Privacy Policy

1. Data controller

The masopublicaffairs.com website and the MASO Public Affairs trading presence are operated by MASO Strategic Limited, registration number HE453644, registered at 3 Arch. Makariou III, Nicosia 1065, Cyprus (“MASO”, “we”, “us”). For privacy matters, contact contact@masopublicaffairs.com.

2. Scope

This Policy covers the website, contact forms, MASO Intelligence and HERMES, Maya — MASO AI Client Desk, MASO NEWS and digital communications made through these services.

3. Data we collect

• Identity and contact details, including name, company, position, email and telephone.
• The content of requests, messages and conversations with Maya.
• HERMES assessment answers, score and result.
• Professional interests, target markets, website and business objectives.
• Necessary security and technical data, such as IP address, access time, device type and logs.
• Information you provide directly by email, telephone or WhatsApp.

4. Purposes and legal bases

We process data to answer enquiries, assess potential engagements, provide digital functions, protect website security and comply with legal obligations. Depending on the circumstances, processing relies on consent, steps requested before entering a contract, performance of a contract, our legitimate interests in secure and effective operations, or a legal obligation. Enquiry details are not used for marketing emails without separate consent.

5. Maya and artificial intelligence

Maya uses artificial intelligence to answer questions, guide visitors and, when contact details are provided, create an enquiry for the MASO team. Do not submit special-category data, confidential documents, passwords or information that is not necessary.

Maya’s answers may be inaccurate and are subject to human oversight. Maya does not make decisions producing legal or similarly significant effects for you.

6. HERMES automated assessment

HERMES calculates an indicative score automatically from the user’s selections. It measures only readiness and potential fit for the service; it is not a sales forecast, credit assessment or decision with legal effect. MASO reviews each request through a human before making any engagement proposal.

7. Recipients and providers

Access is limited to authorised MASO personnel and providers supporting hosting, security, storage, notification delivery and AI functions. Providers may include Cloudflare, OpenAI, FormSubmit and email/Google Workspace services. Each provider processes data according to its role, terms and legal obligations.

8. International transfers

Some providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses or another lawful GDPR mechanism.

9. Retention

We keep data only for as long as necessary. Contact enquiries, leads, chats converted into enquiries and HERMES assessments are generally retained for up to 24 months after the last meaningful contact, unless an engagement, legal obligation or legal claim requires longer retention. Technical logs are retained for shorter periods according to provider security settings.

10. Cookies and technical storage

The website uses only cookies or similar technical measures necessary for security, routing, operation and abuse prevention. If non-essential analytics or advertising cookies are introduced, appropriate information and a consent mechanism will be provided first.

11. Security

We apply reasonable technical and organisational safeguards, including access restrictions, encrypted connections, request validation, automated-abuse protection and notification-status records. No system can guarantee absolute security.

12. Your rights

• Access to and a copy of your data.
• Correction of inaccurate or incomplete data.
• Erasure where the legal conditions apply.
• Restriction of or objection to processing.
• Data portability where applicable.
• Withdrawal of consent without affecting earlier lawful processing.
• A complaint to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

13. Third-party links and children

The website may link to third parties governed by their own policies. Our services are directed to professionals and organisations and are not intended for children under 16.

14. Changes and contact

We may update this Policy to reflect operational, technical or legal changes. The current version appears on this page. For questions or rights requests, contact contact@masopublicaffairs.com.