Skip to content

Privacy Policy

Plain description of what happens to your data on this site. No cookie banners to dismiss, because there is nothing here that needs one.

In effect from

Who is responsible for your data

This website, notanother.gr, is operated by:

Legal name
NotAnother
Registered address
Ioanninon 16, 13562 Agioi Anargyroi, Greece
VAT number (ΑΦΜ)
EL163596528
Commercial registry (ΓΕΜΗ)
159409303000
Contact for data matters
[email protected]

We are the data controller for the processing described here. We have not appointed a Data Protection Officer, because we are not required to.

What we collect, and when

When you send us a message

If you fill in the contact form we receive your name, email address, company, phone number, and whatever you write in the message field. Every field except the message is one you choose to give us; we ask for them so we can reply properly.

When you sign up for updates

The signup box asks for your email address and nothing else. Be aware of what it actually does: it emails your address to us. We do not currently run a mailing list, there is no automated newsletter, and there is no unsubscribe link — if you want to be removed, email us and we will delete the address.

Automatically, when you visit

Our web server keeps ordinary access logs: your IP address, the page you asked for, the time, and the browser's user-agent string. Our content delivery network sees the same information in order to route the request and block automated abuse.

We do not use analytics, advertising, or tracking of any kind. There is no Google Analytics on this site, no advertising pixel, and no third-party script that profiles you.

Cookies

This site sets no cookies of its own.

Our content delivery network sets its own cookies to tell people apart from bots. They are needed for the site to stay available and they do not track you between websites.

Why we are allowed to do this

  • Answering your enquiry — Article 6(1)(b) GDPR: taking steps at your request before entering into a contract. Where no contract is in prospect, Article 6(1)(f): our legitimate interest in replying to someone who wrote to us.
  • Sending you updates — Article 6(1)(a) GDPR: your consent, which you give by submitting the form and can withdraw at any time.
  • Keeping the site up and secure — Article 6(1)(f) GDPR: our legitimate interest in serving the site reliably and defending it against abuse.

Who else sees your data

We do not sell your data and we do not share it for anyone else's marketing. It reaches only the service providers we need in order to run the site and receive your message:

  • Cloudflare, Inc. — content delivery, DNS and bot protection; sees the IP address of every request (United States)
  • Hostinger — runs the web server these sites are served from, including its access logs (Frankfurt, Germany (EU))
  • FormSubmit.co — relays the contact and newsletter forms to our inbox — it receives everything typed into them (United States)

Data sent outside the EU

Two of the providers above are established in the United States. That means the contents of a form you submit, and the IP address of your visit, are processed outside the European Economic Area. Such transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the Commission's Standard Contractual Clauses.

If you would rather not have your message pass through a US provider, email us directly at the address above instead of using the form.

How long we keep it

Enquiries that do not lead to work are deleted after 24 months. If we do work together, we keep what the law requires us to keep for as long as it requires — tax and accounting records in particular. Server access logs are kept only as long as they are useful for security and troubleshooting.

Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or hand it over in a portable form. You can object to processing we base on legitimate interest, and where we rely on your consent you can withdraw it at any time — withdrawing it does not undo what we did beforehand.

Write to [email protected] and we will answer within one month.

If you think we have handled your data badly, you can complain to the Hellenic Data Protection Authority: Kifissias 1-3, 115 23 Athens, www.dpa.gr.

Changes to this policy

If we change how we handle personal data, we change this page and move the date at the top. There is no archive of previous versions; the page you are reading is the one in force.