Website Privacy Policy

1. Who We Are

The data controller responsible for processing your personal data is:

2. What Information We Collect

We collect information that you provide when contacting us, together with technical information necessary to operate, maintain and protect the Website.

Contact form information

• Your name or company name.
• Your email address and any contact details you choose to provide.
• Your existing website address, if provided.
• Information about your business activities.
• Your project requirements and objectives.
• The services you are interested in.
• Your indicative project budget.
• Additional information included in your message.
• Submission information necessary to process and document your enquiry.

Direct communications

If you contact us by email or telephone, we may process your contact details and the information contained in your communication.

WhatsApp communications

If you choose to contact us through WhatsApp, your communication takes place through that service. We may receive your phone number, profile name and the messages you send. WhatsApp processes information under its own privacy terms.

Technical and security information

When you visit our Website, technical information such as IP addresses, browser and device information, request timestamps and security-related signals may be processed by our hosting and security providers to deliver and protect the Website.

Analytics information

Where you consent to analytics, Google Analytics may process information about Website visits, page interactions, browser and device characteristics, and online identifiers.

We do not request special categories of personal data, such as health information, through our contact form. Please avoid including sensitive information in free-text messages unless necessary.

3. How We Use Personal Data

We process personal data for specified purposes and on an applicable legal basis under Article 6 of the GDPR.

Responding to enquiries

To review your enquiry, discuss your requirements and prepare a proposal. Depending on the nature of the request, processing may be based on steps taken at your request before entering into a contract (Article 6(1)(b)) or our legitimate interest in responding to business enquiries (Article 6(1)(f)).

Providing contracted services

To deliver and support services agreed with our clients. The applicable legal basis may be contractual necessity (Article 6(1)(b)) or, for business contact details where the contract is with a company, our legitimate interests (Article 6(1)(f)).

Website and form security

To protect the Website against malicious activity, unauthorised access, automated submissions and spam, including through Cloudflare security services and Turnstile. Legal basis: legitimate interests (Article 6(1)(f)).

Legal and accounting obligations

To maintain records where required by applicable legislation. Legal basis: compliance with a legal obligation (Article 6(1)(c)).

Website Analytics

We use Google Analytics to understand how visitors interact with our Website, analyse traffic patterns and improve our content and services.

Google Analytics is activated only after visitors provide their consent through our cookie consent banner. Visitors can reject analytics cookies without affecting access to the Website.

The legal basis for this processing is consent under Article 6(1)(a) of the GDPR. Visitors may withdraw their consent at any time through our cookie preferences mechanism.

We do not sell personal data or use enquiry information for unsolicited marketing. Where consent is required for marketing, we will request it separately.

4. Service Providers and Data Sharing

We may disclose personal data to service providers where necessary for Website operation, security, communication and service delivery. Such disclosures are limited to the relevant purposes and applicable legal requirements.

We may also disclose information where required by applicable law or a competent authority. We do not sell or rent personal data.

5. International Data Transfers

Some service providers may process personal data outside the European Economic Area. Where international transfers take place, appropriate safeguards must apply under Chapter V of the GDPR.

Depending on the provider and destination, these may include an applicable adequacy decision, participation in the EU-US Data Privacy Framework where valid, or Standard Contractual Clauses approved by the European Commission.

Information about safeguards applicable to a particular transfer can be requested using the contact details below.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected and in accordance with applicable legal obligations.

Enquiries that do not result in a collaboration are retained for up to 24 months from our last communication. The same period applies to WhatsApp enquiries unrelated to an active client project.

We review these records periodically and delete them manually when their retention period expires, unless continued retention is required by law or necessary for the establishment, exercise or defence of legal claims.

Once the applicable retention period expires, personal data is deleted or anonymised unless further retention is required by law or necessary for the establishment, exercise or defence of legal claims.

7. Data Storage and Security

We apply appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss and destruction.

These measures may include encrypted HTTPS connections, access controls, security monitoring, firewall protection, anti-spam mechanisms, software maintenance and backups.

No system can guarantee absolute security. We periodically review our security practices in accordance with the nature of the data and associated risks.

8. Cookies and Similar Technologies

Our Website uses cookies and similar technologies for essential functionality, security and traffic analysis.

Essential technologies may be used to maintain Website security and protect against automated abuse, including services provided by Cloudflare.

We also use Google Analytics to understand Website traffic and visitor interactions. Analytics technologies requiring consent are activated only after visitors provide their consent through our cookie banner.

Visitors may reject analytics cookies and withdraw their consent through the available cookie preferences mechanism.

You can find additional information about the cookies and technologies used on our Website in our Cookies Policy .

9. Your Data Protection Rights

Subject to the conditions and limitations established by the GDPR, you may have the following rights:

• Access to your personal data.
• Rectification of inaccurate information.
• Erasure of personal data.
• Restriction of processing.
• Data portability, where applicable.
• Objection to processing based on legitimate interests.
• Withdrawal of consent where processing is based on consent.
• The right not to be subject to certain solely automated decisions, where applicable.

To exercise your rights, contact info@123website.gr . We will respond within the period required by the GDPR, generally within one month, subject to any permitted extension.

We may request information necessary to verify your identity before processing a rights request.

10. Right to Lodge a Complaint

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.

In Greece, this is the Hellenic Data Protection Authority. Further information is available at www.dpa.gr .

You may also contact us directly regarding any privacy concern.

11. Children’s Privacy

Our Website and services are intended primarily for businesses and adults. We do not knowingly solicit personal data from children.

If you believe that a child has submitted personal information through our Website, please contact us so that we can assess the situation and take appropriate action.

12. External Websites

Our Website may contain links to third-party websites, including social media platforms and portfolio websites.

We do not control the privacy practices of those independent websites. We recommend reviewing their privacy notices before providing personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, data processing activities or applicable law.

The latest version will be published on this page with an updated revision date.

14. Contact Us

For questions regarding this Privacy Policy or the processing of your personal data, please contact: