Privacy policy
This policy explains what personal data we process when you visit this website or contact us, why we do so, and what rights you have under the EU General Data Protection Regulation (GDPR) and the Cyprus Law 125(I)/2018.
1. Controller
Tangelligence Ltd
1 Neapolis Street, Lordos Forest Beach, Building 3, House B27
7041 Oroklini, Larnaca, Cyprus
Email: info@tangelligence.education
We are not required to appoint a data protection officer. For all data protection questions, please contact us at the address above.
2. Visiting this website
Server log files
When you visit this website, our hosting provider's server automatically records technical information that your browser sends: IP address, date and time of the request, the page or file requested, the referring page, the amount of data transferred, and your browser and operating system type.
We need this information to deliver the website and to keep it secure and stable (for example, to detect attacks). The legal basis is our legitimate interest in a secure, functioning website (Art. 6(1)(f) GDPR). Log files are kept for 14 days, plus up to 7 days in our hosting provider's backups, unless a security incident requires longer retention.
Hosting
This website, including your account data, is hosted by ALWAYSDATA SARL, 91 rue du Faubourg Saint-Honoré, 75008 Paris, France, on servers in France. alwaysdata processes the data described in this policy on our behalf under a data processing agreement (Art. 28 GDPR). Your data does not leave the EU.
Cookies, no tracking
This website does not use analytics, advertising, social-media plugins or any other tracking technology, and it does not load fonts, scripts or other content from third-party servers.
Only the account pages (everything under /account and /admin) set cookies, and only ones that are strictly necessary for them to work: tg_csrf protects our forms against misuse by other websites, tg_session keeps you logged in (it ends when you log out, after 12 hours without activity, or after 7 days at most), and tg_flash shows a confirmation message once and expires after a minute. Strictly necessary cookies do not require consent (Art. 5(3) of the ePrivacy Directive), so we do not show a cookie banner.
Offline storage (app function)
To let you read this website offline and to install it as an app, your browser stores copies of our pages, images and stylesheets on your device (using a so-called service worker and the browser cache). This storage contains only our public website content — no personal data — and is never sent back to us. It is strictly necessary to provide this function. You can delete it at any time in your browser's settings for this site.
3. Your account
You can create an account to choose which emails you would like from us. For this we process your name, your email address, your password (stored only in scrambled form, as a so-called hash, which we cannot read), the date you registered, confirmed your address and last logged in, and your email choices.
The legal basis is the performance of our agreement with you to provide the account (Art. 6(1)(b) GDPR). Accounts whose email address is not confirmed within 7 days are deleted automatically. You can delete your account yourself at any time on your account page; this deletes all the data listed here immediately.
To protect accounts against attacks, our server briefly remembers failed login attempts. It stores only a scrambled form of the IP address or email address, for no longer than 24 hours.
4. Newsletters and product notifications
If you tick a topic, either when registering or later in your account, we email you about it: our news, or once a product you are interested in becomes available. We use double opt-in: you only receive these emails after confirming your email address through the link we send you. We record when you gave your consent to each topic, so we can prove it.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time, with effect for the future, by unticking the topic in your account or with the unsubscribe link at the end of every email. When a newsletter is sent, we keep a note of whom it was sent to and whether delivery worked; this note is deleted together with your account.
Emails about your account itself (confirming your address, resetting your password, telling you your password was changed) are part of the account and are always sent.
We send emails through the mail servers of our hosting provider, alwaysdata (see section 2), which processes your name and email address on our behalf under a data processing agreement (Art. 28 GDPR).
5. Contacting us by email
If you send us an email — for example to request information or a CV — we process your email address, name, and whatever else you include in your message, in order to answer you.
The legal basis is the performance of a contract or pre-contractual steps you have requested (Art. 6(1)(b) GDPR) or, for other enquiries, our legitimate interest in answering messages sent to us (Art. 6(1)(f) GDPR). We delete your enquiry once it has been dealt with, unless statutory retention obligations (for example under Cyprus tax and company law) require us to keep it longer.
Please be aware that ordinary email is not end-to-end encrypted. Do not send us sensitive information by email.
6. Recipients
We do not sell your data or pass it on to third parties, except to our hosting and email service providers acting on our behalf, or where we are legally required to do so.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15)
- have incorrect data rectified (Art. 16)
- have your data erased (Art. 17)
- restrict processing (Art. 18)
- receive your data in a portable format (Art. 20)
- object to processing based on our legitimate interests (Art. 21)
- withdraw any consent you have given, with effect for the future (Art. 7(3))
To exercise these rights, simply email us at info@tangelligence.education.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state where you live or work. Our lead supervisory authority is:
Commissioner for Personal Data Protection
Kypranoros 15, 1061 Nicosia, Cyprus
www.dataprotection.gov.cy
8. Automated decision-making
We do not use automated decision-making or profiling.
9. Changes to this policy
We will update this policy if our website or the legal requirements change. The current version is always available on this page.
Last updated: 26 October 2026