FILTER.CY Privacy Policy

Version date: 12 November 2026
Website: https://ru.filter.cy/
Effective date: Upon publication on the website.

1. General Information and Data Controller

This Privacy Policy explains what personal data AOT LTD collects and uses in connection with the operation of https://ru.filter.cy/ (FILTER.CY), customer enquiries, sales, delivery, installation and servicing of equipment.

Data controller: AOT LTD, company registration number HE 447907, VAT number 60011354L.
Contact address displayed on the website: Eleftheriou Venizelou Street, 3035, Limassol, Cyprus.
Telephone: +357 95 745 055.
Email for enquiries, including personal data matters: info@filtercy.com.

AOT LTD determines the purposes and means of processing the personal data of customers and individuals who contact the company. In this Policy, “we”, “us”, “our” and “the company” refer to AOT LTD.

This Policy applies to website visitors, people making enquiries, customers, and individuals who contact us through website forms, WhatsApp or Telegram. It does not replace our terms relating to sales, delivery, payment, returns or warranties.

2. Personal Data We Process

Depending on your enquiry or order, we may collect:

Contact details: name, telephone number, email address (if provided) and city.
Enquiry and correspondence details: products or services of interest, the content of questions or comments, the date of an enquiry and information voluntarily shared during communications.
Order details: selected products and services, quantities, prices, order number and status, delivery method, delivery address or selected ACS collection point, postal code, order fulfilment information and confirmation of payment.
Installation and servicing details: contact details, service location, agreed appointment time, information about equipment, work carried out, warranty matters and service requests.
Technical information: IP address, browser and device details, pages visited, referral source, UTM parameters, technical logs, cookies and similar identifiers, depending on the website's configuration and any applicable permissions granted by the visitor.

Fields that must be completed are identified in the relevant form. If you do not provide information necessary to contact you, arrange delivery or fulfil an order, we may be unable to respond to your enquiry or complete your order.

We do not ask you to provide payment card details, medical information or other special categories of personal data in comments, messaging applications or website forms.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

Responding to enquiries, providing consultations, recommending products and discussing purchase terms: taking steps at your request before entering into a contract, or performing a contract where the processing is necessary (Article 6(1)(b) GDPR).
Selling products, handling orders, delivery, installation, repairs, servicing, returns and warranty obligations: performance of a contract (Article 6(1)(b) GDPR).
Accounting and taxation, preparing and retaining legally required documents, and complying with requests from competent authorities: compliance with legal obligations (Article 6(1)(c) GDPR).
Protecting the website, preventing misuse, handling disputes and protecting the company's rights: the legitimate interests of AOT LTD, provided that these are not overridden by your rights and freedoms (Article 6(1)(f) GDPR). These interests include information security, fraud prevention and the establishment, exercise or defence of legal claims.
Optional analytics of website visits and interactions, including Yandex Metrica: consent where required by the GDPR and applicable rules on cookies and similar technologies (Article 6(1)(a) GDPR and applicable ePrivacy rules).
Providing information about products, services, promotions and special offers: only where an appropriate legal basis exists and in accordance with applicable rules governing electronic direct marketing. Reading this Policy, submitting an enquiry or placing an order does not, by itself, constitute consent to receive marketing communications.

Separate consent is not required for processing an order or responding to an enquiry to the extent that the processing is genuinely necessary to enter into or perform a contract or is based on another applicable legal ground. Refusing optional analytics must not prevent you from using the website's essential functions.

4. How We Collect and Use Personal Data

We receive data directly from you when you complete forms, place an order, contact us by telephone or use messaging applications. Technical data may also be collected automatically when you use the website, within the limits of the website's permitted functions.

Enquiries and orders placed through the website are transferred to Tilda CRM. Notifications about enquiries are also sent to a work Telegram account or chat and may include your name, telephone number, the product of interest and the content of your enquiry. Only authorised AOT LTD employees have access to these notifications.

If you contact us through WhatsApp or Telegram, your correspondence is also processed within the relevant service. We use your contact information to respond, agree the details of an order and provide further customer service.

Opening a product page or clicking a messaging button does not, by itself, mean that an order has been placed or paid for.

5. Recipients of Personal Data

Personal data is made available only to the extent necessary for the relevant purpose:

Authorised AOT LTD employees: to handle enquiries and orders and provide in-house delivery, installation, warranty support and servicing.
Tilda Publishing / Tilda CRM: for hosting and operating the website, forms and shopping cart, and storing enquiries and orders.
Telegram: for work notifications containing enquiry information and for customer communications.
WhatsApp: when you use this communication channel.
ACS Air Courier Services (Cyprus) Ltd: if you select delivery through ACS. We share the details needed for delivery, such as the recipient's name, telephone number, delivery address or collection point, and shipment information. If AOT LTD delivers an order itself, these details are not shared with a third-party courier for that delivery.
An external accounting firm in Cyprus: only the documents and information required for accounting and tax purposes. The accounting firm does not have direct access to Tilda CRM.
Yandex Metrica: technical and behavioural information relating to website analytics, where an appropriate legal basis is available.

We may also disclose personal data to competent public authorities where required by law. We do not sell customer contact lists to third parties.

The legal role of each recipient (independent controller or processor) and the applicable contractual arrangements depend on the service and the nature of its processing activities.

6. Processing and Transfers Outside the European Economic Area

Some external services used by AOT LTD may process personal data, or permit access to it, outside the European Economic Area (EEA). This may involve, in particular, the infrastructure, affiliated companies or subcontractors of Tilda, Telegram, WhatsApp and Yandex Metrica.

Where use of these services involves a transfer of personal data outside the EEA, the transfer must have a lawful basis under Chapter V of the GDPR, such as an adequacy decision by the European Commission or appropriate safeguards, including the European Commission's Standard Contractual Clauses and any necessary supplementary measures.

You can request information about the safeguards applicable to a particular international transfer and how to obtain further details by emailing info@filtercy.com. The external service providers also publish information about their data processing practices in their own privacy documentation.

7. Cookies, Analytics and Similar Technologies

The website may use strictly necessary cookies to operate pages, forms and the shopping cart, remember user settings and support security.

We use Yandex Metrica to analyse website traffic and interactions. Depending on its configuration, it may collect device details, referral sources, pages viewed, clicks and sequences of visitor actions, including through session recording. This information and online identifiers may constitute personal data.

Optional analytics cookies and similar technologies that require consent under applicable law may be used only after that consent has been obtained. Visitors must be able to refuse them and subsequently withdraw their consent. Reading this Policy or submitting a website form does not constitute consent to optional cookies.

We must not intentionally send telephone numbers, email addresses, enquiry contents or payment details in analytics events. Session recording must be configured to prevent the capture of personal data entered into forms.

Cookie and analytics settings may change. When introducing new optional technologies, we will provide the required information and obtain any necessary permissions.

8. Service Communications and Direct Marketing

AOT LTD uses the contact details you provide to respond to enquiries, clarify orders and inform you about delivery, installation, warranties and servicing. These messages relate to your enquiry or contract.

AOT LTD may also inform customers about products, services, new arrivals and special offers only where an applicable lawful basis exists. Electronic direct marketing generally requires prior consent. An exception for marketing our own similar products or services to existing customers applies only where the legal requirements are met, including providing a simple, free means of objecting when the contact details are collected and in every subsequent marketing message.

You may opt out of marketing communications at any time by emailing info@filtercy.com or using the opt-out method provided in the relevant message. Opting out of marketing does not prevent service communications necessary to fulfil an order.

9. Retention Periods and Deletion

AOT LTD applies the following retention periods and criteria:

Enquiries that do not result in a purchase: six months after the last substantive interaction with the customer.
WhatsApp and Telegram correspondence about enquiries that do not result in a purchase: six months after the last substantive interaction with the customer.
Related notifications in work systems and Telegram: the same six-month period following the last substantive interaction, unless another lawful ground for retention applies.
Records of completed orders, payments and accounting documents: for the periods required by applicable Cypriot law.
Installation, warranty and servicing records: for as long as necessary to fulfil the relevant obligations and to handle justified claims or protect legal rights.
Technical logs and analytics data: for periods appropriate to the purposes of processing and the settings of the relevant services, in accordance with applicable law.

When the applicable period expires, personal data must be deleted or anonymised unless further retention is required by law or in connection with a specific unresolved dispute. Backup copies may be deleted in accordance with separate technical retention cycles, subject to applicable legal requirements.

Automated promotional messages alone do not count as substantive interactions that extend the retention period for an enquiry that has not resulted in a purchase.

10. Security of Personal Data

AOT LTD restricts access to customer information to authorised employees according to their duties and implements technical and organisational security measures proportionate to the risks involved. The external accounting firm's access is limited to necessary financial documents and does not include direct access to the CRM.

If you believe that your personal data is being handled improperly, please contact us at info@filtercy.com.

11. Your Rights and How to Contact Us

Subject to the conditions and limits set out in the GDPR, you have the right to:

receive information about the processing of your personal data and request access to it;
request the correction of inaccurate data;
request erasure or restriction of processing where the applicable conditions are met;
receive your data in a portable format where provided by law;
object to processing based on legitimate interests; you may object to processing for direct marketing at any time;
withdraw consent where processing relies on it, without affecting processing lawfully carried out before withdrawal; and
lodge a complaint with a supervisory authority.

To exercise your rights, email info@filtercy.com with the subject line “Personal Data Request”. We may ask for reasonable proof of identity where necessary to protect your information. As a general rule, we will respond within one month. Where the GDPR allows an extension, we will notify you accordingly.

You may also contact the Office of the Commissioner for Personal Data Protection (Cyprus): https://www.dataprotection.gov.cy/; email: commissioner@dataprotection.gov.cy; telephone: +357 22 818456.

12. Automated Decisions and Changes to this Policy

Website statistics and testing different page versions are used to evaluate website performance. They are not, by themselves, intended to make decisions about visitors based solely on automated processing that produce legal or similarly significant effects.

We may update this Policy when our purposes of processing, service providers, practices or applicable laws change. The updated version will be published on the website with its date. Where a change requires a separate notice or fresh consent, we will take the required additional steps.

Contact for all personal data matters: info@filtercy.com.