Privacy Policy

1. Introduction

ResidentPravo ("ResidentPravo", "we", "us" or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use and protect your personal data when you visit our website or engage with our consulting services.

This Policy is prepared in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Cyprus Law on the Protection of Natural Persons with Regard to the Processing of Personal Data (Law 125(I)/2018).

2. Data Controller

The data controller responsible for your personal data is:

3. Personal Data We Collect

We may collect and process the following categories of personal data:

• Contact information: name, email address, telephone number
• Communication data: messages sent via WhatsApp, email or website contact forms
• Business information: company name, business registration details, nationality, country of residence
• Identity documents: where required for services — copies of passports, proof of address and similar documents
• Usage data: IP address, browser type, pages visited, time on site (collected via cookies and analytics tools)

We collect personal data only to the extent necessary for the purposes described in this Policy.

4. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your enquiries and provide consulting services
• To assess your eligibility for company registration, residence permits or other services
• To coordinate with licensed professionals (lawyers, accountants, banking institutions) on your behalf
• To send communications related to the delivery of agreed services
• To comply with applicable legal and regulatory obligations
• To improve the functionality and content of our website

5. Legal Basis for Processing (GDPR)

We process your personal data on the following legal grounds:

• Contractual necessity (Art. 6(1)(b) GDPR) — processing necessary to deliver our consulting services
• Legitimate interests (Art. 6(1)(f) GDPR) — responding to enquiries and improving our services
• Legal obligation (Art. 6(1)(c) GDPR) — compliance with Cyprus and European Union law
• Consent (Art. 6(1)(a) GDPR) — where you have provided explicit consent, such as for marketing communications

6. Data Sharing

We may share your personal data with the following categories of recipients:

• Licensed partner professionals: lawyers, accountants, auditors and tax advisors where required to deliver your services
• Banking institutions: where assistance with bank account opening is provided
• Government authorities: including the Cyprus Registrar of Companies, the Department of Immigration and the Tax Department
• IT service providers: website hosting providers and communication tools, subject to GDPR-compliant data processing agreements

We do not sell, rent or otherwise transfer your personal data to third parties for marketing or commercial purposes.

7. International Data Transfers

In the course of delivering services, your data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognised transfer mechanisms under GDPR Chapter V.

8. Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal obligations:

• Enquiry data (where no contract is concluded): up to 2 years from the date of last contact
• Active client data: for the duration of the engagement plus 5 years, for accounting and legal compliance purposes
• Communication records: up to 3 years
• Data required by Cyprus law: up to 7 years where applicable

On expiry of the applicable retention period, personal data will be securely deleted or anonymised.

9. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include encrypted communications, restricted access controls and periodic security reviews. While we take all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure.

10. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies. These may include:

• Essential cookies: necessary for the website to function correctly
• Analytics cookies: to understand how visitors use our website (for example, Google Analytics)
• Preference cookies: to remember your settings and improve your experience

You may control or disable cookies through your browser settings. Please note that disabling certain cookies may affect website functionality. For detailed information, please refer to our Cookie Policy or your browser's help documentation.

11. Your Rights under GDPR

Subject to applicable law, you have the following rights with respect to your personal data:

• Right of Access (Art. 15): request a copy of the personal data we hold about you
• Right to Rectification (Art. 16): request correction of any inaccurate or incomplete data
• Right to Erasure (Art. 17): request deletion of your data where no legal basis for retention applies
• Right to Restrict Processing (Art. 18): request that we limit how we use your data in certain circumstances
• Right to Data Portability (Art. 20): receive your personal data in a structured, machine-readable format
• Right to Object (Art. 21): object to processing based on our legitimate interests
• Right to Withdraw Consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of the above rights, please contact us at residentpravo@gmail.com. We will respond within 30 days in accordance with GDPR requirements.

12. Complaints

If you believe that your data protection rights have been infringed, you have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection:

We encourage you to contact us first so that we may address your concern directly before escalating to the supervisory authority.

13. Amendments to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version will always be available on this page, with the date of the most recent update shown at the top. We encourage you to review this page periodically.

14. Contact Us

For any questions or concerns regarding this Privacy Policy or the processing of your personal data, please contact us: