I collect as little data as possible. Here is what I keep, why, and for how long. This policy also covers works.christosanastasiou.gr, which uses no cookies or analytics.
Data controller
Christos Anastasiou, Tsontou Varda 38, 52100 Kastoria, Greece.
VAT EL166824523, GEMI no. 190667232000.
Email: [email protected]
Contact form and email
When you send me a message, I keep your name, your email, the business or project you describe and whatever you write. I use them only to reply and, if we work together, for our project (Article 6(1)(b) GDPR).
The form is sent through Formspree, which forwards the message to my email and Telegram. Email to [email protected] passes through Cloudflare Email Routing and is stored in Google's Gmail. My replies are sent through Brevo.
Before submission is completed, you are taken to Formspree for a Google reCAPTCHA check against automated submissions. This security check is separate from your choice about site analytics. The privacy policies of Formspree and Google apply.
I keep correspondence for as long as our communication needs it. If we work together, I keep what tax law requires for as long as it requires.
Cookies and analytics
The site uses Google Analytics 4 only if you click "Accept" on the consent notice. Google then sets the _ga and _ga_* cookies, which last up to 2 years, and measures which pages are read and where visitors come from. I do not identify you personally from this data.
If you click "Decline", Google Analytics does not load. You can change your mind at any time from "Cookies" at the bottom of every page.
Your browser also keeps two values in localStorage: your light or dark theme and your cookie choice. They never leave your device.
Hosting and security
The site is hosted on a Vultr server and served through Cloudflare for speed and protection against attacks. Both process technical data such as your IP address to deliver the page and block malicious traffic.
Transfers outside the EU
Google, Cloudflare, Formspree and Vultr are US companies. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Your rights
You can ask for access, correction or deletion of your data, restriction of processing, portability, and you can object to processing. Write to [email protected].
If you believe your rights are being violated, you can file a complaint with the Hellenic Data Protection Authority.