Last updated: 11 September 2026
This Privacy Policy explains how PA Cityroll Company Ltd, trading as CTRL Booking, handles personal data collected through this website.
Who is responsible for your data?
The data controller is PA Cityroll Company Ltd (registration number HE 396256), trading as CTRL Booking.
- Address: Shop 9, Margarita Gardens – Block B, Ikarou Street, Kato Paphos, 8041, Paphos, Cyprus
- Email: info@ctrlbooking.com
- Telephone: +357 99 276667
Data we collect
When you submit a contact or property-enquiry form, we may collect your name, telephone number, email address, property type and any information you include in your message. Our web server may also process technical information such as IP address, browser type, device information, requested pages, timestamps and security logs.
Why we use your data
- To respond to enquiries and take steps requested before entering into a contract.
- To communicate about services in which you have expressed an interest.
- To operate, secure, troubleshoot and improve the website based on our legitimate interests.
- To comply with legal obligations and establish, exercise or defend legal claims where necessary.
We do not use information submitted through the website for unrelated direct marketing unless you have consented or another lawful basis applies. We do not use automated decision-making that produces legal or similarly significant effects.
Cookies and third-party resources
The website may use essential WordPress cookies needed for security, administration or basic functionality. We do not currently use analytics or advertising cookies on this website. The site loads fonts from Google Fonts; as a result, technical information such as your IP address and browser details may be sent to Google when those resources load. External websites linked from this site operate under their own privacy and cookie policies.
Who may receive your data?
Personal data may be accessed by authorised CTRL Booking personnel and by service providers supporting website hosting, email, IT maintenance and business administration. These providers may process data only as necessary to provide their services and subject to appropriate contractual or legal safeguards. We may also disclose data where required by law or to protect legal rights.
International transfers
Some technology providers may process limited technical data outside the European Economic Area. Where applicable, we rely on lawful transfer mechanisms and appropriate safeguards required by data-protection law.
How long we retain data
General enquiries are normally retained for up to 24 months after the last meaningful contact, unless the enquiry develops into a business relationship or a longer period is needed for legal, accounting or dispute-resolution purposes. Technical and security information is retained only for as long as reasonably necessary for website operation, security and legal compliance.
Your rights
Subject to applicable conditions, you may request access to your personal data, correction, deletion, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw consent at any time without affecting earlier lawful processing.
To exercise a right, contact info@ctrlbooking.com. We may need to verify your identity before responding.
Complaints
If you believe your data has been handled unlawfully, please contact us first so we can investigate. You also have the right to complain to the Office of the Commissioner for Personal Data Protection in Cyprus or another competent supervisory authority.
Security and policy changes
We use reasonable organisational and technical measures to protect personal data, although no internet service can guarantee absolute security. We may update this policy when our practices, website technology or legal obligations change. The current version will be published on this page with its revision date.
Property estimation requests
When you request a property estimation, we collect the information you provide about you and the property. This can include your name, email address, telephone number, property name, purchase price, age and renovation history, internal and outdoor sizes, garden and pool details, condition, address, map location or coordinates, bedrooms, bathrooms, sleeping arrangements, view, property type and any additional information included in your message.
We use this information to assess the property’s likely short-term rental performance, calculate an indicative return on investment, prepare the requested estimate and contact you about it. Our legal bases are taking steps at your request before potentially entering into a contract and our legitimate interest in evaluating prospective management properties.
Estimation-request information is available only to authorised CTRL Booking personnel and service providers where reasonably necessary to operate the website or deliver the requested assessment. We normally retain estimation requests for up to 24 months after our last relevant communication, unless a longer period is required by law or an ongoing business relationship.