Draft. Complete every highlighted [FILL IN] item and have this policy reviewed by a lawyer or data-protection adviser before publishing. Delete this note when done.
1. Who we are
This website, www.peugeot-motocycles.com.cy, is operated by L. Soteriou Cyprus Ltd, the official Peugeot Motocycles dealer in Cyprus ("we", "us", "our"). We are the data controller for the personal data described in this policy.
- Company registration number: [FILL IN: HE number]
- Registered office: [FILL IN: registered address, if different from the showroom]
- Showroom: 4 Iakovou Patatsou, Shop 1, 2000 Strovolos, Nicosia, Cyprus
- Email: info@soteriou.com.cy · Phone: +357 22 338888
- Data Protection Officer (if appointed): [FILL IN: name and email, or delete this line]
We process personal data in line with the EU General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Cyprus Law providing for the Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of such Data, Law 125(I)/2018.
2. What data we collect and why
a) Price & availability enquiries by phone, email, WhatsApp and Viber
If you call, email or message us, we receive your phone number or email address, your name if you give it, and the content of your message (for example the model you are interested in).
- Purpose: to answer your enquiry about price and availability.
- Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR), and our legitimate interest in replying to enquiries (Art. 6(1)(f)).
WhatsApp and Viber are operated by their own providers under their own privacy policies.
b) Analytics and marketing cookies (only with your consent)
With your consent we use Google Analytics 4 (through Google Tag Manager) to understand how visitors use the site, and the Meta Pixel to measure our Facebook and Instagram advertising. These tools collect information such as pages visited, device and browser type, approximate location and online identifiers. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time through . See our Cookie Policy.
c) Technical data
Our hosting provider automatically processes technical data (such as IP address, browser type and time of access) to deliver the website securely. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f)).
3. Who we share your data with
We do not sell your personal data. We share it only with service providers that process it on our behalf:
| Provider | What for | Where |
|---|---|---|
| Vercel Inc. | Website hosting | USA / global [VERIFY transfer safeguard, e.g. EU–US Data Privacy Framework] |
| Google Ireland Ltd / Google LLC | Google Tag Manager, Google Analytics 4 (with consent), Google Maps (only if you click "Show map") | EU / USA (EU–US Data Privacy Framework) |
| Meta Platforms Ireland Ltd | Meta Pixel (with consent) | EU / USA (EU–US Data Privacy Framework) |
| Our email provider | Receiving and answering your requests | [FILL IN: provider, e.g. Microsoft 365 / Google Workspace] |
We may also disclose data where required by law or to protect our legal rights. Where data is transferred outside the European Economic Area, we rely on an adequacy decision (such as the EU–US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.
4. How long we keep your data
- Enquiries that do not lead to a purchase: [FILL IN: e.g. 24 months] after our last contact.
- Customer and sales records: as long as required by Cyprus tax and accounting law [VERIFY period, e.g. 7 years].
- Analytics data: up to [FILL IN: retention set in GA4, e.g. 14 months].
- Your cookie choice: 6 months, after which we ask again.
5. Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time (without affecting processing before withdrawal). To exercise any of these rights, email info@soteriou.com.cy. We reply within one month.
You also have the right to lodge a complaint with the Commissioner for Personal Data Protection in Cyprus: 1 Iasonos Street, 1082 Nicosia · www.dataprotection.gov.cy · commissioner@dataprotection.gov.cy [VERIFY current contact details].
6. Security
We use appropriate technical and organisational measures to protect your data, including encrypted (HTTPS) connections and access limited to staff who need it.
7. Children
This website is not directed at children under 16, and we do not knowingly collect their personal data.
8. Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date at the top.