BENTLEY CYPRUS


Privacy Policy
Valid as at 14 September 2026.

  1. Important information and who we are

Purpose of this privacy policy
This privacy policy explains how F.L.C.P. Automobile Limited, trading as Bentley Cyprus (“Bentley Cyprus”, “we”, “us”), collects and processes your personal data when you interact with us — including our showroom and aftersales facilities in Limassol, our websites and digital platforms, test drives, events, vehicle sales and servicing, and related products and services.

Read this policy together with any specific notice we give you at the point of collection (for example a test-drive form, service booking or marketing preference form). This policy supplements those notices; it does not override them.

This notice is based on the manufacturer policy published at bentleymotors.com and has been adapted for Cyprus: local controller, Cyprus and EU law, local supervisory authority, and local contact details.

Data controller
For personal data processed in connection with sales, aftersales, events, marketing and customer care in Cyprus, the data controller is:

F.L.C.P. Automobile Limited
Company registration number: HE 388189
Registered office / showroom: 1 Ioanni & Angelikis Kordari, Agios Athanasios, 4102 Limassol, Cyprus
Aftersales: Iapetou 40, 4101 Limassol, Cyprus

Bentley Motors Limited (registered in England and Wales, company number 0992897, Pyms Lane, Crewe, Cheshire CW1 3PL, United Kingdom) is the manufacturer. We share certain customer, vehicle and warranty data with the manufacturer so that vehicles can be supported, recalled and connected. In those cases Bentley Motors Limited may act as an independent or joint controller. Its own policy is at https://www.bentleymotors.com/en/pages/privacy-policy.html.

Contact details
Questions about this policy, or requests to exercise your rights, should be sent first to Bentley Cyprus:

• Email: info@e-carscyprus.com (mark the subject “Data Protection”)
• Telephone: +357 25 020 010 (sales / general) · +357 25 255 888 (Bentley aftersales)
• Post: Data Protection, F.L.C.P. Automobile Limited, 1 Ioanni & Angelikis Kordari, Agios Athanasios, 4102 Limassol, Cyprus

You may also contact the manufacturer’s Data Protection Officer at DPO@bentley.co.uk or Data Protection Officer, Bentley Motors Limited, Pyms Lane, Crewe, Cheshire CW1 3PL, United Kingdom, for processing carried out by Bentley Motors Limited.

Supervisory authority
The competent supervisory authority for Bentley Cyprus is the Commissioner for Personal Data Protection of the Republic of Cyprus, not the UK Information Commissioner’s Office.

• Office of the Commissioner for Personal Data Protection
• 15 Kypranoros Street, 1061 Nicosia · P.O. Box 23378, 1682 Nicosia
• Tel: +357 22 818456 · Fax: +357 22 304565
• Email: commissioner@dataprotection.gov.cy · www.dataprotection.gov.cy

You have the right to lodge a complaint with the Commissioner at any time. We would prefer the chance to resolve your concern first.

Law that applies
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of such Data Law of 2018 (Law 125(I)/2018), as amended. Connected-vehicle data is also considered in light of the EU Data Act (Regulation (EU) 2023/2854). More on the Data Act is available from the manufacturer at https://www.bentleymotors.com/en/pages/euda.html.

Changes and your duty to keep us updated
We review this policy regularly. This Cyprus version is dated 14 September 2026. Please tell us if your contact details or other personal data change while you are a customer.

Third-party links
Our websites and digital platforms may contain links to third-party sites, plug-ins and applications (including Bentley Motors global sites and social platforms). We do not control those sites and are not responsible for their privacy practices. Check their policies before you submit data.

  1. The data we collect about you
    Personal data means any information relating to an identified or identifiable living person. We may collect, use, store and transfer the following groups of data:

• Identity data — name, title, date of birth, gender, ID or passport details where required for a contract, test drive or KYC.
• Contact data — billing and delivery address in Cyprus or abroad, telephone numbers, email.
• Vehicle information — VIN, make, model, year, retailer interaction, purchase or lease date and price, specification, service history, warranty period.
• Vehicle / connected data — location and status data (warning lights, service schedule, fuel or battery level, tyre pressure, fault codes, condition) where you use connected services.
• Interests and preferences — products viewed, test-drive requests, survey responses, event attendance.
• Image / profile information — photographs or content you submit for events or competitions, CCTV at our premises (see section 7).
• Transaction data — products and services purchased from us, invoices, payment references (we do not store full card numbers).
• Usage, technical and marketing data — how you use our websites and communications; IP address, browser, device; marketing preferences.

We also use aggregated statistical data that does not identify you.

We do not seek to collect special-category data (health, race, religion, sex life, political opinions, trade-union membership, genetic or biometric data) or criminal-offence data, except where you volunteer it or Cyprus law requires it (for example a driving-licence check for a test drive).

Our sites and showrooms are not directed at children. We do not knowingly collect children’s data. If we learn that we have, we will delete it.

If you fail to provide data we need by law or to perform a contract (sale, service, warranty, test drive), we may be unable to complete that request and will tell you at the time.

  1. How your personal data is collected
    We collect data through:

• Direct interactions — forms, email, phone, SMS, messaging, showroom visits, test drives, events, account creation, brochure or callback requests, competitions, service bookings and complaints.
• Automated technologies — cookies and similar tools on our websites and digital services.
• Third parties and public sources — the manufacturer (Bentley Motors Limited); authorised group companies and service partners; analytics and advertising networks where used; events agencies; publicly available sources; vehicle records generated at our retailer.

When you buy or service a Bentley in Cyprus, vehicle and customer records are shared with Bentley Motors Limited so that warranty, recall, quality and connected-car services can operate.

  1. How we use your personal data
    We only use personal data where the law allows. The lawful bases we rely on are:

• Performance of a contract with you (sale, lease introduction, servicing, warranty administration, test drive).
• Legitimate interests — running and growing the Bentley Cyprus business, supporting customers, preventing fraud, securing premises, improving products and service, provided your rights do not override those interests.
• Legal obligation — tax, accounting, consumer, product-safety, recall and anti-money-laundering rules applicable in Cyprus and the EU.
• Consent — where required for electronic marketing, non-essential cookies, or optional connected services. You may withdraw consent at any time without affecting prior lawful processing.

If we need to use data for a new purpose that is not compatible with the original one, we will tell you and explain the legal basis.

Marketing
You will receive marketing from Bentley Cyprus only if you have requested information or purchased from us and, where the law requires it, you have given consent. We will obtain your express opt-in before sharing your data with any third party for that party’s own marketing.

You can stop marketing at any time by using the unsubscribe link in any message, by emailing info@e-carscyprus.com, or by calling +357 25 020 010. Opting out of marketing does not affect messages we must send about your vehicle, warranty, safety or contract.

Main purposes
Typical purposes include: responding to enquiries and complaints; arranging test drives, events and brochure requests; selling and delivering vehicles and lifestyle products; servicing, warranty and recall; managing our relationship and customer records; operating websites and cookies; analytics and service improvement; security and CCTV; legal and insurance claims; and, with a lawful basis, marketing of Bentley products and events in Cyprus.

  1. Disclosures of your personal data
    We may share personal data with:

• Bentley Motors Limited and other companies in the broader Volkswagen Group / Bentley network, for manufacturing, warranty, quality, connected services and brand standards.
• Service providers acting as processors (IT hosting, CRM, email, payment, event agencies, logistics, translators) under written contracts.
• Professional advisers — lawyers, bankers, auditors, insurers — in Cyprus or the EEA.
• Public authorities in Cyprus (Road Transport Department, Tax Department, Police, Commissioner) where required by law.
• A buyer of our business, under appropriate safeguards.

We require all third parties to respect the security of your data and to process it only for specified purposes.

  1. International transfers
    Some manufacturer systems sit in the United Kingdom. The UK benefits from an EU adequacy decision, so transfers to Bentley Motors Limited in the UK are permitted under Article 45 GDPR.

If we transfer data to a country without an adequacy decision, we will use an appropriate safeguard such as the European Commission’s Standard Contractual Clauses, plus supplementary measures where needed. You may ask us for a copy of the relevant safeguard.

  1. Data security and CCTV
    We apply appropriate technical and organisational measures to prevent unauthorised access, loss or disclosure, including access controls, staff confidentiality, and contracts with processors.

Our showroom and aftersales sites in Limassol operate CCTV for security, health and safety and the prevention of crime, on the basis of legitimate interests and, where applicable, Cyprus CCTV guidance issued by the Commissioner. Signs are displayed on site. Footage is retained only as long as needed for those purposes, typically up to 30 days unless an incident is under review.

  1. Data retention
    We keep personal data only as long as needed for the purpose collected, including any legal, accounting or reporting requirement. As a guide:

• Sales and aftersales contracts, invoices and warranty files — generally up to 7 years after the end of the relationship (Cyprus tax and limitation periods).
• Marketing lists — until you opt out, plus a short suppression record so we can honour the opt-out.
• Enquiry data where no contract follows — usually up to 24 months.
• CCTV — see section 7.
• Connected-vehicle data — as set by the manufacturer’s connected-services terms and the EU Data Act.

When data is no longer required we delete or irreversibly anonymise it.

  1. Your legal rights
    Under the GDPR and Law 125(I)/2018 you have the right, subject to the statutory conditions and exceptions, to:

• Be informed about how we use your data (this policy).
• Access a copy of your personal data.
• Rectify inaccurate or incomplete data.
• Erase data (“right to be forgotten”) in the cases set out in Article 17.
• Restrict processing in the cases set out in Article 18.
• Data portability, where processing is based on consent or contract and is carried out by automated means.
• Object to processing based on legitimate interests, and to object at any time to direct marketing (including profiling related to marketing).
• Withdraw consent where consent is the basis we rely on.
• Not be subject to a solely automated decision with legal or similarly significant effects (we do not take such decisions about you).
• Lodge a complaint with the Cyprus Commissioner (contact details in section 1).

To exercise these rights, write to info@e-carscyprus.com with enough information for us to identify you. We will respond within one month, extendable by two further months for complex requests. We may need to verify your identity. These rights are free of charge unless a request is manifestly unfounded or excessive.

  1. Cookies
    Our websites use cookies that are necessary for the site to function. With your consent, we may also use analytics and marketing cookies. You can accept or refuse non-essential cookies through the banner on your first visit and through your browser settings. Changing your browser settings may affect how the site works.

  2. EU Data Act — connected vehicles
    Where a Bentley vehicle generates data covered by the EU Data Act, you (as user) have rights of access and, in defined cases, sharing with third-party service providers. Product-safety, trade-secret and security limits apply. Requests that concern in-vehicle data held by the manufacturer should be directed to Bentley Motors Limited; we will help route them. See https://www.bentleymotors.com/en/pages/euda.html.

  3. Language
    This policy is issued in English. A Greek version can be provided on request and will prevail for consumers in Cyprus if there is a conflict on a consumer-facing point.

  4. How to contact us — summary
    Bentley Cyprus (controller for local processing)
    F.L.C.P. Automobile Limited, HE 388189
    1 Ioanni & Angelikis Kordari, Agios Athanasios, 4102 Limassol, Cyprus
    info@e-carscyprus.com · +357 25 020 010 · +357 25 255 888

Manufacturer DPO: DPO@bentley.co.uk · Bentley Motors Limited, Pyms Lane, Crewe CW1 3PL, United Kingdom
Cyprus supervisory authority: commissioner@dataprotection.gov.cy · +357 22 818456 · www.dataprotection.gov.cy

© F.L.C.P. Automobile Limited trading as Bentley Cyprus. Last updated 14 September 2026.