This policy explains how the Honorary Consul of Armenia in the Republic of Cyprus processes personal data when you visit this website or contact us. We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), the Cyprus Law 125(I)/2018 and, where applicable, the legislation of the Republic of Armenia.
Who is responsible
The controller responsible for the processing of personal data on this website is:
Honorary Consul of Armenia in the Republic of Cyprus
E-mail: [email protected]
In short
- We collect only what you choose to send us (for example through the contact form) and the technical data needed to deliver and protect this website.
- Messages sent through the form are delivered to us by e-mail. The website itself does not store your messages.
- We do not sell your data, we do not use advertising trackers, and we do not use third-party CAPTCHA services.
- Only strictly necessary cookies are used unless you agree to more.
- You can contact us at any time to exercise your rights.
What we process and why
Messages you send us
When you use the contact form (or write to us by e-mail) we receive your name, e-mail address, subject and message, together with the date and time. We use this information only to read, answer and deal with your request – for example to provide information or to refer you to the competent service of the Republic of Armenia.
Legal basis: performance of tasks carried out in the public interest in the exercise of consular functions (Art. 6(1)(e) GDPR) and our legitimate interest in answering enquiries addressed to us (Art. 6(1)(f) GDPR).
Please do not send sensitive information (such as health data) or copies of identity documents through the form unless this is strictly necessary for your request. If you do include such information, we will use it only to deal with your request.
Protecting the website and preventing spam
When you visit the website, your browser automatically transmits technical data such as your IP address, the date and time of the request, the page requested and the type of browser and device. This is necessary to deliver the pages and to protect the website against attacks and automated abuse.
To keep spam away without a third-party CAPTCHA, the contact form asks your browser to solve a small mathematical puzzle (“proof of work”) before sending. This happens entirely on your device; no personal data is collected for it and no cookies are set. Your IP address is held briefly in the server’s memory to limit the number of messages and requests from one connection and is not stored by the website application.
Legal basis: our legitimate interest in the security and availability of the website (Art. 6(1)(f) GDPR).
Content delivery and security (Cloudflare)
The website is delivered through the network of Cloudflare, Inc., which protects it against attacks and speeds up loading. Cloudflare processes connection data such as your IP address and may set strictly necessary security cookies (for example __cf_bm) to tell people and automated bots apart. Legal basis: Art. 6(1)(f) GDPR.
Who receives your data
We share personal data only where necessary and with service providers who process it on our behalf and under our instructions:
- Website hosting: the server on which this website runs.
- E-mail delivery: SMTP2GO Ltd (New Zealand) delivers the messages sent through the contact form to our mailbox, and our e-mail service provider stores them in that mailbox.
- Content delivery and security: Cloudflare, Inc. (USA).
- Authorities of the Republic of Armenia: where this is necessary to deal with your request (for example the Embassy of the Republic of Armenia in Nicosia or the Ministry of Foreign Affairs), we may forward the relevant part of your message to them.
- Public authorities: where we are legally required to do so.
Transfers outside the European Union
Some recipients are located outside the European Economic Area:
- New Zealand (SMTP2GO) – covered by an adequacy decision of the European Commission.
- United States (Cloudflare) – Cloudflare is certified under the EU–U.S. Data Privacy Framework; standard contractual clauses also apply.
- Republic of Armenia – only where forwarding your request is necessary to deal with it, in accordance with Art. 49 GDPR.
How long we keep data
- Messages: for as long as needed to deal with your request and normally no longer than two years afterwards, unless a longer period is required by law.
- Server and security logs: for a limited period for security purposes, normally no longer than 90 days.
- Rate-limiting data: held in memory only, for minutes.
- Cookie choice: 180 days, after which we ask again.
Your rights
Under the GDPR you have the right to:
- request access to the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased or its processing restricted, where the conditions are met;
- object to processing based on Art. 6(1)(e) or (f) GDPR on grounds relating to your particular situation;
- receive data you provided in a portable format, where applicable;
- withdraw consent at any time, where processing is based on consent.
To exercise these rights, contact us at the address below. We will reply within one month and may ask you to confirm your identity.
Right to lodge a complaint
If you believe that we process your personal data unlawfully, you may lodge a complaint with the supervisory authority in Cyprus:
Commissioner for Personal Data Protection
1 Iasonos Street, 1082 Nicosia, Cyprus
E-mail: [email protected]
Website: www.dataprotection.gov.cy
You may also contact the supervisory authority of the EU country where you live or work.
How we protect your data
The website is served only over encrypted connections (HTTPS), collects as little data as possible, does not keep a database of messages and is protected against automated attacks. Access to messages is limited to the persons who handle them.
Children
This website is not directed at children. If you are under 14, please ask a parent or guardian to contact us on your behalf.
Changes to this policy
We may update this policy, for example when the website or the law changes. The current version is always available on this page; the date of the last update is shown at the top.
Contact us
For any questions about this policy or your personal data, write to [email protected] or use the contact form.