Privacy and Cookie Policy

Scope

This Privacy Policy relates to personal data processed on the dndcyprus.com domain and its subpages (hereafter the “Service”). This document explains for which purposes we process your data, on which legal bases we rely, with whom we share it, how long we retain it, and the rights you have. By using the Service, you are deemed to have accepted this policy.

Data Controller & Contact

Within the scope of this policy, the “Company” or “DND Cyprus” refers to the entity with the following contact details:

(The address and contact details have been updated based on the information published on the previous website.)

Data We Collect

• Contact Data: Name, surname, e-mail address, phone number, and form content (your message, project interest, etc.).
• Usage Data: Technical log information such as IP address, browser type, referring/exit pages, time and duration of visit, device information and identifiers.
• Cookie Data: Strictly necessary cookies, your cookie preference and, only if you consent, analytics and advertising measurement cookies (see “Cookies and advertising measurement”).
• Third-Party Interactions: Where you interact with social network plug-ins or services (e.g., Google, Facebook/Instagram, X (Twitter), LinkedIn), the information you choose to share from those accounts.

Purposes of Use

• To provide, maintain and monitor the performance of the Service
• To respond to and manage your contact requests
• To establish and perform contracts (e.g., project/offer processes, appointments, and pre-/post-sales support)
• For our legitimate interests (improving our services, analysing campaigns/events, ensuring security)
• With your explicit consent, to send news, newsletters and similar commercial communications

Legal Basis

Your data is processed on the legal bases permitted by applicable data-protection legislation, such as the necessity for entering into or performing a contract, compliance with legal obligations, the balanced protection of our legitimate interests, and, where required, your explicit consent (e.g., under the GDPR or local regulations).

Retention Periods

Personal data is retained for as long as necessary for the purposes for which it is processed and for the minimum periods required to meet our legal obligations. Analytics and log data are kept for reasonable periods for security and functionality purposes.

Sharing & Transfers

• Service Providers: With hosting, maintenance, security and analytics providers, for limited purposes.
• Affiliates / Business Partners: Where necessary and for legitimate purposes, with appropriate confidentiality safeguards.
• Legal Obligations: Where required to comply with valid requests from competent authorities.
• Cross-Border Transfers: Your data may be processed or stored on systems located outside your country of residence. In such cases, we implement appropriate technical and contractual safeguards.
• Advertising and Measurement Partners: Google (Google Analytics, Google Ads) and Meta Platforms (Facebook/Instagram), only where you have given the relevant consent in the cookie banner.

Cookies

The Service uses strictly necessary cookies to work and to remember your preferences. Analytics and advertising cookies are only used if you consent in the cookie banner. You can change your choice at any time and you can also restrict or delete cookies via your browser settings.

Cookies and advertising measurement

We use the tools below to measure how our website is used and to see the results of our Google and Meta (Facebook/Instagram) advertising campaigns. Apart from strictly necessary cookies, these tools only use cookies or send data if you consent in the cookie banner.

Tools we use

• Google Analytics 4 (analytics consent): shows, as aggregated statistics, which pages are visited, where visitors come from and interactions such as brochure downloads, virtual tours and contact clicks.
• Microsoft Clarity (analytics consent): creates heatmaps showing where people click and how far they scroll, and anonymised session recordings, to help us make the site easier to use. Text typed into form fields is masked and not recorded. It is not loaded unless you give analytics consent.
• Google Ads conversion tracking (advertising consent): measures actions such as submitting a form or contacting us via WhatsApp or phone after clicking a Google ad. With enhanced conversions, when you submit a form your email address and phone number are converted in your browser into a one-way SHA-256 hash, sent to Google and used only to match the conversion with an ad click.
• Meta Pixel (advertising consent): measures the results of our Facebook and Instagram ads (page views, form submissions, contact clicks) and helps show our ads to people who may be interested. It is not loaded unless you give advertising consent.
• Meta Conversions API (advertising consent): when you submit a form, our server sends the same “form submitted” event directly to Meta so that measurement is not affected by browser blocking and is not double-counted with the Pixel. Your email and phone number are SHA-256 hashed; your IP address, browser information, page address and Meta cookie identifiers (_fbp/_fbc) are also sent. Nothing is sent if you have not given advertising consent.

Without your consent, Google tags do not read or write cookies; they may only send limited cookieless technical signals (e.g. consent state, page address, browser type), which Google may use for aggregated conversion modelling (Google Consent Mode). In that case ad-click information may be carried in the page address instead of a cookie. When you submit a form, information about the campaign that brought you to the site (the content of dnd_ft/dnd_lt below and the page address) is stored together with your request. Google and Meta may process data on servers outside your country.

Cookie list

Changing or withdrawing consent

You can change or withdraw your consent at any time with the button below. When you withdraw it, we delete the related cookies from your browser; Meta Pixel and Microsoft Clarity stop sending data. Withdrawal does not affect processing carried out before it.

Your Rights

• To access, be informed about and request a copy of your data
• To request rectification and update
• To request erasure (“right to be forgotten”) and restriction of processing
• To object to processing and refuse direct marketing
• To data portability (where applicable) and to withdraw consent

To exercise your rights, you can contact us at info@dndcyprus.com. We may request additional information to verify your identity.

Data Security

Transmission over the internet and electronic storage methods are not 100% secure. Nevertheless, we seek to protect your data through industry-standard technical and organisational measures.

Children’s Privacy

The Service is not directed to children under 13 years of age. If we become aware that we have processed the personal data of a child under 13 without appropriate permission, we will take steps to delete such data.

Third-Party Websites

Our Service may contain links to third-party websites. We are not responsible for the content or privacy practices of those sites; we recommend that you review the privacy policy of each site you visit.

Changes to this Policy

We may update this policy from time to time. We will publish new versions on this page and update the “Last updated” date. Where changes are material, we may notify you by appropriate means (for example, a notice on the website).

Contact

If you have any questions, you can write to info@dndcyprus.com.