Privacy Policy

Last updated: 20 May 2026

1. Who we are

This website (mediterrahouse.com) is operated by the property owner for the purpose of marketing a single real estate unit: Penthouse Block O, Apt 03, Mediterra Residences, Alsancak, Northern Cyprus.

Contact: [email protected] · +90 (548) 844 33 52 (WhatsApp)

2. What data we collect

• Form submissions: name, email, phone (optional), country, message — when you voluntarily submit the inquiry form.
• Attribution data: UTM parameters and click identifiers from the URL (e.g. utm_source, gclid, fbclid) stored in your browser's localStorage for 30 days. Used only to understand which channel brought you here; never shared with third parties.
• Language preference: your chosen language (EN/RU/TR) stored in localStorage. Strictly necessary for site functionality.

We do not use third-party advertising pixels, cross-site trackers, or behavioural analytics. We do not set cookies.

3. Legal basis (GDPR Art. 6)

• Form data: your consent (Art. 6(1)(a)) — you actively submit the form.
• Attribution data in localStorage: legitimate interest (Art. 6(1)(f)) — solely first-party, no third-party access, no behavioural profiling.
• Language preference: legitimate interest (Art. 6(1)(f)) — strictly necessary for functionality.

4. How we use your data

• To respond to your property inquiry.
• To understand which advertising channel brought a given inquiry (first-party only).
• We do not sell, rent, or share your data with third parties for their marketing purposes.

5. Third-party services

• Cloudflare (hosting, CDN, security, email routing) — their privacy policy
• Telegram (private notification channel for the property owner when you submit the form) — their privacy policy
• Bunny.net (video delivery for the property film) — their privacy policy

6. Data retention

• Form submissions: retained until the property is sold, then deleted within 30 days.
• Attribution data (localStorage): automatically expires after 30 days; you can clear it any time via your browser settings.

7. Your rights (GDPR Art. 15–22)

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise these rights, contact us at [email protected] or via WhatsApp at +90 (548) 844 33 52.

8. Cookies and localStorage

This site does not use cookies. We use browser localStorage for:

• mediterra.lang — your language choice (strictly necessary)
• mediterra_attr — first-party marketing attribution (UTM / click-ID), 30-day expiry

9. International transfers

Form data is delivered to the property owner via Cloudflare Email Routing (EU/US infrastructure under EU Standard Contractual Clauses) and Telegram (operated globally, encrypted in transit). Cloudflare and Bunny.net operate globally with SCCs in place where required.

10. Changes to this policy

We may update this policy. The "last updated" date at the top will reflect the most recent revision.

11. Supervisory authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority (e.g., ICO in the UK, BfDI in Germany).