1. Who We Are
This website is operated by Zitadelle Advisory Group LTD("we", "us", "our"), a company registered in Cyprus. We act as the Data Controller for the personal data collected through this website.
Zitadelle Advisory Group LTD
67a Spyrou Kyprianou Avenue, 3rd Floor
Estindo Business Centre, Mesa Geitonia
P.C 4003, Limassol, Cyprus
Contact Email: info@zitadelleag.com
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity Information: Name, job title, company name
- Contact Information: Email address, telephone number
- Inquiry Content: Messages, questions, and details submitted through our contact forms
- Technical Data: IP address, browser type and version, time zone setting, operating system
- Usage Data: Information about how you use our website, pages visited, and interaction patterns
- Cookies and Analytics Data: Data collected through cookies and similar tracking technologies
3. Why We Collect Data and Legal Basis
We process your personal data only when we have a lawful basis to do so under GDPR:
| Purpose | Legal Basis |
|---|---|
| Responding to your inquiries and providing requested services | Contractual necessity / Legitimate interest |
| Sending marketing communications (where opted in) | Consent |
| Improving our website and user experience | Legitimate interest |
| Analytics and understanding site traffic | Consent (for non-essential cookies) |
| Complying with legal obligations | Legal obligation |
4. How We Use Your Data
We use your personal data for the following purposes:
- To respond to inquiries submitted through our website contact forms
- To provide information about our services
- To improve and optimize our website functionality and content
- To analyze website traffic and user behavior through analytics tools
- To comply with applicable laws and regulations
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Inquiry data: Retained for 3 years from the date of your last interaction with us
- Analytics data: Retained for 26 months (Google Analytics default)
- Consent records: Retained for 5 years to demonstrate compliance
After these periods, data is securely deleted or anonymized.
6. Third Parties We Share Data With
We may share your personal data with the following categories of third parties:
- Google Analytics: For website analytics and traffic analysis
- Email service providers: To send communications and respond to inquiries
- Hosting providers: Who store our website data on secure servers
We never sell your personal data to third parties.
7. International Data Transfers
Some of our third-party service providers may be located outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:
- EU-US Data Privacy Framework certification (for US-based providers)
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by the European Commission
8. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restriction: Request restriction of processing in certain circumstances
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or direct marketing
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
9. How to Exercise Your Rights
To exercise any of your rights, please contact us at:
We will respond to your request within one month of receipt. In complex cases, this period may be extended by a further two months, and we will inform you accordingly.
10. Right to Lodge a Complaint
If you are not satisfied with how we handle your personal data or your rights request, you have the right to lodge a complaint with the supervisory authority in Cyprus:
1 Iasonos Street, 2nd Floor
1082 Nicosia, Cyprus
Website: www.dataprotection.gov.cy
11. Cookies
This website uses cookies and similar tracking technologies. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your data.