Privacy Policy

1. Data Controller

MS-STRATEGY & CONSULTING LTD
Georgiou Karaiskaki 11-13, CARISA SALONICA, Office 102
7560 Pervolia, Larnaca, Cyprus
Registration Number: HE 487829

Represented by: Maik Schwede (Sole Director)
Email: [email protected]
Phone: +357 97 478421

2. Overview of Data Processing

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in the privacy policy below.

3. Legal Basis

Your data is processed on the basis of the following legal grounds under the GDPR (Regulation (EU) 2016/679):

  • Art. 6(1)(a) GDPR - Consent (e.g. for cookies, newsletters, tracking)
  • Art. 6(1)(b) GDPR - Performance of a contract (e.g. appointment booking, contact requests)
  • Art. 6(1)(f) GDPR - Legitimate interest (e.g. analytics, security)

4. Hosting

This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Cloudflare is certified under the EU-US Data Privacy Framework. When you visit our website, server log files are automatically collected:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Hostname of the accessing device
  • Time of the server request
  • IP address (anonymized)

Legal basis: Art. 6(1)(f) GDPR. Details: Cloudflare Privacy Policy.

In addition, we use Cloudflare Web Analytics, a privacy-friendly web analytics service by the same provider. Cloudflare Web Analytics does not set cookies, does not use fingerprinting and does not store any personal data; it only collects aggregated, anonymous metrics such as page views, load times and referrers. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in audience measurement without intruding on privacy).

5. Cookies

Our website uses cookies. These are small text files that your web browser stores on your device. We distinguish between:

Technically Necessary Cookies

These cookies are required for the operation of the website and cannot be disabled. They are usually only set in response to actions taken by you (e.g. language settings, form data). Legal basis: Art. 6(1)(f) GDPR.

Analytics and Marketing Cookies

These cookies are only set with your explicit consent (cookie consent banner). They are used to analyze user behavior and deliver personalized advertising. Legal basis: Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future: click 'Cookie settings' at the bottom of any page and choose 'Decline'. Withdrawing is as easy as giving consent.

6. Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies that enable analysis of your use of the website.

  • According to Google, Google Analytics 4 does not log or store IP addresses (Google Help: IP masking in Google Analytics)
  • Event data retention in Google Analytics: 14 months
  • Google Signals is disabled
  • Google Analytics is only loaded after you click 'Accept' in the cookie banner. Before that, no connection to Google is made.
  • Data is processed on servers in the EU (where possible)
  • Google is certified under the EU-US Data Privacy Framework
  • A data processing agreement (DPA) with Google is in place

Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).
Withdrawal: at any time via 'Cookie settings' at the bottom of any page.
Opt-out: Google Analytics Opt-out Browser Add-on.

7. Google Tag Manager

This website uses the Google Tag Manager from Google Ireland Limited. It is a management tool for triggering other tags, here Google Analytics. The Google Tag Manager itself does not set any cookies. It is only loaded after you have given consent in the cookie banner. Only then does your browser connect to Google's servers, which transmits your IP address. Without consent, the Tag Manager is not loaded. Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).

8. Meta Pixel (Facebook Pixel)

We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). The Meta Pixel allows us to:

  • Measure the effectiveness of Facebook/Instagram advertisements
  • Create custom audiences for targeted advertising
  • Analyze visitor behavior after clicking on an advertisement

Data transmitted to Meta includes IP address, browser information, page views, and actions on the website. Meta is certified under the EU-US Data Privacy Framework.

Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).
Opt-out: Facebook Ad Settings.

9. Fonts (hosted locally)

This website uses the fonts Inter and Instrument Serif. The font files are stored on our own web server and loaded from there. No connection to Google Fonts or any other Google server is made when you visit a page.

10. Appointment Booking (Calendly)

For appointment bookings, we use Calendly (Calendly LLC, 3423 Piedmont Road NE, Atlanta, GA 30305, USA). When booking an appointment, the following data is collected: name, email address, phone number (if applicable), and the selected appointment time.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures).

11. Contact via Email

If you contact us by email, your information, including the contact details you provide, will be stored for the purpose of processing the inquiry and for possible follow-up questions. We will not share this data without your consent.

Legal basis: Art. 6(1)(b) GDPR (for contract-related inquiries) or Art. 6(1)(f) GDPR (for other inquiries).

12. Social Media Presence

We maintain online presences on social networks (including YouTube, Instagram, LinkedIn, Facebook). When you visit one of these networks, the privacy policies of the respective operator apply. Please note that your data may be processed outside the EU.

13. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR) - What data we store about you
  • Right to rectification (Art. 16 GDPR) - Correction of inaccurate data
  • Right to erasure (Art. 17 GDPR) - Deletion of your data
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR) - Objection to processing
  • Right to withdraw consent (Art. 7(3) GDPR) - At any time with effect for the future

To exercise your rights, contact: [email protected]

14. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority.

Competent authority in Cyprus:
Office of the Commissioner for Personal Data Protection
1 Iasonos Street, 1082 Nicosia, Cyprus
www.dataprotection.gov.cy

15. SSL/TLS Encryption

This website uses SSL/TLS encryption for security purposes. An encrypted connection is indicated by the browser address bar changing from 'http://' to 'https://' and by the lock icon in your browser bar.

16. Updates to this Privacy Policy

This privacy policy is currently valid (as of: November 2026). Due to the further development of our website or changes in legal requirements, it may become necessary to update this privacy policy.