Privacy Policy
1. Who we are
Kostas Ordoumpozanis ("Anodea", "we") is the controller of the personal data described here. Established at Konstantinoupoleos 34, Alexandroupolis, Greece. VAT number: EL112472833. For anything concerning your personal data, contact [email protected].
This Policy explains how we process personal data through the website anodea.gr.
2. What data we collect and how
a) Newsletter subscription. We collect your email address and your chosen language, so we can send updates in the right one. We also record the time of your subscription and of its confirmation, as evidence of your consent.
b) Usage statistics (Google Analytics). With your consent, we use Google Analytics to understand how the site is used. The service sets cookies and processes data such as the pages you visited and approximate location.
c) Interest tracking. With your consent, our own newsletter system — running on our own server within the EU — records the pages you visited, so we can connect your interest with your newsletter subscription if you subscribe. This data is not passed to any third party.
d) Technical server data. For the security and operation of the site, the server logs technical data such as IP address, browser type and time of access.
General. Providing this data is optional; without your email address we cannot send you the newsletter. We do not collect special categories of data (e.g. health data). The site is not intended for minors. The site has no contact form, no user accounts and no purchases.
3. Purposes and legal bases
Newsletter subscription uses double opt-in: after you submit your email, we send a message containing a confirmation link. The subscription completes only if you click that link.
| Processing | Purpose | Legal basis |
|---|---|---|
| Newsletter | Sending updates | Consent (GDPR art. 6(1)(a), Greek law 3471/2006 art. 11) |
| Google Analytics | Usage statistics | Consent (GDPR art. 6(1)(a), law 3471/2006 art. 4(5)) |
| Interest tracking | Connecting interest with subscription | Consent (GDPR art. 6(1)(a), law 3471/2006 art. 4(5)) |
| Technical data / logs | Security and operation | Legitimate interest (GDPR art. 6(1)(f)) |
4. Retention periods
- Newsletter email: until you unsubscribe or withdraw your consent.
- Unconfirmed subscriptions: deleted within 12 months if the confirmation link is never clicked.
- Google Analytics data: per the service settings, up to 14 months.
- Tracking data: until you unsubscribe or the contact is deleted.
- Technical logs: a limited period, up to 12 months.
5. Recipients and processors
The newsletter system runs on our own server, so your subscription data is not handed to a third party for that purpose. Otherwise we share data, strictly as necessary, with:
- Hosting (within the EU): Hetzner Online GmbH (Γερμανία / Germany, ΕΕ / EU).
- Email delivery: SendPulse Inc., as the relay for newsletter messages.
- Statistics: Google Ireland Ltd. (Google Analytics 4).
- Public authorities, where required by law.
We do not sell your personal data.
6. International transfers
Site hosting and the newsletter data are within the EU/EEA. Google and the email delivery provider may process data outside the EEA. In those cases appropriate safeguards apply, namely Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework.
7. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, and to withdraw your consent at any time without affecting the lawfulness of processing before withdrawal. To exercise them, write to [email protected]. We respond within one month.
You have the right to object at any time to processing for direct marketing purposes. You can unsubscribe from the newsletter via the unsubscribe link in every message, or by writing to us.
We do not make decisions producing legal effects concerning you based solely on automated processing.
8. Security
We apply appropriate technical and organisational measures, such as transport encryption (HTTPS/TLS), access control, a firewall and encrypted backups, to protect your data.
9. Cookies
The site uses cookies. Details in the Cookie Policy, where you can also manage your preferences.
10. Complaint to the supervisory authority
If you believe the processing infringes the law, you have the right to lodge a complaint with the Hellenic Data Protection Authority (ΑΠΔΠΧ), 1-3 Kifissias Ave., 115 23 Athens, tel. +30 210 6475600, [email protected], www.dpa.gr.
11. Changes to this Policy
We may update this Policy. The version in force at any time bears the last-updated date at the top.
This text is also available in Greek. In the event of any divergence between the two versions, the Greek version prevails.
Διαβάστε στα ελληνικάInformational material, not legal advice.