Privacy Policy
Last updated: 17 October 2026
Who we are
Symvaseis.cy (the website and its MCP server) is operated by George Hadjisavvas, as an individual operator based in Cyprus, who is the controller of the data described here. For any privacy question, contact georgehadjisavvas12@gmail.com.
What data we process
Public procurement data
The website and the MCP server present publicly disclosed procurement records from data.gov.cy and TED (Tenders Electronic Daily): tenders, awards, contracting authorities and contractors. These records are already public. They may include the names of companies or sole traders. If you believe a record needs correcting, contact us.
Newsletter signup
If you subscribe, we store your email address, your chosen language, the CPV sectors and minimum tender value you selected, the time of your consent, and which tenders we have already sent you (so we never send the same one twice). Legal basis: your consent. We keep this data until you are removed. To be removed, email the contact address above.
Using the website
- Language cookie (
lang): stores your EL/EN choice for one year. It is functional and does not track you. - Google Analytics: we use Google Analytics for traffic statistics. Google may set cookies and collect technical information (such as IP address, device and pages visited). You can block these in your browser settings.
- Server logs: the app is hosted on Fly.io (Frankfurt, Germany), which may log technical request data (such as IP address, time and path) for operation and security.
Using the MCP server
The MCP server needs no account or API key. We process only the requests your AI assistant sends (for example search terms and filters) in order to return results. We do not store the content of your conversations or build user profiles. To prevent abuse, we keep your IP address and a request counter in memory for a few minutes; this is not written to the database. Note that the AI assistant you use (for example Claude or Cursor) has its own privacy policy covering your conversations.
Who we share data with
We do not sell data. We use these service providers to run the service:
- Fly.io: application hosting.
- Neon: PostgreSQL database.
- Brevo: sending the newsletter (receives your email address).
- Google Analytics: traffic statistics.
Some providers may process data outside the EU/EEA under appropriate safeguards (such as standard contractual clauses).
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw consent at any time. To exercise them, write to georgehadjisavvas12@gmail.com. You may also lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.
Children
The service is not directed at children and we do not knowingly collect their data.
Changes
If this policy changes, we will update this page and the date above.