Privacy Policy

Last updated 4 September 2026

Ezousa Winery is a family-owned winery in Kannaviou, in the Paphos district of Cyprus. This policy explains what happens to the personal information you give us through this website and what rights you have over it. It is written to the EU General Data Protection Regulation (Regulation (EU) 2016/679) and to Cypriot law.

The short version

We ask for as little as we can. The forms on this site tell us that you would like to visit or to hear from us, and send you a copy of what you sent so that you have a record of it. We use Google’s Firebase Analytics to see, in aggregate, which pages people read — and only if you agree to it. We do not sell personal data, we show no advertising, and we do not build profiles of you.

Who is responsible for your information

Ezousa Winery, Kannaviou, Paphos, Cyprus, is the data controller. For anything to do with this policy or with your personal data, write to info@ezousa.com.

What we collect, and when

Enquiry form. Your full name, email address, telephone number and message.
Booking request form. Your first and last name, email address, telephone number, the type of visit, the number of guests, and your preferred date and time.
Anything else you tell us by email, by telephone or during a visit.
Analytics, if you agree to it. Which pages you looked at and for how long, how you reached the site, and the type of device, browser and operating system you used, together with an approximate location worked out from your IP address and an identifier stored in your browser. We see this as statistics, not as a named person.
Server records. The company that hosts this website keeps ordinary logs of requests to it — the IP address a request came from, the time and the page asked for. They exist to keep the site running and secure, and we do not use them to identify anyone.

What happens when you send a form

Your details go to the service that handles form submissions for this site, which emails them to us and sends a copy to the address you gave, so that you have a record of what you asked for. That copy is a receipt, not a confirmation: a visit is booked only when we write back to you.

From that point the message lives in our inbox and in yours, and is subject to your email provider’s terms as well as to this policy.

Why we hold it, and on what basis

To answer your enquiry — our legitimate interest in replying to people who write to us (Article 6(1)(f)).
To arrange a visit — because it is necessary to take steps at your request before entering into a contract with you (Article 6(1)(b)).
To count and understand visits to the site — your consent, and only your consent (Article 6(1)(a)).
To send you news, if you asked for it — again your consent, which you can withdraw whenever you like.
To keep proper business and accounting records — our legal obligations (Article 6(1)(c)).

Cookies and analytics

This site needs no cookies in order to work, and it sets none for advertising. It does not track you across other websites.

We use Firebase Analytics, part of Google’s Firebase platform, to understand which pages are read and how people find us. It stores an identifier in your browser and collects the information listed above. It runs only if you agree to it: you are asked when you first arrive, nothing analytical is loaded until you answer, and you can change your answer at any time. Declining costs you nothing — every part of the site works either way.

Marketing

The booking form carries an optional box for informational messages by email and SMS. It is never ticked for you, and no booking depends on it. If you tick it and later change your mind, reply to any message we send or write to info@ezousa.com, and we will stop.

Who else sees it

We do not sell personal data and we do not pass it to advertisers. The companies below process it on our instructions, and only to do the job we use them for.

Google — hosting for this website, and Firebase Analytics where you have agreed to it.
Our form and email providers — delivering the messages the forms send and storing our correspondence with you.
OpenFreeMap — the map on the Contact and Book a visit pages draws its tiles from OpenFreeMap. Your browser fetches those tiles directly, so OpenFreeMap receives your IP address as part of the request, exactly as it would for any image on any website. Nothing you have entered is sent with it.

If the law obliges us to disclose information, we will.

Sending information outside the EEA

Some of the providers above operate servers outside the European Economic Area. Where personal data is transferred there, the transfer is covered by the European Commission’s Standard Contractual Clauses or another safeguard the GDPR recognises, so that your data keeps the protection it has here.

How long we keep it

Enquiries — for as long as it takes to deal with them, and for a reasonable period afterwards in case you come back to us.
Visit bookings — for the visit, and then for as long as our accounting and tax obligations require.
Marketing consent — until you withdraw it.
Analytics — for the retention period set in Firebase, after which it is deleted or aggregated beyond recovery.
Server logs — for the limited period our host retains them.

Your rights

Under the GDPR you may ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, erase it, restrict what we do with it, hand it over in a portable form, or stop processing it where we rely on legitimate interests — and you may withdraw consent at any time where we rely on consent.

Write to info@ezousa.com and we will answer within one month. If our answer does not satisfy you, you may complain to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

Age

This is a winery’s website. It is not directed at children, and we ask that only people aged 18 or over send us booking requests or attend a tasting.

Changes to this policy

If we change this policy, the date at the top will change with it.