Privacy policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
CMC Certus Management Consultants Ltd, Serghides House, Suite 102, 61 Archbishop Makarios III Avenue, 6017 Larnaka, Republik Zypern.
Email: kontakt@cmc-family-office.com, Director: Florian Wilk.
2. General information on data processing
As a rule, we process personal data of our users only to the extent necessary to provide a functional website together with our content and services. Processing generally takes place only with the user's consent or where a legal basis permits it.
3. Accessing the website and server log files
When the website is accessed, the hosting provider automatically records information transmitted by your browser (such as browser type, operating system, referrer URL, IP address and the time of access). This data serves the technical provision and security of the website. The legal basis is the legitimate interest under Art. 6(1)(f) GDPR.
4. Getting in touch
If you contact us by email, phone, WhatsApp or via the contact form, your details are stored to handle the enquiry and in case of follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or (f) GDPR (legitimate interest in responding).
The contact form on this website opens your local email program; no data is stored on this server in the process. If you make contact via WhatsApp, the privacy provisions of the respective provider additionally apply.
5. Hosting
This website is hosted by a service provider. The host processes the data arising in the course of operating the website on our behalf on the basis of a data-processing agreement under Art. 28 GDPR.
6. Cookies and fonts
In its basic operation, this website uses no tracking cookies and no cookies for advertising purposes. Technically necessary elements serve solely the functioning of the page. Fonts are served locally from our own server; your IP address is not transmitted to external providers (such as Google Fonts). A cookie consent banner is therefore not required.
7. Your rights
Under the GDPR you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw any consent given at any time with effect for the future.
8. Right to complain
You have the right to lodge a complaint with a data-protection supervisory authority about the processing of your personal data – in Cyprus with the Commissioner for Personal Data Protection.
9. Status
This privacy policy is dated June 2026. Further development of the website or changed legal requirements may make an adjustment necessary.