ConceptConstructionSignature
CCS Stylianides Group
Website www.stylianidesgroup.com
Last updated 19 October 2026
Important: This Privacy Policy explains how personal data is collected and used when you visit the Site, submit a property or general enquiry, contact us through WhatsApp, or interact with our Telegram lead-generation bot. It also explains your rights under the EU General Data Protection Regulation and applicable Cyprus data-protection law.
1.1 This Privacy Policy applies when you visit, browse or otherwise use www.stylianidesgroup.com and any page, subdomain, form, feature or content made available through it (together, the Site), or when you use a communication channel connected to the Site to make an enquiry.
1.2 For the purposes of this Policy, personal data means information relating to an identified or identifiable individual. Processing includes collecting, recording, organising, storing, using, disclosing, transferring and deleting personal data.
1.3 This Policy should be read together with any additional privacy information shown on a form, in the Telegram bot, in a transaction document or by a relevant CCS Stylianides Group company. Where a specific notice applies to a particular service or transaction, that notice supplements this Policy.
CCS Stylianides Services Ltd, a private limited liability company registered in the Republic of Cyprus under registration number HE 187189, is the controller of personal data collected through this website unless a form or transaction-specific notice identifies another CCS Stylianides Group company as controller.
Contact address: 20 Christaki Kranou, 4041 Limassol, Cyprus. Email: info@stylianidesgroup.com. Telephone: +357 25 325130.
CCS Stylianides Group is a business name used by separate legal entities. If your enquiry concerns a specific property, project or service, we may share it with the relevant Group company. That company may become an independent or joint controller for its own follow-up and must provide any additional privacy information required by law.
We may collect the following categories of personal data:
• Identity and contact data, such as your name, email address, telephone number, country, preferred language and contact preferences.
• Enquiry and property-interest data, such as the property, project, location, budget, transaction type, message, viewing request, source of enquiry and communications with our team.
• Messaging data. If you use WhatsApp or Telegram, this can include your account name, username, telephone number where made available, chat or user identifier, message content, attachments, timestamps and any information you choose to send.
• CRM and relationship data held in Qobrix, including the lead source, assigned representative, enquiry history, notes, status, appointments, follow-up activities and marketing preferences.
• Technical and usage data, such as IP address, device and browser details, operating system, approximate location derived from IP, referral URL, pages viewed, interactions, timestamps, cookie or similar identifiers, consent choices and diagnostic/security logs. Where you consent to marketing, this includes Meta cookie identifiers and information about your actions on the Site that is sent to Meta (see section 7A).
• Map data, such as the map area, zoom level, map interactions and IP address transmitted when Mapbox content loads.
• Information obtained from public sources, introducers, agents, advertising platforms or Group companies where lawful, together with source information.
Please do not send health information, identity documents, financial information or other sensitive data through a general website form, WhatsApp or Telegram unless we specifically request it and provide an appropriate secure channel.
We obtain personal data directly from you when you complete a website form, request information, communicate with us or use the Telegram bot. We also collect technical data automatically through website infrastructure and, where permitted by your consent choices, analytics or similar technologies. We may receive lead information from Qobrix, Google services, a referring website or advertising platform, or from another Group company or authorised agent.
We process personal data only where we have a lawful basis under the GDPR. A different lawful basis may apply where the circumstances require it, and we will provide additional information where necessary.
5.1 Enquiries and possible transactions. We use contact, enquiry, property-interest, communications and CRM data to respond to enquiries, arrange viewings and take steps requested before a possible transaction. We rely on Article 6(1)(b) GDPR, where processing is necessary to take steps at your request before entering into a contract, and Article 6(1)(f), our legitimate interests in responding to enquiries and developing our business relationships. Providing the requested contact details is necessary for us to respond.
5.2 Qobrix lead management. We use contact, enquiry, source, CRM status, notes and communications data to create and manage leads and coordinate Group follow-up. We rely on Article 6(1)(b) GDPR and Article 6(1)(f), our legitimate interests in efficient enquiry and customer-relationship management.
5.3 Website operation and security. We use technical, security, consent and reCAPTCHA data to operate, secure and troubleshoot the Site and prevent spam, fraud or abuse. We rely on Article 6(1)(f) GDPR, our legitimate interests in maintaining a secure and functional Site, and Article 6(1)(c) where processing is necessary to comply with a legal obligation. Non-essential storage or access on your device is used only with consent where required.
5.4 Mapbox maps. We use IP address, device and request information and map interactions to display interactive property maps. Where the map or associated technology is non-essential, we rely on consent under Article 6(1)(a) GDPR. Where consent is legally required, Mapbox will remain blocked unless and until you consent. A basic location alternative will be made available where practicable.
5.5 Google Analytics and tags. We use online identifiers, device information, usage data, referral information, coarse location and consent signals to measure Site use through Google Analytics 4 and deploy approved tags through Google Tag Manager. We rely on consent under Article 6(1)(a) GDPR. Analytics must not be activated before valid consent, and Tag Manager must not bypass the user’s choice.
5.5A Meta advertising measurement and audiences. We use online identifiers (Meta cookie identifiers and IP address), device and browser information, your actions on the Site and, for enquiries, hashed contact details to measure and improve our advertising and to show our advertisements to people who visited the Site, through the Meta Pixel and Conversions API. We rely on consent under Article 6(1)(a) GDPR. These tools are activated only after marketing consent.
5.6 Google Fonts and reCAPTCHA. We may use IP address, browser and request information and interaction or security signals to provide website fonts and anti-bot protection. We rely on Article 6(1)(f) GDPR for security measures that are strictly necessary and proportionate, and on consent under Article 6(1)(a) where required. Where Google Fonts are served locally, no connection to Google is required merely to display the font. reCAPTCHA is used only where necessary to protect forms and is configured proportionately to the security risk.
5.7 Direct marketing. Subject to your choices and applicable law, we may use contact details, interests, enquiry information and marketing preferences to communicate about properties or services by email, telephone, WhatsApp or other messaging channels. This includes advertisements shown to you on Facebook and Instagram after you have visited the Site, where you have consented to marketing (see section 7A). We rely on consent under Article 6(1)(a) GDPR or, only where permitted by applicable electronic-communications law, our legitimate interests under Article 6(1)(f). You may withdraw consent or object to direct marketing at any time.
5.8 Legal compliance and claims. We use relevant contact, communications, transaction, technical and CRM data to comply with law, prevent fraud, handle complaints and establish, exercise or defend legal claims. We rely on Article 6(1)(c) GDPR where processing is required by law and Article 6(1)(f) for our legitimate interests in protecting our rights and business.
When you submit a website enquiry or use the Telegram bot, a lead is created or updated in our Qobrix CRM supplied by Qobo Group. The record may contain your contact details, enquiry, property interest, source, communication history, assigned representative, internal notes and lead status. Qobrix processes this information on our behalf under our instructions, subject to the applicable services agreement and data-processing terms.
Authorised personnel of the Operator and, where necessary, the relevant CCS Stylianides Group company may access the lead. Access is limited to persons who need the information to respond, manage the relationship, provide a requested service or comply with law.
If an enquiry is transferred to a different Group company that decides independently how and why to use the information, that company acts as a separate controller and will provide any additional privacy information required by law.
Subject to the website configuration and your consent choices, the website may use Google Analytics 4 to measure visits and interactions, Google Tag Manager to manage website tags, Google Fonts to display typefaces, and Google reCAPTCHA to detect automated abuse. Google may receive technical and online identifier data when these services load.
Google Analytics 4 is used only after analytics consent. Google states that it does not log or store individual IP addresses for users in the EU, and may derive coarse location information before discarding the IP address. Google Tag Manager is a deployment tool; every tag it controls must respect the consent category assigned to that tag.
Where Google Fonts are hosted locally, your browser does not contact Google merely to display text. Where remote Google Fonts are used, Google may receive your IP address and request information. reCAPTCHA is loaded only where needed to protect a form and is configured proportionately to the security risk.
If Google Ads, remarketing or other advertising features are introduced, this Policy (including Annex A) must be updated before activation, advertising tags must remain off until valid consent, and Google consent signals must accurately reflect the user’s choices.
If you consent to marketing, this Site uses the Meta Pixel and the Meta Conversions API, tools provided by Meta Platforms Ireland Limited (“Meta”) for advertising on Facebook and Instagram. We use them to measure the results of our advertising (for example, how many enquiries an advertisement brings), to improve how our advertisements are delivered, and to show our advertisements to people who have visited the Site and to people similar to them.
What Meta receives. After you consent, the Meta Pixel sends Meta the pages you view and your actions on them (for example, opening a listing, clicking a WhatsApp, Telegram or telephone link, or submitting an enquiry form), the address of the page, your IP address, browser and device information, and Meta cookie identifiers (_fbp and, if you arrived from a Meta advertisement, _fbc). If you submit an enquiry after consenting, our server also sends Meta, through the Conversions API, a “Lead” event containing your email address, telephone number and, where provided, your name, each in hashed form, together with your IP address, browser information, the Meta cookie identifiers, and the page, project or property you enquired about. We do not send the message you write in the form or any special-category data. If you do not consent to marketing, the Meta Pixel is not loaded and nothing is sent to Meta.
Roles. We and Meta act as joint controllers for the collection of this data and its transmission to Meta, under Meta’s Business Tools Terms and Controller Addendum. We are responsible for informing you and for obtaining your consent. Meta is a separate controller for the processing it carries out for its own purposes, as described in the Meta Privacy Policy.
Legal basis. Your consent under Article 6(1)(a) GDPR and, for storing or accessing information on your device, the applicable Cyprus electronic-communications law. You can withdraw consent at any time through the “Cookie settings” link at the foot of every page. Withdrawal does not affect earlier processing. When you withdraw, the Meta cookies on this Site are deleted.
Recipients and transfers. Meta Platforms Ireland Limited, which may share data with Meta Platforms, Inc. and other Meta group companies, including in the United States. Meta states that such transfers rely on the EU–US Data Privacy Framework and standard contractual clauses.
More information. Meta Privacy Policy: facebook.com/privacy/policy · Meta Cookies Policy: facebook.com/policies/cookies · Business Tools Terms: facebook.com/legal/terms/businesstools · Controller Addendum: facebook.com/legal/controller_addendum. You can manage personalised advertising in your Meta account settings.
We use Mapbox to display maps and property locations. When Mapbox content is loaded, your browser connects to Mapbox and necessarily sends an IP address together with device, request and map-interaction information. Mapbox states that IP addresses in its CloudFront logs are generally retained for 30 days for billing and usage reporting, unless required for an ongoing security, anti-fraud or misuse investigation.
Where legally required, Mapbox maps will not load until you consent to the relevant category. If you decline, you should still be able to access the essential property information and, where practicable, a non-embedded location alternative.
The website provides a link that redirects you to our business WhatsApp account. The website does not send your enquiry details to WhatsApp merely because the link is displayed. Once you click the link or send a message, WhatsApp and its provider process information under their own terms and privacy notice, and we receive the content and account information made available to us.
We use the message to respond to your request, manage the lead and, where appropriate, record relevant details in Qobrix. Do not use WhatsApp for identity documents, payment-card details, bank instructions or other sensitive material unless we have expressly agreed a suitable method.
Our Telegram bot is used to collect property enquiries and generate leads in Qobrix. When you start or interact with the bot, Telegram may provide the bot with your Telegram display name, username, user or chat identifier, language and the messages or files you submit. Your telephone number is received only if you choose to share it or Telegram otherwise makes it available through the interaction you select.
Before collecting lead details, the bot provides a short privacy message identifying CCS Stylianides Services Ltd, linking to this Policy and explaining that the information will be transferred to Qobrix. It also provides a way to stop the interaction or request deletion. Do not send sensitive information through the bot.
Telegram independently processes data needed to operate its platform under its own privacy terms. Bot messages are transmitted through Telegram infrastructure and may involve processing outside the European Economic Area.
11.1 Strictly necessary technologies are required to provide a service you request, remember privacy choices, operate essential website functions or protect the Site. They may operate without consent where permitted by law.
11.2 Functional technologies remember choices and provide enhanced features. They are activated only where permitted by your consent choices.
11.3 Analytics technologies, including Google Analytics 4, help us understand visits, interactions, performance and errors. They are activated only after analytics consent.
11.4 Advertising and marketing technologies measure campaigns, support remarketing or provide personalised advertising. They are activated only after the appropriate consent. Our marketing technologies are the Meta Pixel and the Meta Conversions API, described in section 7A.
11.5 When you first visit the Site, the consent banner allows you to accept all non-essential technologies, decline them all or manage your preferences by category (analytics and marketing). Rejecting must be as easy as accepting. You may change or withdraw your choice at any time through the “Cookie settings” link at the foot of every page. Refusing non-essential technologies does not prevent access to ordinary website content.
11.6 The technologies actually used on the Site, including the provider, purpose, cookie or identifier name and duration, are listed in Annex A to this Policy.
Google Ads and Facebook social plugins are not active services and will not be enabled until this Policy has been updated. The Meta Pixel and Conversions API are described in section 7A and run only after marketing consent.
The Site currently uses or connects to the following third-party services:
• Qobrix, supplied by Qobo Group, to create and manage website and Telegram leads in our CRM;
• Google Analytics 4 and Google Tag Manager for consent-based website analytics and approved tag management;
• Google Fonts for website typefaces and Google reCAPTCHA for form security, subject to the configuration described above;
• Meta Pixel and Meta Conversions API (Meta Platforms Ireland Limited) for advertising measurement and audiences, only after marketing consent;
• Mapbox for interactive property maps, which involves transmission of the user’s IP address when Mapbox loads;
• WhatsApp, through a user-initiated redirection to our business account; and
• Telegram, through our lead-generation bot, which transfers the submitted enquiry information into Qobrix.
Depending on the purpose, personal data may also be disclosed to:
•. authorised employees and contractors of the Operator and relevant CCS Stylianides Group companies;
•. Qobo Group / Qobrix as our CRM provider;
•. website hosting, maintenance, cybersecurity, communications and professional-service providers acting under appropriate contractual obligations;
•. Google, Mapbox, WhatsApp/Meta and Telegram when their services are activated or you choose to use them;
•. estate agents, introducers, consultants or transaction counterparties where necessary for your request and lawfully permitted; and
•. courts, regulators, law-enforcement bodies, tax authorities or other recipients where disclosure is required by law or necessary to protect legal rights.
We do not sell personal data.
Some service providers or their sub-processors may process personal data outside Cyprus or the European Economic Area, including in the United States or other countries whose laws may not provide an equivalent level of protection. Where the GDPR requires a transfer safeguard, we will rely on an applicable adequacy decision, approved standard contractual clauses together with supplementary measures where necessary, or another lawful transfer mechanism. You may contact us for information about the relevant safeguards, subject to lawful confidentiality restrictions.
A provider’s participation in a recognised transfer framework or use of contractual clauses does not remove our responsibility to assess the service, configure it appropriately and minimise the data transferred.
We keep personal data only for as long as reasonably necessary for the purposes described above, including legal, accounting and claims requirements. Unless a longer period is required or justified, the following periods apply:
14.1 Enquiries and unsuccessful leads are retained for up to 24 months after the last meaningful contact, then deleted or anonymised unless a longer period is needed for a complaint, legal claim or renewed request.
14.2 Marketing records are retained until consent is withdrawn or an objection is received and are otherwise reviewed after 24 months of inactivity. We may retain a minimal suppression record so that we can respect an opt-out.
14.3 Transaction and client records are retained for the duration of the relationship and ordinarily for at least six years after completion or termination, or longer where required by tax, property, anti-money-laundering or other applicable law.
14.4 Consent records and information relevant to legal claims are retained for as long as needed to demonstrate compliance or establish, exercise or defend claims, normally for the applicable limitation period.
14.5 Website security logs are normally retained for up to 12 months unless they are required longer for an investigation, security incident or legal proceedings.
14.6 Data held by service providers is retained according to our configured settings and the provider’s documented retention periods. Mapbox states a general 30-day period for IP addresses in relevant CloudFront logs, subject to security, anti-fraud and misuse-investigation exceptions.
14.7 Meta cookies set by the Pixel (_fbp, _fbc) last up to 90 days and are deleted from your browser if you withdraw marketing consent through Cookie settings. Data received by Meta is retained under Meta’s own policies. The Meta identifiers sent with an enquiry are held only in our technical enquiry queue, as part of the enquiry record, and are retained as set out in section 14.1.
We use appropriate technical and organisational measures designed to protect personal data, including access controls, role-based CRM permissions, secure transmission, system maintenance, backups and staff confidentiality obligations. No internet service is completely secure. If you believe your data or an account has been compromised, contact us promptly and do not send further sensitive information through an unsecured channel.
Subject to the GDPR and any lawful limitations, you may ask us to:
• confirm whether we process your personal data and provide access to it;
• correct inaccurate or incomplete data;
• erase personal data;
• restrict processing;
• provide data you supplied in a structured, commonly used and machine-readable format and, where technically feasible, transmit it to another controller;
• object to processing based on legitimate interests, including profiling on that basis;
• object at any time to direct marketing; and
• withdraw consent at any time, without affecting processing carried out before withdrawal. For cookies and similar technologies, use the “Cookie settings” link at the foot of every page.
To exercise a right, contact info@stylianidesgroup.com. We may request information necessary to verify your identity. We normally respond within one month, subject to extensions permitted by law. There is normally no fee, although the GDPR permits a reasonable fee or refusal for manifestly unfounded or excessive requests.
You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection, 15 Kypranoros Street, 1061 Nicosia, Cyprus, P.O. Box 23378, 1682 Nicosia, telephone +357 22 818456, or through www.dataprotection.gov.cy. You may also complain to another competent supervisory authority, particularly in the EU Member State of your habitual residence, place of work or the alleged infringement.
The website and property enquiry services are not directed to children. We do not knowingly collect personal data from a person under 18 through lead-generation forms or messaging channels. If you believe a child has provided data, contact us so that we can assess and, where appropriate, delete it.
We do not use website or CRM data to make a decision based solely on automated processing that produces legal effects or similarly significantly affects you. If this changes, we will provide the information and safeguards required by the GDPR before such processing begins.
We may update this Policy to reflect changes in law, services, providers or website configuration. The current version will be published on the website with the updated date. If a change materially affects how we use existing personal data, we will take additional steps required by law, which may include providing notice or seeking consent.
Questions, requests and complaints concerning this Policy or our use of personal data may be sent to info@stylianidesgroup.com or CCS Stylianides Services Ltd, 20 Christaki Kranou, 4041 Limassol, Cyprus.
This Annex lists the cookies and similar technologies used on the Site. Anything marked “only after consent” is not set until you accept the relevant category through the cookie banner or the “Cookie settings” link at the foot of every page. Google Tag Manager itself sets no cookies; it only loads the tags listed here.
ccs-consent-v2 (local storage) CCS (this Site). Remembers your cookie choices so the banner is not shown again. Stays on your device. Duration: Until you clear your browser data or change your choice. Category: Strictly necessary.
Google reCAPTCHA cookies Google (recaptcha.net). Tells a person from a script when you send a form. Loaded only when you start using a form. Duration: Set by Google; see Google’s policy. Category: Security (strictly necessary).
Map tiles (browser cache) Mapbox. Keeps map tiles in your browser so the map is not downloaded again (see section 8). Duration: Browser cache. Category: Functional.
_ga Google. Distinguishes visitors for Google Analytics 4. Duration: 2 years. Category: Analytics, only after consent.
_ga_<stream ID> Google. Keeps session state for Google Analytics 4. Duration: 2 years. Category: Analytics, only after consent.
_fbp Meta. Identifies the browser for measuring and delivering advertising. Duration: 90 days. Category: Marketing, only after consent.
_fbc Meta. Stores the click identifier of a Meta advertisement you came from. Duration: 90 days. Category: Marketing, only after consent.
fr (facebook.com) Meta. May be set by Meta Pixel requests. Duration: 90 days. Category: Marketing, only after consent.
Please leave your request and we will contact with you shortly.
Leave your request and we will get back to you within 24 hours.
*By sending a request you agree to the Privacy Policy. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
We use essential cookies to keep our website running smoothly. With your permission, analytics cookies help us improve your experience, while marketing cookies (Meta) help us measure our campaigns and show relevant ads to previous visitors.
Privacy PolicyChoose which cookies this site may use. You can change your choice at any time with “Cookie settings” at the foot of every page.
Strictly necessary cookies are always on: they remember your choice and keep the forms safe.
Google Analytics 4: which pages and listings people look at.
Meta Pixel and Conversions API: Help us measure our advertising campaigns and show relevant ads to people who have visited our website.