Privacy notice

1. Who is responsible

Gurgy Marzouk, an independent sworn translator, is the controller for this website, enquiries and business administration. Business address: 2 Mystra Street, 2408 Nicosia, Cyprus. Contact boles.gurgy@gmail.com or +357 99 489116 for privacy questions or rights requests.

For organisational clients, the parties must establish whether Gurgy acts as a separate controller under professional duties or as a processor on documented instructions. For processor services, the applicable processing agreement and the commissioning controller’s notice also apply.

2. Information and sources

Information may come from you, an authorised representative or an organisation commissioning work. It may include names, email addresses, telephone numbers, correspondence, quotation details, document contents, delivery details and billing information. Documents can contain information about third parties.

Hosting infrastructure may receive IP addresses, request times, browser or device information, requested pages and security logs. The site has no registration, payment form or upload facility. Contact links open your chosen app; personal messages are sent only if you send them.

3. Purposes and lawful bases

Enquiries and quotations use information needed for steps at your request before a contract, and agreed services use information necessary to perform your contract (GDPR Article 6(1)(b)). Billing, professional records and lawful disclosures may follow legal obligations (Article 6(1)(c)).

Necessary security, business correspondence, third-party information in commissioned documents and claims may rely on legitimate interests (Article 6(1)(f)), where not overridden by people’s rights. Those interests are providing a secure service, communicating with clients and establishing or defending legal claims. You may object to processing on that basis.

Where consent is the appropriate basis, it must be specific and freely given and can be withdrawn without affecting earlier lawful processing. Necessary information is required to assess or perform your request; without it a quotation or translation may not be possible. Information is not used for advertising, profiling or solely automated decisions.

4. Sensitive and third-party documents

Special-category data, including health or religious information, need an appropriate GDPR Article 9 condition as well as an Article 6 basis. Depending on the circumstances, this may be explicit consent or necessity for legal claims. Criminal-conviction and offence information is subject to Article 10 and applicable law. A service contract alone does not remove these requirements.

Do not send sensitive documents with an initial enquiry. First agree what is necessary, the lawful conditions and a suitable transfer method. For another person’s data, ensure that you are authorised and required privacy information is provided. Indirect collection is subject to Article 14 transparency duties unless a lawful exception applies.

5. Recipients and international processing

Gurgy alone personally reviews and translates client documents; no other translator or assistant is assigned that work. This is distinct from the technical processing involved in using email, hosting and IT services.

Necessary recipients may include hosting, email and IT providers, professional advisers and competent authorities where lawfully required. Translations are sent to recipients you authorise or as required by law. Access must be limited to what is necessary. Documents are not sold or used for advertising.

The site is configured for Firebase Hosting (Google), and the published address uses Gmail (Google). These services may process information outside the European Economic Area depending on settings, location and contracts. A restricted international transfer requires a valid mechanism, such as an applicable adequacy decision or standard contractual clauses with necessary additional safeguards. Contact Gurgy for the provider and transfer information applicable to your engagement.

6. Retention

Retention depends on purpose, not a single period for all data. Enquiries are retained to answer them and handle reasonable follow-up. Translation files and correspondence are retained to complete work, meet applicable professional record-keeping duties and, where necessary, resolve corrections, disputes or legal claims. Invoices and accounting records follow applicable statutory requirements.

Technical logs follow the hosting provider’s operational retention and any necessary incident investigation. Data should be deleted or securely anonymised once its purpose and legal retention requirements end; protected backups follow the relevant backup cycle. You may request the period or criteria applicable to your data. Legal preservation duties may prevent immediate erasure.

7. Cookies, storage and links

The application does not set advertising or analytics cookies or load tracking tools, embedded maps, videos or remote fonts. Language selection uses the URL and needs no cookie.

Choosing Pause motion or Resume motion stores only that preference as gm-motion in your browser’s session storage for the tab’s browsing session. It is not sent to a tracking service and can be removed by closing the tab or clearing session storage. Without this choice, the site follows your device’s reduced-motion preference. Hosting and network providers may handle technical requests independently of application cookies.

External sites and your phone or email provider have their own privacy practices. If analytics or optional storage is introduced, this notice must be updated and any required prior consent obtained before use.

8. Security and children

Access should be limited to authorised recipients and protected by appropriate technical and organisational measures. No internet or email method is entirely risk-free. Agree a suitable method for sensitive records. Do not send payment-card details or unnecessary originals with an initial email.

The website does not offer accounts or targeted services to children. Where a translation legitimately concerns a child, information must be limited to what is necessary and supplied by someone with appropriate authority, with applicable safeguards.

9. Rights and complaints

Depending on the basis and circumstances, you may request access, a copy, correction, erasure, restriction or portability; object to legitimate-interest processing; or withdraw consent where it is the basis. Legal exceptions apply. Send requests to boles.gurgy@gmail.com. Proportionate identity checks may be necessary to protect your information.

A response is normally due within one month. A lawful extension of up to two further months for complexity or the number of requests must be explained within the first month. Requests are normally free, subject to statutory exceptions for manifestly unfounded or excessive requests.

You may complain directly to the Cyprus Commissioner for Personal Data Protection at commissioner@dataprotection.gov.cy, or the authority where you habitually reside, work or where the alleged infringement occurred. Contacting Gurgy first is not required. Your right to a judicial remedy remains unaffected.

10. Updates and contact

This notice may change when the site or processing changes. The revision date appears above. Material changes must be communicated as required before new processing begins. Contact Gurgy using the details on this page for questions about your enquiry or engagement.