Draft, pending legal review
Privacy notice
This notice explains what personal data kyvys collects through this website, why, and what your rights are.
Who we are
kyvys is the controller of the personal data collected through this website.
kyvys, Limassol, Cyprus. Email: hello@kyvys.com.
What we collect
We collect what you send us through our contact form and, only if you allow it, statistics about how the site is used.
- Contact form: your name, work email, message and the services you are interested in.
- Bot check: when you send a form, Cloudflare Turnstile checks signals from your browser, such as your IP address and browser characteristics, to tell people from automated spam.
- Usage statistics, only if you accept analytics cookies: Google Analytics records the pages you visit, how you arrived, your approximate location and your device and browser type.
Why we use it
We use your details to reply to your enquiry. We use the bot check to keep spam and abuse out of our forms, and usage statistics to see which pages are useful so we can improve the site.
We do not use your data for advertising and we do not sell it.
Legal basis
- Form submissions: your consent, given when you tick the box on the form (Article 6(1)(a) GDPR), and steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
- Bot check: our legitimate interest in keeping the site secure and free from spam (Article 6(1)(f) GDPR).
- Analytics cookies: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
How long we keep it
- Enquiries: for as long as needed to handle your enquiry, and for up to 24 months after our last contact unless a contract follows.
- Usage statistics: up to 14 months in Google Analytics.
- Technical logs, which can include form submissions: up to 7 days at Cloudflare.
Who processes it
We use these processors to run the site and answer you.
- Cloudflare, for hosting this website, receiving form submissions and the Turnstile bot check.
- Microsoft 365, for email. Form submissions reach us by email.
- Google, for Google Analytics, only if you accept analytics cookies.
Transfers outside the EEA
Some of these providers may process data outside the European Economic Area. Where they do, the transfer is covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Cookies and tracking
Analytics cookies stay off until you accept them. If you accept, Google Analytics sets the cookies _ga and _ga_<ID>, which last up to 2 years. If you reject them, no analytics cookies are set and nothing is sent to Google.
You can change your choice at any time with Cookie settings at the bottom of every page.
Cloudflare may set strictly necessary cookies to protect the site from bots and attacks. Your cookie choice is kept in your own browser storage and is not sent to us.
Your rights
You can ask us for access to your data, correction, erasure, restriction or portability, object to our use of it, and withdraw your consent at any time. Write to hello@kyvys.com.
You can also lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy).