Privacy Policy

Last updated: 30 September 2026

1. Introduction

CKP 300 GROUP LIMITED respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit www.wisecode.media, contact us, submit information through our website, or otherwise interact with us in connection with our services.

This Privacy Policy has been prepared in accordance with:

  • Regulation (EU) 2016/679 – the General Data Protection Regulation (“GDPR”);

  • the Cyprus Law Providing for the Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of Such Data, Law 125(I)/2018, as amended; and

  • applicable Cyprus legislation concerning privacy and electronic communications, including Law 112(I)/2004, as amended.

2. Data Controller

The controller responsible for the processing of personal data in connection with this website is:

CKP 300 GROUP LIMITED
3 Mesologkiou
CY-6045 Larnaca
Republic of Cyprus

Company Registration Number: HE 499082

Email:

CKP 300 GROUP LIMITED operates this website under the brand WISECODE MEDIA.

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at the email address above.

3. What Is Personal Data?

Personal data means any information relating to an identified or identifiable natural person.

Depending on how you use our website or interact with us, personal data may include, for example:

  • name;

  • email address;

  • telephone number;

  • company name;

  • job title;

  • postal or business address;

  • information contained in messages or enquiries;

  • contractual and business information;

  • billing and transaction information;

  • IP address;

  • browser and device information;

  • operating system;

  • referring website;

  • date and time of access;

  • pages visited;

  • cookie identifiers;

  • consent preferences; and

  • other technical information generated when using our website.

We only process personal data where there is a lawful basis for doing so.

4. How We Collect Personal Data

We may collect personal data:

4.1 Directly from you

For example, when you:

  • contact us by email;

  • submit a contact form;

  • request information about our services;

  • request a quotation;

  • enter into a business relationship with us;

  • provide information in connection with a project;

  • communicate with us in another way.

4.2 Automatically

Certain technical information may be collected automatically when you visit our website, including through:

  • server log files;

  • cookies;

  • similar technologies;

  • consent management technologies; and

  • analytics technologies, where you have provided the required consent.

4.3 From third parties

Where necessary for our business activities, we may receive personal data from:

  • customers;

  • business partners;

  • contractors;

  • professional advisers;

  • service providers;

  • publicly available sources; or

  • other persons where the disclosure is legally permitted.

5. Purposes and Legal Bases of Processing

We process personal data only where permitted by applicable law.

Depending on the circumstances, processing may be based on one or more of the following legal bases.

5.1 Performance of a Contract or Pre-Contractual Measures

Article 6(1)(b) GDPR

We may process personal data where this is necessary:

  • to respond to a request for services;

  • to prepare an offer or quotation;

  • to communicate about a potential project;

  • to enter into a contract;

  • to perform contractual obligations;

  • to manage customer relationships; or

  • to provide our services.

5.2 Compliance with Legal Obligations

Article 6(1)(c) GDPR

We may process personal data where required to comply with legal obligations, including:

  • accounting obligations;

  • tax obligations;

  • corporate record-keeping requirements;

  • regulatory requirements;

  • court orders; or

  • obligations imposed by competent public authorities.

5.3 Legitimate Interests

Article 6(1)(f) GDPR

We may process personal data where necessary for our legitimate interests, provided that such interests are not overridden by your fundamental rights and freedoms.

Our legitimate interests may include:

  • operating and maintaining our website;

  • ensuring website and IT security;

  • preventing fraud and misuse;

  • detecting technical problems;

  • responding to general enquiries;

  • managing business relationships;

  • improving our services;

  • protecting our legal rights;

  • establishing, exercising or defending legal claims; and

  • ensuring the effective administration of our business.

Where processing is based on legitimate interests, we consider whether the processing is necessary and proportionate and whether your rights and interests outweigh our legitimate interests.

5.4 Consent

Article 6(1)(a) GDPR

Where required by law, we process personal data on the basis of your consent.

This may apply, in particular, to:

  • non-essential cookies;

  • analytics technologies;

  • advertising or marketing technologies;

  • certain third-party integrations; and

  • other processing activities for which consent is legally required.

You may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Website Access and Server Log Files

When you access our website, certain information may automatically be transmitted by your browser to our web server or hosting provider.

This may include:

  • IP address;

  • date and time of access;

  • requested page or file;

  • browser type and version;

  • operating system;

  • referring URL;

  • hostname of the accessing device;

  • amount of data transferred; and

  • HTTP status information.

We process this information for purposes including:

  • providing the website;

  • maintaining the technical stability of the website;

  • detecting errors;

  • protecting the website against attacks and misuse;

  • monitoring system security; and

  • investigating security incidents.

The legal basis is generally our legitimate interest pursuant to Article 6(1)(f) GDPR.

Server log data is retained only for as long as necessary for these purposes. Longer retention may occur where necessary to investigate a security incident, suspected misuse or legal claim.

7. Contact Forms, Email and Enquiries

If you contact us through our website, by email or through another communication channel, we process the information you provide.

This may include:

  • your name;

  • email address;

  • telephone number;

  • company information;

  • the content of your message; and

  • any files or information submitted by you.

The purpose of processing is to respond to your enquiry and, where applicable, to establish or manage a business relationship.

Depending on the nature of the enquiry, the legal basis is:

  • Article 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures; or

  • Article 6(1)(f) GDPR for general business communications.

Information relating to enquiries is retained for as long as reasonably necessary to deal with the enquiry and any subsequent communication.

Where the communication leads to a contractual relationship, relevant information may be retained for the duration of that relationship and for any additional period required by law or necessary for the establishment, exercise or defence of legal claims.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies are small files or pieces of information that may be stored on your device when you visit a website.

Cookies may be divided into different categories.

8.1 Strictly Necessary Cookies

Strictly necessary cookies are required for the operation, security or essential functionality of the website.

Where such cookies are strictly necessary to provide a service requested by you, they may be used without consent where permitted by applicable law.

8.2 Analytics, Preference and Marketing Cookies

Cookies or similar technologies that are not strictly necessary are only used where the required legal basis exists.

Where consent is required, such technologies are not activated until you have provided your consent through our cookie consent mechanism.

These technologies may be used for purposes such as:

  • measuring website usage;

  • understanding how visitors interact with the website;

  • improving website performance;

  • saving preferences;

  • measuring advertising performance; or

  • providing marketing functionality.

The legal basis for such processing is your consent pursuant to Article 6(1)(a) GDPR, where consent is required.

9. Cookie Consent and Withdrawal

Where our website requests consent for cookies or similar technologies, you may:

  • accept all optional technologies;

  • reject optional technologies; or

  • select individual categories.

You may change or withdraw your consent at any time through the cookie settings provided on our website.

Withdrawal of consent does not affect processing that was lawfully carried out before withdrawal.

You may also configure your browser to restrict or delete cookies. However, disabling strictly necessary cookies may affect the functionality of the website.

Details of individual cookies, technologies and third-party providers in use may also be provided through our cookie consent tool.

10. Analytics and Marketing Technologies

We may use analytics or marketing technologies to understand how our website is used and to improve our services and marketing activities.

Where such technologies involve access to information stored on your device or the placement of non-essential cookies, they will only be activated after obtaining the required consent.

Depending on the technology used, information processed may include:

  • IP address;

  • device information;

  • browser information;

  • approximate location;

  • pages viewed;

  • interactions with the website;

  • referring pages;

  • time spent on individual pages;

  • cookie or device identifiers; and

  • conversion or campaign information.

Where third-party analytics or marketing providers are used, these providers may process information on our behalf or, depending on the service, as independent or joint controllers.

The specific services and providers currently enabled on the website should be identified in the applicable cookie settings or consent interface.

You may withdraw your consent at any time.

11. Third-Party Content and External Services

Our website may contain or integrate content or services provided by third parties.

These may include, for example:

  • maps;

  • videos;

  • social media content;

  • external fonts;

  • analytics services;

  • marketing services; or

  • other embedded content.

Where the integration of third-party services results in personal data being transmitted to the relevant provider, such services will only be activated where there is an appropriate legal basis and, where required, after obtaining your consent.

Please note that third-party providers may process personal data under their own privacy policies.

12. Social Media Links

Our website may contain links to social media platforms or other external websites.

A simple link does not generally transmit personal data to the linked platform until you click the link.

Once you leave our website and access an external service, the processing of your personal data is governed by the privacy practices of the respective provider.

We are not responsible for the privacy practices of external websites operated independently by third parties.

13. Hosting and Technical Service Providers

We use external service providers where necessary to operate, maintain and secure our website and IT infrastructure.

Such providers may include:

  • website hosting providers;

  • IT service providers;

  • website maintenance providers;

  • email service providers;

  • cloud and storage providers;

  • security providers; and

  • backup providers.

Where such providers process personal data on our behalf, they act as processors within the meaning of Article 28 GDPR and are contractually required to process personal data only in accordance with our instructions and applicable data protection law.

14. Recipients of Personal Data

Personal data may be disclosed to third parties where this is necessary and legally permitted.

Recipients may include:

  • hosting and IT service providers;

  • email and communication providers;

  • cloud service providers;

  • professional advisers;

  • accountants;

  • auditors;

  • lawyers;

  • banks and payment service providers, where applicable;

  • contractors and business partners where necessary for the relevant service;

  • public authorities;

  • courts; and

  • regulatory or law-enforcement authorities where required by law.

We do not sell personal data.

15. International Transfers of Personal Data

We seek to process personal data primarily within the European Economic Area (“EEA”).

However, some service providers or their subcontractors may be located outside the EEA or may process personal data from countries outside the EEA.

Where personal data is transferred outside the EEA, we ensure that an appropriate legal transfer mechanism is used in accordance with Chapter V GDPR.

Depending on the circumstances, this may include:

  • an adequacy decision adopted by the European Commission;

  • the EU-U.S. Data Privacy Framework where applicable;

  • Standard Contractual Clauses approved by the European Commission;

  • Binding Corporate Rules; or

  • another lawful transfer mechanism permitted by the GDPR.

Where required, we also assess whether additional safeguards are necessary to ensure an adequate level of protection.

16. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

The relevant retention period depends on:

  • the purpose of processing;

  • the nature of the personal data;

  • contractual requirements;

  • statutory retention obligations;

  • accounting and tax obligations;

  • applicable limitation periods; and

  • whether the information is required to establish, exercise or defend legal claims.

Once personal data is no longer required and there is no legal basis for continued retention, it will be deleted, anonymised or otherwise securely disposed of.

17. Data Security

We implement appropriate technical and organisational measures to protect personal data against:

  • accidental or unlawful destruction;

  • loss;

  • alteration;

  • unauthorised disclosure;

  • unauthorised access; and

  • other unlawful forms of processing.

Our security measures are reviewed and adapted where appropriate, taking into account:

  • the state of the art;

  • implementation costs;

  • the nature and scope of processing;

  • the context and purposes of processing; and

  • the risks to the rights and freedoms of individuals.

However, no method of electronic transmission or storage can guarantee absolute security.

18. Your Rights

Under the GDPR, you may have the following rights in relation to your personal data.

18.1 Right of Access

You have the right to request confirmation as to whether we process personal data relating to you and, where applicable, to obtain access to such data and additional information regarding the processing.

18.2 Right to Rectification

You have the right to request correction of inaccurate personal data and completion of incomplete personal data.

18.3 Right to Erasure

Under the conditions provided by Article 17 GDPR, you may request the deletion of your personal data.

This right does not apply where continued processing is required by law or is otherwise permitted under the GDPR.

18.4 Right to Restriction of Processing

Under the conditions provided by Article 18 GDPR, you may request restriction of the processing of your personal data.

18.5 Right to Data Portability

Where the legal requirements are met, you have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller.

18.6 Right to Object

Where processing is based on Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.

We will no longer process the relevant personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or where processing is required for the establishment, exercise or defence of legal claims.

18.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

18.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

The supervisory authority responsible for data protection in Cyprus is:

Office of the Commissioner for Personal Data Protection
Kypranoros 15
1061 Nicosia
Republic of Cyprus

Email:

You may also have the right to lodge a complaint with another competent supervisory authority within the European Union, particularly in the Member State of your habitual residence, place of work or place of the alleged infringement.

19. Exercising Your Rights

To exercise your data protection rights, please contact:

CKP 300 GROUP LIMITED
3 Mesologkiou
CY-6045 Larnaca
Republic of Cyprus

Email:

We may request additional information where reasonably necessary to verify your identity and protect personal data against unauthorised disclosure.

Requests will be handled in accordance with the time limits and requirements set out in the GDPR.

As a general rule, exercising your rights is free of charge. Where a request is manifestly unfounded or excessive, particularly because of its repetitive character, we may charge a reasonable fee or refuse to act on the request where permitted by law.

20. Automated Decision-Making

We do not currently use automated decision-making, including profiling, within the meaning of Article 22 GDPR that produces legal effects concerning you or similarly significantly affects you through this website.

If this changes in the future, this Privacy Policy will be updated accordingly.

21. Children

This website and our services are primarily intended for businesses and adult users.

We do not knowingly collect personal data from children through this website.

If we become aware that personal data relating to a child has been collected without an appropriate legal basis, we will take reasonable steps to delete such data where required.

22. Obligation to Provide Personal Data

You are generally not legally required to provide personal data when visiting our website.

However, certain information may be required where you:

  • request a quotation;

  • request particular services;

  • enter into a contract with us; or

  • ask us to respond to an enquiry.

Without the information necessary for the relevant purpose, we may be unable to process your request or provide the requested service.

23. Changes to This Privacy Policy

We may update this Privacy Policy where necessary, including where:

  • our services change;

  • our website changes;

  • we introduce or remove technologies or service providers;

  • our processing activities change; or

  • legal or regulatory requirements change.

The version published on this website at the relevant time shall apply.

The date of the most recent update is stated at the beginning of this Privacy Policy.

24. Contact

If you have any questions concerning this Privacy Policy, the processing of your personal data or the exercise of your rights, please contact:

CKP 300 GROUP LIMITED
3 Mesologkiou
CY-6045 Larnaca
Republic of Cyprus

Company Registration Number: HE 499082

Email:

WISECODE MEDIA
is a brand operated by CKP 300 GROUP LIMITED.