Privacy Policy

Who is the data controller

The controller for personal data collected through this website is Konstantinos Kiritsis & SIA E.E. - StudySmart, whose registered office is at 18 Larnakos Street, 17455 Alimos. If you have any question about how your data is handled, please write to info@studysmart.gr.

What data we collect

This site has no forms, no user accounts and no online purchasing. It collects only what it needs in order to function and to allow us to reply to you:

• Information you send us when you contact us by email or telephone, namely your name, your contact details and the content of your message.
• Technical log data (in particular IP address, date and time, the page requested and browser type), recorded automatically by the web server when a request is served and needed to keep the service secure and stable.
• Visitor analytics data, only where you have consented to the “Analytics” category through the cookie control.

The site search runs entirely on your device; your search terms are not sent to us or to anyone else. Fonts and every other file on the site are served from our own server, with no requests to third parties.

We do not collect special categories of personal data, and we do not carry out automated decision-making or profiling.

Lawful basis for processing

Information you send us when you contact us is processed in order to take steps at your request prior to entering into a contract, and on the basis of our legitimate interest in responding to enquiries addressed to us (Article 6(1)(b) and (f) GDPR). Technical log data is processed on the basis of our legitimate interest in keeping the site secure and running properly (Article 6(1)(f) GDPR). Analytics, loading third-party content (such as the Google map) and any non-essential cookie rely solely on your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.

How long we keep it

Contact details and correspondence are kept for as long as needed to deal with your enquiry and any working relationship that follows from it, unless a longer period is required by tax or other statutory obligations, or is necessary for the establishment, exercise or defence of legal claims. Once that period has elapsed, the data is deleted or irreversibly anonymised. Technical log data is kept by the hosting provider for a limited period, solely for security and troubleshooting.

Recipients and processors

Access to your data is limited to our authorised personnel and to the providers that act as processors on our behalf: the website hosting provider, the email provider and, where you have consented, the analytics provider. Each of these is engaged under a written agreement meeting the requirements of Article 28 GDPR. We do not sell your data, and we do not pass it to third parties for their own marketing purposes.

Third-party content: Google map

On the contact page you can display a map of our location, provided by Google Ireland Limited. The map is not loaded unless you explicitly ask for it or have accepted the “Third-party content” category. Once it loads, Google receives your IP address and may set its own cookies; that processing is governed by Google’s privacy policy (policies.google.com/privacy), Google acting as an independent controller.

Transfers outside the EEA

Where any of the providers listed above processes data outside the European Economic Area, the transfer takes place on the basis of an adequacy decision of the European Commission or, in its absence, on the basis of the Standard Contractual Clauses together with any supplementary measures the particular transfer requires.

Your rights

Under the GDPR you have the right to obtain access to your personal data, to have inaccurate data corrected, to request erasure, to obtain restriction of processing, to receive your data in a portable format, and to object to processing carried out on the basis of legitimate interests. Where processing rests on consent, you may withdraw that consent at any time, without affecting the lawfulness of processing carried out beforehand.

Making a request or a complaint

To exercise any of these rights, please write to info@studysmart.gr. We will respond without undue delay and in any event within one month of receiving your request. If you believe your data has been handled unlawfully, you also have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifissias Avenue, Athens, www.dpa.gr).