Privacy Policy – GDPR

1. Controller

CMC Certus Management Consultants Ltd
Serghides House, Suite 102, 61 Archbishop Makarios III Avenue
6017 Larnaca, Republic of Cyprus
Company No.: HE320171 · Director: Florian Wilk
Email: kontakt@steuerberater-zypern.info
Phone: +357 24 400 246

2. General Information on Data Processing

We only process personal data insofar as necessary to provide a functional website and our services. Legal basis: General Data Protection Regulation (GDPR) and Cyprus Data Protection Law (Law 125(I)/2018).

3. Hosting and Server Log Files

The hosting provider automatically collects: browser type/version, operating system, referrer URL, hostname, time of request, IP address. No merging with other data. Legal basis: Art. 6(1)(f) GDPR.

4. Contact

When you contact us by email, phone, WhatsApp or contact form, your data is stored to process your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest).

5. Calendly

We use Calendly (Calendly LLC, Atlanta, USA) for appointment scheduling. Calendly is certified under the EU-US Data Privacy Framework. Privacy: calendly.com/privacy.

6. WhatsApp Business

Communication via WhatsApp Business (Meta Platforms Ireland Ltd). Meta processes your phone number and messages per WhatsApp privacy policy.

7. Cookies

This website uses no tracking cookies, no marketing cookies and no analytics tools. Only technically necessary cookies are used.

8. No External Fonts

All fonts are hosted locally. No requests to external servers (e.g. Google Fonts).

9. No Analytics Tools

No Google Analytics, no Facebook Pixel, no other tracking tools.

10. Your Rights

Access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21). Right to lodge a complaint: Commissioner for Personal Data Protection, www.dataprotection.gov.cy.

11. SSL/TLS Encryption

This website uses SSL/TLS encryption (HTTPS).

12. Client Data

Client data is processed under Art. 6(1)(b) GDPR. Retention: per statutory requirements (typically 7 years). Details in the General Terms of Engagement.

As of: March 2026