Privacy policy

Who is responsible

The controller responsible for processing personal data on this website is:

ntagks, a sole proprietorship registered in Greece (registered name: Alexandros Ntagkonikos)
Pavlou Mela 39, Triadi, 57001 Thermi, Thessaloniki, Greece
Email: hello@ntagks.com

We are not required to appoint a data protection officer and have not done so.

When you visit this website

Our hosting provider, Vercel, automatically processes the technical data your browser sends with every request: your IP address, the date and time, the page requested, the referring page, and your browser and operating system. This is necessary to deliver the website and to keep it secure, for example to detect and block abuse. Vercel keeps these logs only for a short period.

Legal basis: Article 6(1)(f) GDPR, our legitimate interest in a secure, working website.

Analytics without cookies

We use Vercel Web Analytics to understand how our website is used, for example which pages are visited and how visitors find us. It does not use cookies and does not follow you across other websites. Instead of an identifier stored on your device, visits are counted using a hash created from the incoming request, which is discarded automatically after 24 hours.

For each page view, Vercel records the time, the page address, the referring website, your approximate location (country, region and city), your browser, operating system and device type. We only see aggregated statistics and cannot identify individual visitors.

Legal basis: Article 6(1)(f) GDPR, our legitimate interest in improving our website.

When you contact us

If you use the contact form or email us, we process the details you give us (your name, email address, company if provided, and your message) to answer your enquiry and, where relevant, to prepare a proposal.

Messages sent through the contact form are delivered to our inbox by the email service Resend, which keeps delivery logs, including message content, for 30 days.

We keep your enquiry for as long as we need it to handle your request and any business relationship that follows. If no business relationship follows, we delete it no later than 24 months after our last contact, unless the law requires us to keep it longer.

Legal basis: Article 6(1)(b) GDPR, steps taken at your request before entering into a contract, and Article 6(1)(f) GDPR, our legitimate interest in answering the enquiries we receive.

Cookies and your device

This website does not use cookies, and it does not store or read information on your device beyond what is technically necessary to display it. That is why you do not see a cookie banner.

The one exception is a choice you make yourself: if you switch to the dark theme, your browser remembers it in its local storage so the site stays dark on your next visit. It stays on your device, is never sent to us, and is removed when you switch back to the light theme or clear your browser’s data for this site.

Service providers and transfers outside the EU

These providers process personal data on our behalf, under data processing terms as required by Article 28 GDPR:

• Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States: hosting, content delivery and web analytics.
• Resend, United States: delivery of contact form messages.
• The provider that hosts our email inbox, for messages we receive.

Vercel and Resend are based in the United States. Transfers to them rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, under which both are certified, and in addition on the European Commission’s Standard Contractual Clauses (Article 46(2)(c) GDPR). We do not sell personal data or share it for advertising.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Article 15);
• have inaccurate data corrected (Article 16);
• have your data erased (Article 17);
• restrict how we process it (Article 18);
• receive your data in a portable format (Article 20);
• object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Article 21).

To exercise any of these rights, email us at hello@ntagks.com. We will respond within one month.

You also have the right to lodge a complaint with a supervisory authority. In Greece this is the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifisias 1–3, 115 23 Athens, www.dpa.gr.

Automated decisions and security

We do not use automated decision-making or profiling. This website is served exclusively over encrypted HTTPS connections.

Changes to this policy

We update this policy when our website or the law changes. The date at the top shows when it was last revised.