Privacy Policy

1. Data Controller

The entity responsible for data processing on this website is:

2. Collection and Storage of Personal Data

2.1 When Visiting the Website

When you visit our website, our hosting provider (Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA) automatically collects information that your browser transmits to our server. This includes:

• IP address (truncated/anonymized after a short storage period)
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status / HTTP status code
• Amount of data transferred
• Website from which the request originated (referrer)
• Browser, operating system, and language settings

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the stable, secure operation of the website).

2.2 When using the contact form

When using our contact form, the following data is collected:

• Name
• Email address
• Phone number (optional)
• Content of your message
• Time of the inquiry

We use this data exclusively to process your inquiry. It will not be disclosed to third parties.

Legal basis: Art. 6(1)(b) of the GDPR (pre-contractual measures) or Art. 6(1)(a) of the GDPR (consent by checking the box).

Retention period: We will delete your data as soon as it is no longer necessary to respond to your inquiry, but no later than 24 months, provided there are no legal retention requirements to the contrary.

3. Cookies

This website currently uses only technically necessary cookies that are absolutely essential for the operation of the site (e.g., to store your cookie settings).

As soon as we use analytics or marketing cookies, we will first obtain your explicit consent via a cookie banner.

You can find more details in our Cookie Policy.

4. Recipients / Data Processing

We use the following external service providers with whom we have entered into or will enter into data processing agreements in accordance with Art. 28 of the GDPR:

• Vercel Inc. (website hosting, U.S., certified under the EU-U.S. Data Privacy Framework)
• Resend Inc. (sending contact form emails, if actively configured; USA)

Data transfers to third countries (outside the EU/EEA) take place only to the extent necessary for contract fulfillment and based on appropriate safeguards (Standard Contractual Clauses, Adequacy Decision).

5. Your Rights

You have the right at any time to:

• To request information about the personal data stored about you (Art. 15 GDPR)
• To request the rectification of inaccurate data (Art. 16 GDPR)
• To request the erasure of your data (Art. 17 GDPR)
• To request restriction of processing (Art. 18 GDPR)
• To request data portability (Art. 20 GDPR)
• To object to the processing of your data (Art. 21 GDPR)
• To withdraw your consent at any time; this does not affect the lawfulness of processing carried out prior to withdrawal

To do so, please contact us informally at the address listed above.

6. Right to File a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, your workplace, or the location of the alleged infringement (Art. 77 GDPR).

Competent supervisory authority in Cyprus: Office of the Commissioner for Personal Data Protection.

7. SSL Encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the “https://” in your browser’s address bar.

8. Up-to-Date Status of This Privacy Policy

This Privacy Policy is reviewed regularly and may be updated as needed, for example, due to new legal requirements. The most current version is always available on this page.