Privacy Statement

This Privacy Statement explains how DYNAMICAPPS LTD ("DynamicApps", "we", "us") processes personal data when you visit dynamicappsltd.com, contact us, apply for a job or work with us. We process personal data under the EU General Data Protection Regulation (GDPR) and the Cyprus law that implements it (Law 125(I)/2018).

1. Who we are

DYNAMICAPPS LTD is the controller of the personal data described here. We have not appointed a Data Protection Officer. For any privacy question, contact us at [email protected].

2. Our privacy statement at a glance

• We state our purposes before we collect data, and we use data only for those purposes.
• We collect as little personal data as possible and only what each purpose needs.
• We ask for your explicit consent where the law requires it, and you can withdraw it at any time.
• We protect data with appropriate technical and organisational measures.
• We do not sell personal data, and we do not use it for automated decisions with legal effects.
• We respect your rights, and you can exercise them simply by writing to us.

3. Purposes, data, legal bases and retention

3.1 Contacting us

When you use the contact form or email us.

• Data: name, email address, company (optional), the content of your message and any details you choose to share.
• Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f)).
• Retention: as long as needed to handle your request, and no longer than 2 years after our last contact.

3.2 Client engagements, orders and invoicing

• Data: names and contact details of client representatives, billing details, company and VAT details, correspondence, contracts and payment records.
• Legal basis: performance of a contract (Art. 6(1)(b)) and our legal obligations, such as tax and accounting (Art. 6(1)(c)).
• Retention: for the duration of the engagement and up to 2 years afterwards. Accounting and tax records are kept for the period that Cyprus tax and accounting law requires.

3.3 Commercial messages to existing clients

The Site has no sign-up form for marketing emails. We send commercial messages only to existing clients, about services similar to those they already use.

• Data: the name and email address of the client contact.
• Legal basis: our legitimate interest in keeping existing clients informed about similar services (Art. 6(1)(f)). You can object and opt out at any time, including in every message we send.
• Retention: until you opt out through the link or reply option in every message, or by writing to us.

3.4 Job applications

• Data: your CV, cover letter, contact details, portfolio, references and the information you share during interviews.
• Legal basis: steps before entering into an employment or service contract (Art. 6(1)(b)). If we keep your application for future roles, we do so with your consent (Art. 6(1)(a)).
• Retention: up to 6 weeks after the position is filled. With your consent, up to 1 year for future openings. If you join us, your data becomes part of the personnel file.

3.5 Website operation and security

• Data: IP address, date and time of the request, requested page, browser and device information, recorded in server logs.
• Legal basis: our legitimate interest in delivering the Site securely and preventing abuse (Art. 6(1)(f)).
• Retention: a short period, normally no longer than 90 days, unless we need the data to investigate a security incident.

4. Cookies and third-party content

The Site does not use advertising or analytics cookies and does not track you across other websites. Fonts and other assets are served from our own servers, so loading the Site does not send your data to third-party content providers. If we ever add non-essential cookies, we will ask for your consent first and update this statement.

5. Who receives your data

We share personal data only when it is needed for the purposes above:

• service providers who process data on our behalf under a data processing agreement, such as hosting, email and IT services;
• professional advisers such as accountants, auditors and lawyers, who are bound by confidentiality;
• public authorities, where the law requires us to share data.

6. Transfers outside the EEA

We prefer providers that store data in the European Economic Area. If personal data is transferred outside the EEA, we make sure an adequate level of protection applies. That means either an adequacy decision of the European Commission or the Standard Contractual Clauses, with additional measures where needed. You can ask us for a copy of the safeguards.

7. Security

We use encryption in transit, access controls on a need-to-know basis, strong authentication and regular updates to protect personal data against loss, misuse and unauthorised access. If a personal data breach is likely to put your rights at risk, we will notify the authority and, where required, you.

8. Your rights

Under the GDPR you have the right to:

• access your personal data and receive a copy;
• rectification of inaccurate or incomplete data;
• erasure ("right to be forgotten") where the conditions apply;
• restriction of processing;
• data portability for data you provided to us under consent or contract;
• object to processing based on our legitimate interests, and at any time to direct marketing;
• withdraw consent at any time, without affecting processing that took place before.

To exercise a right, email [email protected]. We may ask you to confirm your identity. We answer within one month, which can be extended by two further months for complex requests, and exercising your rights is free of charge.

9. Complaints

If you believe we process your data unlawfully, please contact us first, so we can try to resolve the issue. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (www.dataprotection.gov.cy), or with the supervisory authority in the EU country where you live or work.

10. Children

The Site and our business services are not directed at children, and we do not knowingly collect personal data from children through the Site. If you believe a child has sent us personal data, contact us and we will delete it.

11. Our apps

This statement covers the Site and our business relationships. Each app we publish has its own privacy policy, linked from its App Store or Google Play listing and from inside the app, which explains the data that app processes.

12. Changes to this statement

We may update this statement when our services or the law change. The "Last updated" date at the top shows the current version. We recommend checking it from time to time. If we make significant changes, we will make them clearly visible on the Site.

13. Contact details

DYNAMICAPPS LTD
Prodromou 75, OneWorld Parkview House, Floor 4, 2063 Nicosia, Cyprus
Email: [email protected]
Website: dynamicappsltd.com