Privacy Policy

1. Data Controller

The controller of your data is ΚΩΣΤΑΜΕΝΑΣ Γ. - ΑΓΓΕΛΗΣ Μ. Ο.Ε., trading as “Κυψελοτεχνική”.

• Registered address: ΒΙ.ΠΕ. Ιωαννίνων, Τ.Κ. 45500, Ιωάννινα, Ελλάδα
• Telephone: +30 2651 003119
• Email: kipselotexniki@hotmail.com
• VAT number: 081513375
• Companies register (ΓΕΜΗ): 30419729000

2. What data we collect

We collect only the data you provide voluntarily, plus what is technically necessary to operate the website.

• Via the contact form: your name, email address, subject and message.
• If you contact us by phone or email: whatever details you choose to share.
• Technical data from our hosting provider: IP address, browser type and time of visit, for security and stability purposes.

3. Purpose and legal basis

We do not use your data for automated decision-making or profiling, and we do not send marketing newsletters without separate consent.

• Replying to your enquiry — legal basis: your consent (Art. 6(1)(a) GDPR) and/or steps taken prior to entering a contract (Art. 6(1)(b)).
• Preparing quotations and handling orders — legal basis: performance of a contract or pre-contractual steps.
• Website security and prevention of abuse — legal basis: legitimate interest (Art. 6(1)(f)).
• Compliance with tax and accounting obligations where a transaction occurs — legal basis: legal obligation (Art. 6(1)(c)).

4. Recipients and processors

We never sell or rent your personal data. Data may be processed by the following providers acting as processors on our behalf:

• Formspree, Inc. (USA) — handling and forwarding contact form messages.
• Cloudflare, Inc. (USA/EU) — website hosting and protection against attacks.
• Google Ireland Ltd. — Google Fonts, embedded YouTube videos (in privacy-enhanced mode) and Google Maps, which loads only if you explicitly request it.
• Competent public authorities, where required by law.

5. Transfers outside the EU

Some of the providers above are based in the United States. Such transfers rely on the European Commission’s Standard Contractual Clauses and/or the EU–US Data Privacy Framework, which provide appropriate safeguards under Articles 45–46 GDPR.

6. Retention periods

After these periods the data is securely deleted.

• Contact form messages: up to 24 months after our last exchange, unless a business relationship begins.
• Data linked to an order or invoice: for as long as tax law requires.
• Technical logs: for a limited period, per our hosting provider’s policy.

7. Your rights

Under Articles 15–22 GDPR you have the right to:

• Access the data we hold about you.
• Rectify inaccurate or incomplete data.
• Erasure (“right to be forgotten”).
• Restriction of processing.
• Data portability in a structured, commonly used format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.

8. How to exercise your rights

You may exercise any of these rights by writing to kipselotexniki@hotmail.com or calling +30 2651 003119. We respond within one (1) month of receiving your request, as required by the GDPR.

If you believe your data is being processed unlawfully, you may lodge a complaint with the Hellenic Data Protection Authority: 1-3 Kifissias Ave., 11523 Athens, Greece, tel. +30 210 6475600, www.dpa.gr.

9. Cookies and tracking

This website does NOT use advertising cookies, does not sell data to ad networks and does not profile visitors for commercial purposes.

We use Google Analytics 4 (provider: Google Ireland Ltd.) solely for traffic statistics. The relevant cookies are set ONLY if you give explicit, freely given and specific consent by pressing “Accept” in the cookie notice. Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 4(5) of Greek Law 3471/2006).

If you choose “Decline”, no Google Analytics script is loaded, no connection to Google servers is made and no data is sent. Any pre-existing analytics cookies are deleted automatically.

Your choice is stored locally on your device (localStorage), not in a cookie. You may withdraw or change it at any time via the “Cookie settings” link in the footer of every page.

10. Data security

The website is served exclusively over encrypted HTTPS. We apply technical and organisational measures — security headers, attack protection and restricted access to messages — to protect your data against loss, misuse or unauthorised access.

Please note that no method of transmission over the internet is completely secure, and absolute security cannot be guaranteed.

11. Minors

This website is aimed at professionals and is not intended for minors. We do not knowingly collect data from anyone under 16.

12. Third-party links

The website contains links to external sites (e.g. Facebook, YouTube). We are not responsible for their privacy practices and encourage you to read their policies.

13. Changes to this Policy

We may update this Policy. Any change is published on this page with a new revision date. Last updated: August 2026.