Privacy Policy

Last updated: 5 November 2026

This Privacy Policy explains how Edea collects and uses personal data when you visit edea.gr or contact us through the website, and what rights you have under the EU General Data Protection Regulation (GDPR) and Greek data protection law.

1. Who is responsible for your data

The data controller is:
Edea
53 Makedonias Str, Tavros, 17778 Athens, Greece
Email: info@edea.gr

For any question about this policy or your personal data, please contact us at info@edea.gr.

2. What data we collect and why

2.1 Contact form

When you use our contact form, we collect your full name, email address, phone number and the content of your message. We use this data only to answer your enquiry and, where relevant, to prepare an offer or discuss a possible collaboration.

  • Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
  • How it is handled: the form sends your message by email to our mailbox. Form submissions are not stored in the website’s database.
  • Retention: we keep your message for as long as needed to handle your enquiry and any follow-up, and in any case no longer than 2 years after our last contact, unless a longer period is required by law or you become a client.

2.2 Website statistics (Google Analytics 4)

If you give your consent in the cookie banner under “Statistics”, we use Google Analytics 4 to understand how visitors use our website so we can improve it. Without your consent, Google Analytics is not loaded at all.

  • Data processed: pages visited, time on site, referring website, device and browser type, approximate location (country/city), and an online identifier stored in the cookies _ga and _ga_*. Google Analytics 4 does not log or store IP addresses.
  • Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 4(5) of Greek Law 3471/2006). You can withdraw it at any time via the “Manage consent” button on the website.
  • Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
  • Retention: no longer than 14 months.

2.3 Google Maps

Our website shows a Google Maps map with our location. The map is loaded only if you allow “External content” in the cookie banner; otherwise a placeholder is shown. When the map loads, Google receives your IP address and may set its own cookies.

  • Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via “Manage consent”.
  • Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information: Google Privacy Policy.

2.4 Server log files

When you visit the website, our hosting provider automatically records technical information such as your IP address, date and time of the request, the page requested and your browser type. This is necessary to deliver the website and to keep it secure.

  • Legal basis: our legitimate interest in operating a secure and stable website (Art. 6(1)(f) GDPR).
  • Retention: log files are kept for a limited period and then deleted, unless needed to investigate a security incident.

2.5 Cookies

We use strictly necessary cookies, for example to remember your cookie choices. Statistics cookies and external content are used only with your consent. Full details are in our Cookie Policy.

2.6 Fonts

The fonts used on this website are hosted on our own server. No connection to Google Fonts servers is made when you visit the website.

3. Who receives your data

We do not sell your personal data. We share it only with service providers that help us run the website and our communications, and only as far as necessary:

  • our web hosting provider (servers located in the EU);
  • our email service provider, which delivers and stores messages sent through the contact form;
  • Google, only for Google Analytics and Google Maps and only if you have given consent.

These providers process data on our behalf under data processing agreements, or as independent controllers where applicable. We may also disclose data where required by law.

4. Transfers outside the EU

When you consent to Google Analytics or Google Maps, data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision. Google also uses the EU Standard Contractual Clauses.

5. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict the processing of your data;
  • receive your data in a portable format;
  • object to processing based on our legitimate interests;
  • withdraw your consent at any time, without affecting processing carried out before the withdrawal. For cookies, use the “Manage consent” button on the website.

To exercise your rights, email us at info@edea.gr. We will reply within one month.

6. Right to lodge a complaint

If you believe that we process your data unlawfully, you can lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifisias Ave, 115 23 Athens, Greece, www.dpa.gr.

7. Security

We use appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), regular software updates and backups.

8. Changes to this policy

We may update this Privacy Policy when our website or legal requirements change. The current version is always available on this page, with the date of the last update shown at the top.