Privacy Policy

Last updated: 21 September 2026

This policy explains what personal data we collect through this website, why, who else handles it, how long we keep it and what your rights are under the EU General Data Protection Regulation (GDPR) and Cyprus law.

Who we are

The controller of your personal data is Panicos Tylliros & Son Construction & Development Ltd, registered in Cyprus under number HE 125530, registered office Nikou kai Despoinas Pattichi, Paschalis Court G., Office 1 (ground floor), 3071 Limassol, Cyprus.

For anything about your personal data, including the rights below, contact us by e-mail at the address above.

What we collect

When you use one of the forms on this website (call-back request, contact form or project enquiry) we receive:

  • your name, e-mail address and, where the form asks for it, your phone number;
  • the project you are interested in, and the subject and message you write.

To keep the forms free of spam, your IP address and technical details of your browser are checked by Cloudflare Turnstile and used to limit how many messages can be sent from one address in a short time. Our server logs record a reference number and the outcome of each submission, never what you wrote.

We set no cookies of our own and use no analytics or advertising trackers.

Why we use it, and on what legal basis

  • To answer your enquiry – to call you back, reply to your message or send you information about a project. The legal basis is taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)).
  • To protect the forms from spam and abuse – the Turnstile check and rate limit described above. The legal basis is our legitimate interest in keeping the website secure and the office inbox usable (GDPR Art. 6(1)(f)).

You do not have to give us your details, but without them we cannot reply to you. We do not sell your data, use it for marketing you did not ask for, or make automated decisions about you.

Who else handles it

  • Cloudflare hosts this website, runs the Turnstile spam check and delivers the enquiry to our mailbox by e-mail (Cloudflare Email Routing).
  • Cyta (Cytanet) provides the office mailbox where your enquiry is received and kept.
  • Google provides the maps on the contact and project pages. A map is only loaded, and Google only contacted, when you click “Show map”.

Cloudflare and Google are based in the United States. Where your data is transferred outside the European Economic Area they rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long we keep it

We keep enquiries for 24 months after our last contact with you and then delete them. If your enquiry leads to a contract, we keep what is needed for as long as the contract and our legal obligations (for example tax and accounting records) require.

Your rights

You have the right to:

  • ask for a copy of the personal data we hold about you (access);
  • have inaccurate data corrected (rectification);
  • have your data deleted (erasure);
  • ask us to limit how we use it (restriction);
  • object to our use of it for spam protection (objection);
  • receive the data you gave us in a commonly used format (portability).

E-mail us at ptylliros.dev@cytanet.com.cy to use any of these rights. We will reply within one month.

You can also complain to the Commissioner for Personal Data Protection of the Republic of Cyprus (www.dataprotection.gov.cy), though we would appreciate the chance to put things right first.

Changes to this policy

If we change how we handle your data we will update this page and the date at the top.