Privacy & Data Protection Policy

1. Data Controller

The controller of your personal data is:

• FYG Co Ltd
• Platform: epaggelmatiescy.com
• Email: info@epaggelmatiescy.com

2. Who this policy applies to

This Policy applies to:

• website visitors
• users of the Platform
• listed professionals
• businesses
• people who contact the Platform
• users who submit a request to find or be matched with a professional
• professionals who request a correction or update of their listing
• partners, where applicable

3. Personal data we may process

For professionals, we may process:

• name
• professional or business name
• profession
• specialisation
• service categories
• professional telephone number
• WhatsApp
• professional email address
• professional or business address
• city
• service areas
• website
• professional social media profiles
• opening hours
• description of services
• professional photographs, where lawfully permitted
• other relevant professional information

For users contacting the Platform:

• name
• email address
• telephone number, where voluntarily provided
• location or area
• information contained in the request

Technical data may include:

• IP address
• device type
• browser
• operating system
• date and time
• logs
• cookie identifiers, where applicable

4. Sources of personal data

Personal data may be obtained:

• directly from the individual
• from the professional or business
• from an authorised representative
• from lawfully publicly accessible professional sources

Possible public sources may include:

• official business websites
• public professional profiles
• professional directories
• public registers
• other lawfully accessible professional sources

The fact that information is publicly available does not in itself mean that it may be used for any purpose. Processing takes place only where there is an appropriate legal basis and in accordance with the principles of lawfulness, transparency, necessity and data minimisation.

5. Purposes of processing

We process personal data for the following purposes:

• operating the Platform
• creating and managing professional listings
• helping users discover professionals
• facilitating communication between users and professionals
• handling matching requests
• correcting or updating listings
• responding to enquiries and requests
• Platform security
• preventing fraud and misuse
• analytics, where lawfully permitted
• complying with legal obligations
• establishing, exercising or defending legal claims, where necessary

6. Legal bases

Depending on the case, processing is based on one or more of the following legal bases:

• Consent — where you have given your consent, which you may withdraw at any time.
• Contract or pre-contractual measures — where processing is necessary to perform a contract or to take steps at your request before entering into one.
• Legal obligation — where processing is required to comply with an obligation under the law.
• Legitimate interests — where processing is necessary for the purposes of our legitimate interests or those of a third party.

Legitimate interests may include operating a professional discovery platform, maintaining relevant professional listings, ensuring Platform security and preventing misuse, always subject to an appropriate balancing against the interests, rights and freedoms of the individuals concerned.

7. Publicly available professional information

In certain cases, basic professional listings may be created using limited professional information that is already lawfully available to the public.

• Only relevant professional information is used.
• GDPR rights continue to apply where the information relates to an identifiable natural person.
• Professionals may request the correction or updating of their information.
• They may also exercise any applicable right to object or right to erasure.
• Such requests are assessed in accordance with applicable law.

8. Information where data are not obtained directly from you

Where Article 14 GDPR applies, appropriate information is provided within the timeframe required by law, subject to any applicable exemptions.

This information may include:

• the identity of the controller
• the categories of personal data
• the purpose of processing
• the legal basis
• the legitimate interests, where applicable
• the source of the data
• whether the source was publicly accessible
• the recipients
• the retention period
• your rights under the GDPR

9. Recipients

Where necessary, data may be shared with:

• hosting and infrastructure providers
• technical and security service providers
• email and communications providers
• analytics providers, where lawfully permitted
• professionals receiving a user’s request, where appropriate
• professional advisers
• competent authorities, where required by law

We do not sell personal data.

10. International transfers

If service providers process data outside the European Economic Area (EEA), appropriate GDPR transfer mechanisms and safeguards are used where required, such as adequacy decisions or standard contractual clauses.

11. Data retention

Personal data are kept only for as long as necessary, taking into account:

• the purpose of processing
• the duration of the listing or collaboration
• legal obligations
• any disputes or legal claims
• security reasons
• objection or erasure requests

12. Security

We apply appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, alteration or disclosure.

However, no system operating over the internet can guarantee absolute security.

13. Your GDPR rights

Under the GDPR, and subject to the conditions set out in law, you have the following rights:

• the right to be informed
• the right of access
• the right to rectification
• the right to erasure
• the right to restriction of processing
• the right to object
• the right to data portability, where applicable
• the right to withdraw consent

14. Exercising your rights

All requests to exercise your rights should be sent to: info@epaggelmatiescy.com

Where necessary, we may ask for reasonable proof of identity to protect data from unauthorised access.

15. Complaints

You have the right to lodge a complaint with the competent supervisory authority.

In Cyprus, the competent authority is the Office of the Commissioner for Personal Data Protection.

16. Cookies

For information on our use of cookies and similar technologies, please see the Cookie Policy. You can change your choices at any time through Cookie Settings.

Cookie Policy

Cookie Settings

17. Third-party services

The Platform may include links to or features of external services, such as:

• maps
• WhatsApp
• social media
• professionals’ websites

When you use such services, their own privacy policies may apply.

18. Children

The Platform is not intended to collect children’s personal data for professional or commercial listing purposes.

19. Automated decision-making

Unless you are informed otherwise, the Platform does not use personal data for decisions based solely on automated processing that produce legal or similarly significant effects.

20. Changes to this policy

This Policy may be updated from time to time to reflect changes in how the Platform operates or in the law. The date of the latest update is shown at the top of this page.

21. Contact

epaggelmatiescy.com

Email: info@epaggelmatiescy.com

Data Controller: FYG Co Ltd