Privacy policy
Last updated: [OPERATOR: date]
This text is a template prepared by the website builder and is not legal advice. Have it reviewed by a qualified lawyer before relying on it.
This policy explains what personal data we collect when you use enahub.gr, why we collect it and what rights you have. "We" means ena Development Consultants, the company that runs the #enahub venue in Xanthi.
Who is responsible for your data
The data controller is ena Σύμβουλοι Ανάπτυξης (ena Development Consultants) [OPERATOR: legal form, e.g. S.A. or P.C.], [OPERATOR: street address and postcode], Xanthi, Greece, VAT number [OPERATOR: VAT number (ΑΦΜ) and tax office].
- Email: [email protected]
- Phone: +30 25410 83370
- Data protection officer: [OPERATOR: name and contact details, or delete this line if none has been appointed]
What we collect
When you send a booking request, the form asks for:
- your name, email address and phone number (required)
- the space you are interested in (required)
- your company, preferred date, number of guests, any extra services (buffet, badges, registration, secretarial or technical support) and your message (optional)
We also record when the request arrived and which language version of the site you used. Please don't put sensitive information, such as health details, in the message field. We don't need it.
To block spam, the server keeps your IP address and a count of your requests in memory for 10 minutes. It doesn't write them to a file. Our hosting provider may keep its own server logs, which include IP addresses [OPERATOR: confirm what your host logs and for how long].
If you accept analytics cookies, Google Analytics records how you use the site: pages viewed, device and browser type, and approximate location based on your IP address. Without your consent it doesn't load at all. See our Cookie policy.
Why we use it and on what legal basis
| Purpose | Legal basis (GDPR Art. 6(1)) |
|---|---|
| Replying to your request, sending a quote and arranging the event | Steps you asked us to take before entering into a contract (point b) |
| Keeping booking records and invoices once an event is confirmed | Legal obligation under Greek tax and accounting law (point c) |
| Protecting the form from spam and abuse | Our legitimate interest in keeping the site secure (point f) |
| Visitor statistics with Google Analytics | Your consent (point a), which you can withdraw at any time |
We don't make automated decisions about you or build profiles.
Who receives your data
Booking requests are read by the ena team at [email protected]. We don't sell personal data. We use the providers below [OPERATOR: confirm a data processing agreement under GDPR Art. 28 is in place with each]:
- Website hosting, where booking requests are stored: [OPERATOR: provider, server country, link to its privacy policy]
- Email delivery, which forwards each request to our inbox: [OPERATOR: email/SMTP provider and link to its privacy policy]
- Google Ireland Limited for Google Analytics, only with your consent (Google privacy policy)
The home page embeds a Google map. When it loads, Google receives your IP address and may set its own cookies. Google processes that data as a separate controller under its own policy.
We may also disclose data to public authorities when the law requires it.
Transfers outside the EU
Google may process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission recognised as adequate in July 2023, and also relies on the EU Standard Contractual Clauses. [OPERATOR: if your hosting or email provider stores data outside the EU/EEA, name the country and the safeguard used.]
How long we keep it
- Booking requests that don't lead to an event: [OPERATOR: period, e.g. 12 months after our last contact], then deleted.
- Booking records and invoices for events that went ahead: as long as Greek tax law requires [OPERATOR: confirm the period with your accountant].
- Spam-protection counters: 10 minutes, in memory only.
- Your cookie choice: 12 months.
- Google Analytics data: [OPERATOR: retention period set in GA4, 2 or 14 months].
Your rights
Under the GDPR and Greek Law 4624/2019 you can:
- ask for access to your data and a copy of it (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data erased (Art. 17)
- ask us to restrict processing (Art. 18)
- receive your data in a machine-readable format (portability, Art. 20)
- object to processing based on our legitimate interest (Art. 21)
- withdraw consent at any time, without affecting processing that took place before (Art. 7(3))
To use any of these rights, email [email protected]. We reply within one month (GDPR Art. 12(3)). If a request is complex, or there are many, we can extend that by two months and will tell you why. We may first ask you to confirm your identity.
Complaints
If you think we have mishandled your data, you can write to us first so we can fix it. You also have the right to complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), 1-3 Kifisias Avenue, 115 23 Athens, www.dpa.gr, or to the supervisory authority in the EU country where you live or work.
Children
The site and our services are meant for adults and businesses. We don't knowingly collect data from children under 15, the age of digital consent in Greece (Article 21 of Law 4624/2019). If you believe a child has sent us a request, contact us and we will delete it.
Changes to this policy
When the way we handle data changes, we update this page and the date at the top.