Privacy Policy

Last updated: 19 July 2026

This Privacy Policy explains how Constantinos Lyras, owner of lyras.com.cy, collects, uses, stores, and protects personal data through the website lyras.com.cy.

1. Data Controller

The data controller responsible for personal data processed through this website is:

Constantinos Lyras
Nicosia, Cyprus

For privacy-related enquiries, please contact us through our Contact Us page.

2. Personal Data We Collect

Information you provide directly

When you contact us through the website contact form, email, telephone, WhatsApp, Viber, social media, or another communication method, we may collect:

  • Your name
  • Your email address
  • Your telephone number
  • The subject and content of your message
  • Your preferred contact method
  • Details about your event
  • The event date, time, and location
  • The music or entertainment services you are interested in
  • Any other information you choose to provide

Booking and service information

When you make a booking or request our services, we may also process:

  • Booking and event details
  • Contract and quotation information
  • Communications relating to your event
  • Payment, invoice, and receipt information
  • Information about musicians, performers, venues, suppliers, or event organisers involved in providing the service

Information collected automatically

When you visit the website, limited technical information may be processed automatically by the website server, hosting provider, security tools, and website software, including:

  • Your Internet Protocol address
  • Browser and device information
  • Operating system
  • Date and time of access
  • Pages and files requested
  • Referring website
  • Security, diagnostic, and error information

This information may be recorded in server logs and used to operate, maintain, troubleshoot, and protect the website.

3. How We Use Personal Data

We may use personal data to:

  • Respond to enquiries and messages
  • Provide quotations and availability information
  • Arrange and manage event bookings
  • Provide live music, DJ, entertainment, or related event services
  • Communicate with clients, venues, musicians, suppliers, and event organisers
  • Prepare contracts, invoices, and receipts
  • Process and record payments
  • Provide customer support
  • Operate, maintain, and secure the website
  • Prevent spam, fraud, abuse, and security incidents
  • Establish, exercise, or defend legal claims
  • Comply with tax, accounting, legal, and regulatory obligations

We do not sell or rent personal data.

4. Legal Bases for Processing

Depending on the circumstances, we process personal data on one or more of the following legal bases:

Steps before entering into a contract

We process enquiry and event information when you request prices, availability, a quotation, or information before making a booking.

Performance of a contract

We process information necessary to arrange, administer, and provide booked music or entertainment services.

Legitimate interests

We may process personal data where necessary for our legitimate interests, including:

  • Responding to communications
  • Managing bookings and business relationships
  • Coordinating performers and suppliers
  • Maintaining business records
  • Protecting our legal rights
  • Maintaining the security and functionality of the website

We consider whether these interests are overridden by your rights and interests before relying on this legal basis.

Legal obligations

We may process and retain personal data where required by tax, accounting, legal, or regulatory obligations.

Consent

Where processing is based on consent, such as optional cookies, marketing communications, or certain uses of photographs and videos, you may withdraw your consent at any time.

Withdrawal of consent does not affect processing that took place before consent was withdrawn.

5. Whether Providing Information Is Required

You are not legally required to contact us or provide personal information through the website.

However, certain information is necessary for us to respond to an enquiry, prepare a quotation, confirm availability, or provide a booked service.

If you do not provide the necessary information, we may be unable to respond to your request or provide the requested service.

6. Contact Forms and Communications

When you submit the website contact form, the information you provide is transmitted to us so that we can respond to your request.

Contact-form information may also be processed by the website hosting provider, email provider, contact-form software, security services, or spam-prevention services.

Please do not submit confidential or sensitive personal information through the contact form unless it is necessary for your request.

7. WhatsApp, Viber and Social Media

The website may provide links that allow you to contact us through WhatsApp, Viber, Facebook, Instagram, or other third-party platforms.

When you use one of these services, the platform provider may process your personal data according to its own privacy policy and terms.

We do not control the independent data-processing practices of these third-party platforms.

8. Cookies and Similar Technologies

The website may use cookies and similar technologies.

Strictly necessary cookies

Strictly necessary cookies may be used for:

  • Website functionality
  • Security
  • Contact-form operation
  • Spam prevention
  • Remembering privacy or cookie preferences

These cookies may be used without consent where they are strictly necessary to provide a service requested by the visitor.

Optional cookies

Analytics, advertising, social-media, embedded-video, or other non-essential cookies will only be activated after consent where consent is legally required.

Where a cookie-management tool is available, you may use it to accept, reject, or change your cookie preferences.

You may also control or delete cookies through your browser settings. Disabling strictly necessary cookies may affect certain website functions.

9. Embedded Content

The website may include embedded content from third-party services, such as:

  • YouTube videos
  • Social-media posts
  • Maps
  • Music or audio players

Embedded content may behave as though you visited the third-party provider’s website directly.

The provider may collect technical information, use cookies, or record your interaction with the embedded content. Where legally required, non-essential embedded content will not be activated until you provide consent.

10. Photographs and Video Recordings

Photographs or video recordings from events may sometimes be used to present our work on the website, social-media pages, or promotional materials.

We will only publish identifiable photographs or recordings where we have an appropriate legal basis and any permission required in the circumstances.

Clients who provide photographs or recordings to us are responsible for ensuring that they have the necessary authority or permission to share that material.

You may contact us if you have a legitimate concern about an identifiable photograph or recording in which you appear.

11. Service Providers and Other Recipients

Personal data may be processed by trusted service providers that assist us with our website and event services, including:

  • Website hosting providers
  • Email providers
  • Website developers and technical-support providers
  • Website security, backup, and spam-prevention providers
  • Musicians, DJs, sound engineers, and other performers
  • Venues, event organisers, and suppliers
  • Accounting and professional advisers
  • Banks and payment-service providers
  • Public authorities where disclosure is required by law

Only the information reasonably necessary for the relevant service will be shared.

Service providers acting on our behalf are expected to protect personal data and use it only for the relevant purpose.

12. International Data Transfers

Some technology, communication, social-media, hosting, or service providers may process personal data outside Cyprus or the European Economic Area.

Where personal data is transferred outside the European Economic Area, appropriate legal safeguards will be used where required, such as:

  • A European Commission adequacy decision
  • Standard contractual clauses
  • Another legally recognised transfer mechanism

13. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

In general:

  • General enquiries that do not result in a booking may normally be retained for up to 12 months after the last communication.
  • Booking and event-administration information may be retained for the duration of the client relationship and for a reasonable period afterwards.
  • Contracts, invoices, receipts, and payment records may be retained for the period required by applicable tax, accounting, and legal obligations.
  • Technical and security logs are normally retained for a limited period unless they are required to investigate a security incident.
  • Information relevant to a dispute or legal claim may be retained until the matter and any applicable legal limitation period have ended.

Information may be deleted or anonymised when it is no longer required.

14. Marketing Communications

We will not use contact-form enquiries to send unrelated marketing communications without an appropriate legal basis.

Where you have consented to receive marketing communications, you may withdraw your consent or unsubscribe at any time.

15. Children’s Privacy

This website and its event-booking services are intended primarily for adults.

We do not knowingly request personal data directly from children through the website.

Where an event or service involves a person under the age of 18, the relevant arrangements should normally be made by a parent, guardian, venue, or responsible adult.

A parent or guardian who believes that a child has submitted personal data without appropriate permission may contact us to request that the information be reviewed or deleted.

16. Links to Other Websites

The website may contain links to websites that are not operated or controlled by us.

When you follow an external link, the third party may process your information according to its own privacy policy.

We are not responsible for the privacy, security, content, or data-processing practices of independent third-party websites.

17. Data Security

We use reasonable technical and organisational measures to protect personal data against:

  • Unauthorised access
  • Accidental loss
  • Misuse
  • Alteration
  • Unauthorised disclosure
  • Destruction

However, no website, email service, internet transmission, or electronic-storage system can be guaranteed to be completely secure.

18. Your Data-Protection Rights

Subject to the conditions and limitations of applicable law, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Receive certain personal data in a portable format
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a supervisory authority

We do not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise your rights, please contact us through our Contact Us page.

We may request reasonable information to confirm your identity before responding.

19. Changes to This Privacy Policy

We may update this Privacy Policy when our website, services, technology, or legal obligations change.

The updated version will be published on this page with a revised “Last updated” date.

20. Contact Us

For questions about this Privacy Policy or the processing of your personal data, please contact us through our Contact Us page.