Scope of this declaration
The General Data Protection Regulation (GDPR) sets rules for using personal data and gives individuals rights. This page describes the controls implemented in this preview and the rights relevant to visitors. It is not a certification that every business process has been audited. The privacy policy explains the information and services involved.
Controls in this preview
- Enquiry preparation takes place in your browser; no automatic submission or form database is connected.
- The privacy acknowledgement and optional marketing preference are separate, unticked controls.
- Facebook video players load only after an explicit choice for that video, with a visible removal control.
- HTTPS and a server-side password protect this client preview. Public access to its event content has not been enabled.
- No advertising pixel, analytics script, profiling or consequential automated decision-making has been added.
A purpose and a lawful basis
Each use of personal data needs a defined purpose and a suitable legal basis. Relevant bases may include steps you request before booking, performance of a contract, a specific legal obligation, legitimate interests assessed against your rights, or consent for an optional activity. They are not interchangeable. Reading a privacy notice is not blanket consent to future uses.
Before public launch, the owner must confirm the controller’s legal identity, responsible contact, processing records, recipients, retention rules, supplier arrangements and any international-transfer safeguards. The process for handling rights requests also requires confirmation.
Rights you can exercise
- Access: ask whether personal data about you is being processed and request a copy and relevant information.
- Correction: ask to correct inaccurate or incomplete information.
- Erasure or restriction: request deletion or limits on use where the GDPR conditions apply. A legal duty or valid legal claim can affect what must be retained.
- Portability: where processing is automated and based on consent or a contract, request the data you provided in a reusable format.
- Objection: object on grounds relating to your situation to processing based on legitimate interests; you may object to direct marketing at any time.
- Withdrawal: withdraw consent as easily as it was given. This does not undo lawful processing carried out before withdrawal.
How to make a request
Contact Best Events using +357 94 421560 or the contact page, explain your request and identify the relevant enquiry, photograph or page. Share only the details needed to locate the information. Proportionate identity checks may be necessary; do not send an identity document unless a justified secure process is agreed.
The GDPR normally requires a response within one month. For complex or numerous requests, an extension of up to two further months is possible, with an explanation within the first month. Requests are generally free; limited statutory exceptions apply to manifestly unfounded or excessive requests. A refusal must be explained, including available complaint and judicial remedies.
Your choices and independent help
You can use this website without loading Facebook videos. Remove an enabled player using its removal button, or reload the page to reset the choice. To clear third-party cookies, use your browser or Meta’s own controls. The enquiry form’s marketing preference is optional and does not affect enquiry preparation.
You may contact the Cyprus Commissioner for Personal Data Protection at commissioner@dataprotection.gov.cy, or another competent supervisory authority, without first contacting Best Events. Supervisory authority directory.