Skip to content

Privacy

Privacy notice

Last updated · 5 October 2026 · Ελληνικά

This website is operated by Sotiris Kyprianou, an independent energy consultant based in Nicosia, Cyprus. Sotiris provides his consulting services through SK Renewable Laboratory Ltd (Renewable Labs, registered in Cyprus, HE 458890), which keeps the enquiries sent through this site in its customer relationship management (CRM) system. This notice explains what personal information is collected when you use this site and how it is handled, in line with the EU General Data Protection Regulation (GDPR) and the Cyprus data-protection framework.

What is collected

The only personal information collected through this website, apart from the optional measurement you can accept on the cookie banner, is what you choose to submit via the contact form: your name, your email address, your organisation (optional), and the content of your message. The form also records the page you sent it from and, if the link you arrived on carried campaign tags (for example utm_source), those tags. If you accepted cookies, the page recorded may instead be the first page of your visit, and the website that linked you here (its domain only) is recorded too, as set out under Cookies and analytics below. When the enquiry is stored, your browser type and a one-way hash of your IP address are kept alongside it, used only to block spam and abuse. The site also measures visitor traffic. If you choose Accept all on the cookie banner, the Meta Pixel collects pseudonymous browsing data: the pages you view, your IP address and browser details, and the _fbp cookie identifier (plus _fbc when you arrive from an ad). How these tools work, and the choice you control, is set out under Cookies and analytics below.

Why it is collected

Information submitted through the contact form is processed for the sole purpose of responding to your enquiry and, where you ask for it, providing professional advisory services. The legal basis is your consent (Article 6(1)(a) GDPR) for the initial contact, and the performance of a contract or pre-contractual measures (Article 6(1)(b)) if discussions progress.

Who processes it

  • SK Renewable Laboratory Ltd (Renewable Labs, registered in Cyprus, HE 458890), the company through which Sotiris Kyprianou provides his consulting services, as the data controller for enquiries sent through this site. Sotiris Kyprianou is your contact point, reachable at sotiriskyp@gmail.com.
  • Render Services, Inc. as static-site hosting provider; access logs may be retained for short periods for security and operational purposes.
  • Web3Forms as the contact-form processor; submissions are forwarded to Sotiris Kyprianou’s inbox from servers in the United States, under the European Commission’s Standard Contractual Clauses in its data processing agreement. See web3forms.com for their own privacy notice.
  • Supabase as the hosting provider of the Renewable Labs CRM, where each enquiry is also stored in the EU (Ireland) so it can be followed up.
  • Postmark or Resend as the email service that sends an internal alert when a new enquiry reaches the CRM, and any email that Renewable Labs sends you from the CRM about your enquiry, such as a quote. The alert contains your enquiry (your name, contact details, organisation and message); an email to you contains your name, your email address and what the email says. Both are processed in the United States, by AC PM LLC, which runs Postmark, or by Plus Five Five, Inc., which runs Resend; both companies are certified under the EU-U.S. Data Privacy Framework.
  • Telegram as the messaging service on which Sotiris Kyprianou receives internal alerts. Alerts about enquiries sent through this site carry only a reference number (for example L-1040), a link to the enquiry in the CRM and details of the enquiry itself, such as the service it is about, the form, ad or link it came from and its follow-up stage. They never carry your name, contact details or message. Telegram processes these alerts outside the European Union. No European Commission adequacy decision covers transfers to Telegram, and Telegram does not offer standard contractual clauses for this use.
  • Meta Platforms Ireland Limited (Facebook Messenger), only if you write to Renewable Labs on Messenger, for example from one of its ads, rather than through this site. Meta then processes your messages and the name on your Facebook profile under its own terms. Renewable Labs keeps your messages and that name in its CRM, hosted by Supabase in the EU (Ireland), so it can reply. Your messages and that name may also be shown to Sotiris Kyprianou in his private Telegram chat so he can reply, and Telegram processes them outside the European Union.
  • Lovable (an AI gateway), Google (Gemini and Veo models, used directly and through Lovable) and OpenAI (GPT models, through Lovable) as the AI services that help create the public marketing posts, images and videos of Renewable Labs. They are listed here for transparency: your enquiry, your name, your contact details and anything you write to Renewable Labs are never sent to Lovable or OpenAI and are never given to these AI models.
  • Cloudflare, Inc. as a cookieless web-analytics provider; it records aggregate page-view counts and never sets a cookie or identifies you.
  • Google Ireland Limited (Google Analytics 4) as an analytics provider, loaded only if you accept analytics cookies via the banner. See policies.google.com/privacy for their own privacy notice.
  • For the Meta Pixel only: SK Renewable Laboratory Ltd (Renewable Labs, registered in Cyprus, HE 458890) and Meta Platforms Ireland Limited as joint controllers. The pixel is loaded only if you choose Accept all on the cookie banner, to measure whether the Facebook and Instagram ads that Renewable Labs runs for this advisory work lead to enquiries. Its data goes to Renewable Labs, and Sotiris Kyprianou places the pixel on this site on its behalf. See Cookies and analytics below.

No personal information is sold or used for automated decision-making. The only data shared for marketing is the Meta Pixel measurement described below, and only if you accept it. For details of the safeguards or other legal basis that cover the transfers outside the European Union described above, write to sotiriskyp@gmail.com.

How long it is kept

Enquiry emails are kept in the inbox, and enquiries in the CRM, for as long as is necessary to respond and to maintain a normal record of business correspondence. You can ask for any information to be deleted at any time by writing to sotiriskyp@gmail.com.

Your rights

Under GDPR, you have the right to access, correct, delete or restrict the use of your personal information, to withdraw consent at any time, and to lodge a complaint with the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy). To exercise any of these rights, write to sotiriskyp@gmail.com.

Cookies and analytics

Three tools are used to understand how the site is visited and whether its ads lead to enquiries, and they are kept deliberately light:

  • Cloudflare Web Analytics runs by default. It is cookieless, sets no identifier and collects only aggregate page-view data, so no consent is required for it.
  • Google Analytics 4 is loaded only after you press Accept all or Analytics only on the cookie banner. It uses Google Consent Mode v2, which defaults every storage signal to denied, so no analytics or advertising cookies are set and no data is sent until you accept. Accepting turns on analytics cookies only: advertising storage and the use of your data for ads stay denied even after you accept, and Google Analytics is not used for advertising or ad personalisation. IP addresses are anonymised. If you press Decline, or ignore the banner, Google Analytics never loads.
  • Meta Pixel (Meta Platforms Ireland Limited) is loaded only after you press Accept all. It measures whether the Facebook and Instagram ads that Renewable Labs runs for this advisory work lead to enquiries. It sends Meta the pages you view, a “form sent” event, and technical data such as your IP address and browser details. It never sends your name, email or message. Meta may link these events to your Facebook or Instagram account if you are logged in. It sets the _fbp cookie, and _fbc when you arrive from an ad, for up to 90 days. The data goes to the Meta dataset of SK Renewable Laboratory Ltd (Renewable Labs), which runs these ads; Sotiris Kyprianou places the pixel on this site on its behalf. For collecting and transmitting this data, SK Renewable Laboratory Ltd and Meta are joint controllers under Article 26 GDPR, as set out in Meta’s Controller Addendum. To exercise your rights over this data, write to info@renewable-labs.com. Meta’s own use of the data is covered by facebook.com/privacy/policy. Meta may transfer data to the United States under the EU-US Data Privacy Framework. The legal basis is your consent. If your browser sends a Global Privacy Control signal, the pixel never loads. Analytics only or Decline keeps it off.

If you accept, the following are also kept in your browser for this session only: the campaign tags of the link you first arrived on (for example utm_source=linkedin), the first page you landed on, and the address of the website that linked you here, if any (its domain only, for example https://www.linkedin.com, never the full page address). They are sent with your enquiry, so it is clear which post, article or website brought you. Google Analytics then records that an enquiry was sent, without your name or email. If you decline, none of this happens, and the form carries only the page it is sent from and that page's own campaign tags. If your browser sends a Global Privacy Control or Do Not Track signal, none of this is kept even if you accept.

Your choice is remembered in your browser so you are not asked again on every visit. You can make, change or withdraw your choice at any time with the Cookie settings button below. On this page the cookie banner does not open by itself, so you can read this notice before you choose. Until you choose, Google Analytics and the Meta Pixel stay off. Apart from these tools, the browser may store a small amount of technical state to deliver the page; that state is not shared with any third party.

Changes to this notice

This notice may be updated as the practice evolves. Material changes will be indicated by updating the “Last updated” date above.

← Back home