1. Who We Are
Sopiveri Consulting Limited (“we”, “us”) is the controller of personal data collected through this website. Registered office: Artemidos, Agios Athanasios, 4102 Limassol, Cyprus. Company Reg. No. HE 494156.

Contact: info@sopiveri-consulting.com.

2. What Data We Collect

• Contact form submissions: name, email address, company name and the content of your message.

• Quotation and service requests: details you submit when asking about our services, such as company and vessel details.

• Chat and WhatsApp messages: if you contact us through the chat widget or WhatsApp, we receive your phone number, your WhatsApp profile name and picture (as you have set them), and the content of your messages and any files you send.

• Technical and usage data: IP address, browser type, device information, pages visited and time spent on the site, collected automatically through cookies and similar technologies (see Section 5).

3. How We Use Your Data and Legal Basis

• We use the data you send us through the contact form, quotation requests, chat or WhatsApp to respond to your inquiries, prepare quotations and communicate with you. The legal basis is taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)), together with our legitimate interest in responding to business inquiries (Art. 6(1)(f)).

• We collect website statistics through Wix Analytics only with your consent (Art. 6(1)(a)). You can withdraw that consent at any time.

• We use Google reCAPTCHA to protect the website against spam and abuse, and Sentry to monitor technical errors. The legal basis is our legitimate interest in keeping the website secure and working properly (Art. 6(1)(f)).

• We store your cookie preferences to comply with our legal obligations (Art. 6(1)(c)) and in our legitimate interest in remembering your choices (Art. 6(1)(f)).

• We keep accounting and business records because the law requires it (Art. 6(1)(c)).

• We do not sell your personal data, and we do not use it for automated decision-making or profiling.

4. Service Providers
We use the following providers to run this website and our communications:

• Wix.com Ltd. – website hosting, forms and website statistics (Privacy Policy)

• Usercentrics GmbH – cookie consent management

• Chaty (Premio) – chat widget that lets you start a conversation with us via WhatsApp

• Functional Software, Inc. (Sentry) – technical error monitoring

• Google Ireland Ltd. / Google LLC (reCAPTCHA) – spam and bot protection on our forms (Privacy Policy)

• Microsoft Ireland Operations Ltd. (Microsoft 365) – email and business communications

These providers process data on our behalf under data processing agreements and may not use it for their own purposes, except where they act as independent controllers.

WhatsApp: when you click the WhatsApp button, you are redirected to WhatsApp, which is operated in the EU by WhatsApp Ireland Limited (part of Meta). WhatsApp acts as an independent controller for your use of its service, under its own Privacy Policy. Messages are end-to-end encrypted, and we only see the information described in Section 2. Please do not send sensitive personal data via WhatsApp; use email for confidential documents.

We do not share your data with third parties for marketing purposes.

5. Cookies
This website uses:

• Strictly necessary cookies, which the website needs to work (hosting, security, saving your consent choice);

• Security cookies set by Google reCAPTCHA to protect our forms from spam;

• Functional cookies used by the chat widget;

• Analytics cookies set by Wix Analytics, which record pages visited, time spent on the site and general location (based on IP address).

Non-essential cookies are set only with your consent. You can change or withdraw your consent at any time via Cookie Settings.

6. Data Retention

• Inquiries and quotation requests: up to 24 months after our last contact, unless a business relationship follows.

• WhatsApp conversations: up to 24 months after our last contact, unless they become part of a business relationship, in which case we keep them with our business records.

• Contract and accounting records: for the period required by Cyprus law.

• Technical and error logs: in line with our providers’ standard retention periods, usually no longer than 90 days.

7. International Transfers
Some providers, including Wix and Meta/WhatsApp, are located in or process data outside the EU/EEA. These transfers are protected by an EU adequacy decision (Israel, and US companies certified under the EU–US Data Privacy Framework) or by the European Commission’s Standard Contractual Clauses.

8. Your Rights
Under the GDPR, you have the right to:

• access your personal data;

• have it corrected or deleted;

• restrict or object to its processing;

• receive it in a portable format;

• withdraw your consent at any time, without affecting processing that took place before.

To exercise these rights, contact info@sopiveri-consulting.com. You may also lodge a complaint with the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy) or with the supervisory authority in your country.

9. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

10. Changes to This Policy
We may update this policy from time to time. The “Last updated” date at the top shows the most recent revision.

11. Contact
For privacy-related questions or requests, contact: info@sopiveri-consulting.com.