transfers

Your data is primarily stored and processed within the European Union. If we need to transfer data outside the EU, we ensure appropriate safeguards are in place through standard contractual clauses, adequacy decisions by the European Commission, or your explicit consent for the transfer. We take steps to ensure transferred data receives equivalent protection.

Data Breach Procedures

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours as required by law. We maintain an incident response plan to contain breaches, assess impact, and take corrective action promptly.

Right to Access

You can request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within one month of your request.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction. We will update your information promptly once we verify the changes.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes it was collected, you withdraw consent, or you object to processing. This right is subject to legal retention obligations.

Right to Data Portability

You can request your personal data in a structured, commonly used format and have it transmitted to another data controller where technically feasible.

Right to Object

You can object to processing of your personal data for direct marketing purposes at any time. For other processing, you can object on grounds relating to your particular situation.

Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Withdraw Consent

Where processing is based on your consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

If you believe we have not handled your data properly, you can file a complaint with the Cyprus Commissioner for Personal Data Protection or your local supervisory authority.