Istoselida 26 Ltd ("Istoselida", "we", "us", or "our") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains what personal information we collect when you visit istoselida.cy, contact us, or enquire about our services, why we collect it, how we use it, and the rights you have in relation to your personal data.
1. Who we are
Istoselida 26 Ltd is the data controller responsible for personal data collected through this website.
Istoselida 26 Ltd
7 Polykleitou Street
Dexion Building 20, Office Suite 11, First Floor
2311 Lakatamia, Nicosia
Cyprus
Email: [email protected]
Telephone: +357 99 515 390
If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us using the details above.
2. What personal data we collect
Depending on how you interact with our website, we may collect the following types of information.
Information you provide to us
When you complete a form on our website or contact us about our services, we may collect:
- First name
- Last name
- Mobile number
- The service you are interested in
- How you would like us to contact you (telephone, WhatsApp, or Viber)
- Your email address, company name, or company address, where you choose to provide them
- Any other information you voluntarily provide when communicating with us
Information submitted through our website's enquiry forms is sent to [email protected] so that we can respond to your enquiry.
Each enquiry is also stored securely in a database on our web server, with a backup copy, so that no enquiry is lost if an email fails to arrive. Access is restricted to us.
When you submit a form, we also record how you found our website (for example the search engine, advertisement, or website that referred you, and any campaign details in the link you followed), the page you used, the language of the page and of your browser, whether your browser translated the page, and your IP address, approximate location, and browser type. We use this to reply to you in the right language, to understand which of our marketing works, and to protect our forms from spam and abuse.
If you give us your email address, we send you an automatic confirmation that we have received your enquiry.
You may also choose to contact us directly by telephone, email, WhatsApp, or Viber.
Technical and usage information
When you visit our website, certain technical information may be collected automatically, including:
- IP address
- Browser type and version
- Device type
- Operating system
- Referring website or source
- Pages visited
- Approximate location derived from technical information
- Date, time, and duration of visits
- Website interaction and performance information
Some of this information may be collected through cookies and similar technologies, depending on the choices you make through our cookie consent system.
For more information, please see our Cookies Policy.
3. How we use your personal data
We may use your personal data to:
- Respond to enquiries and requests
- Discuss your website or digital services requirements
- Prepare quotations or proposals you request
- Take steps towards entering into a contract with you
- Provide and manage services you purchase from us
- Communicate with you about an existing project or business relationship
- Operate, maintain, secure, and improve our website
- Understand how visitors use our website
- Measure the effectiveness of our advertising
- Detect and prevent misuse, fraud, security incidents, and technical problems
- Comply with legal, regulatory, accounting, or tax obligations
- Establish, exercise, or defend legal claims where necessary
We do not currently operate a newsletter or general marketing email signup through istoselida.cy.
4. Our legal bases for processing
Under the General Data Protection Regulation (GDPR), we must have a lawful basis for processing personal data. Depending on the circumstances, we rely on one or more of the following.
Taking steps before entering into, or performing, a contract
When you ask us for information, a quotation, or services, we may need to process your information to respond to your request and, where applicable, provide the services agreed with you.
Legitimate interests
We may process personal data where necessary for our legitimate business interests, including operating and securing our website, responding to business enquiries, managing customer relationships, and protecting our business, provided those interests are not overridden by your rights and freedoms.
Consent
Where consent is required, such as for optional analytics or advertising cookies, we rely on your consent. You can refuse consent or change your cookie preferences at any time through the Cookie settings link on our website.
Legal obligations
We may process or retain personal data where necessary to comply with applicable legal, regulatory, tax, or accounting requirements.
5. Cookies, analytics, and advertising
Our website uses cookies and similar technologies.
Cookies that are strictly necessary for the website to function may operate without optional consent where permitted by applicable law.
Analytics and advertising technologies are only activated in accordance with the choices you make through our cookie consent system.
We currently use Google Analytics 4 through Google Tag Manager to help us understand how visitors use the website. We may also use additional analytics and advertising services in the future, such as technologies provided by Meta, LinkedIn, or Microsoft.
Where these technologies require consent, they will be controlled through our cookie consent system.
Our Cookies Policy provides more detailed information about the technologies in use and should be consulted for the current list of cookies and third-party services.
6. Third-party services
We use third-party service providers where necessary to operate our website and business.
These may include providers of:
- Website hosting and infrastructure
- Website analytics
- Tag management
- Advertising and conversion measurement
- Email and business communications
- Website security and technical services
Our website is hosted using infrastructure provided by Hostinger.
We use Google Analytics 4 and Google Tag Manager for website measurement and analytics, subject to your cookie choices where required.
If we introduce additional third-party analytics or advertising technologies, this Privacy Policy and our Cookies Policy may be updated accordingly.
We only share personal data with third parties where there is a legitimate reason to do so, such as providing our services, operating our website, complying with the law, or where you have provided consent.
We do not sell your personal data.
7. WhatsApp and Viber
Our website provides links that allow you to contact us using WhatsApp and Viber.
If you choose to communicate with us through one of these services, your information will also be processed by the relevant third-party provider according to its own privacy practices and terms.
You are not required to use these services. You can contact us directly by telephone or email instead.
8. International data transfers
Some of the third-party service providers we use may process or store personal data outside Cyprus or the European Economic Area.
Where personal data is transferred outside the European Economic Area, we take appropriate steps to ensure that the transfer is made in accordance with applicable data protection law.
Depending on the provider and destination, this may include relying on an adequacy decision of the European Commission or appropriate contractual safeguards, such as Standard Contractual Clauses.
9. How long we keep your personal data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting, tax, contractual, or reporting requirements.
The exact retention period depends on the nature of the information and why we hold it.
Enquiries submitted through our website's forms, including the backup copies stored on our web server, are kept for 12 months from the date of submission and then deleted. If an enquiry leads to a working relationship, the relevant information is kept for as long as that relationship and our legal obligations require.
Records used to protect our forms from spam and abuse, such as IP addresses used to limit repeated submissions, are deleted after two days.
For example, information relating to a customer relationship may need to be retained for longer than an initial enquiry because of contractual, accounting, tax, or legal obligations.
Information that is no longer required will be deleted, anonymised, or otherwise securely disposed of where appropriate.
10. How we protect your information
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss, misuse, or destruction.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
11. Your data protection rights
Depending on the circumstances and applicable law, the GDPR gives you rights in relation to your personal data, including the right to:
- Request access to personal data we hold about you
- Ask us to correct inaccurate or incomplete personal data
- Request deletion of your personal data in certain circumstances
- Request restriction of processing in certain circumstances
- Object to certain types of processing
- Request data portability where applicable
- Withdraw your consent at any time where processing is based on consent
- Lodge a complaint with a competent supervisory authority
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, contact us at [email protected].
We may need to request information from you to verify your identity before acting on certain requests.
12. Complaints
If you have a concern about how we handle your personal data, we would appreciate the opportunity to address it directly. You can contact us at [email protected].
You also have the right to lodge a complaint with the supervisory authority responsible for data protection in Cyprus:
Office of the Commissioner for Personal Data Protection
15 Kypranoros Street
1061 Nicosia
Cyprus
Email: [email protected]
Telephone: +357 22 818 456
The Commissioner for Personal Data Protection is Cyprus's supervisory authority for the purposes of the GDPR and Cyprus Law 125(I)/2018.
13. Links to other websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices of third-party websites. When you leave istoselida.cy, we recommend reviewing the privacy information provided by the website or service you visit.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, technologies, third-party providers, or legal obligations.
When we make changes, we will update the Last updated date at the top of this page.
We recommend reviewing this Privacy Policy periodically.
15. Contact us
If you have questions about this Privacy Policy, want to exercise your data protection rights, or have concerns about how we handle your personal information, please contact:
Istoselida 26 Ltd
7 Polykleitou Street
Dexion Building 20, Office Suite 11, First Floor
2311 Lakatamia, Nicosia
Cyprus
Email: [email protected]">[email protected]
Telephone: +357 99 515 390