Privacy Policy
Last updated: 22/10/2026
This policy explains how L. Soteriou Cyprus Ltd (“we”) processes personal data when you visit the malaguti.com.cy website or contact us, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Cyprus Law 125(I)/2018.
1. Data controller
L. Soteriou Cyprus Ltd, registration no. HE309798
Iakovou Patatsou 4, Shop 1, 2000 Strovolos, Nicosia, Cyprus
Tel.: · Email:
2. What data we collect
- WhatsApp / Viber / phone / email: when you message or call us, we receive your number and whatever you write to us. Communication via WhatsApp (Meta) and Viber (Rakuten) is also governed by their own terms.
- Cookies and similar technologies: only with your consent — see the Cookie Policy.
- Technical hosting data: our hosting provider temporarily logs IP addresses and request details for security and operational purposes.
3. Purposes and legal basis
| Purpose | Legal basis (Article 6 GDPR) |
|---|---|
| Replying to enquiries, price quotes, availability | Steps prior to entering into a contract at your request — Art. 6(1)(b) |
| Website traffic statistics (Google Analytics 4) | Consent — Art. 6(1)(a) |
| Ad measurement and personalisation (Meta, Google Ads) | Consent — Art. 6(1)(a) |
| Website security, abuse prevention | Legitimate interest — Art. 6(1)(f) |
4. Recipients
We do not sell your data. We share it only with providers who serve us under a data processing agreement: Vercel Inc. (hosting), Google Ireland Ltd (Analytics, Ads) and Meta Platforms Ireland Ltd (Pixel) — the last two only if you have given consent. Some providers may transfer data outside the EEA (e.g. to the USA) under the EU-US Data Privacy Framework or Standard Contractual Clauses.
5. Retention
- Contact requests: up to 24 months from the last contact, unless a purchase follows (in which case the statutory tax/accounting periods apply).
- Cookies: see the Cookie Policy.
6. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and you may withdraw your consent at any time without affecting the lawfulness of processing before the withdrawal. To exercise these rights, email us at . We will reply within one month.
You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection, 1 Iasonos Street, 1082 Nicosia — www.dataprotection.gov.cy.
7. Minors
This website is not intended for people under 16 and we do not knowingly collect their data.
8. Changes
We may update this policy. The date at the top of the page shows the most recent change.