Privacy Policy.

Last updated: 7 July 2026 · Effective immediately

This Privacy Policy explains what personal data Paris Works (referred to as "I", "me" or "we") collects when you visit parisworks.org, why we collect it, how we protect it, and the rights you have under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Greek Law 4624/2019.

1. Who is the data controller

The data controller for personal data processed through this website is:

• Paris Works — Website developer, sole trader, based in Athens, Greece.
• Contact for privacy matters: parisworks284@gmail.com

If a legal entity is later registered, the entity details will be published here as the formal controller.

2. What personal data we collect

a. Data you provide via the contact form

When you submit the contact form, you provide:

• Name — so I know who is writing;
• Email address — so I can reply;
• Project type — a dropdown you select from;
• Message — the content of what you send me.

Technically, the contact form opens your local email client (via mailto:) pre-filled with these fields; the data is only transmitted if you press Send in your own mail app. It is delivered to my inbox at parisworks284@gmail.com.

b. Data your browser automatically sends

Like any website, when your browser requests a page, the hosting provider automatically receives basic technical information (IP address, browser type, timestamp, referrer). This is used only to serve the site and detect abuse, and is processed by the hosting provider on my behalf as a data processor. See §6 below.

c. Local browser storage

To remember the choice you make in the cookie banner (so we don't ask you again on every visit), the site stores a single value in your browser's localStorage under the key cookie-consent. This is stored on your device only — it is never sent to me and it is not a cookie. You can delete it from your browser at any time. See the Cookie Policy for the full storage table.

3. Why we process it (purpose & legal basis)

• Contact form data — to respond to your enquiry and, if we agree to work together, to enter into a contract. Legal basis: consent when you submit the form (Article 6(1)(a) GDPR), and steps prior to entering into a contract at your request (Article 6(1)(b) GDPR).
• Technical logs — to keep the site online, secure and functional. Legal basis: legitimate interest (Article 6(1)(f) GDPR) in operating and defending the site.
• Cookie-banner preference in localStorage — to remember whether you have accepted or dismissed the banner, so we do not ask you again on every page-load. Legal basis: strict necessity for a service you have explicitly requested (Article 5(3) of the ePrivacy Directive as transposed by Greek Law 3471/2006).

4. How long we keep it

• Emails you send me — for as long as needed to handle our correspondence and any resulting engagement, and then archived for up to 24 months for accounting and legal reasons, or as long as required by Greek law. You can ask me to delete our correspondence sooner (see §8).
• Hosting logs — typically retained by the hosting provider for up to 30 days.
• Cookie-banner preference — stored in your browser for up to 12 months, or until you clear browser data.

5. Who we share it with

I do not sell, rent or trade your personal data. Personal data is shared only with:

• Email provider (Google — Gmail) — receives your email so I can read and reply to it. Google is bound by its own privacy terms and by EU Standard Contractual Clauses for any transfers outside the EEA.
• Hosting provider — Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA) automatically receives the technical request data described in §2(b) in order to serve the site. Vercel acts as my data processor under a Data Processing Agreement that includes Standard Contractual Clauses for transfers outside the EEA. See Vercel's privacy policy.
• Public authorities — only if I am legally compelled by a valid Greek or EU legal order.

6. Third-party services loaded by the site

• Google Fonts — the site loads typefaces (Geist, Geist Mono, Instrument Serif) from fonts.googleapis.com and fonts.gstatic.com. When your browser fetches the fonts, your IP address is transmitted to Google for the technical purpose of delivering the font files. Google acts as an independent controller for this transmission; see Google's privacy policy.

No analytics, no advertising, no social plug-ins, no fingerprinting, no session replay.

7. International transfers

Vercel (my hosting provider) and Google (Fonts and Gmail) may process data in the United States and in other jurisdictions outside the European Economic Area. Such transfers are protected by the EU–US Data Privacy Framework and, where applicable, by Standard Contractual Clauses approved by the European Commission, together with additional technical and organisational safeguards. You have the right to obtain a copy of the applicable safeguards by writing to me.

8. Your rights under the GDPR

You have the right to:

• Access the personal data I hold about you (Art. 15);
• Rectification of inaccurate data (Art. 16);
• Erasure — "right to be forgotten" (Art. 17);
• Restriction of processing (Art. 18);
• Data portability in a machine-readable format (Art. 20);
• Object to processing based on legitimate interest (Art. 21);
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3)).

To exercise any right, simply write to parisworks284@gmail.com. I will respond within one month, as required by the GDPR.

9. Right to lodge a complaint

If you believe your rights have been infringed, you can complain to the Greek supervisory authority:

• Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα)
• Kifissias Ave. 1–3, 115 23 Athens, Greece
• www.dpa.gr · +30 210 6475600

10. Children

This site is aimed at businesses and adults. I do not knowingly collect personal data from children under 15 (the age of digital consent in Greece under GDPR Article 8 as implemented by Law 4624/2019).

11. Security

The site is served over HTTPS with a Content Security Policy and standard security headers. My mailbox is protected by strong passwords and two-factor authentication. That said, no online service can be guaranteed 100% secure, and you send information to me at your own risk.

12. Changes to this policy

I may update this Privacy Policy from time to time. Any changes will be posted on this page, and the "Last updated" date at the top will be revised accordingly. Material changes affecting you will be highlighted at the top of the page.

13. Contact

Questions about this policy or your data? Write to parisworks284@gmail.com.