Legal

Privacy Notice

Last updated: 11 August 2026

This notice explains how A.P. Thrasyvoulou ("we", "us") handles personal data collected through this website, in accordance with the EU General Data Protection Regulation (GDPR).

Who we are

A.P. Thrasyvoulou, Certified Public Accountants, Nikolaou Ioannou 46, Nefeli Court, Off. K1, 1036 Nicosia, Cyprus. Tel: +357 22750249. Email: info@apthrasyvoulou.com. We are the controller of the personal data described below.

What we collect and why

When you use the contact form, we collect the details you submit — name, phone number, email address, the service you are interested in, and your message. We use these solely to respond to your enquiry and to take steps you request prior to entering into an engagement (Article 6(1)(b) GDPR), or on the basis of our legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR).

This website sets no cookies and runs no advertising trackers. Fonts and all other assets are served directly from this website; the only third-party content loaded when you browse it is the privacy-focused measurement described below, and the optional map.

Hosting and form processing

This website is hosted by Netlify, which also receives and stores contact-form submissions on our behalf and forwards them to our office mailbox. Netlify may process data on servers outside the European Economic Area; such transfers take place under appropriate safeguards (standard contractual clauses). See Netlify's privacy documentation for details.

Google Maps

The map on our contact page loads only if you press "Show map". Loading it transfers your IP address to Google and is subject to Google's privacy policy. If you do not press the button, no data is sent to Google.

Retention

We keep contact-form messages only for as long as needed to handle your enquiry and any engagement that follows from it, after which they are deleted.

Job applications

If you send us a CV — whether for an advertised position or on your own initiative — we process the personal data it contains in order to assess your suitability for a role with us. Our lawful basis is our legitimate interest in recruiting suitable staff (Article 6(1)(f) GDPR) and, where applicable, taking steps at your request before entering into a contract of employment (Article 6(1)(b) GDPR).

Applications reach us by email and are held in our office mailbox; they are not stored on this website or by our website host. We keep unsuccessful and speculative applications for 12 months and then delete them, unless you ask us to remove them sooner. Please do not send information you would rather we did not hold — a CV does not need to state your date of birth, marital status, health information or include a photograph.

Website imagery

Aerial photography of Nicosia by Athina Vrikki, obtained through Unsplash under the Unsplash Licence, which permits commercial use. The images are hosted on this website; displaying them involves no third-party service and no visitor data.

Website statistics

We use Cloudflare Web Analytics to see which pages are read and how visitors reach the site. It is a privacy-focused service: it sets no cookies, stores nothing on your device, and does not track you across other websites. Cloudflare processes your IP address and basic browser information in order to produce aggregate figures; we receive only those aggregate figures and nothing that identifies you.

Our lawful basis is our legitimate interest in understanding how our website is used (Article 6(1)(f) GDPR). Because no cookies or similar device storage are involved, no consent banner is required for this. If you would rather not be counted at all, any standard tracker-blocking browser extension will stop the measurement script from loading.

Your rights

You have the right to request access to, rectification or erasure of your personal data, restriction of or objection to its processing, and data portability. To exercise these rights, contact us at info@apthrasyvoulou.com. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.