Privacy policy

Controller

Alexandros Tsafos and Dimitris Katsakioris (“Na Taxideveis”). Contact: nataxideveis@gmail.com.

What data, why, and on what legal basis

Visiting the website

Technical data (IP address, browser, device) to run and secure the website, and anonymous visit statistics without cookies. Legal basis: our legitimate interest in running the website properly and securely (Art. 6(1)(f) GDPR).

YouTube videos

Pages with videos load YouTube’s player in privacy-enhanced mode, which receives your IP address and device details. Legal basis: our legitimate interest in showing our videos (Art. 6(1)(f) GDPR).

Contacting us

Name, email or Instagram account and the content of your message, to reply and, if you ask, to arrange a stay. Legal basis: steps taken at your request (Art. 6(1)(b) GDPR) and our legitimate interest in replying to messages (Art. 6(1)(f) GDPR).

Newsletter

Email and, optionally, your name, to send the newsletter, plus open and click data. Legal basis: your consent, confirmed by email (Art. 6(1)(a) GDPR).

Recipients

Vercel Inc.

website hosting and statistics (USA)

Kit (ConvertKit LLC)

newsletter delivery (USA)

Google

email (Gmail) and video (YouTube) (Ireland, USA)

Meta

Instagram messages (Ireland, USA)

We do not sell your data or share it with third parties for advertising. A host only receives the details needed to arrange a stay, and only with your agreement.

Transfers outside the EU

These providers may transfer data to the USA. Transfers rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework or on standard contractual clauses. You can request a copy of these safeguards at nataxideveis@gmail.com.

Retention

Technical data

for a short period, under Vercel’s terms. Statistics do not identify you.

Messages

up to two years after our last contact.

Newsletter

until you unsubscribe.

Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. Where processing is based on consent, you can withdraw it at any time (for the newsletter, through the unsubscribe link in every email), without affecting the lawfulness of processing before withdrawal.

To exercise your rights, write to nataxideveis@gmail.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Whether you must provide data

Providing data is optional. Without an email address or contact account we cannot reply to you or send you the newsletter.

Automated decisions

We do not make decisions based solely on automated processing and we do not profile you.