Privacy Policy

This Privacy Policy explains how celebioglu&co (celebico.com) (“we”, “us”, “our”) collects, uses, shares, and protects personal data when you use our website.

Website: celebico.com Applies to: EU/EEA users Last updated: 2026-03-01
GDPR-oriented EU rules

1. Who we are (Data Controller)

For the purposes of EU data protection law (including the General Data Protection Regulation, “GDPR”), the data controller is:

Controller: Celebioglu & Co.
Address: No:5 Celebioglu Building, K.Kaymakli, Nicosia, Cyprus
Email:

2. Personal data we collect

We may collect the following categories of personal data (depending on how you use the website):

Category Examples Typical source
Contact & identity data Name, email address, phone number, company name, job title Forms you submit, communications
Inquiry / lead data Information you provide in a contact/lead form, message content, preferred dates/services Forms, email, phone, messaging apps
Technical & usage data IP address, device type, browser, operating system, pages viewed, time spent, referral URL, approximate location (city/country) Automatically via website logs and analytics
Marketing & preferences Marketing consent status, communication preferences, cookie choices Consent banners, preference settings
Special categories:

Please do not submit sensitive information (e.g., health data, political opinions, religious beliefs) via our forms.

3. Purposes & legal bases (GDPR)

We process personal data only when we have a legal basis under the GDPR. Common bases include:

Purpose Legal basis Data used
Respond to inquiries and provide requested information Contract steps / legitimate interests Contact & inquiry data
Provide and maintain the website Legitimate interests Technical & usage data
Measure performance (analytics) and improve user experience Consent (where required) / legitimate interests (where permitted) Technical & usage data, cookie choices
Advertising and conversion measurement (e.g., Google Ads) Consent (for ad/marketing cookies where required) Cookie identifiers, technical data, events (e.g., lead submission)
Marketing communications (email/phone) Consent or legitimate interests (depending on jurisdiction and relationship) Contact data, preferences
Security, fraud prevention, and abuse monitoring Legitimate interests / legal obligations Technical data, logs
Legal compliance (tax, accounting, lawful requests) Legal obligation Relevant data depending on request

4. Cookies & similar technologies

We use cookies and similar technologies (e.g., pixels, tags, local storage) to operate the website and, depending on your choices, to analyze traffic and measure advertising performance.

4.1 Types of cookies

  • Strictly necessary cookies: required for core functionality and security. These do not require consent in the EU/EEA.
  • Analytics cookies: help us understand how visitors use our site (e.g., page views, sessions).
  • Marketing/advertising cookies: used to measure ad performance and show relevant advertising.
  • Preference cookies: remember your settings (e.g., language, cookie choices).

4.2 Managing cookies

We use Cookiebot (Cybot A/S, Denmark) as our consent management platform. You can change or withdraw your consent at any time by clicking the cookie icon at the bottom of the page. You can also manage cookies through your browser settings. If you disable cookies, some features may not function correctly.

4.3 Renew or withdraw consent

To renew or change your cookie consent at any time: Click here to manage cookie preferences.

5. Sharing & processors

We may share personal data with trusted third parties that process data on our behalf (“processors”), such as:

ProcessorPurposeLocation
Web3Forms (Web3Creative)Contact form submissions — receives form data and forwards to us by email; data deleted after 30 daysUSA/India (SCCs apply)
Google LLC (Google Ads, Tag Manager)Advertising conversion measurement; requires consent before activatingUSA (SCCs apply)
Cybot A/S (Cookiebot)Cookie consent managementDenmark (EU)
Cloudflare Inc.CDN, DNS, security, hostingUSA (SCCs apply)

We only share data as necessary and we do not sell your personal data. Where a processor does not offer a formal DPA (e.g. Web3Forms), we have assessed that the data processed is limited to enquiry data, retained briefly, and not used for any secondary purpose.

6. International transfers

Some of our service providers may be located outside the European Economic Area (EEA), which means personal data may be transferred internationally. Where this happens, we use appropriate safeguards such as adequacy decisions, Standard Contractual Clauses (SCCs), and additional measures where appropriate.

You can request more information about the safeguards we use by contacting us (see Section 13).

7. Retention

Data typeRetention period
Contact / enquiry form submissions2 years from last contact, or until you request deletion
Client accounting & tax records7 years (legal obligation)
Cookie consent records12 months
Website analytics dataUp to 14 months (Google Analytics default)

8. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

9. Your rights (EU/EEA)

If you are in the EU/EEA, you have the following rights (subject to conditions and exceptions under GDPR):

  • Access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent.

To exercise your rights, contact us using the details in Section 13.

10. Complaints

You have the right to lodge a complaint with a supervisory authority in your EU/EEA country of residence, place of work, or where an alleged infringement occurred.

11. Children

Our website is not intended for children, and we do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last updated” date at the top of this page.

13. Contact

If you have questions about this Privacy Policy or how we handle personal data, contact us:

Email:
Address: No:5 Celebioglu Building, K.Kaymakli, Nicosia, Cyprus
Company: Celebioglu & Co.