Privacy policy

This policy explains what personal data we collect when you visit thedatanest.gr, fill in the contact form or the Data Readiness Scorecard, why we collect it, and what rights you have under the EU General Data Protection Regulation 2016/679 (GDPR).

1. Data controller

The Datanest
16 Massalias St, Kolonaki, 10680 Athens, Greece
Email: info@thedatanest.gr · Phone: +30 210 3635182

2. What data we collect

When	What data	Why	Legal basis
Contact form	Full name, email, hotel or company, message	To respond to your request	Steps prior to a contract, at your request (Art. 6(1)(b))
Data Readiness Scorecard	Name, email, your answers, your score and category breakdown	To send you your results and, if you wish, discuss them with you	Steps prior to a contract, at your request (Art. 6(1)(b))
Email or phone contact	Whatever details you give us	To respond and organise our work together	Legitimate interest (Art. 6(1)(f))
Visiting the site	IP address, browser type, date and time, page requested (server logs)	To run and secure the site	Legitimate interest (Art. 6(1)(f))

We do not ask for or process special categories of data. The site is not directed at children.

3. Cookies and analytics

thedatanest.gr currently does not use cookies, analytics or advertising tools. If we add an analytics tool in the future, we will ask for your consent first and update this policy.

4. Who we share data with

We do not sell your data or share it with third parties for their own purposes. The following providers process data on our behalf, as processors:

• HubSpot (CRM): stores details from the contact form and the scorecard. We use HubSpot’s European data centre.
• Netlify (site hosting): processes server logs.

Where a provider may access data from outside the EEA, the transfer is covered by appropriate safeguards, such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

We may also disclose data where required by law or by a decision of a competent authority.

5. How long we keep data

• Contact form and scorecard details: for as long as needed to respond and to consider a possible collaboration. When they are no longer needed, we delete them. You can ask us to delete them at any time.
• Server logs: for the period set by the hosting provider.

6. Your rights

You have the right to:

• access your data
• correct inaccurate or incomplete data
• erasure
• restrict processing
• data portability
• object to processing based on legitimate interest

To exercise any of these rights, email info@thedatanest.gr. We will respond within one month.

If you believe the processing breaches the GDPR, you can lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

7. Security

We apply technical and organisational measures to protect your data. The site is served only over an encrypted connection (HTTPS). No system is completely secure, but we limit access to data to those who need it.

8. Changes

If the way we process data changes, we will update this page and the date at the top.