At Drag & Drop, we respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable data protection laws.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us or use our digital collaboration platform.

1. Who We Are

Drag & Drop is a digital collaboration platform designed for the engineering and construction industry, bringing consultants, developers and clients together in one organised environment.

For the purposes of this Privacy Policy, the data controller responsible for the website is:

Drag & Drop
Location: Cyprus
Website: https://drag-drop.eu
Email: info@drag-drop.eu

2. Information We Collect

Depending on how you interact with our website or platform, we may collect the following information:

• Contact Information: Name, email address, telephone number (if provided) and any information submitted through our contact form.
• Account Information: Details required to register, access and manage an account on the Drag & Drop platform.
• Platform Information: Project details, documents, files and other information provided or uploaded by authorised platform users.
• Technical Information: IP address, browser type, device information and basic website usage data.
• Cookies and Analytics Data: Information collected through cookies and similar technologies, where applicable and subject to your consent where required.

3. How We Use Your Information

We process personal data for the following purposes:

• To respond to enquiries submitted through our contact form.
• To provide, operate and improve our website and digital platform.
• To manage user accounts, projects and collaboration features.
• To maintain website security and prevent unauthorised access.
• To understand website performance and improve user experience.
• To measure advertising effectiveness and support marketing activities, where applicable and with the necessary consent.
• To comply with applicable legal obligations.

4. Legal Basis for Processing

We process personal data based on one or more of the following lawful grounds under the GDPR:

• Consent: For optional analytics, advertising cookies and marketing communications where consent is required.
• Contractual Necessity: To provide our platform and services or take steps requested before entering into a contract.
• Legitimate Interests: To respond to business enquiries, maintain website security and improve our services, provided these interests do not override your rights.
• Legal Obligations: Where processing is necessary to comply with applicable laws.

5. Cookies, Analytics and Advertising

Our website may use cookies and similar technologies to ensure proper functionality, analyse visitor activity and support digital marketing.

These technologies may include:

• Essential Cookies: Required for the website to function correctly.
• Analytics Cookies: Services such as Google Analytics may be used to understand website traffic, visitor behaviour and performance.
• Advertising Cookies: Tools such as Meta Pixel (Facebook/Instagram) or Google advertising technologies may be used to measure campaign performance and deliver relevant advertisements.

Non-essential analytics and advertising cookies will only be activated after obtaining your consent, where required by law.

You may accept, reject or change your cookie preferences through our website’s cookie consent settings.

We may update the technologies used on our website, and this Privacy Policy will be updated where necessary to reflect material changes.

6. Sharing Your Information

We do not sell your personal data.

We may share information with trusted third-party service providers where necessary for website hosting, technical support, platform operation, analytics or advertising services.

Such providers are required to handle personal data in accordance with applicable data protection requirements.

Where personal data is transferred outside the European Economic Area (EEA), we will ensure appropriate safeguards are applied, such as European Commission-approved Standard Contractual Clauses or other lawful transfer mechanisms.

7. Data Retention and Security

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including responding to enquiries, providing our services and complying with legal obligations.

Retention periods depend on the type of information and applicable legal or contractual requirements.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.

8. Your Rights Under GDPR

Under the GDPR, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal data.
• Restrict or object to certain processing activities.
• Request data portability where applicable.
• Withdraw consent at any time, without affecting the lawfulness of previous processing.

To exercise your rights, please contact us using the details below.

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus or another competent supervisory authority.

9. Third-Party Websites

Our website may contain links to third-party websites or services. We are not responsible for their privacy practices and encourage visitors to review their respective privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, technologies or legal requirements.

Any updates will be published on this page with a revised “Last Updated” date.

11. Contact Us

If you have any questions about this Privacy Policy or how your personal data is processed, please contact us:

Drag & Drop
Website: https://drag-drop.eu
Email: info@drag-drop.eu
Location: Cyprus