Data Protection
This statement explains which personal data is collected when you visit this website and when you contact us, why we process it, and what rights you have.
Representative in the European Union pursuant to Art. 27 GDPR: XX
When you visit this website, access data is processed for technical reasons: IP address, date and time of the request, the address accessed, the volume of data transferred, and details of your browser and operating system. This data is required to deliver the page and to keep operations technically secure. The legal basis is our legitimate interest in the trouble-free and secure operation of the website (Art. 6(1)(f) GDPR). We retain access data only for as long as is necessary for secure operation and for analysing technical faults.
This website is delivered via Cloudflare Pages, a service of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). Cloudflare operates a worldwide server network and delivers the page from the nearest location, which means access data may also be processed outside the European Union. Cloudflare is engaged as a processor under Art. 28 GDPR; transfers to third countries are based on the European Commission's Standard Contractual Clauses.
This website does not embed any analytics, advertising or social media services. There is no audience measurement, no tracking and no profiling.
In the protected client area we set a single strictly necessary cookie that stores your login for the duration of the session (named “mn_session”, valid for 12 hours). Logging in is technically impossible without this cookie. The legal basis is our legitimate interest in securely providing the protected area (Art. 6(1)(f) GDPR). Visitors to the public part of the website do not receive a cookie.
This website loads its fonts via Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Your IP address is transmitted to Google so that the font files can be delivered to your browser; transmission to Google servers in the USA cannot be ruled out. The legal basis is our legitimate interest in a consistent and appealing presentation of the website (Art. 6(1)(f) GDPR).
Via the contact form we collect the following information: first name, last name, email address, telephone number (optional), your primary objective (private residency or company formation), and whether you are interested in investment opportunities on the island. We process this data exclusively in order to handle your enquiry and to contact you.
The legal basis is the performance of pre-contractual measures or the performance of a contract (Art. 6(1)(b) GDPR) and, where there is no contractual relationship, our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). Providing your contact details is neither required by law nor by contract; without them, however, we cannot respond to your enquiry.
Form messages are delivered to our mailbox via the service provider Resend (Resend, Inc., USA), engaged as a processor under Art. 28 GDPR. The transfer to the USA is based on the European Commission's Standard Contractual Clauses.
If you write to us directly by email instead, we process the information you provide for the same purpose and on the same legal basis.
We store this data for as long as is necessary to handle your enquiry, and beyond that insofar as statutory retention obligations apply.
Parts of this website are reserved for our clients and accessible only after signing in. We issue access credentials individually. When you sign in, we process the username we issued and your password for the purpose of access control. The legal basis is the performance of a contract or of pre-contractual measures (Art. 6(1)(b) GDPR).
We pass on personal data only where this is necessary to handle your enquiry or to provide our services, or where we are legally obliged to do so. Service providers acting on our behalf are engaged under a data processing agreement pursuant to Art. 28 GDPR. This currently concerns:
The controller for the purposes of this statement is a company established in Mauritius. Your data is therefore processed outside the European Union. Data may likewise be processed in the USA by the service providers named above. Where no adequacy decision of the European Commission exists for these third countries, we base the transfer on the European Commission's Standard Contractual Clauses as an appropriate safeguard within the meaning of Art. 46 GDPR.
You have the right to obtain information about the data stored about you, and the rights to rectification, erasure, restriction of processing, data portability, and to object to processing based on a legitimate interest. To exercise these rights, contact office@mauritius-now.com or write to the address above. No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.
You have the right, on grounds relating to your particular situation, to object at any time to processing based on a legitimate interest (Art. 21 GDPR). This concerns the processing of access data when the website is visited and the handling of enquiries without a contractual relationship. Send your objection informally to office@mauritius-now.com. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.
If you believe that the processing of your data infringes data protection law, you may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) – in Austria with the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna; in Germany with the state authority responsible for your place of residence.
Last updated: October 2026