MONO SUPPLIES
AS Mono Supplies Ltd | Legal
How we collect, use, disclose, retain, and protect personal data across our global operations.
AS Mono Supplies Ltd ("Mono Supplies", "we", "us", or "our") is a B2B hospitality equipment supplier incorporated and headquartered in Nicosia, Cyprus. We supply premium hotel room equipment, FF&E, and OS&E products to hotels, resorts, and hospitality operators across Europe, the Middle East, Australia, and internationally.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you:
Data Controller
As a company headquartered in Cyprus, an EU Member State, AS Mono Supplies Ltd is subject to the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Cyprus Law on the Protection of Natural Persons with regard to the Processing of Personal Data (Law 125(I)/2018).
We also comply with applicable local law in the jurisdictions where we operate:
In all cases, we apply the GDPR as our baseline, the highest standard, across all our operations globally.
In the course of our B2B lead generation and business development, we may obtain business contact information from publicly available sources, third-party data enrichment services, and industry databases.
Under the GDPR, our legal bases for processing are:
Personal data is accessible only to employees and authorised personnel who require it to perform their functions, subject to internal access controls and confidentiality obligations.
We engage third-party service providers for IT infrastructure, email delivery, CRM, accounting, payment processing, website analytics, and data enrichment. We execute Data Processing Agreements with all processors.
For website analytics we use Google Analytics 4, provided by Google Ireland Limited. It is loaded on every page but remains in a denied state, setting no cookies and collecting no identifiers, unless and until you accept analytics cookies. See Section 9.
We may disclose data to competent authorities where required by law, court order, or regulatory requirement.
Our Commitment
We do not sell personal data to third parties. We do not share personal data with third parties for their own independent marketing purposes without your explicit consent.
Personal data may be transferred to countries outside the EEA, including the UAE, Saudi Arabia, Qatar, Bahrain, Australia, and China. Where we transfer personal data outside the EEA, we rely on adequacy decisions, Standard Contractual Clauses, or other GDPR-approved mechanisms.
Where you accept analytics cookies, data collected by Google Analytics may be processed by Google LLC in the United States. Google relies on the EU-US Data Privacy Framework and Standard Contractual Clauses for these transfers. Declining analytics cookies prevents this transfer.
You may request further information by contacting us at anastasios@monosupplies.com.
We retain personal data for no longer than necessary for the purposes for which it was collected.
Our websites use cookies and similar technologies, including browser local storage, to operate, improve, and analyse our Services.
We do not use advertising, retargeting, or cross-site tracking cookies. Should that change, we will ask for your consent before setting them.
When you first visit, a banner asks whether you accept analytics cookies. Until you accept, Google Analytics is loaded in a denied state: it sets no cookies and collects no information capable of identifying you or linking your visits together.
You can change your decision at any time using the Cookie settings link in the footer of every page. Withdrawing consent is as straightforward as giving it, takes effect immediately, and does not affect the lawfulness of processing carried out beforehand. You may also control cookies through your browser settings, though disabling strictly necessary cookies may affect the functionality of our websites and portal.
Depending on your location and applicable law, you have some or all of the following rights:
Right of Access
Obtain confirmation of whether we process your data and receive a copy of it.
Right to Rectification
Have inaccurate or incomplete data corrected without undue delay.
Right to Erasure
Request deletion of your personal data in certain circumstances.
Right to Restriction
Limit how we use your data in specific circumstances.
Right to Portability
Receive your data in a machine-readable format and transfer it to another controller.
Right to Object
Object to processing based on legitimate interests, including direct marketing, at any time.
Automated Decisions
Not to be subject to solely automated decisions that significantly affect you.
Withdraw Consent
Withdraw consent at any time where processing is consent-based.
To exercise any of these rights, contact us as set out in Section 15. We will respond within one calendar month.
Supervisory Authorities
Cyprus / EU: Commissioner for Personal Data Protection: dataprotection.gov.cy
Australia: Office of the Australian Information Commissioner: oaic.gov.au
UAE: UAE Data Office: uaedataoffice.gov.ae
Saudi Arabia: National Data Management Office: ndmo.gov.sa
We implement appropriate technical and organisational measures to protect personal data, including:
In the event of a personal data breach, we will notify the competent supervisory authority within 72 hours as required under the GDPR.
Our websites may contain links to third-party websites. This Privacy Policy does not apply to those third-party sites. We encourage you to review their own privacy policies before submitting any personal data.
Our Services are directed exclusively at businesses and business professionals. We do not knowingly collect or process personal data from individuals under the age of 16. If you believe we may hold data relating to a child, please contact us immediately.
We reserve the right to update or modify this Privacy Policy at any time. Where changes are material, we will provide prominent notice on our website and, where appropriate, notify you directly by email.
Your continued use of our Services after any changes constitutes acknowledgement of the updated Policy.
For any questions about this Privacy Policy, to exercise your data protection rights, or to report a potential privacy issue:
Get in Touch
We aim to acknowledge all data-related requests within 5 business days and resolve them within 30 calendar days.
This Privacy Policy was prepared for AS Mono Supplies Ltd and is intended to comply with the GDPR, Cyprus data protection law, and applicable international data protection legislation.
© 2026 AS Mono Supplies Ltd. All rights reserved.