Privacy Policy
This policy explains how Mediora Trading collects and uses personal data when you visit our website or contact us about buying, supplying, partnering or consulting. We process personal data in line with the EU General Data Protection Regulation (GDPR) and Cyprus Law 125(I)/2018 on the protection of personal data.
1. Who we are
The data controller is Mediora Trading Ltd, a company registered in the Republic of Cyprus under number [registration number], with its head office in Larnaca, Cyprus ([full registered address]).
2. Data we collect
When you send an inquiry through our website, we collect the information you enter:
- Full name, company name and country
- Business email address and, if you choose to provide it, phone number
- Inquiry type (buy, supply, partnership or consulting), product category, quantities and specifications
- Any other details you include in your message
We also receive the information you share when you email or call us directly. Please do not send us sensitive personal data, such as health information, through the inquiry form.
3. How we use your data
- To review and respond to your inquiry
- To discuss products, sourcing options, quotations and commercial terms with you
- To enter into and manage business relationships with buyers, suppliers and partners
- To keep records required for accounting, tax and legal purposes
We do not sell your personal data, and we do not use it for automated decision-making or profiling.
4. Legal basis for processing
- Steps before a contract, and the contract itself (Art. 6(1)(b) GDPR): handling your inquiry and any resulting order or agreement.
- Legitimate interests (Art. 6(1)(f) GDPR): developing business relationships and following up on commercial discussions.
- Consent (Art. 6(1)(a) GDPR): where you tick the consent box on our form. You can withdraw consent at any time.
- Legal obligation (Art. 6(1)(c) GDPR): keeping records required by law.
6. International transfers
Because we trade internationally and some of our service providers operate outside the European Economic Area, your data may be transferred outside the EEA. When this happens, we rely on safeguards recognised by the GDPR, such as European Commission adequacy decisions or Standard Contractual Clauses.
7. How long we keep your data
We keep inquiry data for [24 months] after our last contact if no business relationship follows. Where we enter into a business relationship, we keep transaction records for as long as Cyprus accounting and tax law requires. After that, data is securely deleted.
8. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data deleted, where there is no reason for us to keep it
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time, without affecting earlier processing
To use any of these rights, email us at [email protected]. We will reply within one month. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy).
10. Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, so please avoid sending confidential commercial documents through the inquiry form.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.
12. Contact us
Questions about this policy or your personal data can be sent to [email protected], or call +357 99 408580 or +357 99 172691.