Legal

Legal Name: M.M. KIMA DEVELOPMENT LTD
Registered In: Republic of Cyprus
Address: 68 Spyrou Kyprianou, 4042 Germasogeia, Limassol, Cyprus
Contact: Contact form

1. General

This website is operated by M.M. KIMA DEVELOPMENT LTD ("Company"). By accessing this website, you agree to these terms. If you do not agree, please do not use this website.

2. Intellectual Property

All content on this website, including text, graphics, logos, and design, is the property of M.M. KIMA DEVELOPMENT LTD and is protected by applicable intellectual property laws. You may not reproduce, distribute, or create derivative works from this content without prior written consent.

This website uses the Three.js graphics library (threejs.org), which is licensed under the MIT License. The library is self-hosted on our servers and the original copyright notice is preserved in the source file.

3. Disclaimer

This website is provided "as is" without warranties of any kind. The Company does not guarantee the accuracy, completeness, or timeliness of information on this website.

4. Limitation of Liability

To the maximum extent permitted by law, M.M. KIMA DEVELOPMENT LTD shall not be liable for any damages arising from your use of this website.

5. Governing Law

These terms are governed by the laws of the Republic of Cyprus. Any disputes shall be subject to the exclusive jurisdiction of the courts of Limassol, Cyprus.

We respect your privacy. This policy explains exactly what data this website collects, why, how long we keep it, and the rights you have under the General Data Protection Regulation (GDPR). M.M. KIMA DEVELOPMENT LTD is the data controller for the personal data processed through this website.

Cookies and Local Storage

This website does not set any cookies. It does not use localStorage, sessionStorage, IndexedDB, or any other browser-side persistence. It does not employ tracking pixels, fingerprinting, third-party analytics, or advertising scripts of any kind. No browser-side data persists between your visits. We use a privacy-friendly first-party analytics tool — see the Analytics section below.

External Resources

All fonts, scripts, and graphics libraries (including Three.js) are self-hosted on our own servers. No requests are made to external CDNs, social networks, advertising networks, or third-party analytics services when you visit this site.

Analytics

We use Umami (umami.is), an open-source, privacy-focused analytics tool that we self-host on our own infrastructure. Umami's tracking script and event endpoint run on the same domain as this website (/u.js and /api/send) — no requests are made to any third-party analytics service.

Umami is designed to be GDPR-compliant by default:

• It does not set cookies or use any browser-side storage.
• It does not store IP addresses. To count unique visitors, Umami creates a daily-rotating, salted hash of your IP and User-Agent that is reset every 24 hours; the original IP is discarded.
• It does not perform cross-site tracking, fingerprinting, or build advertising profiles.
• Data is not shared with or sold to any third party.

The analytics events we collect are aggregate metrics about page views: requested URL, referrer, country (derived from IP at request time and not stored), browser, operating system, device type, screen size, and language preference. No personal data is associated with these events.

Data We Collect

From the contact form or email: when you contact us, we process your name, email address, and the contents of your message for the sole purpose of responding to your inquiry. We do not perform marketing, profiling, or automated decision-making on this data.

From standard server logs: like most websites, our web server records access logs containing your IP address, timestamp, requested URL, and User-Agent string. These logs are used solely for security, abuse prevention, and operational diagnostics. They are not analysed for tracking, profiling, or advertising purposes.

Third-Party Processors

Inquiry email correspondence is processed through Google Workspace, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google acts as a data sub-processor and processes email data under its Data Processing Amendment in accordance with GDPR.

Lawful Basis for Processing

We process inquiry data on the basis of legitimate interest (Article 6(1)(f) GDPR), namely our interest in responding to communications addressed to us. Server access logs and aggregate analytics events are processed on the basis of legitimate interest in maintaining the security and integrity of our website, and in understanding how our website is used at an aggregate level (Article 6(1)(f) GDPR).

Retention

Inquiry correspondence (form submissions and emails) is retained for up to 12 months after the matter is concluded, then deleted. Server access logs are retained for up to 30 days, after which they are automatically purged. Aggregate analytics events are retained for up to 24 months for trend analysis. As no personal identifiers are stored with analytics data, the retention applies to anonymous aggregate metrics only.

Your Rights

Under GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• request erasure of your data ("right to be forgotten");
• restrict or object to processing;
• receive your data in a portable format;
• lodge a complaint with a supervisory authority (see below).

To exercise any of these rights, email us at [email protected] or use the contact form. We will respond within 30 days.

Data Protection Authority

You have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus at www.dataprotection.gov.cy.

Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect the most recent change. Material changes will be highlighted on this page.