Privacy Policy.

As of 26 September 2026

Protecting your data matters to us. This policy describes which data is processed when you visit this website, for what purpose and on what legal basis.

This website uses no analytics services and no advertising networks. It sets no cookies.

1. Controller

Company
Bronger Peters Limited
Address
Apostolou Andrea Z11
8022 Paphos
Cyprus
Register
Registration number HE 479025
Email
mail@brongerpeters.com
Phone
+357 96 599 049

The appointment of a data protection officer is not required. For questions about data protection, please contact us directly at the address above.

2. Your rights

You have the right to access the data stored about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).

Right to object. Where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

Where processing is based on your consent, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out before the withdrawal remains unaffected.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority competent at our place of establishment is the Commissioner for Personal Data Protection of the Republic of Cyprus, www.dataprotection.gov.cy. Irrespective of this, you may contact the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement.

3. Visiting the website

Each time you visit, your browser automatically transmits data that is stored in server log files:

  • IP address of the accessing device
  • date and time of access
  • name and URL of the file retrieved
  • amount of data transferred and notification of successful retrieval
  • website from which the access is made (referrer URL)
  • browser used, with version, and operating system

Purpose: delivering the website, ensuring operational security, and preventing and investigating attacks.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically flawless and secure operation of the website.

Retention: deletion after 30 days at the latest, unless a security incident requires longer retention in an individual case.

This data is not combined with other data sources, nor analysed for statistical purposes.

The website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Processing takes place on servers within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place.

4. Getting in touch

If you contact us by email, phone or messenger, we process the data you provide in order to deal with your request.

Legal basis: Art. 6(1)(b) GDPR, insofar as your enquiry concerns the preparation or performance of a contract with us; otherwise Art. 6(1)(f) GDPR (our interest in answering enquiries).

Retention: until your request has been dealt with conclusively. Where a business relationship arises, the statutory retention periods under Cypriot commercial and tax law apply.

The buttons for WhatsApp and Telegram are plain links. No content from these services is loaded, and no data is transmitted to them when you simply visit this website. Only when you click such a link does the respective application open; from that point on, the privacy policy of that provider applies.

5. Contact form

On the contact page you can write to us using a form. We process the details you enter: your name, your email address or phone number, and the content of your message. All three are required so that we can reply. For the newsletter, an email address is required; a phone number is not sufficient.

Your enquiry is forwarded to us by email. Only if this forwarding fails is it additionally stored in a log file on the server, so that it is not lost. If you have entered an email address, you will also receive an automatic confirmation of receipt.

To protect against automated entries, the form contains a field that is invisible to you, the time taken to fill it in is evaluated, and the number of enquiries per connection within a period is limited. For this purpose your IP address is processed exclusively in pseudonymised form (as a hash value), which is deleted after ten minutes. No captcha service or other third party is used.

Legal basis: Art. 6(1)(b) GDPR, insofar as your enquiry concerns the preparation or performance of a contract with us; otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in answering enquiries and in protecting the form against misuse. The checkbox in the form confirms that you have read this policy; it is not a consent on which we rely.

Retention: until your request has been dealt with conclusively. Entries in the log file are deleted automatically after 90 days at the latest. Where a business relationship arises, section 4 applies accordingly.

The notification to us and the confirmation of receipt are sent via Brevo, on servers within the European Union; Brevo also records the delivery, opening and clicks of these emails. Details in section 6.

The newsletter tick is voluntary and independent of how we deal with your enquiry. If you set it, section 6 also applies.

6. Newsletter

To send you our briefing, we need your email address. We also store the language version and the place where you signed up, so that you receive our mailings in the appropriate language.

Sign-up follows the double opt-in procedure: after entering your address, you receive an email with a confirmation link. Only when you open it does the subscription take effect. To document your consent, the time of sign-up and of confirmation and the IP address used are stored.

Legal basis: Art. 6(1)(a) GDPR. You can withdraw your consent at any time, for example via the unsubscribe link at the end of every mailing or informally by email to mail@brongerpeters.com.

Our mailing service provider is Sendinblue SAS (“Brevo”), 17 rue de Salneuve, 75017 Paris, France. Brevo processes the data exclusively on our behalf on servers within the European Union; a data processing agreement pursuant to Art. 28 GDPR is in place.

Mailings are evaluated statistically, for example regarding delivery, opens and clicks, per recipient. This evaluation serves the technical control of the mailing and the improvement of the newsletter’s content. It is not combined with other data. Legal basis is Art. 6(1)(f) GDPR. You can object to this measurement at any time; unsubscribing from the newsletter also counts as an objection.

Retention: after you unsubscribe, your email address is deleted or, where necessary to prevent future mailings, placed on a block list. The records of your consent are kept until any limitation periods have expired.

7. Cookies, local storage, fonts

This website sets no cookies.

There is a single entry in your browser’s local storage: on the Process page on mobile devices, a short hint explains how to swipe between the steps. If you close it, your browser stores the entry bpProcessHint = 1 so that the hint does not appear again. It stays on your device until you clear your browser data and is never transmitted to us. It only remembers a choice you made and is therefore strictly necessary for the function you requested (Art. 5(3) ePrivacy Directive).

The fonts used are stored on our own server and delivered from there. There is no connection to Google Fonts or comparable third-party services. The current temperature in Paphos shown on some pages is retrieved by our server from the weather service Open-Meteo; your browser does not contact Open-Meteo, and no data about you is transmitted to it. No third-party content is embedded: no maps, no videos, no social media plugins.

The links to Instagram, LinkedIn, Facebook, WhatsApp and Telegram, and to The Registry (registry.estate), are plain links. No data is transmitted to these providers when you visit this website. Only when you click a link do you leave this website; the respective provider is then responsible for any further processing.

9. Recipients of data

We use Hostinger International Ltd. (hosting and email, section 3) and Brevo (email sending and newsletter, sections 5 and 6).

If you engage us, we pass your details to property developers and, at your request, to advisers such as lawyers, only to the extent this is necessary for your purchase. Beyond that, we only pass on your data if you have consented, if disclosure is necessary to perform a contract, if there is a legal obligation, or if disclosure is necessary to establish, exercise or defend legal claims. We do not sell data.

10. Transfers to third countries

The service providers we use process data on servers within the European Union. Where, in individual cases, access takes place from a third country, it is safeguarded by the standard contractual clauses of the European Commission.

11. Data security

This website is delivered exclusively over an encrypted connection (TLS). In addition, we use technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration. These measures are continuously adapted to technical developments.

12. Changes to this policy

This privacy policy is updated whenever changes to the website or the legal situation require it. The version available here applies.