Policy Page

Last updated: June 10, 2026

This Privacy Policy explains how SCANSPACE HOLDING LTD (“the Company”, “We”, “Us” or “Our”) collects, uses, discloses and protects Your personal data when You use our website and related services, and describes Your rights under the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Cyprus Law Providing for the Protection of Natural Persons with regard to the Processing of Personal Data, Law 125(I)/2018 (“Cyprus Data Protection Law”).

By using the Service You acknowledge that You have read this Privacy Policy. Where We rely on Your consent, We will ask for it separately and You may withdraw it at any time.

1. Data Controller

The data controller responsible for Your personal data is:

SCANSPACE HOLDING LTD
Charalampou Mouskou, 20-1A, 8010, Paphos, Cyprus
Email: info@scanspace.cy
Website: https://scanspace.cy/

For any question relating to data protection or to exercise Your rights, please use the contact details above. We have not appointed a Data Protection Officer, as We are not required to do so under Article 37 GDPR; data protection enquiries are handled at the address above.

2. Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Account: means a unique account created for You to access our Service or parts of our Service.
Affiliate: means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
Company (referred to as “the Company”, “We”, “Us” or “Our”): refers to SCANSPACE HOLDING LTD, Charalampou Mouskou, 20-1A, 8010, Paphos, Cyprus.
Consent: means any freely given, specific, informed and unambiguous indication of Your wishes by which You signify agreement to the processing of Your Personal Data.
Cookies: are small files placed on Your device by a website, containing details of Your browsing activity among other uses.
Country: refers to Cyprus.
Data Controller: means the Company, which determines the purposes and means of the processing of Personal Data.
Device: means any device that can access the Service, such as a computer, a cell phone or a digital tablet.
GDPR: means Regulation (EU) 2016/679 (General Data Protection Regulation).
Personal Data (or “Personal Information”): is any information relating to an identified or identifiable natural person.
Processing: means any operation performed on Personal Data, such as collection, recording, storage, use, disclosure or erasure.
Service: refers to the Website.
Service Provider (Processor): means any natural or legal person who processes the data on behalf of the Company.
Supervisory Authority: means the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.
Usage Data: refers to data collected automatically, generated by the use of the Service or from the Service infrastructure (for example, the duration of a page visit).
Website: refers to ScanSpace, accessible from https://scanspace.cy/.
You: means the individual accessing or using the Service, or the legal entity on behalf of which such individual is acting.

3. Personal Data We Collect

Personal Data You provide

While using Our Service, We may ask You to provide certain personally identifiable information, which may include but is not limited to:

Email address
First name and last name
Phone number

Where the Service involves orders or payments, We may also process order details and billing information. Payment card data is processed directly by our payment service providers; We do not store full card numbers on our systems.

Usage Data

Usage Data is collected automatically when using the Service. It may include Your Device’s IP address, browser type and version, the pages You visit, the date and time of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data. When You access the Service through a mobile device, We may collect the device type, device ID, IP address, mobile operating system and mobile browser type.

Cookies and Tracking Technologies

We use Cookies and similar tracking technologies (beacons, tags, scripts) to operate, secure, analyze and improve the Service. Cookies can be “Persistent” or “Session” Cookies.

Where required by law, non-essential cookies (such as analytics, advertising and remarketing cookies) are set only with Your prior consent. You can give, withdraw or change Your consent at any time using our cookie preferences tool or through Your browser/device settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Necessary / Essential Cookies (Session): required to provide the Service, authenticate users and prevent fraudulent use. These do not require consent.
Cookie Consent Cookies (Persistent): remember whether You have accepted the use of cookies.
Functionality Cookies (Persistent): remember choices You make (e.g. login details, language) to provide a more personal experience.

For details, please see our separate Cookies Policy.

4. How and Why We Use Your Personal Data

The Company may process Personal Data for the following purposes:

To provide and maintain the Service, including monitoring usage.
To manage Your Account and Your registration as a user.
To perform a contract with You, including the processing and fulfilment of orders for products or services You purchase.
To contact You by email, phone, SMS or push notifications regarding updates, security notices or service-related information.
To send You marketing about goods, services and events similar to those You have purchased or enquired about, subject to the rules in Section 9 and unless You opt out.
To manage Your requests and respond to enquiries.
To prevent fraud and ensure security of the Service and our users.
For business transfers, such as a merger, restructuring or sale of assets.
For analytics and improvement, including identifying usage trends and measuring the effectiveness of campaigns.
To comply with legal obligations, such as accounting, tax and consumer-protection requirements.

5. Legal Basis for Processing (Article 6 GDPR)

We process Personal Data only where We have a lawful basis to do so. The basis depends on the purpose:

Purpose	Legal basis under Article 6 GDPR
Creating and managing Your Account; processing and delivering orders	Performance of a contract (Art. 6(1)(b))
Service-related and security communications	Performance of a contract / legitimate interests (Art. 6(1)(b)/(f))
Keeping accounting, tax and transaction records; responding to lawful requests by authorities	Compliance with a legal obligation (Art. 6(1)(c))
Fraud prevention, network and information security, defending legal claims, basic service analytics	Legitimate interests (Art. 6(1)(f))
Non-essential cookies (analytics, advertising); marketing to non-customers; any processing of special-category data	Consent (Art. 6(1)(a), and Art. 9(2)(a) where applicable)
Direct marketing of similar products/services to existing customers	Legitimate interests, subject to a free and easy right to opt out (Art. 6(1)(f); see Section 9)

Where We rely on legitimate interests, We have balanced those interests against Your rights and freedoms. You may ask Us for more information about this assessment using the contact details in Section 1.

Provision of data: Some Personal Data is required to enter into and perform a contract with You (for example, to create an Account or fulfil an order). If You do not provide it, We may be unable to provide the relevant part of the Service.

6. Sharing and Disclosure of Your Personal Data

We may share Your Personal Data in the following situations:

With Service Providers (Processors): hosting, payment processing, analytics, communications and similar providers acting on Our instructions under a written data processing agreement.
For business transfers: in connection with a merger, sale of assets, financing or acquisition.
With Affiliates: who are required to honour this Privacy Policy.
With business partners: to offer You certain products, services or promotions, where applicable.
With public authorities / law enforcement: where required by law or in response to valid legal requests.
With Your consent: for any other purpose disclosed to You at the time.

7. Retention of Your Personal Data

We retain Personal Data only for as long as necessary for the purposes set out in this Policy, and to comply with our legal obligations, resolve disputes and enforce our agreements. Where possible We apply shorter retention periods and reduce identifiability by deleting, aggregating or anonymizing data. Unless otherwise stated, the periods below are maximum (“up to”) periods.

Account information: for the duration of Your account relationship plus up to 24 months after closure.
Customer support data (tickets, correspondence, chat transcripts): up to 24 months from closure.
Usage data (analytics, IP addresses, device identifiers, server logs): up to 24 months from collection, retained longer only where necessary for security, fraud prevention or legal compliance.
Accounting and tax records: retained for the period required by applicable Cyprus law.

When retention periods expire, We securely delete or anonymize Personal Data. Residual copies may remain in encrypted backups for a limited period and are not restored except where necessary for security, disaster recovery or legal compliance. You may request information about retention periods by contacting Us.

8. International Transfers of Your Personal Data

Your Personal Data may be processed at the Company’s operating offices and by Service Providers located outside the European Economic Area (EEA), where data protection laws may differ from those in Cyprus.

Where We transfer Personal Data outside the EEA, We ensure an appropriate safeguard is in place, such as:

a European Commission adequacy decision in respect of the recipient country; or
Standard Contractual Clauses (SCCs) approved by the European Commission, together with supplementary measures where appropriate.

You may request a copy of the relevant safeguards by contacting Us.

9. Direct Marketing and Your Choices

We send marketing communications only where permitted by the GDPR and the Cyprus Law Regulating Electronic Communications and Postal Services (Law 112(I)/2004).

To individuals who are not existing customers, We send electronic marketing only with prior consent.
To existing customers, We may send marketing about our own similar products or services on the basis of legitimate interests.
In every case, You are given a clear, free and easy way to object or unsubscribe — at the time Your contact details are collected and in every message We send.

You can opt out at any time using the unsubscribe link in our emails or by contacting Us.

10. Your Rights Under the GDPR

Subject to the conditions and exceptions set out in the GDPR, You have the right to:

Access — obtain confirmation of whether We process Your Personal Data and a copy of it (Art. 15).
Rectification — have inaccurate or incomplete data corrected (Art. 16).
Erasure (“right to be forgotten”) — request deletion of Your data where there is no overriding reason to keep it (Art. 17).
Restriction — request that We limit processing in certain circumstances (Art. 18).
Data portability — receive data You provided in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible (Art. 20).
Object — object to processing based on legitimate interests, and object at any time to processing for direct marketing (Art. 21).
Withdraw consent — where processing is based on consent, withdraw it at any time, without affecting the lawfulness of prior processing (Art. 7(3)).
Not be subject to solely automated decisions producing legal or similarly significant effects (Art. 22).

To exercise any of these rights, contact Us at info@scanspace.cy. We will respond without undue delay and in any case within one month of receiving Your request, as required by Article 12 GDPR. This period may be extended by two further months for complex or numerous requests, in which case We will inform You. Exercising Your rights is free of charge, save for manifestly unfounded or excessive requests.

11. Right to Lodge a Complaint

If You believe that Our processing of Your Personal Data infringes the GDPR or the Cyprus Data Protection Law, You have the right to lodge a complaint with the supervisory authority:

Office of the Commissioner for Personal Data Protection (Γραφείο Επιτρόπου Προστασίας Δεδομένων Προσωπικού Χαρακτήρα)
1 Iasonos Street, 1082 Nicosia, Cyprus (postal: P.O. Box 23378, 1682 Nicosia)
Website: www.dataprotection.gov.cy
Email: commissioner@dataprotection.gov.cy

We would, however, appreciate the opportunity to address Your concerns before You approach the Commissioner, so please consider contacting Us first.

12. Automated Decision-Making and Profiling

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning You or similarly significantly affect You. If this changes, We will update this Policy and, where required, obtain Your consent or provide a suitable legal basis and safeguards.

13. Security of Your Personal Data

We implement appropriate technical and organizational measures to protect Your Personal Data against unauthorized access, alteration, disclosure or destruction. However, no method of transmission over the Internet or method of electronic storage is completely secure, and We cannot guarantee absolute security. In the event of a personal data breach likely to result in a risk to Your rights and freedoms, We will notify the Supervisory Authority and, where required, affected individuals in accordance with Articles 33 and 34 GDPR.

14. Children’s Privacy

Our Service is not directed to children under the age of 16, and We do not knowingly collect Personal Data from them. If You are a parent or guardian and become aware that Your child has provided Us with Personal Data, please contact Us, and We will take steps to remove it. Where We rely on consent to provide information society services to a child, We comply with the applicable minimum age under the Cyprus Data Protection Law and will seek parental consent where required.

15. Links to Other Websites

Our Service may contain links to third-party websites that are not operated by Us. We have no control over and assume no responsibility for the content or privacy practices of those sites. We advise You to review the privacy policy of every site You visit.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page, update the “Last updated” date, and — where the changes are significant — notify You by email and/or a prominent notice on the Service before they take effect. Changes are effective when posted on this page.

17. Contact Us

If You have any questions about this Privacy Policy or wish to exercise Your rights, You can contact Us:

By email: info@scanspace.cy
By post: SCANSPACE HOLDING LTD, Charalampou Mouskou, 20-1A, 8010, Paphos, Cyprus
Via our website: https://scanspace.cy/

Search products