Privacy policy

1. Data controller

The data controller is Cyprus Booker LTD, registered at Paphos, Cyprus. Privacy contact: Contact.

2. What data we collect

We collect: (a) data you provide when you register an account (name, email, hashed password), (b) the content of your comments and the signature beneath them, (c) technical server log data (IP address, user-agent, timestamp), and (d) cookie data (session, preferences, traffic statistics).

3. Purpose and legal basis

Provision of the service (Art. 6(1)(b) GDPR), our legitimate interests (analytics, security — Art. 6(1)(f) GDPR) and legal obligations (Art. 6(1)(c) GDPR).

4. Retention period

We keep account data until the account is deleted. Comments stay published indefinitely (you may request removal). Server logs are kept for a maximum of 36 months.

5. Your rights

You have the right to access your data, have it corrected, have it erased, restrict its processing, port it, object to its processing, and lodge a complaint with the supervisory authority (the ICO in the UK, or the Cyprus Commissioner for Personal Data Protection in Cyprus).

6. Who we share data with

IT service providers (hosting, email) who have signed data-processing agreements with us. Public authorities — only where required by applicable law.

7. Cookies

We use cookies that are strictly necessary for the service (session, CSRF token), analytical cookies (anonymous traffic statistics) and, optionally, marketing cookies (only once you have given consent via the cookie banner).

8. Changes to this policy

This policy may be updated from time to time. The date of the latest change is shown above. Significant changes are announced on the site 14 days in advance.