Privacy Policy

Last updated 26/11/2026

Ktima Demosthenous respects the privacy of the people who visit our website, contact our team and organise or attend events with us. This policy explains what personal information we handle, why we use it, who may receive it and the choices and rights available to you.

1 Who is responsible for your information

KTIMA DIMOSTHENOUS LTD, trading as Ktima Demosthenous, is the controller of the personal information described in this policy. A controller decides why and how personal information is used.

Registered address: 21 Elassonos Street, 3115 Limassol, Cyprus
Website: https://www.ktimademosthenous.com/

Email: info@ktimademosthenous.com
Telephone: 7000 7015 or +357 96 538 601
Venue address: Odyssea Elyti 4, Parekklisia 4520, Limassol, Cyprus

Please direct privacy enquiries and rights requests to the email above with the subject “Privacy request”.

2 Scope of this policy

This policy covers website visits, enquiries, venue visits, quotations and arrangements for weddings, christenings, private events, corporate events and catering. It also covers personal information an organiser provides about event contacts or guests, where relevant to the arrangements.

Independent suppliers, social networks and other websites may handle information under their own privacy notices. A link to another website does not make us responsible for that organisation’s independent use of your information.

3 Information we handle and where it comes from

• Enquiry and contact details: your name, email address, phone number and messages, provided through our forms, email, telephone or in person.
• Event arrangements: proposed dates, event type, guest numbers, preferences, quotations, correspondence and any names or contact details needed to organise the event.
• Booking and financial records: the customer or business name, billing information, agreed services, invoices and payment or refund records where a booking proceeds.
• Technical information: data processed by the website and its providers, which may include IP address, browser and device details, requested pages, timestamps and security or error logs. Optional tracking is described in the Cookies Policy.
• Preferences and permissions: cookie choices and, where offered, marketing preferences and permissions for using photographs or testimonials.

Most information comes directly from you. Event organisers, an authorised representative or a supplier may provide information needed for your event. If someone provides your information, we will make this notice available and provide any further information required by law. Organisers should share this notice with the people concerned and provide only necessary details.

4 Why we use information and our legal grounds

Enquiries and quotations. We use your contact details and event requirements to respond, arrange a visit and prepare a proposal. Where you are the prospective customer, it is necessary to take steps at your request before entering a contract. For general enquiries or business representatives, we rely on our legitimate interest in responding to requests and managing business relationships.

Event delivery. We use booking and coordination information to perform our agreement with the customer. For guest details and supplier or business contacts who are not parties to that agreement, we rely on our legitimate interest in coordinating and delivering the event, subject to their rights and reasonable expectations. Sensitive information is treated separately below.

Accounts and legal obligations. We retain and use required financial and transaction records to meet applicable accounting, tax and other legal duties. We may also use relevant records to establish, exercise or defend legal claims, based on our legitimate interests or a legal obligation as appropriate.

Website administration and security. We process necessary technical information to operate the website, investigate faults and protect against misuse. Our lawful basis is our legitimate interest in a functioning and secure service, balanced against your rights. This does not replace consent where optional cookies require it.

Optional analytics and advertising. If these tools are used, we rely on your consent for the optional tracking and associated processing described in the Cookies Policy. You can withdraw that consent through the website’s cookie controls.

Marketing. If you choose to subscribe to promotional messages, we use your contact details on the basis of consent. You can unsubscribe using the message’s opt-out facility or by contacting us. An enquiry or booking does not by itself sign you up for marketing. Service messages about an enquiry or booking are separate from promotional messages.

5 Dietary needs and other sensitive information

Allergy, health, accessibility or religious information may be particularly sensitive. Please contact us before sharing it and provide only what is needed for the arrangement. Where identifiable sensitive information is necessary, we will obtain the affected person’s explicit consent, or identify another lawful basis and special-category condition before using it.

Please do not assume that an organiser’s consent covers every guest. Where consent is used, the individual or an appropriately authorised representative can withdraw it. We will explain any practical effect on the requested arrangement and discuss alternatives. Access and disclosure must be limited to those who need the information.

6 Photographs and information about children

A booking or attendance at an event does not automatically authorise us to use someone’s photograph or video for promotional purposes. Where we seek permission to publish identifiable images or testimonials, we will explain the intended use and obtain the necessary permission. A photographer engaged independently by you has their own responsibilities.

Our website enquiries are intended for adults organising events. Where arrangements involve children, we ask an adult organiser to provide only necessary information. Where a child’s consent must be provided or authorised by a parent or guardian, we will seek that authorisation. Promotional use of children’s images requires particular care and appropriate permission.

[CONFIRM WHETHER CCTV OR OTHER VENUE MONITORING IS USED. If used, identify the controller, purposes, legal basis, retention, recipients and access to the separate venue notice. If not used, remove this field.]

7 Who may receive your information

Information may be accessed by authorised team members and service providers supporting our website and event operations. Our website is hosted by Hostinger, and we use WordPress and Elementor to manage website content and Complianz to manage cookie preferences. We use Google Maps to display location information; depending on how the map is loaded and visitors’ choices, Google may receive technical information, including IP address and browser or device details. Google Analytics is not currently confirmed as active and will be reflected in this policy if introduced. We do not use Google Ads or AdSense. Other recipients may include event and catering suppliers, payment providers, accountants, legal advisers, insurers and public authorities where relevant to the services provided or required by law. Provider roles and disclosures depend on the actual services used. See Google Privacy Policy and the Hostinger Privacy Policy.

A provider acting on our instructions must be covered by appropriate data-processing terms. A recipient acting as an independent controller is responsible for its own processing. We limit what we share to what is necessary for the relevant purpose.

8 Transfers outside the European Economic Area

Our website is hosted by Hostinger on a server in France, with website backups stored in Lithuania. Both locations are within the European Economic Area (EEA). Certain providers, including Google in connection with embedded Google Maps, may process or access personal information outside the EEA. Any such transfers must be supported by an applicable lawful transfer mechanism, such as an adequacy decision or Standard Contractual Clauses where appropriate. The countries involved and relevant safeguards depend on the provider and its processing arrangements. You may contact us for information about safeguards applicable to your information.

Where information is transferred outside the European Economic Area, an applicable transfer mechanism is required. Depending on the destination and circumstances, this may be a European Commission adequacy decision or appropriate safeguards such as Standard Contractual Clauses, together with any necessary additional measures. Contact us for information about the relevant safeguards and how to obtain a copy, subject to lawful redactions.

9 How long we keep information

We retain personal information only for as long as it is needed for the stated purpose, applicable legal duties or relevant legal claims. The retention periods or criteria are:

• Enquiries that do not become bookings: for as long as reasonably needed to respond to and follow up on the enquiry, after which the information is deleted or anonymised unless needed for a legal claim or another lawful purpose.
• Booking and financial records: for the period required by applicable Cyprus accounting, tax and other legal obligations, calculated from the relevant transaction or accounting record date as required by law.
• Guest lists and dietary or accessibility details: only for the period reasonably needed to prepare for and deliver the event and complete immediate follow-up, unless a particular incident or legal obligation requires longer retention of relevant information.
• Website and security logs: for the period needed for website operation, troubleshooting and security investigation, subject to the hosting provider’s and security tools’ configured retention settings. Cookie lifetimes are listed in the Cookies Policy.
• Marketing and image permissions: until withdrawal or periodic review of whether the permission and related records remain necessary, subject to any necessary, limited retention of consent evidence or an opt-out record.

If a dispute or legal preservation requirement applies, relevant information may need to be kept longer. When retention is no longer justified, information should be deleted or anonymised; backup copies are removed under the hosting provider’s applicable backup rotation and deletion schedule.

10 Your privacy rights

Subject to the conditions and exceptions in data protection law, you can request access to your information, correction of inaccurate information, deletion or restriction of use. You may also request a portable copy of information you provided where processing is automated and based on consent or a contract.

You can object to processing based on legitimate interests for reasons relating to your situation. You can object to direct marketing at any time. If we rely on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Email info@ktimademosthenous.com to make a request. We may ask for proportionate information to verify your identity. We normally respond within one month. If a lawful extension is necessary because of the complexity or number of requests, we will explain this within that first month. Requests are normally free of charge.

11 Complaints

You may contact us about a privacy concern, but you do not have to contact us before complaining to a supervisory authority. In Cyprus, this is the Commissioner for Personal Data Protection: www.dataprotection.gov.cy; commissioner@dataprotection.gov.cy. You may also complain to the authority in the EU or EEA country where you live or work, or where the alleged infringement occurred.

12 Required information and automated decisions

We need enough contact and event information to respond to an enquiry or arrange a booking. If necessary information is not provided, we may be unable to fulfil that request. Information needed for legal obligations will be identified where relevant. Optional marketing and optional cookie choices are not a condition of making an enquiry.

We do not use solely automated decision-making, including profiling, that produces legal effects or similarly significant effects concerning individuals. Enquiries, quotations and event booking decisions are handled with human involvement.

13 Security and changes to this policy

We are responsible for applying security measures appropriate to the information and risks involved. See our Security and Compliance page for more information. We may update this policy when our services or practices change. Material changes will be communicated where required, and the date above will be updated.