This Privacy Policy explains how NETAURA DIGITAL LTD collects and uses personal data when you visit this website or contact us, and what rights you have. We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and the Cyprus Law providing for the Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of such Data, Law 125(I)/2018.
Who we are
The controller of your personal data is:
NETAURA DIGITAL LTD ("NetAura", "we", "us", "our"), a private limited company registered in the Republic of Cyprus under registration number HE 500424, with its registered office at Parou, 2, Flat/Office 102, Zakaki, 3047, Limassol, Cyprus.
Contact for all privacy matters: [email protected]
Scope
This Policy applies to personal data processed through the website netaura.pro (the "Website") and to enquiries you send us by the contact form, email or phone.
The Website is intended for business customers. If you become our customer, personal data processed in connection with the services we provide (for example, contact persons named in a contract) is also governed by the terms of the relevant agreement.
What personal data we process
a) Contact form. When you send a request through the contact form, we receive:
- your name;
- your email address;
- the text of your request and any personal data you choose to include in it.
All fields are required, because we need them to read and answer your request. Please do not include sensitive personal data in your message.
The IP address from which the form is sent is not attached to your request.
b) Email and phone. If you contact us directly by email or phone, we process your contact details and the content of your communication.
c) Technical data. When you visit the Website, our web server automatically records technical information in its logs: your IP address, the date and time of the request, the address of the page or resource requested (including any parameters in it), the response status and size, the referring page and your browser's user-agent string. Error logs may also contain your IP address. The content of the contact form (your name, email address and request) is not recorded in these logs.
Traffic to the Website passes through Cloudflare, which provides content delivery and security services on our behalf and processes similar technical data (in particular your IP address) to deliver the Website and protect it against attacks and abusive traffic.
We use this data only to deliver the Website, to keep it secure and stable and to limit abusive traffic (for example, repeated automated submissions of the contact form).
We do not use this data to identify you or to build a profile of you.
Cookies, analytics and tracking
The Website does not use analytics tools, advertising tools, social media plugins or any other tracking technologies, does not load scripts from third parties and does not set cookies of its own.
Our security provider, Cloudflare, may place strictly necessary security cookies on your device (for example, __cf_bm or cf_clearance) to distinguish legitimate visitors from automated traffic and to remember that you have passed a security check. These cookies do not identify you, are not used for tracking or advertising and expire after a short period (from about 30 minutes for __cf_bm). Because they are strictly necessary to provide the Website securely, they do not require your consent. You can block or delete cookies in your browser settings, but security checks may then be shown to you more often or the Website may not be accessible.
Why we process your data and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Answering your request and, where you are interested in our services, preparing a quote or other steps before entering into a contract | Contact form data, email and phone communications | Art. 6(1)(b) — steps taken at your request prior to entering into a contract; where the request is not related to a possible contract, Art. 6(1)(f) — our legitimate interest in answering enquiries addressed to us |
| Operating the Website, ensuring its security and protecting it against abuse | Technical data | Art. 6(1)(f) — our legitimate interest in the secure and reliable operation of the Website |
| Establishing, exercising or defending legal claims | Data relevant to the claim | Art. 6(1)(f) — our legitimate interest in protecting our rights |
| Complying with legal obligations, including requests from competent authorities | Data required by the obligation | Art. 6(1)(c) — legal obligation |
We do not use your data for direct marketing, and we do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.
Who receives your data
We do not sell or rent personal data. We share it only where necessary, with:
- Service providers acting on our behalf (processors), bound by data processing agreements under Article 28 GDPR:
- Google (Google Workspace) — email services through which contact form requests are delivered to us and our email correspondence is handled;
- Cloudflare — content delivery and security services through which traffic to the Website passes;
- Professional advisers (such as lawyers, auditors and accountants), who are bound by duties of confidentiality, where necessary.
- Public authorities, courts and regulators, where we are required to do so by law or need it to establish, exercise or defend legal claims.
- A buyer or successor, in the event of a reorganisation, merger or transfer of all or part of our business, subject to equivalent protection of your data.
Transfers outside the European Economic Area
Some of our service providers, or their sub-processors, may process personal data outside the European Economic Area (EEA), including in the United States. We transfer personal data outside the EEA only where:
- the European Commission has decided that the recipient country, or the recipient organisation, ensures an adequate level of protection (including organisations certified under the EU-U.S. Data Privacy Framework); or
- appropriate safeguards are in place, such as the Standard Contractual Clauses adopted by the European Commission, together with additional measures where required.
You may request information about the safeguards we rely on by contacting us (Section 1).
How long we keep your data
- Contact form requests and other enquiries: for up to 1 month from our last communication with you, unless they lead to negotiations or a contract; in that case we keep them for as long as the negotiations continue. If a contract is concluded, the related correspondence is kept for the duration of the contract and afterwards for as long as required by applicable law (including tax and accounting record-keeping obligations) or as necessary to establish, exercise or defend legal claims.
- Contact form technical queue: a request is stored on our web server only until it has been delivered to our mailbox, and is then deleted automatically.
- Web server logs: up to 15 days, after which they are deleted automatically, unless a specific log entry is needed to investigate a security incident.
- Cloudflare security cookies: for the short period set by Cloudflare (see Section 4).
When the retention period ends, we delete or anonymise the data.
Your rights
Subject to the conditions set out in the GDPR, you have the right to:
- access your personal data and receive a copy of it;
- rectification of inaccurate or incomplete data;
- erasure of your data;
- restriction of processing;
- data portability, where processing is based on a contract and carried out by automated means;
- object to processing (see below).
Right to object. Where we process your data on the basis of our legitimate interests (Article 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation. We will then stop processing your data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.
To exercise your rights, contact us at [email protected]. We will reply without undue delay and in any event within one month; this period may be extended by two further months where necessary, in which case we will inform you. We may ask you to confirm your identity before acting on your request. Exercising your rights is free of charge, except where requests are manifestly unfounded or excessive.
Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement. Our lead supervisory authority is:
Office of the Commissioner for Personal Data Protection
Kypranoros 15, 1061 Nicosia, Cyprus
Email: [email protected]
Website: https://www.dataprotection.gov.cy
We would appreciate the chance to address your concerns first, so please feel free to contact us before you lodge a complaint.
Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. These include encryption of data in transit (HTTPS), restriction of access to personal data to authorised personnel who need it, restriction of administrative access to our systems, regular updates of our systems and limited retention of data.
No method of transmission over the internet or of electronic storage is completely secure, but we work continuously to keep your data protected.
Children
The Website and our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children.
Changes to this Policy
We may update this Policy from time to time, for example when our processing activities or applicable law change. The current version is always published on this page, with the date of the last update shown at the top.
Contact us
For any question about this Policy or the processing of your personal data, contact NETAURA DIGITAL LTD at [email protected] or by post at Parou, 2, Flat/Office 102, Zakaki, 3047, Limassol, Cyprus.