← Back to site

Privacy policy

1. Controller

Zygan Consulting Ltd., Eleftherias 17, 8560 Pegeia, Paphos, Cyprus · Email: info@zygan-consulting.com. No data protection officer has been appointed (not legally required).

2. Visiting the website (server log files)

When you access the site, the web server automatically processes access data: IP address, date and time, requested file, status code, volume transferred, referrer and browser identifier. Purposes are delivery, stability and security of the service (legitimate interest, Art. 6(1)(f) GDPR). Retention: [PLATZHALTER].

3. Contact by email

If you contact us by email we process your details (name, email address, content) to handle your enquiry – Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract), otherwise (f). We erase the data once it is no longer required and no statutory retention periods apply ([PLATZHALTER]).

4. Client portal / demo area

The password-protected area at /demo/ processes data solely to perform the contract (Art. 6(1)(b) GDPR):

  • Credentials: username, display name, optional email address, password as a hash only (scrypt), communication language.
  • Change requests: wording, timestamp and the IP address of the confirmation – to document the order bindingly.
  • Publication orders (chargeable) with timestamp, state reference and IP address – basis for invoicing.
  • Credit entries and an event log of actions.
  • Media uploads: images you upload are re-encoded server-side; EXIF metadata is removed (e.g. location).

A strictly necessary session cookie keeps you signed in; it serves this purpose only and requires no consent. We set no other cookies. Retention of portal data: for the duration of the business relationship, thereafter [PLATZHALTER].

5. Sending email

System notifications (e.g. confirmations) are sent via the mail provider IONOS, which processes the sending data on our instructions as a processor (Art. 28 GDPR).

6. Hosting

Website and portal run on a server operated by us (hosting provider and server location: [PLATZHALTER]). The provider acts as a processor on our instructions (Art. 28 GDPR).

7. Fonts, no trackers

Fonts are served locally from our own server; no connection to Google Fonts is made. We use no analytics, tracking or advertising services and embed no social media plugins.

8. Recipients

Data is shared only with the processors named above and with professionals or authorities where legally required. No transfer to third countries takes place.

9. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) (Art. 21 GDPR). Consent given can be withdrawn at any time with effect for the future.

10. Right to lodge a complaint

You may lodge a complaint with a supervisory authority, in particular the Office of the Commissioner for Personal Data Protection (Cyprus), Nicosia.

11. Obligation to provide data

Without the data required for an enquiry or portal access we cannot provide the service. No automated decision-making or profiling takes place.