Privacy Policy

How We Collect Your Data
We collect personal data:

• Directly from you: When you fill out forms, request services, or communicate with us via email or phone.

• Automatically: Through cookies and similar technologies when you visit our website. See our Cookie Policy for details.

• From third parties: From clients, partners, or publicly available sources (e.g., company registries) when relevant to our services.

4. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR (Article 6):

• Contract: To fulfill our obligations under a service agreement or to take steps at your request before entering a contract (e.g., preparing a transfer pricing report).

• Consent: Where you have given explicit consent, such as for receiving newsletters or marketing communications.

• Legitimate Interests: For purposes such as improving our website, analyzing service performance, or fraud prevention, provided your rights are not overridden.

• Legal Obligation: To comply with tax, accounting, or regulatory requirements.

5. How We Use Your Data
We use your personal data to:

• Provide transfer pricing consultancy services, including analysis, documentation, and compliance support.

• Respond to inquiries and communicate with you about our Services.

• Improve our website and Services through analytics and user feedback.

• Send marketing communications, where you have consented.

• Comply with legal and regulatory obligations, including tax and financial reporting.

6. International Data Transfers
As transfer pricing specialists, we may transfer personal data to third countries (outside the EU/EEA) for purposes such as cross-border tax analysis or collaboration with international partners. We ensure compliance with GDPR (Articles 44-50) by:

• Transferring data only to countries with an adequacy decision from the European Commission, where applicable.

• Using Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to non-adequate countries.

• Implementing Binding Corporate Rules (BCRs) for intra-group transfers, if applicable.

• Ensuring additional safeguards, such as encryption and data minimization, to protect your data.

We will inform you of the specific safeguards in place if your data is transferred internationally.
7. Data Sharing
We may share your personal data with:

• Service Providers: Third-party providers (e.g., IT services, analytics tools) acting as data processors under GDPR-compliant agreements.

• Business Partners: International tax consultants or affiliates involved in your transfer pricing project, with appropriate safeguards.

• Authorities: Tax authorities or regulators when required by law.

We do not sell your personal data or share it for purposes unrelated to our Services.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations (e.g., tax record-keeping requirements). For example:

• Contact information is retained for the duration of our business relationship or until you withdraw consent.

• Financial data may be retained for up to 7 years to comply with tax laws.

• Website usage data is retained for [e.g., 12 months] for analytics purposes.

After the retention period, we securely delete or anonymize your data.
9. Your Data Protection Rights
Under GDPR (Articles 15-22), you have the following rights:

• Access: Request a copy of your personal data.

• Rectification: Correct inaccurate or incomplete data.

• Erasure: Request deletion of your data ("right to be forgotten").

• Restriction: Limit how we process your data.

• Portability: Receive your data in a structured, machine-readable format or have it transferred to another controller.

• Object: Object to processing based on legitimate interests or for direct marketing.

• Withdraw Consent: Withdraw consent at any time, without affecting prior processing.

• Complain: Lodge a complaint with a supervisory authority (e.g., [Your Country’s Data Protection Authority, e.g., CNIL in France]).

To exercise these rights, contact us at info@info@tpspecialists.com. We will respond within one month, as required by GDPR.
10. Cookies and Tracking Technologies
Our website uses cookies to enhance user experience and analyze performance. For details, see our Cookie Policy. You can manage cookie preferences via our cookie banner, as required by the EU ePrivacy Directive.
11. Data Security
We implement technical and organizational measures to protect your data, including:

• Encryption of sensitive data during transmission and storage.

• Access controls to limit data access to authorized personnel.

• Regular security audits and updates to our systems.

In case of a data breach, we will notify you and the relevant supervisory authority within 72 hours, as required by GDPR (Article 33).
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before sharing personal data.
13. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or a website notice. The latest version will always be available at transferpricingtps.com/privacy-policy.
14. Contact Us
For questions or concerns about this Privacy Policy or your data, contact us at:

• Email:  info@tpspecialists.com

• 2413 egkomi
  Nicosia

• Data Protection Officer: NasosA@tpspecialists.com

You may also contact your local supervisory authority for complaints or guidance.
15. Applicable Laws
This Privacy Policy complies with the following European data protection laws:

• General Data Protection Regulation (GDPR): Regulation (EU) 2016/679, effective May 25, 2018, governing the processing of personal data in the EU/EEA.

• ePrivacy Directive: Directive 2002/58/EC, amended by Directive 2009/136/EC, regulating cookies and electronic communications.

• Regulation (EU) 2018/1725: Applies to EU institutions and bodies processing personal data, relevant for interactions with EU agencies.

​