This notice covers personal data processed through this website. It describes only what actually happens here: there is no analytics, no advertising technology, no tracking pixel and no third-party script of any kind on this site, so none of those appear below.

Who the controller is

The controller is URBANUPLINK LTD, Cyprus.

Registration number HE 497798. Tax identification number 60397750Q. Registered office Pavlou Valdaseridi 2A, 1st floor, 6018 Larnaca, Cyprus.

Postal correspondence about this notice may be sent to that office, but email is answered faster and leaves a record both sides can read.

For any question about this notice or to exercise a right described below, write to info@urbanuplink-ltd.com.

What is collected, and why

There are exactly three sources of personal data on this site.

1. The contact form

When you send an enquiry, the form collects your name, your email address, your company name if you give one, the service you selected, the message you wrote, and the fact that you ticked the consent box.

• Purpose. To answer your enquiry and, if it leads anywhere, to prepare a quotation and carry out the resulting project.
• Legal basis. Article 6(1)(b) GDPR, steps taken at your request before entering into a contract. Where an enquiry does not lead to a contract, the continued basis is Article 6(1)(f), the legitimate interest in keeping a record of business correspondence.
• Retention. Twenty-four months from the last message in the exchange, unless the enquiry becomes a project, in which case the project record is kept for the statutory period that applies to business and tax records in Cyprus.

2. Your consent choice

The accept or decline you give in the cookie banner is stored in your own browser under the key urbanuplink.consent, together with the date you chose. It never leaves your device and is not transmitted anywhere.

• Purpose. To remember the choice so you are not asked on every page.
• Legal basis. Strictly necessary for a service you explicitly requested, so no consent is required for the storage of the choice itself.
• Retention. Twelve months, after which you are asked again. You can clear it at any time from the cookie policy page.

3. Hosting server logs

The web server that delivers this site keeps standard access logs: IP address, timestamp, requested URL, HTTP status, referrer and user agent. This is generated by the hosting infrastructure rather than by anything on the page, and it happens on every website you visit.

• Purpose. Delivering the site, and diagnosing faults and abuse.
• Legal basis. Article 6(1)(f) GDPR, the legitimate interest in operating a secure and functioning website.
• Retention. As configured by the hosting provider, typically a small number of weeks. These logs are not read for any analytical purpose and are not combined with anything else.

What is not done

• No analytics of any kind, first-party or third-party.
• No advertising, remarketing, profiling or automated decision-making.
• No mailing list. Sending an enquiry does not subscribe you to anything.
• No fonts, scripts or images loaded from a third-party host. Both typefaces are served from this domain specifically so that visiting the site does not disclose your IP address to anyone else.
• Your data is never sold, rented or shared for anyone else’s purposes.

Who else sees the data

Two categories of processor are involved, and no others. The hosting provider that serves this site necessarily processes the server logs described above. The email provider used to receive and answer enquiries processes the content of your message, as any email provider does. Both act on instructions under Article 28 GDPR.

Transfers outside the EEA

None are intended. The hosting and email infrastructure used for this site is located within the European Economic Area. If that ever changes, this notice is updated before the change takes effect, and the transfer mechanism relied on is named here.

Your rights

Under the GDPR you have the right to:

• access the personal data held about you, and receive a copy of it;
• have inaccurate data corrected;
• have data erased, where there is no overriding legal obligation to keep it;
• restrict processing while a dispute about accuracy or grounds is resolved;
• receive the data you provided in a portable, machine-readable format;
• object to processing based on legitimate interest, at any time and on grounds relating to your situation.

Write to info@urbanuplink-ltd.com to exercise any of these. A response is given within one month, as the GDPR requires, and in practice much sooner given the volume involved. There is no charge.

Complaints

If you believe your data has been handled unlawfully you can complain to the supervisory authority in Cyprus, the Office of the Commissioner for Personal Data Protection, or to the authority in the EU member state where you live or work. Raising it here first is welcome but is not a precondition.

Changes to this notice

The date at the top is the date this text last changed. Because the site adds no analytics or third-party services, material changes are expected to be rare and driven by a change in the company’s own details rather than by new data collection.