Privacy Policy

Last updated: 28 October 2026

Protecting your personal data matters to us. This policy explains what data is collected when you visit aggelaridis.com, why, for how long it is kept and what rights you have, in line with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek law.

1. Data controller

AGGELARIDIS GEORGIOS (sole proprietorship)
11 D. Solomou St, 570 10 Pefka, Thessaloniki, Greece
VAT No. EL156173923, Tax Office: KEFODE Thessalonikis
Email: george@aggelaridis.com
Phone: +30 6978 462 647

2. What data we collect

• Contact form: your name, email address, phone (optional), what you need, the address of your current website (optional) and the content of your message.
• AI assistant: the website assistant answers with ready-made replies inside your browser. The questions you type are not stored and are not sent to us or to anyone else. If you fill in the quote request through the assistant, your answers, name, email and, if you give it, your phone are sent to us and kept like contact form messages.
• Email or phone contact: the details you choose to share with us.
• Usage data: Google Analytics records anonymous statistics such as the pages you visit, visit duration, device and browser type and approximate location.
• Technical data: the server hosting the website automatically logs details such as IP address, date and time of access and browser type, for security and to keep the site running properly.

We do not collect special categories of data and we do not carry out automated decision making or profiling.

3. Purposes and legal basis

• Replying to enquiries and quotes: to answer your message and send you a quote. Legal basis: steps taken at your request before entering into a contract and our legitimate interest in replying to people who contact us (Art. 6(1)(b) and (f) GDPR).
• Usage statistics: to improve the content and performance of the website. Legal basis: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
• Security and operation: to protect the website from misuse. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
• Invoicing: if we start working together, invoicing details are kept to meet our tax obligations (Art. 6(1)(c) GDPR).

4. Cookies

The website uses only a few cookies:

• Essential: a cookie that remembers your language choice (pll_language, up to 1 year) and a cookie that remembers your cookie choice (ga_consent, 1 year).
• Browser storage: the AI assistant keeps the conversation only until you close the tab (sessionStorage) and the website remembers whether you chose the dark or light theme. This stays on your device and is not sent anywhere.
• Statistics (Google Analytics 4): the _ga and _ga_* cookies distinguish unique visitors and sessions (up to 2 years).

You can delete or block cookies in your browser settings. You can also opt out of Google Analytics with the Google Analytics opt out browser add on.

5. Who receives your data

Your data is never sold or shared with third parties for advertising. Only the providers that help us run the website may access it, acting as processors:

• the website hosting provider and the email provider,
• Google (Google Analytics).

Google may process data outside the European Union. Such transfers rely on the EU US Data Privacy Framework and the European Commission’s standard contractual clauses.

6. How long we keep data

• Contact messages are kept for as long as needed for our communication and for no more than 2 years after the last contact, unless we start working together.
• Invoicing details are kept for as long as tax law requires.
• Google Analytics data is deleted automatically according to the service’s retention settings (up to 14 months).

7. Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. To exercise any of these rights, email george@aggelaridis.com. We will reply within one month at the latest.

If you believe the processing of your data breaches the law, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

8. Security

We take appropriate technical and organisational measures to protect your data, including an encrypted connection (HTTPS), regular software updates and restricted access to our systems.

9. Children

This website is intended for businesses and adults. We do not knowingly collect data from children under 15.

10. Changes to this policy

We may update this policy when the website or the law changes. The date of the latest update is shown at the top of this page.