This page is a translation of the Greek original. If the two versions differ, the Greek version prevails.
In short
- We use your details to reply to you and to do the work you give us. We do not sell them or use them for advertising.
- Visitor statistics (Google Analytics) and YouTube videos load only if you allow them.
- Messages that do not lead to working together are deleted within about 12 months.
- You can ask to see, correct or have us delete your details, free of charge.
1. Who we are
The party responsible for your personal data (the “controller”) is the sole-trader graphic design business that operates online under the name GraphicZone, based in Athens. On this page, “we” means GraphicZone.
For anything to do with your data, you can contact us:
2. What data we collect
When you contact us
Through the contact form we receive what you fill in: your name, your email address and, if you give them, your phone number and your company name, the service you are interested in and your message. The same applies when you email us, phone us or speak to us on a video call: we keep only what we need to continue the conversation.
You are not obliged to give us any details. Without an email address or phone number, however, we cannot reply to you. Please do not send us sensitive data (for example, health information). We do not need it for our work.
When we work together
For our clients, we keep the details of the people we communicate with (name, role, email, phone), our correspondence and the project files, and billing details.
When you visit the website
- Technical data. Like any server, the website’s server records the IP address, the date and time, the page requested and the browser. We use this only for the security and proper running of the website.
- Statistics, only with your consent. If you allow it, Google Analytics records which pages you visited, how long you stayed, where you came from (e.g. a Google search), your type of device and browser, and your approximate location. It recognises you by a random identifier in a cookie, not by your name.
- Videos, only with your consent. The videos on our project pages are hosted on YouTube. They load only when you press play or if you have allowed the related cookies. Google then receives data such as your IP address and may store cookies.
3. Why we use it and for how long
| Purpose | Legal basis | How long we keep it |
|---|---|---|
| Replying to messages and requests for quotes | Steps we take at your request before entering into an agreement (Article 6(1)(b) GDPR). For general questions, our legitimate interest in replying to people who write to us (Article 6(1)(f)). | About 12 months from our last contact, if we do not start working together. |
| Carrying out projects and communicating with clients | Performance of our agreement (Article 6(1)(b) GDPR). | For as long as we work together. When the work ends, we delete anything not needed for tax or legal reasons. |
| Invoicing and tax obligations | Legal obligation (Article 6(1)(c) GDPR). | For as long as tax law requires. |
| Visitor statistics (Google Analytics) | Your consent (Article 6(1)(a) GDPR and Article 4(5) of Greek Law 3471/2006). You can withdraw it at any time. | Statistics: 14 months. Cookies: up to 2 years, or until you delete them. |
| Showing videos from YouTube | Your consent (Article 6(1)(a) GDPR and Article 4(5) of Greek Law 3471/2006). | We do not receive this data. Google keeps it, under its own policy. |
| Security and operation of the website | Our legitimate interest in protecting the website from attacks and misuse (Article 6(1)(f) GDPR). | For a short time, as set by our hosting provider. |
We do not make automated decisions about you, and we do not use your data for any purpose other than those listed here.
4. Who else has access
We do not sell your data or give it to third parties for their own purposes. Access, only as far as necessary, is given to:
- Our website hosting provider and our email provider, who store the website and our correspondence on our behalf.
- Google, for Google Tag Manager, Google Analytics and YouTube, only if you give your consent.
- TermsFeed, which provides the cookie consent window. Your browser loads it from TermsFeed’s servers, so TermsFeed receives your IP address, as does any website you visit.
- Our partners on a project (for example, for building a website or for a translation). They receive only your company name and the project material, not your contact details. If your business name is your own name, we share it only as far as the project requires.
- Our accountant, for invoicing.
- Public authorities, only when the law requires it.
5. Transfers outside the European Union
Google may process data in the United States. These transfers are based on the European Commission’s adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework. If any other provider of ours transfers data outside the European Economic Area, this is done only with the safeguards of the GDPR, such as an adequacy decision or the Commission’s standard contractual clauses.
More on how Google handles data: Google Privacy Policy.
6. Cookies and statistics
The first time you visit the website, we ask whether you allow cookies for statistics and for videos. Until you answer, and if you refuse, only what the website needs in order to work is loaded. You will find the full list of cookies in the Cookie policy.
7. Security
The website uses an encrypted connection (HTTPS). Messages sent through the form are not stored in a database on the website; they go straight to our email. No system on the internet is completely secure, but we keep only the data we need, for as long as we need it.
8. Your rights
Under the GDPR, you have the right:
- to find out whether we hold data about you and to get a copy (Article 15),
- to have it corrected or completed (Article 16),
- to ask for it to be deleted (Article 17),
- to ask for its use to be restricted (Article 18),
- to receive it in electronic form or ask for it to be sent to someone else (Article 20),
- to object to its use, where this is based on our legitimate interest (Article 21),
- to withdraw your consent at any time. Withdrawing it does not affect anything done before.
To exercise a right, call us on 210 238 8440 or send us a message using the contact form. There is no charge. We reply within one month. If the request is complex, this period may be extended by two further months, and we will let you know within the first month. If we are not sure that the request comes from you, we may ask you for some information to confirm it.
9. Complaints to the Data Protection Authority
If you believe we have not handled your data properly, we would like to hear about it first. You do, however, have the right to lodge a complaint with the Hellenic Data Protection Authority:
- 1–3 Kifisias Avenue, 115 23 Athens, Greece
- Phone: +30 210 647 5600
- www.dpa.gr
10. Changes
If the way we use your data changes, we will update this page. For the terms of use of the website, see the Terms of use.