Privacy Policy

This policy explains what personal data Panthermiki Pafos LTD collects through this website, why we collect it, and the rights you have over it under the EU General Data Protection Regulation (GDPR) and Cyprus data protection law.

1. Who we are

The data controller is Panthermiki Pafos LTD, Panikou Chatzipanagi 26, Mesogi, Paphos 8280, Cyprus.

For any question about this policy or your data, email info@panthermiki-pafos.com, call +357 26 819 636, or write to us at the address above.

2. What we collect

When you use our contact form: your name, email address, subject and message.

When you request a quote: your name, email address and phone number; for professionals, your company, role and VAT number; details of your project, such as the systems you need, property type, location and description; any plans, files or links you share; your preferred contact method; whether you'd like a site visit; and whether you agreed to receive marketing emails.

When you call, email or visit us: the details you give us so we can help you.

When you browse the site: our hosting provider automatically records technical information such as your IP address, browser type and the pages requested, to deliver the site and keep it secure. We don't use analytics or advertising trackers.

3. How we use it and our legal basis

• To answer your enquiry and prepare quotes: necessary to take steps at your request before entering into a contract (GDPR Article 6(1)(b)).
• To keep records of enquiries, follow up and run and protect our website: our legitimate interests in running our business (Article 6(1)(f)).
• To send you promotions, tips or trade catalogues: only if you ticked the box to agree (Article 6(1)(a)). You can withdraw your consent at any time by replying to any of these emails or contacting us.
• To meet our legal obligations, such as accounting and tax records if you become a customer (Article 6(1)(c)).

We don't sell your personal data, and we don't use it for automated decision-making or profiling.

4. Who we share it with

We share data only with service providers that help us run this website, under contracts that require them to protect it:

• Google (Firebase / Google Cloud): website hosting, and storage of form submissions and uploaded files.
• Mailgun: delivers form submissions to our inbox, using its EU region.
• Google Maps and Google Fonts: the maps on our Contact and Services pages and the website's fonts are loaded from Google, which receives your IP address when they load.

We may also share data with authorities when the law requires it.

5. Transfers outside the EU

Some of our providers may process data outside the European Economic Area. Where they do, the transfer is protected by an adequacy decision (such as the EU–U.S. Data Privacy Framework) or the European Commission's Standard Contractual Clauses.

6. How long we keep it

We keep enquiries and quote requests, including uploaded files, for as long as we need them to respond and follow up, and for no more than 3 years after our last contact with you. If you become a customer, we keep the records the law requires, such as invoices, for the period set by Cyprus tax law (currently 6 years). Marketing consent records are kept until you withdraw consent.

7. Cookies

This website doesn't use analytics, advertising or tracking cookies.

• Our staff sign-in page sets a strictly necessary session cookie, used only by our team to access the website's management area.
• The embedded Google Maps on our Contact and Services pages may set Google's own cookies. Google's use of that data is covered by the Google Privacy Policy.

8. Your rights

You have the right to:

• access the personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data deleted, where we no longer have a reason to keep it;
• restrict or object to how we use your data;
• receive your data in a portable format;
• withdraw your consent to marketing at any time.

To use any of these rights, contact us using the details in section 1. We'll reply within one month.

If you're unhappy with how we handle your data, you can complain to the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy).

9. Security

The site is served over HTTPS. Form submissions and uploaded files are stored privately, and only authorised staff can access them.

10. Children

This website is meant for adults and businesses. We don't knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.