00 357 22 352929 Nicosia, Cyprus

 

Privacy Policy

Last updated: 23 October 2026

This Privacy Policy explains how INCC (“we”, “us”, “our”) collects and uses personal data when you visit incccyprus.com or contact us through it. We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Cyprus Law 125(I)/2018 on the protection of natural persons with regard to the processing of personal data.

1. Who is responsible for your data

The data controller is:
INCC
Ithakis 70, Egkomi, 2400 Nicosia, Cyprus
Telephone: +357 22 352929
Email: incccy@cytanet.com.cy

If you have any questions about this policy or about your personal data, please contact us using the details above.

2. Personal data we collect and why

2.1 Contact forms

When you send us a message through a contact form on this website, we collect your name, your email address, the subject (optional) and your message, together with any other personal data you choose to include in it.

  • Purpose: to answer your enquiry and, if you ask us to, to prepare a quotation or discuss a project with you.
  • Legal basis: Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Article 6(1)(f) GDPR (our legitimate interest in replying to enquiries).

Your message is delivered to us by email. The website does not keep a copy of form submissions in its database. Our forms do not use any third-party captcha service; spam is filtered with a hidden form field that people do not see.

Giving us this information is voluntary, but we cannot reply to you without a valid email address.

2.2 Visiting the website (server logs)

Each time you visit the website, our web server automatically records technical information in log files: your IP address, the date and time of the request, the page requested, the referring page and information about your browser and operating system.

  • Purpose: to deliver the website to you, keep it secure and diagnose technical problems.
  • Legal basis: Article 6(1)(f) GDPR (our legitimate interest in operating a secure and working website).

2.3 Security

To protect the website against attacks, a security plugin records the IP addresses involved in suspicious activity, such as repeated failed login attempts or blocked requests. The legal basis is Article 6(1)(f) GDPR (our legitimate interest in the security of the website).

We do not use your personal data for automated decision-making or profiling.

3. Cookies

This website does not use advertising or analytics cookies. The only cookie it may set is a functional cookie that remembers your language choice:

  • pll_language – remembers whether you are viewing the English or the Greek version of the website. It expires after one year.

This cookie is necessary for the language feature to work and is not used to track you, so it does not require your consent. You can delete cookies at any time in your browser settings.

4. Google Analytics and other tracking

This website does not currently use Google Analytics or any other analytics, advertising or tracking service. The fonts used on the website are served from our own server, so no data is sent to Google Fonts.

If we decide to use Google Analytics in the future, it will only be activated after you have given your consent through a cookie banner, you will be able to withdraw that consent at any time, and we will update this policy beforehand to explain the processing, including any transfer of data to Google outside the European Economic Area.

5. Third-party content and links

5.1 Map (OpenStreetMap)

Our contact page shows a map from OpenStreetMap. To display it, your browser loads map images directly from the servers of the OpenStreetMap Foundation in the United Kingdom, which receive your IP address in the process. No cookies are set. The legal basis is Article 6(1)(f) GDPR (our legitimate interest in showing you where to find us). The United Kingdom is covered by an adequacy decision of the European Commission. For more information, see the OpenStreetMap Foundation privacy policy.

5.2 Links to Google Maps and social media

The website contains links to Google Maps, Facebook, LinkedIn and Instagram. These are plain links: no data is sent to these services unless you click on them. Once you follow a link, the privacy policy of the respective provider applies.

6. Who receives your data

We do not sell or rent your personal data. We share it only with service providers that process it on our behalf and according to our instructions:

  • our website hosting provider (GoDaddy), which stores the website and its server logs;
  • our email provider (Cytanet), which delivers and stores the emails sent through the contact forms.

We may also disclose personal data where we are required to do so by law, for example to public authorities.

7. Transfers outside the European Economic Area

Some of our service providers, or their subcontractors, may process data outside the European Economic Area (for example in the United States). Where this happens, we make sure appropriate safeguards are in place, such as an adequacy decision of the European Commission (including the EU–US Data Privacy Framework) or the European Commission’s Standard Contractual Clauses.

8. How long we keep your data

  • Contact enquiries: for as long as needed to deal with your enquiry. If no business relationship follows, we delete them within two years of our last contact. If a contract follows, we keep the related correspondence for as long as tax and commercial law require.
  • Server and security logs: for a limited period, normally no longer than three months, unless they are needed to investigate a security incident.

9. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict the processing of your data;
  • object to processing based on our legitimate interests;
  • receive your data in a portable format;
  • withdraw any consent you have given, at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise any of these rights, contact us at incccy@cytanet.com.cy. We will reply within one month. We may ask you to confirm your identity before acting on your request.

10. Right to lodge a complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection, Iasonos 1, 1082 Nicosia, Cyprus (www.dataprotection.gov.cy), or with the supervisory authority of the EU country where you live or work.

11. Security

The whole website is served over an encrypted connection (HTTPS), and we take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

12. Children

This website is not intended for children under 14, and we do not knowingly collect their personal data.

13. Changes to this policy

We may update this Privacy Policy when our website or the law changes. The current version is always available on this page, and the date at the top shows when it was last updated.