Controller. Nikos Broikos, Athens, Greece. For anything in this policy: broikos.nikolaos@gmail.com.
What is collected
The contact form stores what you type - name, email, phone if you give it, your brief and a budget band - so I can reply. That is its only purpose, and its lawful basis is GDPR Art. 6(1)(b): steps taken prior to a contract, at your request. Submissions are kept until the conversation is over or you ask for deletion, whichever comes first. A notification email with the same content is sent to my inbox.
Measurement on this site is first-party and cookieless. Each page view records the page, the referring site, device class, browser, operating system and interface language, tied to a pseudonymous identifier that is rotated every day and cannot be reversed into your IP address. Nothing links your visits across days, no advertising or analytics service receives anything, and no consent banner is needed because there is nothing to consent to.
Server logs kept by the hosting provider record requests (IP, time, URL) for security and debugging, with standard short retention.
Cookies
Three, all functional: lang remembers the language you chose (one year); bperf remembers the performance tier this device measured so animations fit it (30 days); a session cookie protects the contact form against cross-site request forgery and lives until the browser closes. No tracking cookies exist on this site.
What never happens
Nothing is sold or shared with advertisers. There is no mailing list. No third-party scripts run on the public pages.
Your rights
Access, rectification, erasure, restriction, portability, objection - email me and it is handled, usually the same day. You can also complain to the Hellenic Data Protection Authority (dpa.gr).