Privacy and Personal Data Protection Policy

Website psillakisdocs.com · Last updated: 13 September 2026

1. Data Controllers

The controllers of the data collected through this website are Stavros Psillakis and Konstantinos Psillakis, acting as natural persons.

• Email: stavrospsill@gmail.com

No Data Protection Officer (DPO) has been appointed, as the conditions of Article 37 of Regulation (EU) 2016/679 are not met. For any matter relating to your personal data, you may contact us directly using the details above.

2. Subject matter and scope

This policy describes what personal data is collected through the website psillakisdocs.com, for what purposes, on what legal basis, with whom it is shared, how long it is retained and what rights you have. It is governed by the General Data Protection Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019 and Greek Law 3471/2006, as amended.

The website operates as a personal portfolio of work and an informational page. No transactions take place, no payment data is collected, and no automated decision-making or profiling within the meaning of Article 22 GDPR is carried out.

3. What data we collect

3.1 Newsletter subscription

When you subscribe to the newsletter through the form in the website footer, we collect:

• the email address you provide,
• the date and time of your subscription and of its confirmation,
• the IP address from which the subscription was submitted.

The last two items are kept solely as proof of your consent, in accordance with Article 7(1) GDPR. Completing the form is entirely optional, and not subscribing in no way limits your access to the website's content.

Subscription is completed through double opt-in: after submitting the form, you receive a message with a confirmation link, and your address is added to the list only once you click it.

3.2 Data collected automatically while browsing

The website uses the Google Analytics service for statistical analysis of website traffic. The service is activated only if you give your consent via the relevant pop-up banner. The following is collected, in pseudonymised form:

• a unique device or browser identifier,
• truncated IP address and approximate geographic location (country, city),
• device type, operating system, browser and language,
• pages visited, time spent on them and navigation path,
• the website or search from which the visit originated.

This data is used in aggregate form and does not allow you to be identified as a specific individual.

3.3 Embedded audiovisual content

Film pages embed videos from the YouTube (Google Ireland Limited) and Vimeo (Vimeo.com, Inc.) platforms. When a video is played, these platforms receive your IP address and may set their own cookies or link the viewing to your account if you are logged in. Embedded content is loaded only with your consent. The platforms act as independent controllers for this data, and their own privacy policies apply.

3.4 Web fonts

The website uses fonts from the Google Fonts service. Since the fonts are loaded from Google servers, your IP address is transmitted to the company when the page loads.

3.5 Server log files

For technical and security reasons, the hosting provider keeps log files that include the IP address, date and time of the request, the page requested and the browser type. This processing is necessary for the operation and security of the website.

4. Purposes, legal bases and retention periods

5. Cookies and similar technologies

Cookies are small text files stored on your device. With the exception of strictly necessary cookies, all other cookies are placed only after you give prior, explicit consent via the pop-up banner shown on your first visit.

You may at any time withdraw or change your consent via the cookie settings link in the website footer, and you may also delete or block cookies through your browser settings. Rejecting non-essential cookies does not affect your access to the content.

6. Recipients of the data

Your data is not sold, rented or exchanged with third parties for commercial purposes. It is shared exclusively with the following providers, who act as processors on our behalf or, where indicated, as independent controllers:

• Lovable AB (Sweden), the website development and hosting platform.
• Google Ireland Limited / Google LLC, providing Google Workspace and Google Sheets (used to store the mailing list), Google Analytics, Google Fonts and YouTube.
• Vimeo.com, Inc. (USA), video hosting and playback, as an independent controller.
• Competent public authorities, where required by law or by court order.

Access to the newsletter mailing list is restricted to the controllers and, where necessary, to third-party partners who are bound by a duty of confidentiality.

7. Transfers of data outside the European Economic Area

Some of the above providers are established in, or maintain infrastructure in, the United States. In such cases, the transfer is based on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (Article 45 GDPR) for providers certified under it or, alternatively, on the European Commission's Standard Contractual Clauses (Article 46(2)(c) GDPR), together with supplementary technical and organisational measures.

8. Your rights

As a data subject, you have the following rights under the GDPR:

• Access (Article 15): to find out what data we hold about you and to receive a copy.
• Rectification (Article 16): to request the correction of inaccurate data or the completion of incomplete data.
• Erasure (Article 17): to request the deletion of your data, where one of the applicable conditions is met.
• Restriction of processing (Article 18).
• Portability (Article 20): to receive your data in a structured, commonly used and machine-readable format.
• Objection (Article 21) to processing based on legitimate interest.
• Withdrawal of consent (Article 7(3)) at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Specifically for the newsletter, you can unsubscribe immediately via the unsubscribe link included at the end of every message, without giving any reason and at no cost.

Requests should be sent to the contact details in Section 1 and will be answered without undue delay and within one month of receipt. This period may be extended by two further months where necessary, taking into account the complexity and number of requests, in which case you will be informed (Article 12(3) GDPR). We may ask for additional information to confirm your identity.

Right to lodge a complaint

If you believe your rights have been infringed, you have the right to lodge a complaint with the competent supervisory authority:

9. Data security

Appropriate technical and organisational measures are in place to protect your data against accidental or unlawful destruction, loss, alteration or unauthorised access. These include encryption of communications via the HTTPS protocol, restricting access to records to strictly necessary persons only, and the use of strong credentials with two-factor authentication. No method of transmission or storage is completely secure. In the event of a breach likely to result in a high risk to your rights, you will be informed in accordance with Articles 33 and 34 GDPR.

10. Minors

The website is not directed at minors and does not knowingly collect data from persons under fifteen (15) years of age, the threshold set by Article 21 of Greek Law 4624/2019 for consent to information society services. If it is found that such data has been collected without the consent of the holder of parental responsibility, it will be deleted immediately.

11. Links to third-party websites

The website contains links to third-party websites, such as festivals, streaming platforms and media outlets. This policy does not cover those websites, and the controllers are not responsible for their practices. We recommend that you read their respective privacy policies.

12. Changes to this policy

This policy may be updated to reflect changes in the operation of the website or in the legal framework. Each new version is posted at the same address, with an updated date at the top.

In the event of material changes concerning consent-based processing, your consent will be requested again.

13. Contact

For any question regarding this policy or to exercise your rights, contact konstantinopsill@gmail.com