Privacy Policy

Last updated: 21 September 2026

1. Data Controller

The controller responsible for processing personal data under the General Data Protection Regulation (“GDPR”) is:

ERLEY LTD
Georgiou Karaiskaki 11–13
CARISA SALONICA, Flat/Office 102
07560 Pervolia
Cyprus

Company registration number: HE443112
Telephone: +357 97 518968
Email: linus@optimaproc.com

OptimaProc is the public-facing brand under which ERLEY LTD provides artificial intelligence consulting, training and automation services.

2. Scope of this Privacy Policy

This Privacy Policy explains how personal data is processed when you visit optimaproc.com, contact us or book an introductory call.

Personal data means information relating to an identified or identifiable natural person, such as a name, email address or IP address.

3. Hosting and Server Logs

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

When you access the website, the web server may process:

• the IP address of your device;
• the date and time of access;
• the requested page or file;
• the amount of data transferred;
• browser type and version;
• operating system;
• referring URL;
• HTTP status code.

This processing is necessary to deliver the website, maintain its security and stability, and identify technical errors or abusive access.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.

Server logs are deleted when they are no longer required for these purposes, unless longer retention is necessary to investigate a security incident or comply with a legal obligation.

Further information:
https://www.strato.de/datenschutz/

4. Contacting Us and the Contact Form

If you contact us by email or through the contact form, we process the information you provide. This may include:

• your first and last name;
• your email address;
• the contents of your message;
• any other information you voluntarily provide;
• technical information required for the secure transmission of the form.

The contact form is provided using WPForms within our WordPress website. Information is transmitted through our website and email infrastructure.

Emails are processed using Google Workspace. The provider for users in the European Economic Area is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by affiliated companies outside the European Economic Area cannot be excluded.

We use this information to process your request, communicate with you and, where applicable, prepare or perform a contractual relationship.

The legal basis is:

• Article 6(1)(b) GDPR where your inquiry concerns entering into or performing a contract;
• Article 6(1)(f) GDPR for other business inquiries. Our legitimate interest is responding appropriately to communications addressed to us.

Information marked as mandatory is required to process your inquiry. Without it, we may not be able to respond.

We delete inquiries when their final resolution no longer requires storage. Information may be retained for longer where necessary to perform a contract, comply with statutory retention obligations, or establish, exercise or defend legal claims.

Further information about Google:
https://policies.google.com/privacy

5. Appointment Booking Through LunaCal

Our website contains links to the LunaCal booking platform. If you select one of these links, you leave our website and are redirected to LunaCal.

When you book an appointment, the following information may be processed:

• your name;
• your email address;
• the selected appointment;
• your time zone;
• information you provide regarding the meeting;
• technical connection information.

LunaCal is provided by LunaCal LLC and LunaCal Private Limited. LunaCal processes booking information for us as a technical service provider. Booking information may also be processed through our Google Workspace and Google Calendar environment.

The legal basis is Article 6(1)(b) GDPR where the appointment concerns entering into or performing a contract. For other meetings, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is efficient appointment scheduling and communication.

You are not required to use LunaCal and may contact us by email instead.

LunaCal may process information outside the European Economic Area. According to LunaCal, contractual safeguards including the European Commission’s Standard Contractual Clauses are available for these transfers.

Further information:

https://lunacal.ai/privacy-policy
https://lunacal.ai/dpa

6. Cookies and Consent Management

Our website uses technically necessary cookies and similar technologies. These may be required to:

• store your privacy choices;
• remember your selected language;
• operate the website securely and reliably;
• deliver and cache website content efficiently.

We use Real Cookie Banner to manage your privacy choices. This may involve storing your selection, a consent identifier, the date and scope of your choice and related technical information. This information is used to apply your preferences and demonstrate compliance with legal requirements.

The legal basis for consent management is Article 6(1)(c) GDPR together with applicable rules governing cookies and electronic communications. Where processing is not required by law, it is based on Article 6(1)(f) GDPR.

Non-essential cookies and services are used only after you have provided consent through the cookie banner. The legal basis is Article 6(1)(a) GDPR.

You can change or withdraw your selection at any time through the “Change privacy settings,” “Privacy settings history” and “Revoke consents” links in the website footer. Withdrawal applies to future processing and does not affect processing that occurred before withdrawal.

The cookies currently used, their providers, purposes and storage periods can be reviewed in the website’s privacy settings.

7. Language Preferences

Our multilingual website uses Polylang. A technically necessary language preference may be stored so the website can be displayed in the language you selected.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is providing a user-friendly multilingual website.

8. Google Fonts

This website uses Google Fonts to display fonts consistently. Font files are currently loaded from Google servers. When this happens, your browser connects to Google and transmits your IP address and technical information about your browser and device.

The provider for users in the European Economic Area is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC or other affiliated companies outside the European Economic Area cannot be excluded.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the technically reliable and consistent presentation of the website.

For transfers outside the European Economic Area, Google states that it relies on applicable adequacy decisions and/or the European Commission’s Standard Contractual Clauses.

Further information:
https://policies.google.com/privacy

9. External Links and Social Networks

Our website contains links to external websites, including LinkedIn and LunaCal. No information is transferred to these providers merely because the links appear on our website.

When you follow an external link, the privacy practices of the relevant provider apply. We do not control how those external websites process personal data.

10. Recipients and International Transfers

Where necessary, personal data may be disclosed to the following categories of recipients:

• hosting and IT service providers;
• email and communication providers;
• appointment-booking and calendar providers;
• advisers or public authorities where legally required.

Some service providers may process information outside the European Economic Area. Where required, we use safeguards under Articles 44–49 GDPR, including applicable adequacy decisions or the European Commission’s Standard Contractual Clauses.

11. Retention

We retain personal data only for as long as necessary for the relevant processing purpose.

Information may be retained for longer where:

• a statutory retention obligation applies;
• the information is required to perform a contract;
• retention is necessary to establish, exercise or defend legal claims;
• a security incident must be investigated.

The information is subsequently deleted or anonymised.

12. Your Rights

Subject to the requirements of the GDPR, you may have the right to:

• obtain access to your personal data;
• correct inaccurate data;
• request erasure;
• restrict processing;
• receive data in a portable format;
• object to processing based on legitimate interests;
• withdraw consent with effect for the future.

To exercise these rights, contact us at linus@optimaproc.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for ERLEY LTD is:

Office of the Commissioner for Personal Data Protection
1 Iasonos Street
1082 Nicosia
Cyprus

Email: commissioner@dataprotection.gov.cy
Website: https://www.dataprotection.gov.cy/

13. Automated Decision-Making

We do not use solely automated decision-making, including profiling, through this website where the decision produces legal effects concerning you or similarly significantly affects you.

14. Security

We implement appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration and disclosure. This includes encrypted transmission of the website through HTTPS.

15. Changes to this Privacy Policy

We may update this Privacy Policy if the website, the services we use or the applicable legal requirements change. The current version will be published on this page.