Privacy policy
This policy explains which personal data we process when you visit tirongroup.com, request a quote or book scaffolding, and which rights you have under the EU General Data Protection Regulation (GDPR) and the Cyprus law on the protection of personal data (Law 125(I)/2018).
1. Controller
Registered office: [street and number], [postcode] Paphos, Cyprus
Registered with the Department of Registrar of Companies and Intellectual Property, Cyprus, under no. [HE ……]
VAT number: [CY……]
Directors: [names of the directors]
Phone: [+357 …] · Email: [info@tirongroup.com]
2. Data we process
| What | Why | Legal basis |
|---|---|---|
| Name, phone, email, company name and VAT number (businesses), billing address | To prepare your offer, confirm your booking, invoice and contact you | Contract and pre-contract steps, Art. 6(1)(b) GDPR |
| Site address, district, building details, measurements, chosen dates, site conditions, photos you upload | To calculate the price, plan the erection and check the site | Art. 6(1)(b) GDPR |
| Invoices and payment records | Accounting and tax obligations | Legal obligation, Art. 6(1)(c) GDPR |
| Technical data (IP address, browser, time of access) in server logs | To run the website securely and fix errors | Legitimate interest, Art. 6(1)(f) GDPR |
| Your language choice, stored in your browser (local storage) | To show the website in your language on your next visit | Legitimate interest, Art. 6(1)(f) GDPR |
Please only upload photos of the building and the site. Avoid photos that show people or car number plates.
3. Cookies
This website does not use cookies for tracking or advertising. Only your language choice is stored in your own browser. You can delete it at any time in your browser settings. Fonts are loaded from our own server, so your browser does not connect to Google or other font services.
4. Service providers
- Hosting: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Hosts the website and the server logs. [confirm data centre location and data processing agreement in hPanel]
- Payments: [e.g. Stripe Payments Europe Ltd., Ireland, once online payment goes live]. Card details go directly to the payment provider. We never see your full card number.
- Email: [email provider].
Where a provider processes data outside the EU/EEA, this is based on an adequacy decision of the European Commission or on standard contractual clauses.
5. How long we keep data
- Quotes and requests that do not lead to a booking: 6 months.
- Bookings, contracts and invoices: as long as Cyprus tax and company law requires. [number of years, confirm with accountant]
- Server logs: [e.g. 30 days].
6. Your rights
You have the right to access, correct and delete your data, to restrict its processing, to data portability and to object to processing based on legitimate interest. Write to [info@tirongroup.com].
You can also complain to the supervisory authority: Office of the Commissioner for Personal Data Protection, Iasonos 1, 1082 Nicosia, Cyprus, www.dataprotection.gov.cy.
7. Changes
We update this policy when our services or the law change. The current version is always available on this page.