Legal

Privacy & Cookie Policy

Last updated: 26 October 2026

This policy explains how D Formula collects and uses personal data when you visit this website or contact us through it. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the applicable law of the Republic of Cyprus.

1. Who we are

The data controller is:

We have not appointed a Data Protection Officer. For any privacy question, write to partners@dformula.eu.

2. What data we collect

Source	Data
Partnership inquiry form	Full name, company, work email, country, product category, the content of your message
Email, phone, WhatsApp, Telegram	Your contact details and whatever you choose to send us
Visiting the website	Technical data processed by our hosting provider to deliver the page and keep it secure: IP address, browser type, date and time of the request

We do not use analytics, advertising or tracking tools, and we do not build profiles of visitors. This website is intended for businesses and healthcare professionals; please do not send us health data or information about patients.

3. Why we use your data and on what legal basis

Purpose	Legal basis (GDPR)
Responding to your inquiry and discussing a possible partnership	Steps taken at your request before entering into a contract (Art. 6(1)(b)); our legitimate interest in developing business relationships (Art. 6(1)(f))
Managing an ongoing business relationship	Performance of a contract (Art. 6(1)(b))
Operating and securing the website	Our legitimate interest in a reliable, secure website (Art. 6(1)(f))
Meeting legal obligations (e.g. accounting, tax)	Legal obligation (Art. 6(1)(c))

We do not use your data for automated decision-making or profiling.

4. Who receives your data

We share personal data only with service providers that help us run this website and our communications, under data processing agreements:

• Netlify, Inc. — website hosting and handling of form submissions;
• Namecheap, Inc. (Private Email) — business email.

If you contact us via WhatsApp or Telegram, those platforms process your data under their own privacy policies. We may also disclose data where required by law or to protect our legal rights. We never sell personal data.

5. Transfers outside the EU

Some of our providers are located in, or may access data from, countries outside the European Economic Area, including the United States. Where this happens, the transfer is protected by appropriate safeguards — such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU–U.S. Data Privacy Framework. You can request more information about these safeguards by contacting us.

6. How long we keep your data

• Inquiries that do not lead to a business relationship: up to 24 months after our last contact;
• Data related to a business relationship: for the duration of the relationship and afterwards as long as required by Cypriot accounting and tax law;
• Technical server logs: kept by our hosting provider for a short period in line with its own retention policy.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict how we process your data;
• receive your data in a portable format;
• object to processing based on our legitimate interests;
• withdraw any consent you have given, at any time.

To exercise these rights, email partners@dformula.eu. We will reply within one month. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (dataprotection.gov.cy) or with the supervisory authority of your EU country.

8. Cookies and local storage

This website does not use cookies for analytics, advertising or tracking, and it does not load third-party trackers. Fonts are served from our own server, so your browser does not connect to Google or other font providers.

We store two small items in your browser's local storage. They never leave your device and are strictly necessary to remember choices you make:

Name	Purpose	Duration
df-lang	Remembers the language you selected (EN / RU / GR)	Until you clear your browser data
df-cookie-notice	Remembers that you closed the cookie notice	Until you clear your browser data

Because these items are strictly necessary for features you request, they do not require consent under the ePrivacy rules. You can delete them at any time in your browser settings. If we ever introduce analytics or other non-essential cookies, we will ask for your consent first and update this policy.

9. Security

The website is served over an encrypted HTTPS connection. Access to inquiries is limited to the D Formula team members who need it to respond to you.

10. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the date of the last update shown at the top.