Privacy policy

This policy explains what personal data DEVOBLICS LIMITED collects through this website, why it is collected, how long it is kept and what you can do about it. It is written to meet Regulation (EU) 2016/679, the General Data Protection Regulation, as applied in the Republic of Cyprus.

Who is responsible

The data controller is DEVOBLICS LIMITED, Pavlou Valdaseridi 2A, 1st floor, 6018 Larnaca, Cyprus. For any question about this policy or about your data, write to business@devoblics.com.

What we collect and why

Enquiries you send us

When you use the enquiry form we collect the name, company, project type, timeframe, email address, phone number and any details you enter. We use them for one purpose: to reply to you and to discuss the project you described. The lawful basis is Article 6(1)(b), steps taken at your request before entering a contract, and Article 6(1)(f), our legitimate interest in responding to business enquiries.

Analytics

If, and only if, you allow analytics cookies, Google Analytics collects aggregated usage data such as pages viewed, approximate location at city level and device type. IP addresses are anonymised. The lawful basis is your consent under Article 6(1)(a), which you can withdraw at any time from the cookie policy page. If you decline, no analytics script is loaded and no analytics cookie is set.

Technical logs

Our hosting provider records standard server logs, including IP address, time of request and user agent, to keep the service available and to detect abuse. The lawful basis is Article 6(1)(f), our legitimate interest in operating a secure service.

What we do not do

• We do not sell or rent personal data.
• We do not use your data to train machine learning models.
• We do not run advertising or profiling cookies.
• We do not make automated decisions that produce legal effects.

How long we keep it

• Enquiries that do not become projects: 12 months, then deleted.
• Enquiries that become projects: for the duration of the engagement and 7 years afterwards, as required by Cyprus accounting and tax rules.
• Analytics data: 14 months, then deleted automatically.
• Server logs: 30 days.

Who else sees it

We share data only with processors who help us run the studio: our hosting provider, our email provider and, where you consented, Google Analytics. Each acts under a data processing agreement. Where a processor is based outside the European Economic Area, transfers rely on the European Commission's standard contractual clauses.

Your rights

Under the GDPR you can ask us to:

• confirm whether we hold data about you, and give you a copy;
• correct data that is wrong or incomplete;
• delete data we no longer need;
• restrict how we use it while a dispute is resolved;
• provide it in a portable, machine-readable format;
• stop processing based on legitimate interest, by objecting;
• withdraw consent for analytics, at any time and without penalty.

Write to business@devoblics.com and we will respond within one month. There is no charge unless a request is manifestly excessive.

Complaints

If you believe we have handled your data unlawfully you can complain to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, 15 Kypranoros Street, 1061 Nicosia, or through dataprotection.gov.cy. You may also complain to the supervisory authority where you live.

Changes

When this policy changes we update the date at the top of the page. Material changes affecting how we use data you already gave us will be communicated directly where we have a way to reach you.