Legal - Privacy Policy
Plain description of what happens to your data on this site. No cookie banners to dismiss, because there is nothing here that needs one.
In effect from
Who is responsible for your data
This website, agency.notanother.gr, is operated by:
- Legal name
- NotAnother Digital S.M.P.C.
- Registered address
- Christou Maltezou 45, 18030 Methana, Greece
- VAT number (ΑΦΜ)
- EL802548872
- Commercial registry (ΓΕΜΗ)
- 178424807000
- Contact for data matters
- [email protected]
We are the data controller for the processing described here. We have not appointed a Data Protection Officer, because we are not required to.
What we collect, and when
When you send us a message
If you fill in the contact form we receive your name, email address, company, phone number, the budget band you select, and whatever you write in the message field. Every field except the message is one you choose to give us; we ask for them so we can reply properly.
When you sign up for updates
The signup box asks for your email address and nothing else. Be aware of what it actually does: it emails your address to us. We do not currently run a mailing list, there is no automated newsletter, and there is no unsubscribe link — if you want to be removed, email us and we will delete the address.
Automatically, when you visit
Our web server keeps ordinary access logs: your IP address, the page you asked for, the time, and the browser's user-agent string. Our content delivery network sees the same information in order to route the request and block automated abuse.
We do not use analytics, advertising, or tracking of any kind. There is no Google Analytics on this site, no advertising pixel, and no third-party script that profiles you.
Cookies
This site sets no cookies of its own.
Our content delivery network sets its own cookies to tell people apart from bots. They are needed for the site to stay available and they do not track you between websites.
Why we are allowed to do this
- Answering your enquiry — Article 6(1)(b) GDPR: taking steps at your request before entering into a contract. Where no contract is in prospect, Article 6(1)(f): our legitimate interest in replying to someone who wrote to us.
- Sending you updates — Article 6(1)(a) GDPR: your consent, which you give by submitting the form and can withdraw at any time.
- Keeping the site up and secure — Article 6(1)(f) GDPR: our legitimate interest in serving the site reliably and defending it against abuse.
Who else sees your data
We do not sell your data and we do not share it for anyone else's marketing. It reaches only the service providers we need in order to run the site and receive your message:
- Cloudflare, Inc. — content delivery, DNS and bot protection; sees the IP address of every request (United States)
- Hostinger — runs the web server these sites are served from, including its access logs (Frankfurt, Germany (EU))
- FormSubmit.co — relays the contact and newsletter forms to our inbox — it receives everything typed into them (United States)
Data sent outside the EU
Two of the providers above are established in the United States. That means the contents of a form you submit, and the IP address of your visit, are processed outside the European Economic Area. Such transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the Commission's Standard Contractual Clauses.
If you would rather not have your message pass through a US provider, email us directly at the address above instead of using the form.
How long we keep it
Enquiries that do not lead to work are deleted after 24 months. If we do work together, we keep what the law requires us to keep for as long as it requires — tax and accounting records in particular. Server access logs are kept only as long as they are useful for security and troubleshooting.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or hand it over in a portable form. You can object to processing we base on legitimate interest, and where we rely on your consent you can withdraw it at any time — withdrawing it does not undo what we did beforehand.
Write to [email protected] and we will answer within one month.
If you think we have handled your data badly, you can complain to the Hellenic Data Protection Authority: Kifissias 1-3, 115 23 Athens, www.dpa.gr.
Changes to this policy
If we change how we handle personal data, we change this page and move the date at the top. There is no archive of previous versions; the page you are reading is the one in force.