Privacy Policy

1. Data Controller

The Data Controller of your personal data is the business that operates this website and provides the services presented on it.

For any matter concerning the processing of personal data, you can contact us via the contact details listed on the website.

2. What data we collect

When you use the contact form, we may collect: full name, email address, phone number, message content, date and time of submission, IP address, and technical data required for the security and proper operation of the website.

3. Purpose of processing

Personal data is used exclusively to: communicate with you, evaluate, manage and respond to your inquiry, provide information about services you requested, protect the website and information systems against malicious or unauthorized activity, and comply with legal and regulatory obligations.

Data submitted through the contact form is not used for advertising or promotional purposes without your prior, explicit consent.

4. Legal basis for processing

Processing of personal data is based on: your consent, given by ticking the relevant consent field and submitting the contact form; our legitimate interest in efficiently and securely handling contact requests; and compliance with obligations imposed by applicable law.

5. Data retention

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by law.

After the retention period expires, data is securely deleted or anonymised.

6. Sharing with third parties

Your personal data is not sold, rented or transferred to third parties for advertising or commercial purposes.

It may be shared only with service providers necessary for the operation of the website and the provision of our services, such as hosting providers, email providers, email-sending services, and technical support and security providers.

These providers are contractually bound to process the data only in accordance with our instructions and the requirements of the GDPR.

7. International data transfers

Some service providers may process data outside the European Economic Area. In such cases, appropriate safeguards apply, such as the European Commission's Standard Contractual Clauses (SCCs) or other mechanisms provided for by the GDPR.

8. Data security

Appropriate technical and organisational security measures are taken to protect personal data from loss, unauthorized access, alteration, disclosure or destruction.

Although every reasonable effort is made to safeguard data, no method of transmission or storage can guarantee absolute security.

9. Data subject rights

Under the GDPR, you have the right to: access your personal data, correct inaccurate or incomplete data, erase data ("right to be forgotten"), restrict processing, object to processing, data portability, and withdraw your consent at any time.

To exercise your rights, you can contact us using the contact details listed on the website.

10. Filing a complaint

If you believe the processing of your personal data violates applicable law, you have the right to file a complaint with the Hellenic Data Protection Authority (HDPA).

11. Changes to this Privacy Policy

This Privacy Policy may be amended at any time for reasons of legal compliance or to improve our services. The current version is published on this page and takes effect from the moment of publication.