Privacy Policy

Eurostia Investment Group Ltd is the data controller for all personal data collected through the website eurostiainvestment.com.

• ▸Registration Number: HE 447842
• ▸Registered Address: Agias Zonis 30A, Fantaros Court 302, 3027 Limassol, Cyprus
• ▸Email: info@eurostiainvestment.com
• ▸Website: eurostiainvestment.com

We collect the following categories of personal data:

• ▸Contact data: first name, last name, email address, phone number
• ▸Investment profile data: country of residence, investment amount range
• ▸Communication data: content of messages submitted through our contact form
• ▸Technical data: IP address, browser type, pages visited, time spent on site (via cookies — see Cookie Policy)
• ▸We do NOT collect: financial account details, payment card information, identity documents (unless specifically requested for KYC purposes and with your explicit consent)

We process your personal data on the following legal bases:

• ▸Legitimate interest (Art. 6(1)(f) GDPR): to respond to your investment enquiry, manage our investor relations, and improve our services
• ▸Consent (Art. 6(1)(a) GDPR): for marketing communications and non-essential cookies — you may withdraw your consent at any time
• ▸Contract performance (Art. 6(1)(b) GDPR): where you have entered into an investment agreement with us
• ▸Legal obligation (Art. 6(1)(c) GDPR): where applicable under Cypriot or EU law

Purposes of processing:

• ▸Responding to investor enquiries and sending investor dossiers
• ▸Managing investor relationships and reporting
• ▸Improving our website and services
• ▸Complying with legal and regulatory obligations
• ▸Sending investment updates and news (with your consent)

We retain your personal data for the following periods:

• ▸Contact form enquiries: 3 years from last contact
• ▸Investor relationship data: duration of the investment relationship + 5 years (legal obligation)
• ▸Marketing communications: until you withdraw consent or unsubscribe
• ▸Technical/analytics data (cookies): as specified in our Cookie Policy

After the applicable retention period, your data is securely deleted or anonymised.

We do not sell your personal data to third parties. We may share your data with:

• ▸IT service providers (website hosting, email services) — bound by data processing agreements
• ▸Professional advisors (legal, accounting, compliance) — under confidentiality obligations
• ▸Analytics providers (Google Analytics) — anonymised data only
• ▸Regulatory authorities — where required by law

All third-party processors are required to process your data in accordance with GDPR.

Under GDPR, you have the following rights:

• ▸Right of access — obtain a copy of your personal data
• ▸Right to rectification — correct inaccurate data
• ▸Right to erasure (‘right to be forgotten’) — request deletion of your data
• ▸Right to restriction — limit how we process your data
• ▸Right to data portability — receive your data in a structured format
• ▸Right to object — object to processing based on legitimate interest
• ▸Right to withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, contact us at: info@eurostiainvestment.com. We will respond within 30 days. You also have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection (www.dataprotection.gov.cy) or your local supervisory authority.