SiteSupport designs this website around data minimisation. We do not ask for more information than is necessary to respond to an enquiry, provide a service or keep the website secure.
1. Who is the data controller
For personal data collected through sitesupport.gr, the controller is the provider operating SiteSupport. You can use the email below for privacy-related enquiries and requests.
2. What personal data we collect
- Information you provide in the contact form: name, email, optional phone and company, subject and message content.
- Information contained in email correspondence or pre-contractual communications with us.
- When a customer relationship begins: customer/business details, billing information, project details and information necessary to deliver the agreed service.
- Technical security and operational information, such as IP address, date and time, requested URL, browser/user-agent information and technical events recorded in server logs.
We do not request special-category personal data (for example health data). Please do not include such information in free-text fields unless it is strictly necessary and has been discussed with us in advance.
3. Why we process data, legal basis and retention
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Responding to enquiries and preparing a potential engagement | Contact-form and correspondence data | GDPR Art. 6(1)(b) (steps at your request before entering a contract) and, where appropriate, Art. 6(1)(f) (legitimate interest in managing professional communications) | For as long as the enquiry remains active and normally up to 24 months after the last substantive contact, unless a customer relationship begins or longer retention is required for a legal claim. |
| Providing services and managing the customer relationship | Customer, project and communication data | GDPR Art. 6(1)(b) (performance of a contract) | For the duration of the engagement and afterwards for as long as required by applicable tax/accounting obligations and for the establishment, exercise or defence of legal claims. |
| Billing and compliance with tax/accounting obligations | Billing and transaction information | GDPR Art. 6(1)(c) (legal obligation) | For the period required by the tax and accounting laws in force from time to time. |
| Security, abuse prevention and technical troubleshooting | IP, date/time, URL, user-agent and technical logs | GDPR Art. 6(1)(f) (legitimate interest in secure and reliable operation) | Only for as long as necessary for security and troubleshooting under the applicable log-rotation/retention settings; data may be retained longer when investigating a security incident or complying with a legal requirement. |
4. Who may receive personal data
We do not sell personal data or disclose it to third parties for their own advertising purposes. Access is limited to recipients needed to operate the website or provide the requested service.
- Hosting and technical infrastructure provider: Enartia Μονοπρόσωπη Α.Ε. (Papaki), to the extent that it hosts data and technical logs on our behalf.
- The email service provider used to receive and send business correspondence.
- External technical or professional partners only where necessary for a specific service and subject to appropriate confidentiality/data-protection obligations.
- Public, tax, judicial or other competent authorities where disclosure is required by law.
Where a third party processes personal data on our behalf, providers are selected on the basis of appropriate security and data-protection guarantees, and GDPR Article 28 requirements are applied where required.
5. Transfers outside the European Economic Area
The current implementation of sitesupport.gr does not use analytics services, advertising trackers or social-media pixels, and no personal-data transfer outside the EEA takes place through such technologies.
6. Your rights
Depending on the processing and its legal basis, you have the rights provided by the GDPR, including:
- access to personal data concerning you,
- rectification of inaccurate or incomplete data,
- erasure where the legal conditions are met,
- restriction of processing,
- objection to processing based on legitimate interests,
- data portability where applicable,
- withdrawal of consent at any time where a specific processing activity is based on consent.
To exercise a right, email info@sitesupport.gr. We respond without undue delay and normally within one month, as provided by the GDPR. We may request only the information necessary to verify identity where appropriate.
7. Data security
We use technical and organisational measures appropriate to the risk, including HTTPS encryption, access controls, software updates, backups and technical event logging. No system can guarantee absolute security, so measures are reviewed as technology and risks evolve.
9. Right to lodge a complaint
If you believe that the processing of your personal data infringes applicable law, you have the right to lodge a complaint with a competent supervisory authority. In Greece, the competent authority is the Hellenic Data Protection Authority.
Hellenic Data Protection Authority ↗