Privacy Policy

Last updated: January 2025

1. Who We Are

This website is operated by Zitadelle Advisory Group LTD("we", "us", "our"), a company registered in Cyprus. We act as the Data Controller for the personal data collected through this website.

Data Controller:
Zitadelle Advisory Group LTD
67a Spyrou Kyprianou Avenue, 3rd Floor
Estindo Business Centre, Mesa Geitonia
P.C 4003, Limassol, Cyprus

Contact Email: info@zitadelleag.com

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity Information: Name, job title, company name
  • Contact Information: Email address, telephone number
  • Inquiry Content: Messages, questions, and details submitted through our contact forms
  • Technical Data: IP address, browser type and version, time zone setting, operating system
  • Usage Data: Information about how you use our website, pages visited, and interaction patterns
  • Cookies and Analytics Data: Data collected through cookies and similar tracking technologies

3. Why We Collect Data and Legal Basis

We process your personal data only when we have a lawful basis to do so under GDPR:

PurposeLegal Basis
Responding to your inquiries and providing requested servicesContractual necessity / Legitimate interest
Sending marketing communications (where opted in)Consent
Improving our website and user experienceLegitimate interest
Analytics and understanding site trafficConsent (for non-essential cookies)
Complying with legal obligationsLegal obligation

4. How We Use Your Data

We use your personal data for the following purposes:

  • To respond to inquiries submitted through our website contact forms
  • To provide information about our services
  • To improve and optimize our website functionality and content
  • To analyze website traffic and user behavior through analytics tools
  • To comply with applicable laws and regulations

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Inquiry data: Retained for 3 years from the date of your last interaction with us
  • Analytics data: Retained for 26 months (Google Analytics default)
  • Consent records: Retained for 5 years to demonstrate compliance

After these periods, data is securely deleted or anonymized.

6. Third Parties We Share Data With

We may share your personal data with the following categories of third parties:

  • Google Analytics: For website analytics and traffic analysis
  • Email service providers: To send communications and respond to inquiries
  • Hosting providers: Who store our website data on secure servers

We never sell your personal data to third parties.

7. International Data Transfers

Some of our third-party service providers may be located outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:

  • EU-US Data Privacy Framework certification (for US-based providers)
  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission

8. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restriction: Request restriction of processing in certain circumstances
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or direct marketing
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

9. How to Exercise Your Rights

To exercise any of your rights, please contact us at:

Email: info@zitadelleag.com

We will respond to your request within one month of receipt. In complex cases, this period may be extended by a further two months, and we will inform you accordingly.

10. Right to Lodge a Complaint

If you are not satisfied with how we handle your personal data or your rights request, you have the right to lodge a complaint with the supervisory authority in Cyprus:

Commissioner for Personal Data Protection
1 Iasonos Street, 2nd Floor
1082 Nicosia, Cyprus
Website: www.dataprotection.gov.cy

11. Cookies

This website uses cookies and similar tracking technologies. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your data.