Privacy & Cookie Policy

Identity of the controller

The data controller is Fotis Mytikas / FM Digital Services.

• Email: info@fmdigitalservices.gr
• Location: Nea Penteli, Attica, Greece

Personal data collected

The visible Name, Email, Selected service and Message fields are required because they are necessary to understand and answer your enquiry. Without them, the form cannot be submitted or a meaningful reply provided. The Indicative budget field is optional. The required checkbox confirms that you have been informed about the limited use of your information; it is not consent to marketing.

• Name — required
• Email — required
• Selected service — required
• Indicative budget — optional
• Message and project information — required
• Privacy-notice checkbox — required for submission, not consent to marketing
• The hidden form-name and language fields are sent automatically so the form can operate and be routed correctly. The bot-field is a honeypot and must remain empty.
• Technical information that may be processed by the hosting or form platform, such as IP address, submission time, request metadata and security or spam signals, where applicable

Purposes of processing

The information is not used for newsletters, advertising or unsolicited marketing.

• Replying to enquiries
• Preparing an indicative or final offer
• Discussing a potential project or working relationship
• Maintaining necessary security and protecting the form from spam or abuse

Legal basis

Replying to your request, preparing an offer and discussing a potential project rely on Article 6(1)(b) GDPR: taking steps at your request before a possible contract. Website security, spam prevention and ordinary management of business correspondence rely on Article 6(1)(f) GDPR and the legitimate interest in operating a secure and reliable contact channel. Where consent is requested for optional storage, it can be withdrawn at any time. No marketing consent is requested.

Automated decision-making and profiling

No automated decision-making or profiling takes place. Enquiries are not automatically accepted, rejected, scored or categorised, and no profiles are created for advertising or any other purpose.

Service providers and recipients

Providers process information only as needed to supply their respective services and under their own terms and data-protection policies.

• Netlify: website hosting and form-submission processing through Netlify Forms.
• Google (Gmail): the email service receiving form notifications and related correspondence. The Noto fonts are hosted locally by the website and are not requested from Google when you visit.

External Viber service and Google Search Console

If you select the Viber Business link, an external Rakuten Viber service opens. From that point, use of the service and any processing of information are governed by Viber’s Privacy Policy. The website does not load Viber content or scripts before you click.

The Google Search Console property is verified as a Domain property using a manually configured DNS TXT record through Papaki, and the sitemap is submitted to Search Console. DNS verification and sitemap submission do not install tracking scripts or cookies on visitors’ devices, and no Search Console JavaScript has been added to the website.

International transfers

Netlify and Google may process information outside the European Economic Area. Where an adequacy decision does not apply, the providers state that they use available legal safeguards such as standard contractual clauses or other applicable transfer frameworks. The exact mechanism depends on the provider, service and processing location; this policy does not guarantee that all processing takes place exclusively within the EEA.

Retention

Submissions that do not lead to a contract are reviewed and deleted no later than 12 months after the last substantive communication. Information may be retained longer only where required for a contract, legal obligation, or the establishment, exercise or defence of a legal claim.

Your rights

Subject to the conditions of the GDPR, you may exercise the following rights through the public contact email. If the issue is not resolved, you may lodge a complaint with the competent Greek supervisory authority.

• Access to your personal data
• Correction of inaccurate or incomplete data
• Deletion where applicable
• Restriction of processing
• Data portability where applicable
• Objection to processing based on legitimate interests
• Withdrawal of consent where processing relies on consent, without affecting prior lawful processing
• Complaint to the Hellenic Data Protection Authority

Contact for privacy requests

For an access, correction, deletion, restriction or objection request, or any other privacy question, contact the public email below. Only information necessary to verify identity and handle the request securely may be requested.