Privacy

Who is responsible

The business behind this site is responsible for your data:

Business name

Smalto

Address

Οδός Σμάλτου 1, 851 00 Ρόδος

Phone

22410 00000

In this demo the business is fictional, and any of its details you see here are samples.

When you open the site

The site is hosted by Cloudflare (Cloudflare Pages). To send you the pages and protect the site from attacks, Cloudflare sees your IP address, your browser and the page you opened.

If a page fails to load, your browser may send Cloudflare a short error report (Network Error Logging).

The reason: without this the site cannot run safely. The law calls it a legitimate interest (GDPR Article 6(1)(f)). We do not see this data and do not keep it.

The appointment form

In this demo the form sends nothing. What you type stays on the page, in your browser, and is gone when you close it. The site does not see or keep it.

Cookies

The site sets no cookies and writes nothing to your browser’s storage. It has no analytics and does not count your visits.

Everything the page needs, fonts and images included, loads from this site itself, not from Google or any other company. That is why you see no cookie banner.

The map on the “Appointments and contact” page is an image from this site too. Google Maps opens only if you tap the link for directions, and from there Google’s privacy policy applies.

When you call us

We keep your name, your number or email and what you tell us, to answer you and do what you ask, for example a booking.

The reason: we need them to do what you ask (GDPR Article 6(1)(b)).

How long we keep it

• Cloudflare’s technical data: as long as its own policy sets. We do not keep it.
• Messages that did not lead to a booking or an order: we delete them within 6 months.
• Bookings, orders and their invoices: as long as Greek tax law requires, usually 5 years after the end of the year. Then we delete them.

Who gets your data

We do not sell it or give it to anyone for advertising. The only others who see it are:

• Cloudflare, which hosts the site, for the technical data
• our accountant, for the invoices
• the authorities, only when the law requires it

Outside the EU

Cloudflare is a US company with servers around the world, the United States included, so the technical data may leave Europe. The transfer rests on the EU-U.S. Data Privacy Framework, in which Cloudflare takes part.

Your rights

You can ask to see what we keep about you and get a copy, or ask us to correct it, delete it, or stop using it. The exception is what the law makes us keep, such as invoices (GDPR Articles 15 to 22).

Tell us on 22410 00000. We answer within a month.

If we do not answer you properly

You can complain to the Hellenic Data Protection Authority, Kifisias 1-3, 115 23 Athens (dpa.gr).