legal
Privacy & Cookie Policy
This policy explains what personal data we collect when you use oniro.com.cy, why, and what you can do about it. We keep it short and plain.
Last updated: 29 September 2026
Who we are
Casion Ltd (company no. HE 448740), registered in Cyprus ("we", "us"), develops the Oniro projects, runs oniro.com.cy and is the controller of the personal data described here. Contact for anything in this policy: sales@oniro.com.cy. We have not appointed a Data Protection Officer, as the law does not require one for our activities.
What we collect and why
| Data | Where it comes from | Why | Legal basis | Kept for |
|---|---|---|---|---|
| Name, email, phone (optional), your message, the page you wrote from | Contact forms, or an email you send us | To answer your enquiry and, if you wish, prepare an offer or a viewing | Steps you ask for before a contract, and our legitimate interest in answering enquiries (GDPR art. 6(1)(b) and (f)) | 24 months after our last contact, longer only if a sale follows (contract and tax records: as the law requires) |
| Email address | “New projects” sign-up | To email you when Oniro launches a new project | Your consent (art. 6(1)(a)). Withdraw any time by replying “unsubscribe” | Until you unsubscribe |
| Pages viewed, referrer, browser and device type, country (no cookies, no personal identifiers) | Plausible Analytics | Anonymous visit statistics that help us improve the site | Legitimate interest (art. 6(1)(f)). Plausible stores no personal data, so no consent is needed | Aggregated statistics only |
| IP address, browser, time of request | Server logs at our host | To keep the site secure and working | Legitimate interest (art. 6(1)(f)) | Up to 30 days |
| IP address and Google cookies | Google Maps, shown in the location section of each project page unless you refuse maps in the cookie banner | To show the location of our projects | Your consent (art. 6(1)(a)) | Set by Google (see Google’s privacy policy) |
Giving us your details is voluntary. Without them we cannot answer you. We do not make decisions about you based solely on automated processing, and we do not sell your personal data.
Who receives it
Our service providers, acting only on our instructions and under data processing agreements:
- Hostinger (website hosting and server logs, EU data centres)
- Microsoft 365 (our email, where enquiries arrive)
- Plausible Insights OÜ (cookieless analytics, EU)
- Google (Maps embed, only after your click or consent)
If you go on to buy, we share what is needed with the lawyers, banks and authorities involved in the sale. We disclose data to public authorities only when the law requires it.
International transfers
Some providers (Microsoft, Google) may process data outside the EEA and the UK, for example in the USA. In that case we rely on an adequacy decision, including the EU-US Data Privacy Framework and its UK extension, or on the European Commission’s Standard Contractual Clauses.
Your rights
You can ask us to access, correct or delete your data, to restrict its use, to receive it in a portable format, and you can object to processing based on legitimate interest. Where we rely on consent, you can withdraw it at any time without affecting earlier processing. Write to sales@oniro.com.cy. We reply within one month.
You can also complain to the Commissioner for Personal Data Protection, Cyprus (www.dataprotection.gov.cy), or to the data protection authority where you live or work.
United Kingdom
For visitors in the UK we process data under the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). You can complain to the Information Commissioner’s Office (ico.org.uk).
Israel
For visitors in Israel we process data in line with the Protection of Privacy Law, 5741-1981, including Amendment 13 (in force since August 2025), and its regulations. The purposes, recipients and retention periods are listed above. You are under no legal obligation to give us your details; giving them is your choice, but without them we cannot answer you.
You have the right to review the information we hold about you and to ask us to correct or delete it (sections 13 and 14 of the law). Write to us at the address above. You can complain to the Privacy Protection Authority (gov.il/privacy).
Children
This site is not directed at children under 16, and we do not knowingly collect their data.
Security
The site runs only over HTTPS with strict security headers, forms are protected against spam and abuse, and access to enquiries is limited to our sales team. No system is perfectly secure. If a breach affects your data, we will tell you and the regulator where the law requires it.
Changes
We update this policy when our practices change. The date at the top shows the current version. Material changes to cookies bring the cookie banner back so you can choose again.