Privacy Policy
Last updated: 4 September 2026
This website is a company presentation without user accounts, forms, cookies, or tracking. We process as little personal data as technically possible. This policy explains what is processed, why, and which rights you have under the General Data Protection Regulation (GDPR) and the Cyprus Law 125(I)/2018.
1. Controller
Purzel & Purzel Ltd, Stasikratous 32, Charalambous Tower, 6th Floor, Office 603, 1065 Nicosia, Cyprus. Email: [email protected].
2. Hosting and access logs
When you open this website, the web server automatically processes the data your browser transmits: IP address, date and time of the request, requested URL, HTTP status, transferred data volume, referrer URL, and browser and operating system identification. This data is required to deliver the pages to you and to keep the service secure and stable. The legal basis is Article 6(1)(f) GDPR (legitimate interest in operating a secure website). Server logs are kept for a maximum of 14 days and then deleted, unless a specific incident requires longer retention as evidence.
3. Contacting us
If you contact us by email, we process the data you provide (your email address, name if given, and the content of your message) to handle your request. The legal basis is Article 6(1)(b) GDPR where your request relates to a contract or pre-contractual steps, and otherwise Article 6(1)(f) GDPR (legitimate interest in answering enquiries). We keep correspondence as long as needed to deal with your request and any follow-up, and thereafter only where legal retention duties apply.
The Matrix button on this site links to the matrix.to service, which is operated by a third party. If you follow the link, that provider and the Matrix server you use process your data under their own privacy policies. We only receive the messages you choose to send us.
4. Cookies and tracking
This website does not set cookies, does not use analytics or tracking tools, and does not embed third-party scripts, fonts, or media. Fonts and images are delivered from our own server. No profile of your behaviour is created.
5. Recipients and transfers
We do not sell or share your data with third parties for their own purposes. The website is hosted on a server operated by us within the European Union. Data is disclosed only where we are legally obliged to do so or where it is necessary to enforce our rights.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Article 15),
- have inaccurate data rectified (Article 16),
- have your data erased (Article 17) or its processing restricted (Article 18),
- receive your data in a portable format (Article 20),
- object to processing based on legitimate interests (Article 21).
To exercise these rights, write to [email protected]. You also have the right to lodge a complaint with a supervisory authority. The competent authority for us is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, 1 Iasonos Street, 1082 Nicosia, Cyprus,www.dataprotection.gov.cy.
7. Security
This website is delivered over an encrypted connection (HTTPS). We apply appropriate technical and organisational measures to protect the data we process against loss, misuse, and unauthorised access.
8. Changes to this policy
We may update this policy when the website or the legal requirements change. The current version is always available on this page, together with the date of the last update.