Last updated: 11 October 2026

1. Who we are

AJ AUTO GROUP is a trading name operated by ANTONIS TZIOULIOU, a self-employed business operator in Cyprus. ANTONIS TZIOULIOU is the data controller responsible for the personal information described in this notice. AJ AUTO GROUP is not a separate incorporated legal entity.

2. How to contact us

3. Information we may receive

You may provide contact details, messages, vehicle preferences, budget, listing links and other information relevant to an enquiry or requested service. Name, phone number and email are optional for an initial website enquiry. We can normally reply through the channel you choose; that provider may require its own account details.

A vehicle transaction may require further information for import, customs, payment, accounting, tax, delivery or support documentation. Necessary information may also come from the transaction partners described below. If information is needed for a particular transaction or legal requirement, not providing it may prevent that step.

We do not routinely retain ID cards or passports as part of the normal website or enquiry process. Please do not send them, payment-card details or unnecessary information about other people with an initial enquiry. A later transaction or legal requirement may require identity information; we will explain what is needed for that purpose.

4. How the website enquiry form works

The form prepares a message in your browser. It does not send ordinary Contact-form messages to a dedicated AJ enquiry backend or database. The preparation button is enabled only when the form's JavaScript handler is ready. Without JavaScript, direct contact links remain available.

Choosing WhatsApp passes the prepared text in a link to that service, so WhatsApp may receive it before you press Send. Email opens a draft in your email application. Viber and Telegram options attempt to copy the text to your device clipboard and open the contact, so you can paste, review and send it. If copying fails, the page reports this and keeps the form information available. Opening an app does not confirm that AJ has received a message.

The form code does not save enquiry fields in cookies, localStorage or sessionStorage. Browser history, autofill, session restoration, clipboard features and your chosen messaging or email provider may retain information separately.

5. Why we use information

We use relevant information to respond to enquiries, source vehicles, prepare quotations, handle requested services and transactions, coordinate import-related processes, and provide customer service, after-sales support or warranty-related coordination where applicable. Relevant records may also be needed for accounting, tax, customs, legal obligations and resolving disputes.

6. Legal bases

The legal basis depends on the purpose. It may be taking steps at your request before entering a contract, performing a contract with you, or complying with a legal obligation. Where appropriate, legitimate interests may support necessary customer-service history, business correspondence and recordkeeping, protection against misuse, or establishing or defending legal claims, subject to your rights and the required balancing of interests.

If unrelated marketing is introduced on the basis of consent, that consent will be requested separately and can be withdrawn. We do not treat making an enquiry as consent to every kind of processing.

7. Marketing

Ordinary enquiry and customer information is not used for unrelated promotional marketing. Making an enquiry does not subscribe you to marketing. If we intend to introduce such marketing in the future, we will ask you beforehand through an appropriate lawful mechanism, including separate consent where required.

8. Who may receive information

ANTONIS TZIOULIOU, operating as AJ AUTO GROUP, handles the information. Where necessary for the requested service or relevant obligations, information may also be accessed by or shared with our accountant, customs agent or Japanese exporter/partner. Sharing is limited to information needed for the particular purpose. This is separate from the technical and communication providers below.

9. Website providers and external services

Resources that load with the website: Vercel hosts the website and handles technical connection and request information. Google Fonts supplies fonts. Homepages load the Featurable review widget and Google-hosted review images; some pages load Unsplash images. These connections can disclose technical information such as your IP address and browser/device information even if you do not send an enquiry. Providers process information according to their own roles and privacy notices.

Services you choose to use: WhatsApp/Meta, Viber, Telegram and email services process information when you use those contact methods. Our business email uses Gmail; your email application or provider may be different. Facebook, Instagram and LinkedIn links take you to those services when followed; those providers apply their own privacy practices. A social link is not, by itself, an embedded advertising tracker. External providers may receive technical information and information you choose to share. The Google map is different because it can load before you click a link.

Browser storage: The site's own code uses a sessionStorage flag, aj_tip_seen, to remember dismissal of the contact tip during the browsing session; it contains no enquiry details. The website does not currently include AJ analytics or advertising tags. Third-party storage and processing can vary with the browser, account, region and provider. An observation that no cookies appeared in a particular test is not a promise that providers never use them.

10. Google Maps

Contact pages embed the confirmed AJ AUTO GROUP listing using Google's standard Google Maps iframe. Lazy loading means the map may load as it approaches the viewport, before you click it; lazy loading is not a consent control.

Loading the map can transmit technical information, including IP address, browser/device information and referring origin or page information, subject to browser settings and the referrer policy. Google loads its own map, listing, imagery and supporting resources. AJ does not operate a custom Maps API integration or an AJ API key for this embed. The website form does not pass enquiry fields to the map.

Google may process other information or use cookies according to the circumstances and its own policies. See Google's Privacy Policy. The address and directions links open the business's Google Maps listing.

11. International processing, including Japan

Necessary transaction information may be shared with a Japanese exporter/partner to perform a requested vehicle transaction. Technical, messaging and email providers may also process information outside Cyprus or the European Economic Area (EEA).

Transfers outside the EEA are subject to applicable data-protection requirements. Appropriate transfer protections must be determined for the actual recipient and processing: for example, an adequacy decision where its scope applies, or another lawful transfer mechanism where required. One mechanism does not automatically cover every Japanese recipient or onward transfer. Contact us for information about the protections relevant to your information and how to obtain details of applicable safeguards.

12. How long information is kept

Information may remain in the messaging or social platform you used, email correspondence, saved customer contacts, paper business records and import or transaction documentation. Relevant accounting, tax, customs and warranty/support records may also be retained.

We retain personal information only for as long as reasonably necessary for its purpose, including managing enquiries, maintaining relevant customer-service and transaction history, completing vehicle transactions, providing after-sales or warranty support, and meeting accounting, tax, customs, legal or dispute-resolution requirements. Records subject to mandatory retention obligations may be kept for the period required by applicable law.

Records no longer reasonably required for these purposes should be deleted or anonymised where appropriate. Delivery does not mean that all records are automatically deleted. Messaging and email providers may have their own retention arrangements; clearing a website form does not delete correspondence already sent.

13. Your data-protection rights

Subject to applicable legal conditions and exceptions, you may request access and a copy of your personal data, correction, erasure or restriction of processing. Portability may apply to information you provided where automated processing is based on consent or contract.

You may object to processing based on legitimate interests on grounds relating to your situation, and to direct marketing at any time. Where processing is based on consent, you may withdraw it without affecting the lawfulness of processing before withdrawal. These rights do not always require immediate deletion, for example where legal or accounting records must be retained.

14. Making a privacy request

Email ajautogroupcy@gmail.com, or contact us by telephone or at the office above. Explain the information or processing your request concerns. Where reasonably necessary to protect you, we may request proportionate verification information. We do not automatically require identity documents. Requests are handled within the applicable statutory time limits.

15. Complaints

You may lodge a complaint with the Cyprus Commissioner for Personal Data Protection if you consider that processing of your personal data infringes applicable data-protection law. You do not have to contact us first. See the Commissioner's official complaint guidance.

16. Changes to this notice

We may update this notice when our practices or relevant requirements change; the date above identifies the latest revision. This notice explains personal-information handling. It is not vehicle purchase Terms & Conditions or a limitation of mandatory consumer rights.