Privacy Policy.

As of 8 October 2026

Protecting your data matters to us. This policy describes which data is processed when you visit this website, for what purpose and on what legal basis.

This website uses no analytics services and no advertising networks. It sets no cookies.

1. Controller

Company
Bronger Peters Limited
Address
Apostolou Andrea Z11
8022 Paphos
Cyprus
Register
Registration number HE 479025
Email
mail@brongerpeters.com
Phone
+357 96 599 049

The appointment of a data protection officer is not required. For questions about data protection, please contact us directly at the address above.

2. Your rights

You have the right to access the data stored about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).

Right to object. Where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

Where processing is based on your consent, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out before the withdrawal remains unaffected.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority competent at our place of establishment is the Commissioner for Personal Data Protection of the Republic of Cyprus, www.dataprotection.gov.cy. Irrespective of this, you may contact the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement.

3. Visiting the website

Each time you visit, your browser automatically transmits data that is stored in server log files:

  • IP address of the accessing device
  • date and time of access
  • name and URL of the file retrieved
  • amount of data transferred and notification of successful retrieval
  • website from which the access is made (referrer URL)
  • browser used, with version, and operating system

Purpose: delivering the website, ensuring operational security, and preventing and investigating attacks.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically flawless and secure operation of the website.

Retention: deletion after 30 days at the latest, unless a security incident requires longer retention in an individual case.

This data is not combined with other data sources, nor analysed for statistical purposes.

The website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Processing takes place on servers within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place.

4. Getting in touch

If you contact us by email, phone or messenger, we process the data you provide in order to deal with your request.

Legal basis: Art. 6(1)(b) GDPR, insofar as your enquiry concerns the preparation or performance of a contract with us; otherwise Art. 6(1)(f) GDPR (our interest in answering enquiries).

Retention: until your request has been dealt with conclusively. Where a business relationship arises, the statutory retention periods under Cypriot commercial and tax law apply.

The buttons for WhatsApp and Telegram are plain links. No content from these services is loaded, and no data is transmitted to them when you simply visit this website. Only when you click such a link does the respective application open; from that point on, the privacy policy of that provider applies.

5. Contact form

On the contact page you can write to us using a form. We process the details you enter: your title and first name (both optional), your last name, your email address and/or phone number, and the content of your message. Your last name, at least one way to reach you and your message are required so that we can reply. For the newsletter, an email address is required; a phone number is not sufficient.

Your enquiry is forwarded to us by email via the mail server of our hosting provider Hostinger (section 3). Only if this forwarding fails is it additionally stored in a log file on the server, so that it is not lost. If you have entered an email address, you will also receive an automatic confirmation of receipt. It does not repeat your message, and we send at most one such confirmation per email address within 24 hours.

When you send the form, our server also determines the country from which the enquiry was sent. For this purpose, your IP address is looked up in a database stored on our own server; only the country is determined, not the city or region. In addition, we evaluate the language setting that your browser transmits with every request (“Accept-Language”) and the language version of our website you used. These details are included in the notification to us so that we can reply in a suitable language and at a suitable time. Your IP address is not stored for this purpose, and nothing is transmitted to third parties. No script reads data from your device for this. Legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in dealing with enquiries appropriately.

To protect the form against automated misuse, we take the following measures, all on our own server. No captcha service or other third party is used.

  • When the contact page loads, your browser fetches a check value from our server: a timestamp and a random number, signed by the server. It contains no information about you, can be used once and is valid for 24 hours. Without it the form cannot be sent, which is why the form requires JavaScript; without JavaScript, please write to us by email or phone (section 4).
  • The form contains a field that is invisible to you, and the time between loading the page and sending the form is evaluated.
  • The number of enquiries per connection within a period is limited. For this purpose your IP address is processed exclusively in pseudonymised form (as a hash value), which is deleted after ten minutes.
  • So that the same text is not delivered twice, we store a check value (keyed hash value) of your message for seven days; the text itself is not stored for this purpose. So that we send at most one confirmation per address, we store a check value of your email address for 24 hours. Without the key kept on our server, neither value can be traced back to the text or the address. Both are deleted automatically.
  • Messages with more than two links, repeated texts and an unusually high number of enquiries in total are not processed. We count per day how many enquiries were accepted or rejected and for which reason – without any personal data. These figures are deleted after 90 days.

Legal basis: Art. 6(1)(b) GDPR, insofar as your enquiry concerns the preparation or performance of a contract with us; otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in answering enquiries and in protecting the form, ourselves and third parties against misuse. The checkbox in the form confirms that you have read this policy; it is not a consent on which we rely.

Retention: until your request has been dealt with conclusively. Entries in the log file are deleted automatically after 90 days at the latest. Where a business relationship arises, section 4 applies accordingly.

The confirmation of receipt is sent via Brevo, on servers within the European Union (provider details in section 6); Brevo also sends the notification to us if our hosting provider’s mail server is unavailable. Brevo records the delivery, opening and clicks of these emails; legal basis is Art. 6(1)(f) GDPR, our interest being to know that our confirmation has reached you.

The newsletter tick is voluntary and independent of how we deal with your enquiry. If you set it, section 6 also applies.

6. Newsletter

To send you our briefing, we need your email address. We also store the language version and the place where you signed up, so that you receive our mailings in the appropriate language.

Sign-up follows the double opt-in procedure: after entering your address, you receive an email with a confirmation link. Only when you open it does the subscription take effect. To document your consent, the time of sign-up and of confirmation and the IP address used are stored.

Legal basis: Art. 6(1)(a) GDPR. You can withdraw your consent at any time, for example via the unsubscribe link at the end of every mailing or informally by email to mail@brongerpeters.com.

Our mailing service provider is Sendinblue SAS (“Brevo”), 17 rue de Salneuve, 75017 Paris, France. Brevo processes the data exclusively on our behalf on servers within the European Union; a data processing agreement pursuant to Art. 28 GDPR is in place.

Measuring opens and clicks. Our mailings contain a tracking pixel and personalised links. They show us, per recipient, whether and when a mailing was delivered and opened and which links were clicked. We use this to improve the briefing and to tailor our communication to your interests. This measurement is part of the consent you give when subscribing (Art. 6(1)(a) GDPR; Art. 5(3) ePrivacy Directive). As the newsletter is only sent with this measurement, you withdraw it by unsubscribing – via the link at the end of every mailing or by email to mail@brongerpeters.com.

Retention: after you unsubscribe, your email address is deleted or, where necessary to prevent future mailings, placed on a block list. The records of your consent are kept until any limitation periods have expired.

7. Cookies, local storage, fonts

This website sets no cookies.

There is a single entry in your browser’s local storage: on the Process page on mobile devices, a short hint explains how to swipe between the steps. If you close it, your browser stores the entry bpProcessHint = 1 so that the hint does not appear again. It stays on your device until you clear your browser data and is never transmitted to us. It only remembers a choice you made and is therefore strictly necessary for the function you requested (Art. 5(3) ePrivacy Directive).

The fonts used are stored on our own server and delivered from there. There is no connection to Google Fonts or comparable third-party services. The current temperature in Paphos shown on some pages is retrieved by our server from the weather service Open-Meteo; your browser does not contact Open-Meteo, and no data about you is transmitted to it. No third-party content is embedded: no maps, no videos, no social media plugins.

The links to Instagram, LinkedIn, Facebook, WhatsApp and Telegram, and to The Registry (registry.estate), are plain links. No data is transmitted to these providers when you visit this website. Only when you click a link do you leave this website; the respective provider is then responsible for any further processing.

9. Recipients of data

We use Hostinger International Ltd. (hosting and email, section 3) and Brevo (email sending and newsletter, sections 5 and 6).

If you engage us, we pass your details to property developers and, at your request, to advisers such as lawyers, only to the extent this is necessary for your purchase. Beyond that, we only pass on your data if you have consented, if disclosure is necessary to perform a contract, if there is a legal obligation, or if disclosure is necessary to establish, exercise or defend legal claims. We do not sell data.

10. Transfers to third countries

The service providers we use process data on servers within the European Union. Where, in individual cases, access takes place from a third country, it is safeguarded by the standard contractual clauses of the European Commission.

11. Data security

This website is delivered exclusively over an encrypted connection (TLS). In addition, we use technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration. These measures are continuously adapted to technical developments.

12. Changes to this policy

This privacy policy is updated whenever changes to the website or the legal situation require it. The version available here applies.