Privacy Policy

What we collect when you visit or contact us, why we need it, and how to make us delete it.

Last updated
Effective
Reading time
4 min
Contents+
  1. 01Who we are
  2. 02What we collect
  3. 03How and why we use it
  4. 04Sharing and transfers
  5. 05How long we keep it
  6. 06Security
  7. 07Your rights
  8. 08Changes to this policy
  9. 09Contact

01Who we are

The website greekpixel.com belongs to the company GREEKPIXEL, a two-person design and engineering studio based at Mitropoleos 31, 59132 Veroia, Greece, VAT number (ΑΦΜ) 065191775, phone 6978282785. For the purposes of the EU General Data Protection Regulation (GDPR), we are the controller of the personal data described in this policy.

This policy covers greekpixel.com, our contact form and any email you send us. It does not cover websites we build for clients; each client publishes its own policy for those.

The site uses an encrypted connection (HTTPS, TLS) for everything you send or receive. You can recognise it by https:// and the lock symbol in your browser's address bar.

02What we collect

We keep collection to the minimum needed to answer you and run the site.

Information you give us

  • Your name, email address and company when you use the contact form.
  • Whatever you choose to write in your message, including project details.
  • Billing details if you become a client, held in our accounting software.

Information collected automatically

When you visit the site just to read it, our hosting provider, Cloudflare, processes only the data your browser sends with every request:

  • The date and time of your visit.
  • The amount of data sent, in bytes.
  • Your browser and operating system.
  • Your IP address.

We need this to deliver the pages and protect the site from abuse, on the basis of our legitimate interest in a stable and secure website (Article 6(1)(f) GDPR). It is not used to profile you.

Only if you accept analytics in the cookie banner, we use Google Analytics 4 to count visits: the pages you view, roughly where you are (country and city, from your IP address, which Google does not store), your device and browser, how you reached us, and whether a project brief was sent. It never receives what you type into the contact form. We use it only in aggregate, to improve the site, and keep it for 14 months. If you decline, Google Analytics does not load. You can change your choice at any time with Cookie settings in the footer, or block Google Analytics on every site with Google's opt-out browser add-on.

03How and why we use it

We only process personal data where we have a lawful basis under Article 6 GDPR:

  • Contract: to prepare proposals, deliver projects and send invoices.
  • Legitimate interest: to reply to enquiries and keep the site secure.
  • Consent: for Google Analytics, only after you accept it; you can withdraw it at any time.
  • Legal obligation: to keep accounting records required by Greek tax law.

We never sell your data, and we do not use it for automated decision-making or advertising profiles.

04Sharing and transfers

A small number of processors help us run the studio: Cloudflare (website hosting, network and email), Google (Google Analytics, only with your consent) and our accountant. Each is bound by a data processing agreement and may only act on our instructions.

Cloudflare and Google are US companies. Where data leaves the European Economic Area, the transfer relies on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

05How long we keep it

  • Enquiries that do not become projects: 12 months, then deleted.
  • Client correspondence and project files: for the project plus 3 years.
  • Invoices and accounting records: 5 years, as required by law.

Technical logs kept by our hosting provider are short-lived and handled under its own retention rules.

06Security

We use encrypted connections (HTTPS) everywhere, two-factor authentication on every account that holds your data, and least-privilege access between the two of us. No system is perfectly secure; if a breach affects your data we will tell you and the authority within the time the GDPR requires.

07Your rights

Under the GDPR you have extensive rights over your personal data:

  • Access (Article 15): ask what data we hold about you.
  • Rectification (Article 16): have incorrect data corrected.
  • Erasure (Article 17): have your data deleted (the "right to be forgotten").
  • Restriction and objection (Articles 18 and 21): limit or object to how we use it.
  • Portability (Article 20): receive your data, or have it sent to another controller.
  • Withdraw consent you have given, such as for Google Analytics, at any time.

Write to hello@greekpixel.com. We reply within one month. If you are not satisfied with our answer, you may complain to the Hellenic Data Protection Authority at www.dpa.gr or the supervisory authority where you live.

08Changes to this policy

If we change how we handle personal data we will update this page and the dates above. Material changes take effect no sooner than the effective date shown.

09Contact

Questions about this policy, or a request about your data:

  • Company: GREEKPIXEL
  • Email: hello@greekpixel.com
  • Phone: 6978282785
  • Address: Mitropoleos 31, 59132 Veroia, Greece
  • VAT number (ΑΦΜ): 065191775