Data controller
The controller of personal data submitted through this website is GRADUS Ε.Ε., a Greek limited partnership, with registered office at 6 Stavropoulou Street, Athens 11252, Greece, Greek Tax ID 801499887 and General Commercial Registry (G.E.MI.) number 158042303000.
Personal data we collect
Through the contact form, we collect your full name, email address, optional telephone number, subject of interest and the content of your message. The required fields are necessary for us to receive and handle your enquiry.
To secure the form, technical information may also be processed, including your IP address, browser and device information, the date and time of the request and the result of the Cloudflare Turnstile check.
Please do not send passwords, tax documents, identity numbers or other sensitive personal data through the form.
Purpose of processing
We use the information to receive and respond to your enquiry, contact you, assess whether we may be able to assist you and protect the form against spam and automated submissions.
We do not use automated decision-making that produces legal effects or commercial profiling.
Legal basis
Depending on the nature of your enquiry, processing is based on steps taken at your request before entering into a contract or on our legitimate interests in responding to genuine enquiries and protecting the website against abuse. Selecting “I acknowledge” confirms that you have received this privacy information; it is not consent to marketing communications.
Retention period
We retain information only for as long as required to respond to and conclude the enquiry. The period is determined by the nature and status of the communication, whether an engagement follows, applicable professional or tax obligations and the need to establish, exercise or defend legal claims. Once those reasons no longer apply, the information is deleted or anonymised.
Recipients and service providers
Access is limited to people who need to handle your enquiry. The website uses OpenAI services for hosting, Cloudflare for DNS, security and Turnstile, Resend to deliver the message and Google to receive it in the business mailbox. Each provider receives only the information necessary to perform its service.
Some providers may process information outside the European Economic Area. Where required, transfers rely on recognised safeguards such as adequacy decisions or Standard Contractual Clauses. Resend states that email content and delivery metadata are stored in the United States and that it applies relevant safeguards to international transfers.
Cookies and technical storage
The website does not use audience analytics, advertising pixels or marketing cookies. Consequently, no cookie-consent banner is displayed.
Cloudflare Turnstile may use strictly necessary technical signals or device storage solely to protect the form and distinguish genuine users from automated submissions. It does not access the contents of the form fields. Prior consent is not required for strictly necessary cookies or equivalent technologies. If optional tools are introduced in the future, this policy and the visitor-choice mechanism will be updated before they are enabled.
Your rights
Subject to the conditions of applicable law, you may request access to, rectification or erasure of your personal data or restriction of processing, object to processing based on legitimate interests and, where applicable, request data portability.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority.
Security
We apply technical and organisational measures designed to protect your information, including encrypted connections, automated-submission checks, rate limiting and restricted access. No electronic transmission is completely secure, so the form should not be used to send sensitive documents or passwords.
Contact
For questions or to exercise a right relating to personal data, use our contact form, call +30 210 723 5757 or write to the company address stated above.
Last updated: 4 September 2026.