Privacy Policy

Last updated: September 2026

This Privacy Policy explains how personal information is collected, used and protected when you visit this website or contact me through it.

1. Data Controller

The data controller for this website is:

George Vlachos
Greece
Email: contact@georgevlachos.eu

If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact me using the email address above or through the contact form available on this website.

2. Personal Data I Collect

Depending on how you use the website, I may collect the following information:

Contact Form

When you contact me through the website’s contact form, you may provide information such as:

  • Your name

  • Your email address

  • The subject of your enquiry

  • The content of your message

  • Any other information you voluntarily include in your message

This information is used solely for the purpose of receiving, reviewing and responding to your enquiry.

Technical Information

When you visit the website, certain technical information may be processed automatically by the website hosting provider or other technical services necessary for the operation and security of the website.

This may include information such as:

  • IP address

  • Browser type

  • Device type

  • Date and time of access

  • Pages visited

  • Basic server log information

Such information may be used for website security, troubleshooting, performance monitoring and the prevention of misuse.

3. How Your Personal Data Is Used

Your personal data may be processed for the following purposes:

  • To respond to messages and enquiries submitted through the website

  • To communicate with you when you request information about my services

  • To take steps at your request before entering into a potential business relationship

  • To maintain the security and proper operation of the website

  • To comply with applicable legal obligations

  • To establish, exercise or defend legal claims where necessary

I do not sell or rent your personal data to third parties.

4. Legal Basis for Processing

Personal data is processed only where there is an appropriate legal basis under the General Data Protection Regulation (GDPR).

Depending on the circumstances, processing may be based on:

  • Your request prior to entering into a contract, for example when you contact me regarding a service

  • Legitimate interests, such as responding to general enquiries, maintaining website security and preventing misuse

  • Legal obligations, where processing is required by applicable law

  • Consent, where consent is specifically requested for a particular activity

5. Contact via WhatsApp

The website may provide a button or link allowing you to contact me through WhatsApp.

Using WhatsApp is entirely optional. If you choose to communicate through WhatsApp, your interaction will also be subject to the privacy practices and terms of WhatsApp and its provider, Meta.

The website itself does not automatically collect your WhatsApp telephone number simply because the WhatsApp link or button is displayed.

When you choose to initiate a conversation through WhatsApp, the personal information you provide during that conversation will be processed for the purpose of responding to your enquiry or providing the requested information or service.

6. Third-Party Websites and Services

This website may contain links to third-party websites or services, including websites related to services or projects mentioned on this website.

When you follow an external link, you leave this website. The privacy practices of the external website are governed by its own privacy policy.

I am not responsible for the privacy practices, content or security of third-party websites.

7. Data Sharing

Your personal data may be accessible to third parties only where necessary for the operation of the website or the provision of requested services.

These may include:

  • Website hosting providers

  • Website infrastructure and security providers

  • Email service providers

  • Technical service providers

  • Communication platforms voluntarily selected by you, such as WhatsApp

These parties may process personal data only to the extent necessary to provide their respective services and are subject to their own legal and data protection obligations.

Personal data may also be disclosed where required by law or by a competent public authority.

8. International Data Transfers

Some third-party services used by or linked from this website may process information outside the European Economic Area (EEA).

Where applicable, such transfers are handled in accordance with the requirements of the GDPR and the safeguards provided by the relevant service providers.

9. Data Retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected.

Messages submitted through the contact form or other communication channels may be retained for as long as necessary to respond to the enquiry, manage any subsequent communication or business relationship, comply with legal obligations, or establish, exercise or defend legal claims.

When the information is no longer required for these purposes, it will be deleted or securely disposed of where reasonably possible.

10. Your Rights Under the GDPR

If you are located in the European Union or European Economic Area, you may have the following rights regarding your personal data:

  • The right to access your personal data

  • The right to request correction of inaccurate or incomplete data

  • The right to request deletion of your personal data

  • The right to restrict the processing of your personal data

  • The right to object to certain processing activities

  • The right to data portability, where applicable

  • The right to withdraw consent where processing is based on consent

  • The right to lodge a complaint with a competent supervisory authority

To exercise any of these rights, you may contact me at:

contact@georgevlachos.eu

Requests will be handled in accordance with the requirements and time limits established by applicable data protection legislation.

11. Right to Lodge a Complaint

If you believe that your personal data has been processed in violation of applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.

For Greece, the competent authority is:

Hellenic Data Protection Authority
1–3 Kifisias Avenue
115 23 Athens
Greece

Website: www.dpa.gr

You may also contact the supervisory authority of the EU/EEA country in which you reside or work, where applicable.

12. Cookies

This website may use cookies and similar technologies that are necessary for its operation or, where applicable, for analytics or other optional functionality.

Detailed information about the cookies used, their purposes and how you can manage your preferences is provided in the separate Cookie Policy available on this website.

Where consent is legally required for non-essential cookies, such cookies will not be activated before you provide your consent.

13. Security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.

However, no method of transmission or storage over the internet can guarantee absolute security.

14. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to the website, the services offered, the technologies used or applicable legal requirements.

The latest version will always be published on this page together with the date of the most recent update.