Privacy policy

Last updated: 30 October 2026

1. Who is responsible

The controller for this website is Iris Finkelstein Real Estate, Paphos, Cyprus. Email: irisffinance@gmail.com, phone and WhatsApp: +357 97 465200.

2. What data we collect

• Enquiry form: name, email, phone or WhatsApp number, your budget range, what you are looking for, your buying timeframe, the property you asked about, and your consent.
• Campaign information: if you arrive from an ad, the campaign parameters in the link (for example utm_source or gclid), the page address and the time of your enquiry.
• Server logs: our hosting provider records technical data such as IP address, browser and time of access to keep the site secure.

3. Why we use it and on what legal basis

• To answer your enquiry and arrange your consultation: steps prior to a contract (Art. 6(1)(b) GDPR).
• To contact you about properties in Paphos by email, phone or WhatsApp: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• To measure our Google Ads: your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG).
• To run and secure the website: our legitimate interest (Art. 6(1)(f) GDPR).

4. Cookies and similar storage

We store your privacy choice in your browser so we do not ask again. This is necessary and needs no consent. Everything else is loaded only after you agree in the privacy banner. You can change your choice at any time using “Cookie settings” at the bottom of the page.

5. Services we use

• Zoom (Zoom Video Communications, Inc., USA), if you choose a video call.
• Google Ads (Google Ireland Limited). Only with your consent. We use Google Consent Mode, so no advertising storage is used without your consent. Our fonts are hosted on our own server, so no data is sent to Google Fonts.
• Hosting: Vercel Inc., USA.
• Lead management: enquiries sent through our form are stored with Google Forms and Google Sheets (Google Ireland Limited), which process them on our behalf.

Where data is transferred outside the EU, we rely on an adequacy decision or the EU Standard Contractual Clauses.

6. Who receives your data

Our team and the service providers above, under data processing agreements. We share your details with developers or lawyers only after you ask us to. We never sell your data.

7. How long we keep it

We keep enquiry data for as long as we are in contact with you and delete it 24 months after our last contact, unless you buy a property through us, in which case legal retention periods apply.

8. Your rights

You have the right to access, correct and delete your data, to restrict or object to its use, to data portability, and to withdraw your consent at any time with effect for the future. Write to irisffinance@gmail.com.

You can also complain to a data protection authority, for example the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy) or the authority in your German federal state.

9. Changes

We update this policy when our services change. The current version is always on this page.