Privacy Notice

1. Who is responsible

• Company: K. SOFOKLEOUS & SONS LTD
• Address: Synergatismou 7, Alambra Industrial Area, 2563 Nicosia, Cyprus
• Phone: 22523600
• Email: koullissofokleous@cytanet.com.cy
• Registration no. (HE): HE161211
• VAT no.: 10161211J

This website is operated by K. SOFOKLEOUS & SONS LTD (“we”, “us”), which decides how and why your personal data is used (the “controller”). Our details are below.

2. What data we collect and why

• Your enquiries and price requests. When you send the contact form, the details you entered (name, phone number, email address, company, message and the products you listed) are passed on by the website as an email to our company mailbox. The website does not store them. We receive the same details when you call or write to us directly. We use it to reply to you and prepare a quote. Legal basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR).
• Visit statistics. We use Cloudflare Web Analytics to see, in aggregated form, how many people visit the site, which pages are viewed, and which country, browser and device type visitors use. It does not use cookies or local storage on your device and does not track individual visitors across websites. Legal basis: our legitimate interest in understanding and improving the website (Art. 6(1)(f) GDPR).
• Spam protection. The contact form uses Cloudflare Turnstile, which checks whether a person or an automated program is using it. It loads only on the contact page and processes technical signals such as your IP address and browser and device characteristics; it does not read what you type into the form. Legal basis: our legitimate interest in protecting the form from spam and abuse (Art. 6(1)(f) GDPR). Cloudflare also uses these signals, as an independent controller, to improve its bot detection (see Cloudflare’s Turnstile Privacy Addendum).
• Technical data and security. Our hosting provider, Cloudflare, processes technical data such as your IP address and request details in order to deliver the website and protect it against attacks and abuse. Legal basis: legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

3. Information stored on your device

The website stores one item in your browser’s local storage: your price-request list, if you use it. It stays on your device and is not sent to us until you submit a request. The language is not stored: it comes from the page address (/en/ for English). See the Cookie & Storage Notice.

4. Who receives your data

• Cloudflare, Inc. (hosting, security, spam protection for the form, delivery of form messages and visit statistics), acting on our behalf.
• Our email provider (Cytanet), which receives the form messages, and your own email provider when you email us.
• Public authorities, when the law requires it.

We do not sell your personal data and do not use it for advertising.

5. Transfers outside the EEA

Cloudflare operates worldwide, so technical data may be processed outside the European Economic Area, including in the United States. Such transfers rely on safeguards required by law, such as the EU–US Data Privacy Framework or Standard Contractual Clauses.

6. How long we keep data

• Enquiries that do not lead to an order: up to 24 months after our last contact.
• Enquiries that lead to an order: kept with the order records for as long as the law requires (for example invoices and accounting records).
• Visit statistics: kept in aggregated form for the period set by Cloudflare’s service.
• Technical data: for a short period set by Cloudflare.

7. Your rights

You have the right to:

• access your data,
• have inaccurate data corrected,
• have your data erased,
• restrict processing,
• receive your data in a portable format,
• object to processing based on legitimate interest.

To use any of these rights, contact us using the details above. We will reply within one month. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus (www.dataprotection.gov.cy).

8. Providing data

You are not obliged to give us any personal data. If you do not, we may not be able to answer your enquiry.

9. Links to other websites

Links to Google Maps, Facebook and Instagram take you to services we do not control; their own privacy policies apply once you open them. Nothing is loaded from these services until you click.

10. Changes

We may update this notice. The date of the latest version is shown at the top of this page.