1. Data Controller
The controller of any personal data arising from your visit to artcolorchatzilidou.gr is the business “Art & Color Chatzilidou”, established at 3 Dimitras St, Alexandroupoli 68131, Greece (hereinafter “we” or “us”). We process data in accordance with the General Data Protection Regulation (EU 2016/679 - GDPR) and Greek Law 4624/2019.
For any data protection matter you can contact us at: chatzilidoumaria@gmail.com
2. What Data We Process
artcolorchatzilidou.gr is an informational and presentational website. It has no contact form, no newsletter sign-up and no online payment system - so we do not actively collect names, email addresses, phone numbers or any other personal details through the site.
The contact details (email, phone numbers, address) shown on the site are our own, which you may choose to use to reach us off-site (for example by sending an email or calling). Any data you provide to us that way is subject to general data protection law and is used solely to answer your enquiry and to carry out any work we agree on, on the basis of our legitimate interest in communicating with prospective customers.
3. Technical Infrastructure Data
To run and secure the website we use hosting and content delivery / protection (CDN & security layer) infrastructure providers. As part of their technical operation, these providers automatically process basic technical data for each request (such as IP address, browser type and the time of the request), as happens on every website on the internet, for the sole purpose of delivering the page and protecting it from malicious traffic.
We do not use this data for profiling, advertising or identifying individual visitors. We do not run web analytics tools, advertising pixels or similar tracking technologies on the site.
Legal basis: our legitimate interest in the secure and uninterrupted operation of the website.
4. Cookies
The site uses no analytics, advertising or tracking cookies. Only strictly technical and functional cookies may be used, where absolutely necessary for the basic operation of the site (for example connection security); these are exempt from the prior consent requirement under applicable law (Greek Law 3471/2006). For that reason no cookie consent banner is shown.
If a tool requiring consent is added in future (for example cookie-based analytics or an advertising pixel), this policy will be updated accordingly and a consent banner will be enabled.
5. Recipients & Data Processors
We do not sell your data and we do not pass it to third parties for advertising purposes. For the technical operation of the site we work with the hosting and content delivery / security infrastructure providers, which act as data processors on our behalf, under their own terms and privacy policies. Where those providers process data outside the European Economic Area, the transfer is covered by approved safeguards (such as Standard Contractual Clauses or equivalent frameworks recognised by the European Commission).
6. Retention Period
Technical infrastructure data (for example security logs) is retained by our providers for the period set by their own policies, typically short-term and for security and troubleshooting purposes. Any messages you send us directly by email are kept for as long as necessary to handle your enquiry or our work together, and are deleted once they are no longer needed.
7. Your Rights (GDPR)
Where you have provided us with personal data (for example by email), you have the following rights:
- Access: to find out what data of yours we process
- Rectification: to ask for inaccurate data to be corrected
- Erasure: to ask for your data to be deleted
- Restriction: to ask for processing to be restricted
- Objection: to object to processing based on legitimate interest
- Portability: to receive your data in a structured, commonly used format
To exercise any of these rights, contact us at: chatzilidoumaria@gmail.com. We respond within one (1) month.
If you believe the processing of your data breaches the law, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): www.dpa.gr
8. Security
The site is served exclusively over an encrypted connection (HTTPS/SSL) and is hosted on infrastructure that applies modern security measures. We take reasonable technical and organisational measures to protect any data provided to us.
9. Changes to This Policy
We may update this policy, particularly if new tools or features are added to the site (for example a contact form, analytics or online payments). The version in force at any time is published on this page with its last-updated date.
10. Contact
For any question about this policy or about your data, you can reach us here: