Privacy Policy

Last updated: 28 September 2026

1. Who is responsible

This website is operated by Emanuel Overmars, self-employed (Business & IT Consulting), Cyprus. I am the controller for the personal data described in this policy. You can reach me at info@emanuelovermars.com.

2. What this policy covers

This policy explains what personal data is processed when you visit emanuelovermars.com or contact me through it, why, and what your rights are under the EU General Data Protection Regulation (GDPR) and the law of the Republic of Cyprus.

3. Visiting the website

When you visit the website, the server that hosts it automatically records technical information such as your IP address, the date and time, the page requested, your browser type and the referring page. This is needed to deliver the website and to keep it secure. The legal basis is my legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). These logs are kept for a short period and then deleted, unless they are needed to investigate a security incident.

4. Website statistics

To understand how the website is used, I count visits with my own statistics, built into this website. No cookies are used and nothing is stored on your device. For each page view I record the page, the date, the type of device (phone, tablet or computer), the country and the website you came from, for example a search engine. To count unique visitors per day, a code is made from your IP address, your browser details and a random value that is deleted after that day. Your IP address itself is never stored, so visits cannot be traced back to you or followed from one day to the next. The country is looked up in a database from DB-IP (db-ip.com). The data stays on my own server and is deleted after 25 months. The legal basis is my legitimate interest in understanding how the website is used (Art. 6(1)(f) GDPR).

5. Contact form and email

When you use the contact form, I receive your name, email address, company (optional) and your message. When you email me directly, I receive your email address and whatever you include in your email. I use this information only to answer your enquiry and, if we decide to work together, to prepare and carry out that work. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and my legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Messages are stored in my secure website administration system and a copy is sent to my mailbox. I delete enquiries when they are no longer needed, and no later than 24 months after our last contact, unless a longer period is required by law (for example, tax rules if you become a client).

Invoices sent by email. Invoice emails contain a link to view the invoice online. When that page is opened, I record the date and time, so I know the invoice arrived. No cookies are used and nothing else about you is recorded. The legal basis is my legitimate interest in managing invoices and payments (Art. 6(1)(f) GDPR).

6. Spam protection (Cloudflare Turnstile)

The contact form is protected by Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile checks whether the form is being filled in by a person rather than an automated program. For this, it processes technical information such as your IP address and information about your browser and device. Turnstile does not use tracking cookies. The legal basis is my legitimate interest in protecting the form against spam and abuse (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework. More information: Cloudflare privacy policy.

7. Who receives your data

Your data is only shared with service providers that help me run this website and my business, such as the hosting provider, the email provider and the services named above. They process data on my behalf and under data protection agreements. I do not sell your data and do not use it for advertising.

8. Transfers outside the EU

Where a service provider processes data outside the European Economic Area (such as Cloudflare in the USA), this happens on the basis of an adequacy decision (the EU-U.S. Data Privacy Framework) or the European Commission's Standard Contractual Clauses.

9. Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you can withdraw it at any time. To exercise these rights, email info@emanuelovermars.com.

You also have the right to lodge a complaint with a supervisory authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection (www.dataprotection.gov.cy).

10. Automated decisions

No automated decision-making or profiling takes place.

11. Changes

I may update this policy when the website or the law changes. The current version is always available on this page.