Privacy Policy

This policy explains what personal data the Cyprus Music Therapy Association (CyMTA) collects through this website, why we collect it, and what your rights are. We follow the EU General Data Protection Regulation (GDPR) and the Cyprus law on personal data protection (Law 125(I)/2018).

Who we are

The Cyprus Music Therapy Association is responsible for your personal data (the “controller”).

12 Dragatsaniou, Potamos Germasogias, 4043, Cyprus
Email: cy.musictherapy@gmail.com
Phone: +357 99 796233

What we collect

• When you use the contact form: your first name, last name, email address, the subject, and your message.
• Spam protection: when you send the form, Cloudflare Turnstile checks, usually in the background, that a person, not a program, is sending it. For this check it processes technical data such as your IP address and browser details. Cloudflare also uses this data to improve its bot detection, as described in its Turnstile Privacy Addendum.
• When you visit the site: our hosting provider records technical data, such as your IP address, the page you asked for, and the time, in short-term server logs. These are needed to deliver the site and protect it from abuse.

Please do not include health details or other sensitive information about yourself or another person in the form. If your question is about someone’s health, keep it general, and we will talk with you directly.

Cookies

This website does not use cookies for analytics, advertising, or tracking, and it has no analytics tools. Its fonts and images come from our own servers.

Why we use your data

• To answer your message. This is in our legitimate interest, and in yours, as you contacted us (GDPR Article 6(1)(f)).
• To keep the website secure and free of spam. This is also a legitimate interest (GDPR Article 6(1)(f)).

We do not use your data for marketing, we do not sell it, and we do not make automated decisions about you.

Who receives your data

• Members of the Association’s committee who answer messages.
• StringWorks, which builds and runs this website and its form for us, and acts only on our instructions.
• Service providers that work for us: Xano, which stores form messages on servers in Germany; Bunny.net, which hosts and delivers the website; an email delivery service, which sends each message to our inbox; Cloudflare, for the spam check; and Google, which provides our email inbox.

Some of these providers, such as Cloudflare and Google, may process data outside the European Union. In that case the transfer is protected by safeguards that the GDPR accepts, such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

How long we keep it

• Form messages: up to 2 years after we receive them, then they are deleted. We delete them sooner if you ask.
• Server logs: a short time only, then they are deleted automatically.

Your rights

You have the right to ask for a copy of your personal data, to have it corrected or deleted, to limit how we use it, to object to its use, and to receive it in a format you can take elsewhere. To use any of these rights, email us at cy.musictherapy@gmail.com. We will reply within one month.

If you think we have not handled your data correctly, you can complain to the Commissioner for Personal Data Protection in Cyprus: www.dataprotection.gov.cy.

Children

If you are under 14, please ask a parent or guardian to contact us for you.

Links to other websites

This site links to other websites, such as our Facebook and Instagram pages. Those websites have their own privacy policies.

Changes to this policy

We may update this policy. The date below shows when it last changed.

Last updated: 29 October 2026