Privacy Policy
Last updated: 9 October 2026
This page explains what personal data opensite.gr collects, why, where it goes and what rights you have.
1. Who is responsible
The data controller is:
ΞΕΝΙΤΙΔΗΣ ΦΩΤΗΣ, Sole proprietorship, trading as OpenSiteΥδραγωγείου 4, 55236 Θεσσαλονίκη, GreeceVAT No. EL167669461, Tax office: Ζ΄ ΘεσσαλονίκηςEmail: info@opensite.grPhone: +30 698 449 6660
2. What we collect, why and for how long
| When | What data | Why | Legal basis | How long we keep it |
|---|---|---|---|---|
| You send a quote or contact form | Name, phone or email, what you need, and anything else you write: your website, your type of business, your message | To reply and prepare a quote | Steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) | Up to 24 months after our last contact, if no project follows |
| You book a call | First and last name, email, phone, the service you are interested in, notes, date and time | To arrange and confirm the call | Same | Same |
| With every form | The page through which you entered the site and the campaign details carried by the ad link (utm parameters). The Google click identifier (gclid) only if you pressed "Accept" | To know which ad led to the enquiry | Our legitimate interest in measuring how our ads perform (Article 6(1)(f)). For the gclid, your consent | As long as the enquiry |
| You call us or write to us by email, Viber or WhatsApp | Your number or address and whatever you tell or send us | To reply | Steps before a contract, or our legitimate interest in answering people who contact us | Same |
| You become a client | Invoicing details and whatever the project requires | To deliver the project and issue invoices | Contract (Article 6(1)(b)) and legal obligation (Article 6(1)(c)) | For as long as tax law requires |
| You open any page | IP address, date and time, page, browser type, in the server logs | To run and secure the site | Our legitimate interest (Article 6(1)(f)) | For a limited period set by the hosting provider |
| You press "Accept" on the cookie banner | See section 4 | Ad measurement and advertising | Your consent (Article 6(1)(a)) | See section 4 |
We do not ask for or want sensitive data. Please do not include any in your messages.
3. Who else receives data
We do not sell data to anyone. Data is received only by the providers below, who work on our behalf:
| Provider | What it does | Where processing takes place |
|---|---|---|
| Hostinger International Ltd. (Cyprus) | Hosts the site | |
| FormSubmit (formsubmit.co) | Sends form enquiries to our email | The provider does not publish where it processes data |
| Zoho Mail (Zoho Corporation) | Hosts the info@opensite.gr mailbox | |
| Supabase, Inc. (USA) | Database where enquiries from the contact form and call bookings are stored | |
| EmailJS Pte. Ltd. (Singapore) | Sends the confirmation email when you book a call. Receives name, email, date and time | Servers in the USA |
| Contentful GmbH (Germany) | Serves the article images on the Insights page. Receives your IP address when you open that page | EU and a global delivery network |
| Google Ireland Limited and Meta Platforms Ireland Limited | Only if you press "Accept". See section 4 | Ireland, with possible transfer to the USA |
If you write to us on Viber or WhatsApp, your messages pass through those services under their own terms.
We also give data to our accountant and to public authorities where the law requires it.
5. Transfers outside the European Union
EmailJS processes data in the USA under the European Commission's standard contractual clauses. Google and Meta may transfer data to the USA under the EU–US Data Privacy Framework or standard contractual clauses.
6. Your rights
You can ask us to:
- tell you what data we hold about you and give you a copy,
- correct anything that is wrong,
- delete your data,
- restrict how we use it,
- give it to you in a format you can take to another provider,
- stop processing that relies on our legitimate interest.
You can withdraw your cookie consent at any time through "Cookie settings". Withdrawal does not affect what happened before it.
Write to info@opensite.gr. We reply within one month.
If you believe we have mishandled your data, you have the right to lodge a complaint with the Hellenic Data Protection Authority, www.dpa.gr.
7. Do you have to give us your details?
No. But without a name and a phone number or email we cannot reply. We make no automated decisions about you.
8. Security
The site works only over an encrypted connection (HTTPS). Only OpenSite and the providers in section 3 have access to enquiries.
9. Changes
When something material changes, we update this page and the date at the top.