Version of 26 September 2026.
The controller of your personal data is FinStudio, Nicosia, Cyprus, email: info@finstudio.tax (“we”, “us”).
For any question about how your personal data is processed, you can contact us at that email address.
Depending on the service, we may process the following categories of data:
| Category | What it includes |
|---|---|
| Identification | full name, date of birth, citizenship, identity document details, tax identification number |
| Contact | address, phone number, email, messenger accounts |
| Tax and financial | income, withholdings, contributions, deductions, bank details, information about property and investments |
| Residency | days of presence, housing details, domicile information |
| Family | information about dependants — only where needed for deductions |
| Documents | employer certificates, contracts, statements, official certificates |
We do not collect special categories of data (health, beliefs, biometrics) and ask you not to send us such information unless it is directly required.
| Purpose | Legal basis |
|---|---|
| Providing services under a contract: preparing and filing returns, obtaining certificates, advice | Performance of a contract — Article 6(1)(b) GDPR |
| Complying with tax law and document retention requirements | Legal obligation — Article 6(1)(c) GDPR |
| Invoicing, bookkeeping, establishing and defending legal claims | Legitimate interest — Article 6(1)(f) GDPR |
| Newsletters about deadlines and changes in legislation | Consent — Article 6(1)(a) GDPR, which you can withdraw at any time |
We do not sell your data or share it with third parties for marketing purposes.
Some technical service providers may process data outside the EEA. In that case the transfer is based on a European Commission adequacy decision or on standard contractual clauses approved by the European Commission.
Documents and information relating to tax obligations are kept for six years from the end of the tax year concerned — the period during which the Tax Department may carry out an audit.
Data processed on the basis of consent is deleted when consent is withdrawn. Data needed to establish or defend legal claims is kept until the limitation period expires.
Under the GDPR you have the right to:
We respond to requests within one month. If you believe your rights have been infringed, you can lodge a complaint with the Commissioner for Personal Data Protection of the Republic of Cyprus (Γραφείο Επιτρόπου Προστασίας Δεδομένων Προσωπικού Χαρακτήρα).
We apply technical and organisational measures proportionate to the risks: access control, encryption in transit, backups, and limiting who can see documents. Only people who need access to provide the service have it.
The finstudio.tax website does not use advertising or analytics cookies. Only your chosen interface language is stored in your browser.
The website is hosted on Cloudflare, which may process your IP address and technical request data for security purposes. Fonts are loaded from Google servers, which means Google receives your device’s IP address.
Calculations in the calculator run in your browser and are not sent to our server; we do not store the amounts you enter. No web analytics tools are used.
We may update this Policy. The current version is always available on the website, with its date at the top. We notify clients of material changes by email.