Privacy Policy
How we collect, use and protect your personal data.
1. Who we are
Manantial Homes Ltd (“Manantial Homes”, “we”, “us”) is a property management company registered in Cyprus, registration number HE 437980, with its registered and head office at Nikodimou Mylona 12, Themis Court, 3rd floor, Office 312, 8047 Paphos, Cyprus. For the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Cyprus Law providing for the Protection of Natural Persons with regard to the Processing of Personal Data and the Free Movement of such Data (Law 125(I)/2018), we are the data controller of the personal data described in this policy.
Given our size and the nature of our processing, we have not appointed a formal Data Protection Officer. Instead, all privacy queries and requests are handled directly by us at julia@manantialhomes.com.
2. Scope of this policy
This policy covers the personal data we collect through this website (manantialhomes.com): its enquiry, application and maintenance-request forms, the renting guide we email on request, and the technical data generated by visiting it. If you become an owner or tenant, further personal data is collected and processed under the terms of your management or tenancy agreement, and where those go beyond what is described here, we will explain that to you separately at the time.
3. What personal data we collect
- Rental analysis requests (owners): full name, email, phone number, where you live, the property's location, type, bedroom count and current status, and anything you add in the free-text field.
- Tenant applications: full name, email, phone number, the property you are interested in, preferred move-in date, number of occupants, employment status and any information you add. If your application proceeds, we, or the property owner, may later ask you for identity and income-verification documents; that is covered by the same legal bases as below.
- Maintenance requests (tenants): full name, phone number, email, property address, a description of the problem, its urgency, and whether we may enter the property when you are not present.
- Renting guide requests: full name and email, to send you the guide you asked for.
- General contact form: full name, email, optional phone number, who you are (owner, tenant, other) and your message.
- Technical and usage data: your IP address, browser and device type, the pages you request and when, collected automatically in our hosting provider's server logs when you visit the site.
We do not use this website to intentionally collect special categories of data (such as health information, racial or ethnic origin, or religious beliefs). Please do not include such details in the free-text fields of our forms unless directly relevant and unavoidable, for example a mobility requirement relevant to viewing a property.
4. Why we use it, and our legal basis
| Sending the renting guide you requested | Your request (Art. 6(1)(b)); we do not add you to a mailing list |
| Responding to your enquiry, rental analysis request or application | Taking steps you asked for before entering into a contract, and our legitimate interest in running our business (GDPR Art. 6(1)(b) and (f)) |
| Assessing tenant applications and managing tenancies | Performance of a contract, and steps taken at your request before one is signed (Art. 6(1)(b)) |
| Arranging and recording repairs | Performance of a contract with the owner and/or tenant, and our legitimate interest in keeping an accurate maintenance record (Art. 6(1)(b) and (f)) |
| Preventing spam, abuse of our forms (Cloudflare Turnstile, limits on repeated requests) | Legitimate interest in keeping the website secure and usable (Art. 6(1)(f)) |
| Understanding how the website is used and how fast it loads, in aggregate (Vercel Web Analytics and Speed Insights) | Legitimate interest in improving the website (Art. 6(1)(f)) |
| Bookkeeping, invoicing and tax reporting | Legal obligation under Cyprus tax and company law (Art. 6(1)(c)) |
| Responding to a regulator, court order or similar lawful request | Legal obligation (Art. 6(1)(c)) |
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you. The rental income figures on this website are produced by a calculator that applies general market assumptions to the details you enter; it does not use, or produce, a profile of you as an individual, and it is not a substitute for the written rental analysis we prepare by hand.
5. Who we share it with
We do not sell personal data. We share it only where it is needed to run our business or is required by law:
- Property owners, in connection with their own property, and any tenancy or booking at it.
- Cleaners and staff who prepare the home for your stay, limited to your name, dates and number of guests.
- Contractors and tradespeople we instruct to carry out repairs, limited to what they need to do the job.
- Professional advisers, such as our accountant and lawyers, where relevant to their engagement.
- Service providers who process data on our behalf (processors), currently:
| Vercel Inc. | Hosts this website and its server logs, and provides Vercel Web Analytics (aggregated visit statistics such as page views, referrers, country, browser and device type) and Vercel Speed Insights (aggregated page-load performance measurements). Neither uses cookies or any other identifier stored on your device, and neither tracks you individually or across other sites. |
| Cloudflare, Inc. (Turnstile) | Distinguishes human visitors from bots when a form is submitted |
| Google LLC (Google Workspace) | Our email: delivers form submissions to our office and sends the renting guide |
| FormSubmit | Backup delivery of form submissions to our office by email, used only if our own email delivery is unavailable |
If you book one of our homes on Airbnb or Booking.com, that booking is handled under their privacy policies, and they share with us what we need to host you.
If you contact us through the WhatsApp or Telegram links on this site, that conversation takes place on WhatsApp (operated by Meta) or Telegram, under their own privacy policies, not this one.
6. International transfers
Some of the providers above, including Vercel, Cloudflare and Google, may process data outside the European Economic Area, in particular in the United States. Where that happens, we rely on the safeguards those providers offer for such transfers, such as the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.
7. How long we keep it
| Enquiries and rental analysis requests that do not proceed | Up to 12 months from your last contact with us, then deleted |
| Renting guide requests | Up to 12 months, then deleted |
| Tenant applications that are not accepted | Up to 6 months, then deleted or anonymised |
| Signed management and tenancy agreements, and related records | For the life of the agreement, then 6 years afterwards, in line with the general limitation period for contract claims under the Cyprus Limitation of Actions Law of 2012 |
| Maintenance requests and repair records | Linked to the tenancy record above; 6 years after the tenancy ends |
| Invoices and accounting records | 6 years, in line with Cyprus tax record-keeping requirements |
| Website server logs | Typically no longer than 90 days |
8. Keeping your data secure
This website is served over an encrypted (HTTPS) connection. Access to the data submitted through our forms is limited to people at Manantial Homes who need it to do their job, and to the processors listed above. No method of transmission or storage is completely secure, but we take reasonable technical and organisational steps to protect your data against loss, misuse and unauthorised access.
9. Your rights under the GDPR
In relation to your personal data, you have the right to:
- Access the personal data we hold about you, and a copy of it.
- Rectification of data that is inaccurate or incomplete.
- Erasure of your data, in the circumstances set out in the GDPR.
- Restriction of how we use your data, in certain circumstances.
- Object to processing based on our legitimate interests, on grounds relating to your particular situation.
- Data portability, for data you provided to us that we process on the basis of consent or a contract, by automated means.
- Withdraw consent at any time, where we rely on consent, without affecting processing carried out before you withdrew it.
To exercise any of these rights, contact us at julia@manantialhomes.com. We will respond within one month, as required by the GDPR. You also have the right to lodge a complaint with the Cyprus supervisory authority:
Office of the Commissioner for Personal Data Protection
1 Iasonos Street, 1082 Nicosia, Cyprus (P.O. Box 23378, 1682 Nicosia)
www.dataprotection.gov.cy
10. Children
This website and our services are directed at adults arranging or managing a tenancy. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Cookies
This website's use of cookies and similar technologies is described separately in our Cookie Policy.
12. Changes to this policy
We may update this policy from time to time, for example if we start using a new service that processes personal data. The current version is always the one on this page, with its update date at the top.
13. Contact us
Manantial Homes Ltd, Nikodimou Mylona 12, Themis Court, 3rd floor, Office 312, 8047 Paphos, Cyprus
julia@manantialhomes.com · WhatsApp · Telegram