Ktimata Gamou

Privacy Policy

Last updated: May 9, 2026

This Policy describes how your personal data is collected, used, and protected when you use ktimatagamou.gr. We respect your privacy and comply with the EU General Data Protection Regulation (GDPR — Reg. EU 2016/679) and Greek Law 4624/2019.

1. Data Controller

The data controller is the operator of ktimatagamou.gr. For any question or to exercise your rights, contact us at info@ktimatagamou.gr.

2. Data we collect

We collect only the data necessary to operate the website:

  • Lead form data (venue inquiry): name, email, phone, event date, guest count, event type, message.
  • Contact form data: name, email, message.
  • Technical data (server logs): IP address (used for rate-limiting), user-agent, timestamp, pages visited.
  • Analytics data (Google Analytics 4): pages visited, time on site, country/city-level location, device type, traffic source. No personally identifiable information (name, email, etc.) is collected via GA4.

3. Purposes of processing

  • Forwarding your inquiry to the wedding venue you have selected.
  • Sending a confirmation email with your inquiry details.
  • Responding to questions submitted via the contact form.
  • Anonymous statistical analysis to improve user experience.
  • Compliance with legal obligations and abuse prevention (rate limiting, anti-spam).

4. Legal basis

  • Consent (Art. 6(1)(a) GDPR): for submission of the lead form, the contact form, and for analytics cookies.
  • Legitimate interest (Art. 6(1)(f) GDPR): for site security, abuse prevention, and basic operational statistics.

5. Recipients of data

Lead-form data is forwarded only to the venue you have selected. We do not sell your data to third parties and do not use it for advertising. For the technical operation of the website we use the following data processors:

  • Vercel Inc. — website hosting (US, transfer under Standard Contractual Clauses).
  • Supabase Inc. — database and photo storage.
  • Resend Inc. — confirmation and notification email delivery (US, SCCs).
  • Google Ireland Limited — Google Analytics 4 (only if you accept cookies).

6. International transfers

Some processors (e.g., Resend, Vercel, Google) may process data outside the EEA. In those cases, transfers are made under the European Commission's Standard Contractual Clauses.

7. Retention period

  • Lead form data: up to 24 months from submission, unless a longer retention is legally required.
  • Contact form data: up to 12 months from the last interaction.
  • Server logs: up to 90 days.
  • Google Analytics 4: 14 months (GA4 default).

8. Cookies & analytics

Analytics cookies (Google Analytics 4) are loaded only if you accept them in the consent banner. You can decline, or change your mind any time by clearing your browser cookies. Provider: Google Ireland Limited — policy: policies.google.com/privacy.

9. Your rights

Under GDPR, you have the following rights:

  • Right of access to your data (Art. 15).
  • Right to rectification of inaccurate data (Art. 16).
  • Right to erasure ("right to be forgotten", Art. 17).
  • Right to restriction of processing (Art. 18).
  • Right to data portability (Art. 20).
  • Right to object to processing (Art. 21).
  • Right to withdraw consent at any time, without affecting the lawfulness of prior processing.

You can exercise your rights by emailing info@ktimatagamou.gr. We will respond within one month, as required by GDPR.

10. Right to lodge a complaint

You have the right to lodge a complaint with the Greek Hellenic Data Protection Authority (1-3 Kifissias Ave., 11523 Athens · www.dpa.gr) if you believe your rights have been violated.

11. Security

We apply reasonable technical and organisational measures to protect your data from unauthorised access, loss, or alteration: HTTPS encryption, restricted database access, form rate-limiting, bot protection (honeypot field). No transmission or storage method is 100% secure, but we work to eliminate known risks.

12. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects for you.

13. Changes to this Policy

We reserve the right to update this Policy. Material changes will be communicated on the website. We recommend you review it periodically.

14. Contact

For any question regarding this Policy: info@ktimatagamou.gr.