Privacy Policy

1. Who we are

The data controller responsible for this website is:

Privacy enquiries: privacy@unitechso.com

Unitechso Limited determines the purposes and means of the personal-data processing described in this Privacy Policy.

Our processing of personal data is governed by Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), together with applicable data-protection legislation in the Republic of Cyprus.

2. Personal data processed when you visit our website

We do not operate our own visitor-tracking or behavioural-analytics system.

However, limited technical information is necessarily processed by the infrastructure used to deliver and secure the website.

Our website is hosted by Vercel Inc. Vercel states that, in connection with traffic to websites hosted on its platform, it may process information including an end user's IP address, location information derived from the IP address and system-configuration information. Vercel

Technical information associated with your visit may therefore include:

• IP address;
• approximate location derived from the IP address;
• browser, device and system information;
• requested pages and resources;
• date and time of requests;
• network and request information; and
• diagnostic, operational and security logs.

We do not use this information to build advertising profiles, track visitors across unrelated websites or conduct behavioural marketing.

Our legal basis for processing technical information under our control is our legitimate interest in operating, securing, maintaining and protecting our website and IT infrastructure.

3. Cookies, analytics and tracking

We do not use:

• analytics cookies;
• advertising cookies;
• marketing cookies;
• marketing or advertising pixels;
• behavioural tracking;
• third-party advertising networks; or
• visitor profiling.

We do not intentionally place non-essential cookies or similar technologies on your device.

The website and its supporting infrastructure may use limited technical storage or similar mechanisms where necessary to provide, secure or operate the website or remember a preference you have explicitly selected.

These technologies are not used by Unitechso for advertising, marketing or behavioural analytics.

If we introduce analytics, advertising technologies or other non-essential tracking technologies in the future, we will update this Privacy Policy and implement an appropriate consent mechanism before using them where required by law.

4. Contacting us by email

Our website does not contain a contact form.

Contact links on the website use an ordinary mailto: link. Clicking such a link opens your own email application or email service. The website itself does not collect your name, email address or message when you click the link.

If you choose to send us an email, we may process:

• your email address;
• your name;
• your company or professional information;
• the content of your message;
• attachments you choose to provide; and
• any other information you voluntarily include.

We use this information to:

• respond to your enquiry;
• provide information you have requested;
• discuss potential services or projects;
• take steps toward entering into a business relationship; or
• manage an existing business relationship.

Where your communication concerns a potential contract, processing may be necessary in order to take steps at your request before entering into a contract.

For other business communications, we may rely on our legitimate interest in responding to people who contact us and managing professional communications.

Sending us an email does not subscribe you to marketing communications.

Please avoid sending sensitive or special-category personal information unless it is genuinely necessary for your enquiry.

5. Our legal bases for processing

Depending on the circumstances, we process personal data under one or more of the following GDPR legal bases:

Contract and pre-contractual steps — where processing is necessary to provide services to you or take steps at your request before entering into a contract.

Legitimate interests — where necessary to operate and secure our website, respond to business communications, manage professional relationships and protect our business and systems.

Legal obligations — where processing is necessary to comply with an obligation imposed on us by law.

Legal claims — where information needs to be retained or processed for the establishment, exercise or defence of legal claims.

Where we rely on legitimate interests, we consider whether those interests are overridden by your interests, rights or freedoms.

6. Service providers and recipients

We use a limited number of third-party providers necessary to operate our website and business.

Vercel

Vercel Inc. provides website hosting, content delivery and related infrastructure.

Technical information associated with visits to our website may therefore be processed through Vercel's infrastructure.

Vercel maintains a Data Processing Addendum describing its processing commitments and the categories of personal data that may be processed in connection with its services. Vercel

LH.pl

LH.pl provides domain-registration and/or DNS services associated with our domain.

We do not use LH.pl for visitor analytics, advertising or behavioural tracking.

Microsoft 365

We use Microsoft 365 for company email and cloud-based business data storage, including services such as:

• Exchange Online and Outlook;
• OneDrive; and
• SharePoint.

Emails sent to Unitechso addresses, including privacy@unitechso.com, may therefore be transmitted, processed and stored using Microsoft 365.

Business correspondence and documents containing personal data may also be stored in Microsoft 365 where necessary for our business activities.

Our Microsoft 365 tenant is established in Cyprus.

Microsoft states that Microsoft 365 customers with a sign-up location in an EU or EFTA country are within the scope of its EU Data Boundary, subject to applicable eligibility conditions and documented exceptions. Cyprus is included within that boundary. Microsoft Learn

Microsoft's contractual data-processing and security commitments are set out in the Microsoft Products and Services Data Protection Addendum. Microsoft

Other recipients

We may disclose personal data where reasonably necessary to:

• professional advisers;
• accountants or auditors;
• IT and security providers;
• competent courts or authorities; or
• other parties where disclosure is required by law.

We do not sell personal data.

7. International data transfers

We seek to use service providers and configurations that keep personal data within the European Economic Area where reasonably possible.

Microsoft 365

Our Microsoft 365 tenant is established in Cyprus.

Microsoft's EU Data Boundary covers Microsoft 365 customers with an eligible EU/EFTA sign-up location. Microsoft states that Customer Data and relevant personal data for covered services are stored and processed within the EU/EFTA boundary, subject to documented exceptions and continuing limited transfers. Microsoft Learn

Certain operational, security, directory, support or customer-initiated scenarios may still involve processing outside the EU Data Boundary. Microsoft Learn

Vercel

Vercel is an international service provider and information processed through its infrastructure may be processed outside the European Economic Area. Vercel

Where a transfer of personal data outside the EEA requires additional safeguards, we rely on the relevant lawful transfer mechanisms provided under applicable data-protection law and by our service providers.

8. How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purposes for which it was processed.

Website visitors

We do not maintain a separate Unitechso visitor-analytics database or behavioural visitor profiles.

Technical logs and infrastructure information processed through our hosting provider are retained according to the applicable service configuration, operational and security requirements and the provider's retention practices.

Email and business correspondence

Emails and related business information may be stored within Microsoft 365.

We retain correspondence for as long as reasonably necessary to:

• respond to and follow up on an enquiry;
• manage a potential or existing business relationship;
• maintain appropriate business records;
• comply with tax, accounting or other legal obligations; or
• establish, exercise or defend legal claims.

Where correspondence is no longer reasonably required for any of these purposes, it will be deleted or anonymised where appropriate.

Different retention periods may apply where a legal obligation requires information to be kept for a particular period.

9. How we protect personal data

We use appropriate technical and organisational measures designed to protect personal data against:

• unauthorised access;
• unlawful disclosure;
• accidental loss;
• alteration;
• destruction; or
• misuse.

We also apply the principle of data minimisation to the website itself. In particular, we do not operate a contact-form database, advertising-tracking system or behavioural-analytics platform.

No online system can guarantee absolute security.

10. Your data-protection rights

Subject to the conditions and exceptions contained in applicable data-protection law, you may have the right to:

• Access — obtain confirmation of whether we process personal data about you and request a copy.
• Rectification — ask us to correct inaccurate or incomplete personal data.
• Erasure — ask us to delete personal data where the applicable legal requirements are met.
• Restriction — ask us to restrict processing in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Data portability — receive certain personal data in a structured, commonly used and machine-readable format where this right applies.
• Withdraw consent — withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact: privacy@unitechso.com

We may request reasonable information necessary to verify your identity before fulfilling a request.

We will respond within the time limits required by applicable data-protection law.

11. Right to object to legitimate-interest processing

Where we process personal data on the basis of our legitimate interests, you have the right to object to that processing on grounds relating to your particular situation.

Where required by the GDPR, we will stop processing the relevant information unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the information is needed for the establishment, exercise or defence of legal claims.

12. Automated decision-making and profiling

We do not use personal data collected through this website for automated decision-making that produces legal effects or similarly significant effects concerning you.

We do not use website behaviour to create advertising or marketing profiles.

13. Children's privacy

Our website and services are primarily intended for businesses and professionals.

We do not knowingly use this website to collect personal information from children.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us at privacy@unitechso.com.

14. Third-party links

Our website may contain links to websites or services operated by third parties.

When you follow a link to another website, that organisation is responsible for its own privacy practices. We encourage you to review the privacy information provided by the relevant third party.

Unitechso Limited is not responsible for the privacy practices of independent third-party websites.

15. Complaints

If you have a concern about how we process your personal data, you can contact us first at privacy@unitechso.com.

You also have the right to lodge a complaint with a competent data-protection supervisory authority.

As Unitechso Limited is established in Cyprus, our supervisory authority is:

Email: commissioner@dataprotection.gov.cy

Telephone: +357 22 818 456

The European Data Protection Board currently lists these contact details for the Cypriot Data Protection Authority. European Data Protection Board

Depending on your circumstances, you may also have the right to lodge a complaint with another competent supervisory authority in the EU or EEA.

16. Changes to this Privacy Policy

We may update this Privacy Policy where our website, business practices, service providers or legal obligations change.

The current version will be published on this page together with its latest revision date.