01 Who We Are (Data Controller)
FusionNet Tech is the Data Controller responsible for your personal data. We are a technology services company registered and operating in the Republic of Cyprus, providing CCTV installation, alarm systems, structured cabling, rack and server infrastructure, networking, and fibre optic services.
Company
FusionNet Tech
Registered Address
Agiou Kendeou 10, Office 12
6036 Larnaca, Cyprus
Telephone
Email (Data Queries)
privacy @fusionnet.tech
FusionNet Tech does not currently meet the threshold requiring a mandatory Data Protection Officer under Article 37 GDPR. Data protection enquiries should be directed to the contact details above. We remain committed to full GDPR compliance and will appoint a DPO if our processing activities require one.
02 Personal Data We Collect
We only collect personal data that is necessary, relevant, and limited to what is required for the purposes described in this policy (data minimisation principle, Article 5(1)(c) GDPR).
2.1 Data You Provide Directly
- Contact & Enquiry Data: Name, email address, telephone number, and the content of messages submitted via our contact form or sent by email or phone.
- Client Data: Company name, billing address, installation site address, and project-specific information provided when entering into a service agreement.
- Payment Data: Invoicing details (name, address). We do not store card numbers — payments are processed by authorised third-party providers.
2.2 Data Collected Automatically
- Technical Data: IP address, browser type and version, operating system, referring URLs, and pages visited on our website, collected via web server logs and analytics tools.
- Cookie Data: Information stored via cookies and similar tracking technologies. See Section 9 (Cookie Policy) for full details.
2.3 CCTV and Security System Data
FusionNet Tech installs CCTV systems on behalf of our clients. We do not access, store, or process footage or recordings captured by systems we install unless specifically contracted to do so for maintenance or fault-diagnosis purposes. Our clients are the Data Controllers for any footage captured by installed systems and are independently responsible for GDPR compliance in their use of those systems.
03 How We Use Your Personal Data
| Purpose | Type of Data | Legal Basis |
|---|---|---|
| Responding to enquiries and providing quotes | Contact data, project details | Legitimate interests / Pre-contractual steps |
| Delivering services and fulfilling contracts | Client data, contact data, site address | Performance of contract |
| Invoicing and financial record-keeping | Billing data, contact data | Legal obligation / Contract |
| After-sales support and warranty service | Contact data, service records | Performance of contract / Legitimate interests |
| Improving our website and services | Technical data, cookie data | Legitimate interests (with consent for non-essential cookies) |
| Sending service updates or offers to existing clients | Contact data | Legitimate interests (with opt-out available) |
| Complying with legal obligations | Any relevant data | Legal obligation |
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
04 Legal Basis for Processing (Article 6 GDPR)
We rely on the following lawful bases under Article 6 of the GDPR:
- Article 6(1)(a) — Consent: Where you have given clear consent, for example when accepting non-essential cookies or opting into marketing communications. You may withdraw consent at any time.
- Article 6(1)(b) — Performance of a Contract: Where processing is necessary to deliver services you have requested, or to take steps at your request before entering into a contract.
- Article 6(1)(c) — Legal Obligation: Where we are required by Cypriot or EU law to retain certain records (e.g. tax and accounting records under Cyprus tax law).
- Article 6(1)(f) — Legitimate Interests: Where processing is necessary for our legitimate business interests, such as responding to enquiries, improving our services, and maintaining client relationships, provided these interests are not overridden by your rights and freedoms.
Where we rely on legitimate interests, we have conducted a balancing assessment to ensure our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests at any time (see Section 8).
05 Sharing Your Personal Data
We do not sell, rent, or trade your personal data to third parties. We may share data with:
- Technology partners and suppliers: Such as Hikvision and AJAX Systems, only to the extent necessary to process warranty claims, technical support, or equipment registration on your behalf.
- IT and hosting service providers: Who assist in operating our website, email systems, and business software. These act as Data Processors under binding Data Processing Agreements.
- Accounting and legal advisors: Where necessary for invoicing, tax compliance, or to enforce or defend legal claims.
- Regulatory authorities: Including the Cyprus Commissioner for Personal Data Protection, the Cyprus Tax Department, or other public authorities, where required by law or court order.
- Business successors: In the event of a merger, acquisition, or business transfer, personal data may be transferred to the new entity, subject to equivalent privacy protections.
All third parties who process personal data on our behalf are required to maintain appropriate security and to process data only on our documented instructions.
06 International Data Transfers
Cyprus is a Member State of the European Union. Personal data processed by FusionNet Tech is primarily stored and processed within the European Economic Area (EEA).
If we use any service providers whose processing occurs outside the EEA (for example, certain cloud-based software platforms), we ensure appropriate safeguards are in place as required by Chapter V of the GDPR, which may include:
- An adequacy decision by the European Commission confirming the third country provides an equivalent level of data protection;
- Standard Contractual Clauses (SCCs) approved by the European Commission;
- Other appropriate safeguards permitted under Article 46 GDPR.
You may request details of the safeguards we apply to international transfers by contacting us at the address in Section 14.
07 How Long We Keep Your Data
We retain personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law (storage limitation principle, Article 5(1)(e) GDPR).
| Data Category | Retention Period | Reason |
|---|---|---|
| Enquiries (no contract formed) | 12 months | To respond and follow up; then deleted |
| Client / contract records | 7 years after contract end | Cyprus tax law obligation (Tax Law Cap. 297) |
| Invoices and financial records | 7 years | Statutory accounting and VAT requirements |
| Warranty and service records | Duration of warranty + 2 years | After-sales support and liability |
| Website analytics data | 26 months | Standard analytics retention period |
| Cookie consent records | 13 months | Evidence of consent |
| Marketing opt-in records | Until opt-out + 2 years | Evidence of consent |
When data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.
08 Your Rights Under the GDPR
As a data subject under the GDPR, you have the following rights. You may exercise any of these rights free of charge by contacting us (see Section 14). We will respond within one calendar month of receiving your request (extendable by a further two months in complex cases, with notice).
Right of Access
You have the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of that data (Article 15 GDPR).
Right to Rectification
You have the right to have inaccurate personal data corrected and incomplete data completed without undue delay (Article 16 GDPR).
Right to Erasure
You have the right to request deletion of your personal data ("right to be forgotten") where there is no compelling reason for us to continue processing it (Article 17 GDPR).
Right to Restriction
You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being verified (Article 18 GDPR).
Right to Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format (Article 20 GDPR).
Right to Object
You have the right to object at any time to processing based on our legitimate interests or for direct marketing purposes. We must stop processing unless we can demonstrate compelling legitimate grounds (Article 21 GDPR).
Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal (Article 7(3) GDPR).
Right to Lodge a Complaint
You have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection or another supervisory authority in the EU Member State of your habitual residence (Article 77 GDPR).
To exercise any of the rights above, please contact us in writing at privacy @fusionnet.tech or by post to our registered address. We may need to verify your identity before processing your request. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.
09 Cookie Policy
Our website uses cookies and similar technologies. A cookie is a small text file placed on your device when you visit our website. We use cookies in accordance with Article 5(3) of the EU ePrivacy Directive (as applied in Cyprus) and GDPR.
9.1 Types of Cookies We Use
| Cookie Type | Purpose | Basis | Duration |
|---|---|---|---|
| Strictly Necessary | Essential for the website to function — e.g. storing your cookie consent preference. | No consent required (legitimate interest) | Session / 13 months |
| Analytical / Performance | Anonymised data on how visitors use our site (page views, referrers, session duration) to improve performance. | Consent required | Up to 26 months |
| Functional | Remembering user preferences such as language or display settings. | Consent required | Up to 12 months |
| Marketing / Targeting | We do not currently use marketing or advertising cookies on this website. | N/A | N/A |
9.2 Managing Your Cookie Preferences
When you first visit our website, you are presented with a cookie consent banner. You may:
- Accept All — consent to all cookie categories including analytical cookies.
- Decline — only strictly necessary cookies will be set.
- Change your preferences at any time via the "Cookie Preferences" link in the footer.
You can also control cookies through your browser settings. Please note that disabling cookies may affect website functionality. For guidance, visit allaboutcookies.org.
9.3 Third-Party Cookies
If you consent to analytical cookies, we may use Google Analytics (a service of Google LLC). Google Analytics uses cookies to compile anonymised statistics about website usage. Google's privacy practices are governed by the Google Privacy Policy. We have enabled IP anonymisation so that your full IP address is not stored.
10 Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage, in accordance with Article 32 GDPR. These measures include:
- Secure HTTPS connections for data in transit;
- Access controls limiting data access to authorised personnel only;
- Regular software updates and security patching;
- Staff awareness of data protection obligations;
- Secure disposal of physical and digital records.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Cyprus Commissioner for Personal Data Protection within 72 hours of becoming aware of the breach, and will inform affected individuals without undue delay where required by Article 34 GDPR.
11 Children's Privacy
Our services are directed at businesses and adult individuals. Our website is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data relating to a child, please contact us immediately so we can delete it.
12 Third-Party Links and Services
Our website may contain links to third-party websites (such as Hikvision and AJAX Systems). FusionNet Tech is not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.
Embedded third-party content or tools on our website are subject to those providers' own terms and privacy policies.
13 Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. The "Last Updated" date at the top of this page will be amended accordingly.
Where changes are material, we will take reasonable steps to notify you — for example by prominently displaying a notice on our website or contacting you directly if we hold your contact details and the change significantly affects your rights.
We encourage you to review this policy periodically. Your continued use of our website or services after changes are posted constitutes acceptance of those changes.
14 Contact Us & Complaints
For any questions, concerns, or to exercise your data protection rights, please contact us:
Data Queries & Rights Requests
privacy @fusionnet.tech
Telephone
Postal Address
FusionNet Tech
Agiou Kendeou 10, Office 12
6036 Larnaca, Cyprus
Response Time
We aim to respond to all data protection requests within 30 days of receipt.
Supervisory Authority
If you are not satisfied with our response to a data protection concern, or if you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the competent supervisory authority:
Address: 1 Iasonos Street, 1082 Nicosia, Cyprus
Postal: P.O. Box 23378, 1682 Nicosia
Tel: +357 22 818 456
Email: commissioner @dataprotection.gov.cy
Website: www.dataprotection.gov.cy
You may also contact the supervisory authority in the EU Member State in which you habitually reside or work, or in which the alleged infringement occurred.