Privacy Policy

TINY THUMBS UP 2025

1) Introduction and Contact Details of the Controller

1.1 Introduction

We are pleased that you are visiting our website and thank you for your interest. The following information explains how we handle your personal data when you use our website. Personal data includes all data that can personally identify you.

 

1.2 Data Controller

The controller responsible for data processing on this website, as defined by the General Data Protection Regulation (GDPR), is:

Leionoro Ltd.
Efesou 9
5280 Paralimni, Cyprus
Tel.: +35797883981
E-mail: info@leionoro.com

The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

 


 

2) Data Collection When Visiting Our Website

2.1 Server Log Files

When you visit our website purely for informational purposes, i.e., without registering or providing any information, we only collect data that your browser transmits to our server („server log files“). When you access our website, we collect the following data that is technically necessary to display the website:

    • Website visited
    • Date and time of access
    • Amount of data transferred (bytes)
    • Referring source/URL
    • Browser used
    • Operating system used
    • IP address (if applicable, in anonymized form)

 

The processing is carried out in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data is not shared or used in any other way. However, we reserve the right to review server log files later if there are indications of illegal use.

 

2.2 SSL/TLS Encryption

For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by „https://“ and the lock symbol in your browser’s address bar.

 


 

3) Hosting & Content Delivery Network

We use a hosting provider to store and present our website content. This provider, or selected subcontractors, ensures that all services are provided exclusively on servers within the European Union.

All data collected on our website is processed on these servers.

A data processing agreement has been signed with the hosting provider to ensure the security of visitor data and prevent unauthorized disclosure to third parties.

 


 

4) Cookies

To enhance your experience on our website and enable certain functions, we use cookies—small text files stored on your device. Some cookies are automatically deleted after you close your browser („session cookies“), while others remain on your device to retain settings („persistent cookies“).

The storage duration of persistent cookies can be found in your browser settings.

If cookies process personal data, this occurs either:

    • Under Art. 6(1)(b) GDPR, when necessary for contract execution,
    • Under Art. 6(1)(a) GDPR, when consent has been granted,
    • Under Art. 6(1)(f) GDPR, based on our legitimate interest in website functionality and user-friendliness.

 

You can configure your browser to inform you about cookies and allow their acceptance selectively or block them entirely. If you disable cookies, some website features may be restricted.

 


 

5) Contacting Us

If you contact us (e.g., via contact form or email), personal data is collected. The exact data collected depends on the form used.

Your data is stored and used solely for the purpose of responding to your inquiry and for necessary technical administration.

Processing is carried out:

    • Under Art. 6(1)(f) GDPR, based on our legitimate interest in responding to inquiries.
    • Under Art. 6(1)(b) GDPR, if the inquiry relates to contract execution.

 

Your data will be deleted after the final processing of your inquiry unless legal retention requirements apply.

 


 

6) Tools and Other Services

Cookie Consent Tool

This website uses a cookie consent tool to manage user permissions for cookies and cookie-based applications. The interactive interface allows users to grant consent for specific cookies.

Technically required cookies ensure your preferences are saved. If personal data (such as IP addresses) is processed for consent management, this occurs:

    • Under Art. 6(1)(f) GDPR, based on our legitimate interest in compliance and user-friendly management.
    • Under Art. 6(1)(c) GDPR, based on our legal obligation to obtain consent for non-essential cookies.

 

A data processing agreement ensures data security and prevents unauthorized disclosure.

 


 

7) Data Subject Rights

Under applicable data protection law, you have the following rights:

    • Right to access (Art. 15 GDPR)
    • Right to rectification (Art. 16 GDPR)
    • Right to erasure (Art. 17 GDPR)
    • Right to restriction of processing (Art. 18 GDPR)
    • Right to notification (Art. 19 GDPR)
    • Right to data portability (Art. 20 GDPR)
    • Right to withdraw consent (Art. 7(3) GDPR)
    • Right to file a complaint (Art. 77 GDPR)

 

Right to Object (Art. 21 GDPR)

If we process your personal data based on our legitimate interest, you may object to the processing at any time for reasons arising from your specific situation. We will cease processing unless compelling legal grounds exist.

If your personal data is processed for direct marketing, you may object at any time, and we will stop processing your data for this purpose.

 


 

8) Data Retention Period

The storage duration of personal data depends on:

    • The legal basis for processing,
    • The purpose of processing,
    • Legal retention periods (e.g., commercial/tax regulations).

 

Data processed under explicit consent (Art. 6(1)(a) GDPR) is stored until consent is withdrawn.

If retention periods apply to contractual data (Art. 6(1)(b) GDPR), the data will be deleted upon expiration unless further processing is necessary.

For data processed under legitimate interest (Art. 6(1)(f) GDPR), storage lasts until an objection is raised (unless overriding legitimate grounds exist).

For direct marketing (Art. 6(1)(f) GDPR), data is stored until an objection is raised.

If no other specific processing situations are noted, stored personal data is deleted once it is no longer needed.