The short version
We collect only what you type into the enquiry form, we use it only to answer you, we never sell it, we do not track you, and this website sets no cookies at all.
1. Who is responsible for your data
RSC — Recuperation Systems Cyprus (“RSC”, “we”, “us”) installs heat recovery ventilation in homes across Cyprus. We are the data controller for the personal data described on this page.
| Trading name | RSC — Recuperation Systems Cyprus |
|---|---|
| Location | Limassol, Cyprus |
| Contact for privacy matters | info@rscair.com |
Because we are established in Cyprus, this policy is written to meet the EU General Data Protection Regulation (Regulation (EU) 2016/679, the “GDPR”) and Cyprus Law 125(I)/2018.
2. What we collect, and when
2.1 What you give us in the enquiry form
The form on our home page asks for the following. Nothing is collected that is not on that form.
| Field | Required | Why we need it |
|---|---|---|
| Name | Yes | To address you properly when we reply. |
| Phone number | Yes | To call you back about the survey. Most people prefer a call to an email. |
| Email address | Yes | To send the written quote, and to reach you if the phone number does not work. |
| Location | Yes | To work out travel to the survey, and whether we cover your area. |
| Whether you are a homeowner, tenant, developer or other | No | To understand who makes the decision, which changes what we quote. |
| Your message | No | Anything you choose to tell us about the property. |
Please do not send us health information, financial details, identity document numbers or any other special category of data through this form. We do not need it and we do not want to hold it.
2.2 What our server records automatically
When you submit the form, our server converts your IP address into a one-way cryptographic hash and stores that hash, with a timestamp, in a temporary file. It exists for one purpose: to stop a single connection submitting the form more than six times in an hour, which is how contact forms get hijacked to send spam. The record expires after one hour. The hash cannot be reversed back into your IP address.
Our hosting provider also keeps standard web server logs. Those are held by the provider under their own retention policy, not by us.
2.3 What we do not collect
- No cookies. This website sets none whatsoever. See our Cookie Policy.
- No analytics. There is no Google Analytics, no Meta pixel, no session recording and no visitor tracking of any kind.
- No advertising or profiling. We do not build a profile of you, and we use no automated decision-making.
- No mailing list. Asking for a quote does not sign you up to anything.
3. Why we are allowed to use it
| What we do | Legal basis under Article 6 GDPR |
|---|---|
| Reply to your enquiry, arrange and carry out a survey, prepare a quote | Article 6(1)(b) — steps taken at your request before entering a contract |
| Carry out an installation you have accepted, and provide the annual filter service | Article 6(1)(b) — performance of a contract |
| Keep the hashed IP record that limits form abuse | Article 6(1)(f) — our legitimate interest in keeping the form usable and not becoming a spam relay |
| Keep records of work done and payments received | Article 6(1)(c) — compliance with our tax and accounting obligations |
We do not rely on consent for any of the above, so there is no consent for you to withdraw. If you want us to stop contacting you, say so and we will stop.
4. Who else sees your data
We do not sell personal data, we do not rent it, and we never share it for anyone else’s marketing. It is seen by:
| Who | What they handle | Where |
|---|---|---|
| The two founders of RSC | Your enquiry, so that one of us can answer it | Cyprus |
| Hostinger | Hosts this website and passes the enquiry email on. They do not use it for any purpose of their own. | EU |
| Google (Google Workspace) | Our info@rscair.com mailbox, where your enquiry arrives and is stored | EU, with possible transfer to the USA under Google’s Standard Contractual Clauses and the EU-US Data Privacy Framework |
| Google Fonts | Serves the two typefaces this site uses. Your browser requests them directly, so Google receives your IP address and browser type. Google Fonts sets no cookies. | Global |
| The installer carrying out the work | Your name, address and phone number — and only once you have accepted a quote | Cyprus |
If you contact us on WhatsApp instead of using the form, that conversation is handled by WhatsApp under Meta’s privacy policy, not ours.
We will also disclose data where we are legally required to, for example to a tax authority or under a court order.
5. How long we keep it
| Data | Kept for |
|---|---|
| An enquiry that does not become a job | Up to 24 months, then deleted. People often come back a season or two later, and it is unhelpful to make you repeat yourself. |
| An enquiry that becomes an installation | The life of the customer relationship, plus the period Cyprus tax and accounting law requires us to keep records. |
| The hashed IP used for rate limiting | One hour. |
6. Your rights
Under the GDPR you have the right to:
- ask what we hold about you, and receive a copy of it;
- have anything inaccurate corrected;
- have your data erased once we no longer need it;
- ask us to restrict how we use it while a dispute is resolved;
- receive your data in a portable, machine-readable form;
- object to processing we carry out on the basis of legitimate interests.
Email info@rscair.com and we will answer within one month. There is no charge. If you ask us to delete your enquiry, we will, and we will confirm once it is done.
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain directly to the Cyprus supervisory authority:
Office of the Commissioner for Personal Data Protection
Iasonos 1, 1082 Nicosia, Cyprus
www.dataprotection.gov.cy
7. How we protect it
- The whole site is served over HTTPS, and plain HTTP is redirected to it, so your submission is encrypted in transit.
- The form is hardened against being used to relay spam, and against automated submission.
- Enquiries go straight to our email. There is no customer database on this website, so there is nothing here to breach.
- Our mailboxes are protected by strong passwords and two-factor authentication.
No system is perfectly secure. If a breach ever occurs that is likely to put your rights at risk, we will notify the Commissioner within 72 hours and tell you directly.
8. Children
This site is aimed at property owners and decision-makers. It is not directed at children, and we do not knowingly collect data from anyone under 18.
9. Changes to this policy
If we change how we handle data, we will update this page and change the date at the top. Where the change is significant and we hold your details, we will tell you directly.
10. Contact
Questions about this policy, or about anything we hold on you: info@rscair.com.