Privacy policy

The data controller is the business named above. For any personal data question, write to the email listed there.

What we collect

• From the contact form: what you want solved, timeline, budget, name, email, optionally your company, and your consent.
• Along with the form: which page or campaign brought you (UTM parameters and referring website) and the page where you entered the site, so we know which channels bring requests.
• For spam protection: the form uses Cloudflare Turnstile to check that a request comes from a person. Your IP address is used temporarily for rate limiting and is not stored with the request.
• Visit statistics: Cloudflare Web Analytics counts visits in aggregate, without cookies and without storing anything on your device.

Your choice of light or dark theme is stored only in your browser and is never sent to us.

Why, and on what legal basis

We use the form data to reply to your request and send you a proposal, that is, for steps taken before entering into a contract (Article 6(1)(b) GDPR). We process the source data and spam protection on the basis of our legitimate interest in running the site securely and knowing where requests come from (Article 6(1)(f) GDPR).

For how long

Contact form requests are deleted automatically after 24 months. If we work together, the data needed for invoicing is kept for as long as Greek tax law requires.

Where it is stored and who sees it

The site, the request database and email run on infrastructure of Cloudflare, Inc., acting as processor. Emails are sent and stored through Cloudflare Email Service, in a mailbox running on its infrastructure. An AI assistant prepares draft replies, which I review and send myself; no email is sent automatically. Cloudflare may process data outside the European Union under GDPR safeguards (standard contractual clauses and the EU-US Data Privacy Framework). We do not sell or share your data with anyone else.

Your rights

You can request access to, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interest. We reply within one month.

If you believe your rights are being violated, you can lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, www.dpa.gr).

Cookies

This site does not use cookies. If that changes, you will be asked for consent before anything that uses them loads.