1. Controller
The controller is Antis Petrides, a natural person and individual service provider trading as “AP Electrical Services”. That trading name is not a company or a separate legal entity.
Contact: +357 96 680304 · pavlospetrides741@gmail.com. Privacy contact: pavlospetrides741@gmail.com. Location: Kato Polemidia, Limassol, Cyprus.
2. Data collected
The enquiry form collects your name, phone number, optional email, type of work, area, optional preferred date and time, and message. The system also records creation date/time and the internal request status (“new”, “contacted”, or “completed”).
To limit abuse, the requesting IP address is processed temporarily in server memory for a 10-minute window. Hosting and database providers may also process technical request data such as IP address, time, route, user agent, and error diagnostics under the configured service and their terms. The application does not build visitor profiles.
3. Purposes and legal bases
- Responding to and assessing a voluntary enquiry: steps requested by you before a possible contract, GDPR Article 6(1)(b).
- Security, abuse prevention, and legal claims: legitimate interests in operating a safe and reliable service, Article 6(1)(f). You may object for reasons relating to your particular situation.
- Recordkeeping if an enquiry becomes work: only to the extent tax, accounting, or other laws require it, Article 6(1)(c).
We do not rely on consent to handle an enquiry you asked us to process, and we do not use enquiry details for marketing.
4. Necessity and source
Name, phone, work type, area, and message are needed to assess and answer the enquiry. Email, preferred date, and preferred time are optional. Without the required fields the form cannot be sent; you may call instead. The information comes directly from you.
5. Recipients and processors
Only the controller/authorised administrator can read enquiries, through a private MFA-protected login. The application uses Vercel with Vercel Edge Network / CDN infrastructure for hosting, and Supabase for database, storage, and administrator authentication. Information may also be disclosed to professional advisers or public authorities only where necessary or legally required.
6. International transfers
Vercel, Supabase, and their approved subprocessors may process data in the European Economic Area and other countries, including the United States. When data is transferred outside the EEA without an adequacy decision, appropriate safeguards are used, such as the European Commission’s Standard Contractual Clauses and, where needed, supplementary measures.
7. Retention
Enquiry details are kept only as long as necessary to assess, respond to, and handle the request. Completed enquiries and enquiries that do not lead to work are periodically reviewed and deleted when no longer needed. If an enquiry leads to work, relevant information may be retained for tax, accounting, or other legal obligations, or to establish, exercise, or defend legal claims. Technical security data is kept only for the necessary period and is then deleted or anonymised.
8. Your rights
Depending on the circumstances, you have rights to information and access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. If consent is introduced for a future purpose, it may be withdrawn without affecting earlier lawful processing. Reasonable information may be requested to verify identity. Send requests to pavlospetrides741@gmail.com.
You may also complain to the Office of the Commissioner for Personal Data Protection, Kypranoros 15, 1061 Nicosia, Cyprus, commissioner@dataprotection.gov.cy, +357 22 818456.
9. Automated decisions and security
No automated decision-making or profiling is performed. Controls include input validation, database Row Level Security, private file storage, least-privilege access, and MFA for administrative reads. No measure provides absolute security; incidents will be assessed and notified where the law requires.
10. Cookies, changes, and law
The public website does not use analytics or advertising cookies. The full inventory is in the Cookie and Storage Policy. This policy will be updated when actual flows or providers change. Version: 2026-08-31. It is based on the General Data Protection Regulation and applicable Cyprus law.