🕶️ Privacy Policy – Onassa Ltd.

1. Who we are

Onassa Ltd.
Syntagma Square – Old Port Entrance, 3rd Floor
3042 Limassol, Cyprus

Responsible for data protection: ottiger.p@onassaltd.com

2. What data we process

• E-Mail & WhatsApp: If you contact us, we receive what you share (e-mail, phone, name).
• No forms: We currently don’t use contact forms.
• Analytics: We use tools like Google Analytics (IP, browser, click paths, time on site) to improve our website and reach.

3. Why we process data

• To answer your requests.
• To kick off projects that make you more visible.
• To improve our website and reach.

4. Where your data goes

• Internal: Only to Onassa Ltd. – we don’t sell or trade your data.
• Hosting: GoDaddy (servers in the USA) → data may be transferred to the US (GDPR note).
• Third parties: WhatsApp and Google Analytics apply their own privacy policies.

5. How long we keep data

• As long as we work together or you’re interested.
• After projects or closed requests, we delete your data.
• Created content has no backup guarantee unless you book paid backups.

6. Your rights

You’ve got the full GDPR package: access, correction, deletion, restriction, objection, and the right to complain to a data authority (Cyprus or your home country). Contact: ottiger.p@onassaltd.com

7. Social media

We may link to platforms like Reddit, OnlyFans, Telegram, or TripAdvisor. If you click, their rules and data appetite apply.

8. Updates

When we activate new tools or networks, we’ll update this page.

9. Cookies & Consents

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool "Real Cookie Banner". Details on how "Real Cookie Banner" works can be found at https://devowl.io/rcb/data-processing/.

The legal basis for the processing of personal data in this context are Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

Bottom line:
We don’t want your data. We want your results.
Everything you give us stays with us as long as it makes sense – and then it’s gone.