Privacy notice
1. Controller
M.B. Great Cyprus Holding Ltd, Grigori Afxentiou 59A, 4529 Pyrgos, Limassol, Cyprus. Email: kontakt@sanad-europe.com. Phone: +49 176 74517165.
2. No cookies, no tracking
This website sets no cookies, uses no analytics or advertising services and loads no content from third parties. Fonts and images are delivered from our own server. A consent banner is therefore not needed.
3. Hosting and server logs
The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on a server in Germany, as our processor under Art. 28 GDPR. With every page request the web server automatically logs the IP address, date and time, the requested address, status code, amount of data transferred, referring page and browser identification. The purpose is to deliver the website correctly and to defend against attacks; the legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The logs are deleted automatically after eight days at most and are not combined with other data.
4. Contacting us
If you contact us by email, phone or WhatsApp, we process the information you give us in order to answer your enquiry and prepare an offer. The legal basis is Art. 6(1)(b) GDPR (steps prior to a contract) and otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering enquiries that do not lead to a contract. Emails to our address are forwarded by united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Germany, to our mailbox at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A transfer to Google LLC in the USA is possible; it is based on the EU adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR), under which Google LLC is certified.
You are not obliged to provide personal data. Without the information your matter requires, however, we cannot answer your enquiry or prepare an offer.
5. WhatsApp
The WhatsApp button is a plain link: no data is sent to Meta when you load our pages. When you click it, your browser connects to WhatsApp, which receives your IP address and technical browser data. If you then write to us, WhatsApp Ireland Limited processes your phone number and the content of your messages. We offer WhatsApp because many people prefer it (Art. 6(1)(b) and (f) GDPR).
Transfers to WhatsApp LLC and Meta Platforms, Inc. in the United States are based on the EU adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR); both companies are certified under it. We use WhatsApp Business on a dedicated device without access to other contacts. If you want to avoid WhatsApp, please use email or phone.
6. Documents and sensitive information
Please do not send identity documents, health information or other confidential documents in your first message. If your matter requires them, we agree with you in advance how they are transmitted, and we use them only for that matter.
Before we process health information, for example for a request about medical treatment, we ask for your explicit consent in writing, for example by email (Art. 9(2)(a) GDPR). You can withdraw your consent at any time with effect for the future. Please do not send health information via WhatsApp.
7. Recipients
Our hosting provider and the provider of our email forwarding as processors; Google as an independent controller for our mailbox (section 4); our telephone provider; our external accounting for invoices; and, at your request and only as far as your matter requires, authorities, embassies, translators and the licensed professionals you instruct (Art. 6(1)(b) GDPR). We do not sell data.
8. Transfers outside the European Union
Our services are also aimed at people who live outside the European Union. There is no EU adequacy decision for the Arab states, so data sent there may not be protected to the standard of the GDPR. We send data there only at your request and only as far as necessary for your matter (Art. 49(1)(b) GDPR).
9. Retention
Server logs: eight days at most. Enquiries and correspondence: until your enquiry has been dealt with; after that we delete them unless statutory retention periods apply. If a contract is concluded, we keep invoices and related correspondence until the retention periods required by the applicable commercial and tax law have expired (Art. 6(1)(c) GDPR).
10. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR). An informal message to kontakt@sanad-europe.com is sufficient.
Right to object: you may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).
You have the right to lodge a complaint with a supervisory authority in the European Union, in particular in the Member State of your habitual residence, your place of work or the alleged infringement (Art. 77 GDPR).