Privacy Policy

This privacy policy explains how we process personal data when you visit sala-graf.com, in accordance with the EU General Data Protection Regulation (GDPR).

1. Controller

Name: SALA GRAF DESIGN LIMITED

Represented by: Susanne Graf, Director

Address: Palaion Patron Germanou 11, 8011 Paphos, Cyprus

Email: info@sala-graf.com

2. Contact form

When you use the contact form on this website, we collect the information you provide: first name, last name, email address, subject and message. We use this data solely to respond to your enquiry.

Legal basis: Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and, where applicable, Article 6(1)(f) GDPR (our legitimate interest in responding to enquiries).

Storage period: we retain this data for as long as necessary to process your enquiry, and delete it afterwards unless a longer retention period is required by law.

The form is processed by our hosting provider Netlify's form-handling service; see the hosting section below.

3. Hosting (Netlify)

This website is hosted by Netlify, Inc. Server infrastructure may be located outside the EU/EEA, including in the United States. Where this is the case, Netlify applies appropriate safeguards for the transfer, including the EU Standard Contractual Clauses. For more information, see Netlify's own privacy policy.

4. Email correspondence

If you contact us directly by email at info@sala-graf.com, our mailbox is provided through Google (Gmail). Your message and any personal data it contains are processed on Google's infrastructure in accordance with Google's own privacy policy.

5. Cookies and analytics

This website uses the following third-party tools:

• Google Ads conversion tracking (Google tag / gtag.js): only loads after you accept cookies in the banner shown on this site, and then records a conversion when you tap our phone number or WhatsApp link. This helps us measure which advertising leads to enquiries. Google may set advertising cookies for this purpose. See Google's Privacy Policy and Google's Ads Data Processing Terms. You can control Google's ad personalization at adssettings.google.com.
• Google Analytics 4 (Google tag / gtag.js): loads on the same Google tag as the Google Ads tracking above, and therefore also only after you accept cookies in the banner shown on this site. It records which pages you visit and how you reached the site, so we can see which content is useful to visitors. Google may set analytics cookies for this purpose. See Google's Privacy Policy and Google's overview of Analytics and privacy.
• Ahrefs Web Analytics: a cookie-free analytics service that counts page visits and traffic sources without tracking individual users across sites, and loads regardless of your cookie choice since it does not use cookies. See Ahrefs' Privacy Policy.

Legal basis: Article 6(1)(f) GDPR for the cookie-free analytics; your consent (Article 6(1)(a) GDPR, given through the cookie banner) for the Google Ads advertising cookies and the Google Analytics statistics cookies. You can withdraw consent at any time by clearing your browser's site data for this domain, which shows the banner again on your next visit.

6. Your rights

Under the GDPR, you have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data;
• request restriction of processing;
• object to processing;
• request data portability; and
• lodge a complaint with a supervisory authority, in particular the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (www.dataprotection.gov.cy).

7. Data security

This website uses SSL/TLS encryption to protect data transmitted between your browser and our servers.

8. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. The current version is always available on this page.

Last updated: 22 September 2026