This policy explains what personal data this website collects, why, who else receives it and what rights you have. It applies to every language version of the site and to the links our agents share.
Who is responsible
The controller of the personal data described here is ROCS Global.
- Office: Long Beach Bölgesi, Çiçek Sokak No:2, Cortado Arkası, 99850 Yeni İskele, TRNC (Turkish Republic of Northern Cyprus)
- Email: [email protected]
- Phone: +421 905 801 800
For any question about your data, or to exercise your rights, write to [email protected].
When you request a PDF
Some documents — an offer's brochure, the buying guide — are handed out in exchange for an email address. When you send that form we receive:
- your email address (required);
- your name, if you enter one;
- which document you asked for and, for an offer brochure, which offer;
- the language you were reading the site in;
- that you ticked the consent box;
- the address of the page you sent the form from and your browser's user-agent string;
- if you arrived through one of our agents' links, which agent referred you.
We store this in the content-management system that runs the site, use it to give you the document and, as the consent box says, to contact you about residences. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to us. If that system cannot store the request — because it is unreachable or refuses it — the same details (without the page address and user-agent) are written to the server's technical log instead, so your request is not lost. Some errors in recording the referring agent also write your email address and the agent's identifier to that log. The download link you receive works for 24 hours.
When you contact us
The enquiry form on the contact page does not send anything to us by itself: it opens a pre-filled email in your own mail program, and this website does not store what you type into it. We receive the email only if you send it.
Whether you write to us by email, call, or message us on WhatsApp, we use what you send — your name, contact details and message — to answer you and to help with the property you asked about. The legal basis is taking steps at your request before a possible contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). WhatsApp is run by WhatsApp/Meta under its own privacy terms.
Agent links
When you follow a link shared by one of our agents, or arrive on an agent's profile page from outside this site, the site remembers that agent in a cookie for 90 days. While it is set, the site shows that agent's phone number and email instead of the office's, and a PDF request you make is recorded together with the agent's identifier, so it can be attributed to the agent who introduced you. Following another agent's link replaces it.
Analytics and marketing
These services are loaded only after you allow the matching category, and only those we have switched on for the site:
- Google Analytics 4 (Google) — with Analytics consent. Google Consent Mode v2 starts with every signal set to “denied” and is updated only with your choice.
- Yandex Metrica (Yandex) — with Analytics consent. Its session-recording feature (Webvisor) is switched off.
- Meta Pixel (Meta) — with Marketing consent.
Each of them receives the pages you view. Yandex Metrica, through its click map, link tracking and accurate bounce measurement, also records where you click, how long you stay on a page and clicks on links that lead away from the site, including the link's full address — for example a WhatsApp link, which contains our or an agent's phone number. We also send two events of our own: that you opened a contact link (WhatsApp, phone, email or the form) and that you requested a PDF (which document, and which offer). We do not send them your name or email address. Under the providers' default settings, Google Analytics may also record interactions such as scrolling and clicks on outgoing links, and the Meta Pixel may record automatic events such as button clicks. The providers set their own cookies and may process the data outside the European Economic Area, under their own terms. The legal basis is your consent (Art. 6(1)(a) GDPR). When you withdraw it, Google Analytics is told through Consent Mode, and the page reloads without Yandex Metrica and the Meta Pixel.
Maps, videos and tours
Some pages show content loaded directly from other providers. When they load, your browser connects to the provider, which receives your IP address and browser details:
- maps on offer pages and the offers map — OpenStreetMap;
- the regions map — satellite imagery from Esri (ArcGIS Online), with OpenStreetMap as the fallback;
- videos inside articles — YouTube in its privacy-enhanced mode (youtube-nocookie.com) and Vimeo;
- 360° virtual tours — served from this website, or for an individual listing from the address set for its tour.
Hosting and security
The website and its content-management system run with a hosting provider, and all traffic passes through Cloudflare, which delivers the pages and protects the site from abuse. Both process technical data — your IP address, browser details, the address requested and the time — to do so, and Cloudflare may set a short-lived security cookie. Cloudflare also uses your approximate location to apply access restrictions. The legal basis is our legitimate interest in a working, secure website (Art. 6(1)(f) GDPR).
Who receives your data
We do not sell personal data. It reaches others only as described above: our hosting provider and Cloudflare, the analytics and marketing providers you allowed, and the providers of embedded maps and videos.
How long we keep it
- PDF requests and enquiries: as long as needed to deal with your request and follow it up, then deleted — or earlier if you withdraw your consent or ask us to erase them.
- Your cookie choice: 12 months, in your own browser.
- The agent-link cookie: 90 days.
- Analytics and marketing cookies: as set by each provider — see the cookie policy.
Your rights
Under Articles 15 to 22 of the GDPR you have the right to:
- access the personal data we hold about you and get a copy;
- have inaccurate data corrected;
- have your data erased;
- have its processing restricted;
- receive the data you gave us in a portable format;
- object to processing based on our legitimate interest, and to direct marketing at any time;
- withdraw a consent at any time, without affecting what was done before.
We make no decisions about you by automated means alone. To exercise any of these rights, write to [email protected].
You also have the right to lodge a complaint with a data-protection supervisory authority, in particular in the EU member state where you live, where you work or where you believe the infringement took place.
Changes to this policy
When the way the site handles data changes, we update this policy and the date at the top of the page.