Last updated: 10 May 2026
Data Controller
Charilaos M. Chrysanthou LLC (“the Firm”) is the Data Controller for the personal data collected through this website. Our registered address is: Kennedy Avenue 57, 1st Floor, 1076 Nicosia, Cyprus. Email: info@chrysanthoulegal.com.
Legal Framework
This Privacy Policy is issued in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the Processing of Personal Data (Protection of Individuals) Law of 2018 (Law 125(I)/2018), which constitutes the Cyprus implementing legislation for the GDPR.
Data We Collect
We may collect the following categories of personal data: (a) Contact information: name, email address, telephone number, when submitted via our contact form; (b) Usage data: IP address, browser type, pages visited, and time spent on the website (collected via cookies and analytics tools); (c) Correspondence data: any information you voluntarily provide when contacting us.
Purpose and Legal Basis for Processing
We process your personal data for the following purposes and on the following legal bases under Article 6 GDPR: (a) To respond to your enquiries – legal basis: legitimate interests (Article 6(1)(f)); (b) To provide legal services – legal basis: performance of a contract or pre-contractual steps (Article 6(1)(b)); (c) To comply with legal obligations – legal basis: legal obligation (Article 6(1)(c)); (d) To improve our website – legal basis: consent (Article 6(1)(a)), where cookies are used.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Contact enquiry data is retained for a maximum of 3 years. Client file data is retained for the period required under Cyprus legal professional obligations.
Disclosure of Personal Data
We do not sell, rent or trade your personal data. We may share data with trusted third-party processors (such as IT service providers or cloud hosting services) who process data on our behalf under binding data processing agreements. We may also disclose data where required by law, court order or regulatory authority in Cyprus or the EU.
International Transfers
Where personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR (e.g. Standard Contractual Clauses).
Your Rights
Under the GDPR and Cyprus Law 125(I)/2018, you have the following rights: Right of access (Article 15); Right to rectification (Article 16); Right to erasure (Article 17); Right to restriction of processing (Article 18); Right to data portability (Article 20); Right to object (Article 21); Right to withdraw consent at any time (where processing is based on consent). To exercise any of these rights, please contact us at info@chrysanthoulegal.com. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus (www.dataprotection.gov.cy).
Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure, in accordance with Article 32 of the GDPR.
Amendments
We may update this Privacy Policy from time to time. Any changes will be posted on this page. We encourage you to review this policy periodically.
Contact the Data Controller
Charilaos M. Chrysanthou LLC, Kennedy Avenue 57, 1st Floor, 1076 Nicosia, Cyprus. Email: info@chrysanthoulegal.com