SECTION 1 – INTRODUCTION

This Website Notice applies to A.M.Y Realty Ltd and its Subsidiaries (herein after referred to as the “Company” or “we” or “us”), as the Data Controller of the personal data collected from the website: www.amy-realty.com The protection of your personal data is a top priority to us and we are committed to protect your personal data we collect. Keeping your data secure and private is part of our philosophy for delivering high standards of services.

The purpose of this privacy notice is to provide a clear explanation of when, why and how we collect and use your personal data when you visit our website, the way we process your personal data and the third parties with which we are sharing these personal data, and your rights. We have designed it to be as user friendly as possible and have separate it in sections to make it easy for you to find the information that is most relevant to you. This privacy notice was last updated on 23 June 2022.

The European Union (EU) Data Protection Law, the General Data Protection Regulation (“GDPR” also referred to as the Regulation), came into effect on 25th of May 2018. The GDPR (EU) 2016/679 gives individuals in the EU more control over how their data is used and places certain obligations on Data Controllers that process the information of those individuals.

SECTION 2 – ABOUT US

A.M.Y REALTY LTD. is a company registered in Cyprus under registration number HE 433754 with its registered office located at Athinon 82, Akinita Ieras Mitropoleos, 2nd floor, Flat/Office 211, 3040 Limassol, Cyprus.

SECTION 3 – WHO THIS PRIVACY NOTICE IS DIRECTED TO

This privacy notice is directed to natural persons (hereinafter our “clients”) who are either past, current or potential clients, or are authorised representatives/agents of past, current or potential clients, or are beneficial owners in legal entities who are past, current or potential clients.

SECTION 4 – IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER AND DATA PROTECTION OFFICER.

(a) DATA CONTROLLER

A.M.Y Realty Ltd, a Cyprus private limited liability company, having registration number HE 433754, is the “Data Controller” pursuant to the GDPR, and related Cyprus Law, and determines how your personal data is kept and processed.

The main establishment and the central administration of the Data Controller is situated at Athinon 82, Akinita Ieras Mitropoleos, 2nd floor, Flat/Office 211, 3040 Limassol, Cyprus.

(b) DATA PROTECTION OFFICER («DPO»)/ RESPONSIBLE PERSON FOR GDPR

We have designated a Data Protection Officer («DPO»)/ Responsible Person for GDPR, who is responsible to monitor compliance with this privacy notice as well as the applicable laws and liaise with the Cyprus Supervisory Authority, namely the Office of the Commissioner for Personal Data Protection.

The DPO/ Responsible Person for GDPR may be contacted directly with regards to all matters concerning this privacy notice and other privacy policy and the processing of your personal data including the enforcement of all applicable and available rights.

Official requests may be made by posted to A.M.Y Realty Ltd, or electronically at info@amy- realty.com

SECTION 5 – HOW DO WE COLLECT AND PROCESS YOUR PERSONAL DATA COLLECTED THROUGH OUR WEBSITE

We collect personal information that you voluntarily provide us with. Personal Information means information that can be used to identify you personally, which information may include your name, address, phone number, and email address.

Your personal data is not transmitted to third parties unless it is necessary for fulfilling your request. Should this be necessary please be assured that such process will be in a complete confidential manner.

Some data we collect through our website are used for the improvement of user experience or for statistical purposes.

When you visit our site, our server may collect technical information, this information will not identify you personally but may include information in relation to the device, operating system and your IP address as well as information about your usage of the website such as your previous page views, page clicks.

SECTION 6 – DO WE USE COOKIES?

We also collect and process certain browsing data from cookies, which are pieces of data stored directly on the computer or mobile device that you are using. We collect first party cookies that is set by the domain, such as the computer you are using to access the internet, or the specific website that you have visited. We use the two main types of cookies, persistent and session cookies. A persistent cookie remains on your device after you have visited our website. These cookies will help us identify you as a unique anonymous visitor to our website by storing a randomly generated number.

We remind you that you may disable cookies through your browser settings, in such case we cannot guarantee our functionality of the website.

We also remind you that we use Google Analytics, Facebook like and share as well as Google Maps and you are reminded to familiarise yourself with their cookie policies.

A session cookie is temporary and only exists for the period you access the website for (or until the browser is closed after visiting our website). This particular type of cookie assists us by helping our website remember your selections and choices whilst visiting our website and therefore avoids you having to re-enter information. This type of cookie is anonymous and does not contain personal information and cannot be used to identify you.

SECTION 7 – WHAT CATEGORIES OF PERSONAL DATA DO WE COLLECT?

We collect and use several types of information the individuals we co-operate with, including information by which you may be personally identified and that is defined as personal data under applicable law such as your first and last name, address, contact details (telephone, email), IP Address identification data.

Should there be a need to further process the personal data for a purpose other than that for which they were initially collected, you will be informed in advance about the additional purpose and the relevant details in respect to the further processing.

SECTION 8 – PERSONAL DATA RETENTION AND DELETION

The Company is committed not to retain personal data for a longer period that it is legally necessary for fulfilling the purpose of which they are collected, regarding the reason that the personal data was obtained, and we will make sure we will delete it securely. For additional information in respect of our retention please read our Privacy Police.

SECTION 9 – LINKS TO OTHER WEBSITES

We would like to inform you that this website links to other websites, please note that once you leave our website, we cannot take responsibility of any personal data being shared on the third party website and you are requested to familiarise yourself with the privacy notice of that specific third party.

SECTION 10 – DO WE CHANGE THIS PRIVACY NOTICE?

We may modify or revise our privacy notice from time to time to reflect our current privacy practices and in order for the Company to meet changes in our business needs, to satisfy our customers, partners and service providers. When we make changes to the privacy notice, we will revise the “updated” date at the top of this page. We encourage you to periodically review this privacy notice that can be found at our website www.amy-realty.com to be informed about how the Company is protecting your Personal Data. In the event of significant changes, the Company may also choose to email concerned users with the new details.

SECTION 11 – WHAT ARE YOUR DATA PROTECTION RIGHTS?

Subject to the provisions of the GDPR, you have certain rights regarding the Personal Data we collect, process or disclose and that is related to you, including the right:

• To receive access to your personal data (right to access – Article 15 of the Regulation).

• To rectify inaccurate personal data concerning you (right to data rectification – Article 16 of the Regulation);

• to request deletion/ erasure of your personal data (right to erasure/deletion, “right to be forgotten” – Article 17 of the Regulation);

• to receive the Personal Data provided by you in a structured, commonly used and machine-readable format and to transmit those Personal Data to another data controller (right to data portability – Article 20 of the Regulation);

• to object to the use of your personal data where such use is based on our legitimate interests or on public interests (right to object – Article 21 of the Regulation);

• in some cases, to request the restriction of processing of your personal data (right to restriction of processing – Article 18 of the Regulation);

• To withdraw the consent given to us with regard to the processing of your personal data at any time. Note that any withdrawal of consent will not affect the lawfulness of processing based on consent before it was withdrawn.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information or to exercise any of your other rights. This helps us to ensure that personal data is not disclosed to any person who has no right to receive it. No fee is required to make a request unless your request is clearly unfounded or excessive. Depending on the circumstances, we may be unable to comply with your request based on other lawful grounds.

SECTION 12 – HOW TO RAISE A COMPLAINT

To exercise any of the above rights, or for any questions or complaints about our use of your personal data, please contact our Data Protection Officer/ Responsible Person for GDPR, either by post at Athinon 82, Akinita Ieras Mitropoleos, 2nd floor, Flat/Office 211, 3040 Limassol, Cyprus, or electronically at info@amy-realty.com.

Complaints may also be lodged to the supervisory authority in Cyprus (Office of the Commissioner for Personal Data Protection, by post at 1 Iasonos Str. 1082, Nicosia, Cyprus. More information can be found at http://www.dataprotection.gov.cy