Privacy Policy

1. Data Controller

The data controller for personal data collected through this website is:

• Company Name: Mediac Marketing Ltd
• Registration Number: ΗΕ 431704
• Jurisdiction: Republic of Cyprus
• Director: Max Rigas
• Contact Email: privacy@mediacmarketing.com

2. Information We Collect

We may collect the following categories of personal data:

2.1 Information You Provide Directly

• Name and surname
• Email address
• Phone number (if provided)
• Company name
• Message content submitted via contact forms

2.2 Information Collected Automatically

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited and time spent on this website
• Referring URL
• Cookie identifiers (where consent is given)

2.3 Information From Third Parties

We may receive limited data from analytics providers (such as Google Analytics) and advertising platforms where applicable and in accordance with applicable law.

3. Legal Basis for Processing

We process personal data on the following legal bases under GDPR Article 6:

• Consent (Art. 6(1)(a)): Where you have given explicit consent, such as for marketing communications or analytics cookies.
• Contractual necessity (Art. 6(1)(b)): Where processing is necessary to perform a contract or take pre-contractual steps at your request.
• Legitimate interests (Art. 6(1)(f)): For website security, fraud prevention, and improving our services, where those interests are not overridden by your rights.
• Legal obligation (Art. 6(1)(c)): Where processing is required to comply with applicable law.

4. How We Use Your Information

We use collected personal data for the following purposes:

• To respond to enquiries submitted via our contact form
• To provide and manage services where a contract exists
• To maintain website security and prevent fraud
• To analyse website usage (with consent) and improve functionality
• To comply with legal obligations under Cyprus and EU law
• To send service-related communications where necessary

We do not sell personal data to third parties. We do not use personal data for automated individual decision-making that produces legal or similarly significant effects without your consent.

5. Data Storage and Retention

Personal data is stored on secure servers located within the European Economic Area (EEA). We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law:

• Contact form submissions: Up to 24 months from date of submission
• Analytics data: As configured within analytics platform settings (typically 26 months)
• Contract-related data: Up to 7 years in accordance with Cyprus accounting and commercial law

Upon expiry of the applicable retention period, data is securely deleted or anonymised.

6. Cookies

This website uses cookies. For full details of the cookies we use and how to manage your preferences, please refer to our Cookie Policy. You may withdraw consent for non-essential cookies at any time through your browser settings or our cookie preference tool.

7. Third-Party Services and Data Sharing

We may share personal data with the following categories of third parties, strictly for the purposes described in this policy:

• Analytics providers (e.g. Google Analytics) — for website usage analysis
• Advertising platforms — for campaign management where contracted
• IT service providers — for website hosting and maintenance
• Legal and regulatory authorities — where required by applicable law

We require all third-party processors to maintain appropriate data protection standards. We do not transfer personal data outside the EEA without appropriate safeguards in place (e.g. Standard Contractual Clauses).

8. Your Rights Under GDPR

As a data subject, you have the following rights under GDPR, which you may exercise by contacting us at privacy@mediacmarketing.com:

• Right of access: To request a copy of the personal data we hold about you.
• Right of rectification: To request correction of inaccurate data.
• Right of erasure: To request deletion of your personal data where lawful grounds apply.
• Right to restrict processing: To request that we limit processing of your data.
• Right to data portability: To receive your data in a structured, machine-readable format.
• Right to object: To object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw at any time.

You also have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection, which is the relevant supervisory authority.

9. Security Measures

We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or alteration. These include:

• HTTPS/TLS encryption for all data transmission
• Access controls limiting data access to authorised personnel
• Regular review of data handling practices
• Processor agreements with third-party service providers

No transmission over the internet is entirely secure. We take all reasonable steps to protect your data but cannot guarantee absolute security.

10. Contact

For any questions regarding this Privacy Policy or to exercise your data rights, contact us at:

• Email: privacy@mediacmarketing.com
• Company: Mediac Marketing Ltd, Reg. No. ΗΕ 431704, Cyprus

We aim to respond to all data subject requests within 30 days.