Privacy

§ GDPR

This statement describes how Digitheia Digital Solutions Ltd ("we", "us", the controller) processes personal data when you visit this website or contact us by email. The lawful bases and rights described here follow the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").

1 · Controller

Entity: Digitheia Digital Solutions Ltd · Reg. ΗΕ 427483 · VAT CY10427483C
Address: Ayias Theklas 7, Ayia Thekla Complex 4 · H. 25, 5391 Sotira, Cyprus
Director: Martin Schrodt
Contact: info@digitheia.com.cy

We have not appointed a Data Protection Officer; our processing does not require one under Article 37 GDPR.

2 · What we process when you visit this site

The website is operated on infrastructure managed by the controller and hosted within the European Union. We do not use third-party analytics, advertising trackers, social-media plug-ins, content-delivery networks, or third-party fonts. The website sets no cookies.

Our web server records standard access information in order to run the service and protect it from abuse:

IP address of the requesting device
Date and time of the request
Requested URL and HTTP status
Referring URL (if sent by your browser)
User-agent string of your browser

Lawful basis: Article 6(1)(f) GDPR — our legitimate interest in operating, securing, and troubleshooting the site. Retention: for a short period strictly necessary for security and operational purposes, after which the records are deleted or anonymised. We do not combine this data with other sources and do not use it to profile visitors.

3 · What we process when you contact us

The site exposes an email address; there is no contact form. When you write to us we process the data you provide in your message (name, email address, organisation, the substance of the enquiry) to respond and, if relevant, to enter into a contract.

Lawful basis: Article 6(1)(b) GDPR (steps prior to entering into a contract) and, where the contact does not lead to a contract, Article 6(1)(f) GDPR (legitimate interest in responding to professional enquiries). Retention: for the duration of any resulting engagement plus the statutory retention periods applicable to business correspondence under Cypriot law, and otherwise until the matter is concluded.

4 · Recipients and transfers

We do not sell, share, or otherwise disclose personal data to third parties for their own purposes. We do not transfer personal data outside the European Economic Area.

Email correspondence is processed by the email provider operating the domain's mailboxes; that provider acts as a processor under Article 28 GDPR on a contractual basis.

5 · Your rights

Under Articles 15 – 22 GDPR you have the right to:

request access to the personal data we hold about you;
request rectification of inaccurate data;
request erasure ("right to be forgotten") subject to legal retention obligations;
request restriction of processing;
request data portability for data you have provided;
object to processing carried out on the basis of legitimate interests.

To exercise any of these rights, write to info@digitheia.com.cy. We will respond within the timeframes set by the GDPR (typically one month).

You also have the right to lodge a complaint with a supervisory authority. In Cyprus this is the Commissioner for Personal Data Protection. You may also complain to the supervisory authority in your country of residence.

6 · Children

This site is directed at businesses and professionals. We do not knowingly collect personal data from children under the age of 16.

7 · Changes to this statement

We may update this statement from time to time. The current version is always available at this URL. Substantive changes to how we process data will be reflected here.