Privacy Policy
Last updated: August 2025 • Version 1.0
1. Scope
This policy covers personal data processing performed through the NETseo.gr website and its contact forms. It does not cover third‑party services or sites linked from here.
2. Controller
NETseo.gr (Freelance Web & Digital Services)
Email: sales@netseo.gr
Location: Athens, Greece.
3. Data Categories
- Contact data: Name, email, optional message.
- Technical & usage (anonymised): Page URL, interaction events, scroll depth, timing metrics. Stored locally or anonymised before aggregate statistics.
- Cookie preferences: Choices (essential / analytics / marketing) stored in the browser (localStorage).
- Security logs: Limited request metadata (hashed or temporary IP) for abuse detection.
We do not process special categories (sensitive) data under Art. 9 GDPR nor perform high‑risk profiling.
4. Sources
Data is provided directly by you (contact form, cookie choices) or collected automatically via essential cookies / internal mechanisms (server logs, lightweight analytics).
5. Cookies & Technologies
We use the categories shown in the consent banner:
- Essential: Required for core functionality, security and navigation. Always active – no personal content stored.
- Analytics (optional): Anonymous usage measurement (pages, interactions) for optimisation. Loaded only after explicit consent.
- Marketing (optional): Remarketing / campaign tags (e.g. Pixel, LinkedIn Insight). Enabled only with consent.
Your decision is stored locally and additionally logged server‑side (without enrichment) solely to evidence consent.
You can adjust preferences anytime via the “Cookies” button (bottom right) or perform a long press (~1s) to reset.
6. Legal Bases (Art. 6 GDPR)
- Consent (Art. 6(1)(a)): Analytics & marketing cookies.
- Legitimate interest (Art. 6(1)(f)): Basic security logging, internal analysis of anonymised aggregates.
- Contract / pre‑contractual steps (Art. 6(1)(b)): Responding to service enquiries.
- Legal obligation (Art. 6(1)(c)): Potential compliance with authority requests or statutory retention.
7. Purposes
- Responding to enquiries / communication.
- Operating and securing the site.
- Statistical optimisation (with consent).
- Evaluating campaign effectiveness (with marketing consent).
- Detecting & preventing abuse / attacks.
8. Retention
| Category | Duration | Rationale |
|---|---|---|
| Contact enquiries | Up to 12 months | Evaluation & follow‑up cycle |
| Consent logs | Up to 24 months | Compliance evidence |
| Anonymous analytics | Rolling aggregate 12 months | Trend history |
| Security logs | 30–90 days | Attack detection |
After expiry, data is deleted or irreversibly anonymised.
9. Security
- Controlled admin access (roles, session hardening).
- Login attempt logging & basic brute‑force mitigation.
- Periodic backups (automated script).
- Layered Content Security Policy (CSP) for scripts.
- Surface minimisation: limited external dependencies.
10. Disclosures / Processors
We do not sell personal data. Standard providers (hosting, SMTP) may act as processors under contractual clauses. Details available on request.
11. Transfers outside EEA
If a third‑party service outside the EEA is used (e.g. analytics / marketing platforms), appropriate safeguards (Standard Contractual Clauses) are applied. Optional services are not activated without consent.
12. Data Subject Rights
- Access / Copy
- Rectification
- Erasure ("right to be forgotten")
- Restriction
- Objection (notably to legitimate interests / marketing)
- Portability (where applicable)
- Withdrawal of consent (no retroactive effect)
- Complaint to a Supervisory Authority (Greece: dpa.gr)
13. Exercising Rights
Submit a request to sales@netseo.gr with a clear description. We normally respond within 30 days (Art. 12 GDPR). Additional identification information may be requested.
14. Children
Services target professionals / businesses. We do not knowingly target children under 16. If we receive data of a minor without guardian consent, it will be erased.
15. Updates
This policy may be updated for compliance or functional improvements. The "Last updated" date will be adjusted and, for material changes, the consent banner may reappear (new version).
16. Contact
For questions or requests: sales@netseo.gr. We are happy to provide further clarification.
This policy reflects data minimisation principles and the privacy by design architecture implemented by NETseo.gr.