Privacy policy.
This page explains what personal data iraklis.me collects, why, who else handles it, and what you can ask me to do with it. I’ve tried to keep it short and in plain language.
Who I am
This site belongs to Iraklis Bogiatziou, a freelance product and web designer based in Athens, Greece. I’m the data controller for everything described here. For any privacy question or request, email hello@iraklis.me.
What I collect, and why
When you send an enquiry
The contact form and the project form ask for your name, email, and optionally your company and phone number, plus what you tell me about your project (the kind of work, industry, timing, budget and description).
I use this only to reply to you, talk about your project and prepare a quote. The legal basis is taking steps at your request before a possible contract (GDPR Art. 6(1)(b)). Your enquiry is delivered to my inbox, and you get a copy of the confirmation by email.
I keep enquiries for up to two years after our last contact, then delete them. If we work together, project and invoicing records are kept as long as Greek tax law requires.
Analytics, only if you accept
If you click Accept on the cookie banner, the site loads Google Tag Manager and Google Analytics 4. They record which pages you visit, how you got here, and general device, browser and approximate location data (country or city, never your exact location). I use this to see which work people look at and to improve the site. I don’t use it for advertising, and I can’t see who you are.
The legal basis is your consent (GDPR Art. 6(1)(a)). If you click Reject, or don’t choose, none of this loads and no request goes to Google. You can change your mind at any time with Cookie settings, also at the bottom of every page. Analytics data is kept for 14 months.
Spam protection
To limit abuse, the server keeps a one-way hash of your IP address for ten minutes after you send a form, so the same address can’t send more than a few messages in a row. The legal basis is my legitimate interest in keeping the forms free of spam (GDPR Art. 6(1)(f)).
Server logs
Like every website, the hosting server records basic technical data for each request (IP address, page, time and browser) to keep the site secure and running. These logs are kept for a short period by the hosting provider. The legal basis is legitimate interest.
Cookies and local storage
No cookies are set unless you accept analytics. If you do, Google Analytics sets:
| Name | Purpose | Expires |
|---|---|---|
_ga |
Tells visits from different people apart | 2 years |
_ga_63S5ZK5C4F |
Keeps track of your current visit | 2 years |
Your choice on the banner (accept or reject) is saved in your browser’s local storage, so the banner doesn’t ask again on every page. It never leaves your device, and the banner asks again after 12 months.
Who else handles your data
I don’t sell your data or share it with anyone for marketing. These services process it on my behalf:
- Google (Google Workspace for email; Google Analytics and Tag Manager, only with your consent)
- Hostinger (website hosting)
Google may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.
Your rights
You can ask me to:
- show you the personal data I hold about you, or give you a copy
- correct it
- delete it
- restrict or object to how I use it
- withdraw your consent to analytics, at any time, without affecting what happened before
Email hello@iraklis.me and I’ll reply within one month. If you think I’ve handled your data wrongly, you can also complain to the Hellenic Data Protection Authority at dpa.gr.
Changes
If anything here changes, I’ll update this page and the date below.