Privacy Policy

The controller of your personal data is the administrator of www.pttl.gr.

• Contact email: [email protected]
• Headquarters: Thessaloniki, Greece
• GEMI: 042561106000

We collect data in the following cases:

• Contact form: name, email, subject, message, sender IP address.
• Article comments: name, email (not published), URL (optional), IP address, user-agent.
• Newsletter: email address (only if you explicitly subscribe).
• Google Analytics: usage and browsing data (such as pages, time on site, device type and approximate geographic area), only if you consent.
• Server logs: IP address, request time, browser type — for technical security reasons.

We use your data exclusively for:

• Responding to inquiries/messages via the contact form.
• Managing and displaying comments.
• Sending the newsletter (if subscribed).
• Statistical analysis of traffic and content improvement, only after consent.
• Security — preventing spam, abuse and attacks.
• Compliance with legal obligations.

Processing is based on:

• Consent (Article 6(1)(a) GDPR) — for Google Analytics and the newsletter.
• Legitimate interest (Article 6(1)(f) GDPR) — for security, server logs and spam prevention.
• Contract / pre-contractual relationship (Article 6(1)(b) GDPR) — for responding to form requests.
• Legal obligation (Article 6(1)(c) GDPR) — where required by Greek or European law.

The Website uses:

• Essential cookies — for core operation, security and storing your consent choice. No consent is required.
• Statistics cookies — Google Analytics, only after explicit acceptance.
• Security technologies — Cloudflare CDN and Turnstile anti-bot where needed.

You can change or withdraw your choice at any time from the “Cookies” button at the bottom right.

We do not sell your personal data. We work with the following processors:

• Google LLC — Google Analytics, only after consent. Google Privacy Policy
• Cloudflare Inc. — CDN, Turnstile bot-protection. Cloudflare Privacy Policy
• Hosting provider — Website data storage within the EU.

Data may be transferred outside the EEA (e.g. USA) through these services, under Standard Contractual Clauses (SCCs) and other compliance mechanisms.

We retain your data only as long as needed:

• Form messages: up to 24 months from receipt.
• Comments: while published on the Website.
• Newsletter: until you unsubscribe.
• Server logs: up to 6 months.
• Analytics: per Google Analytics setting (typically 14 months).

Under GDPR you have the following rights:

• Access — to know what data we hold about you.
• Rectification — to request correction of inaccurate data.
• Erasure ("right to be forgotten") — to request deletion.
• Restriction of processing — under conditions.
• Portability — to receive your data in a structured format.
• Objection — to processing based on legitimate interest.
• Withdrawal of consent — at any time, without affecting prior processing legality.

To exercise any right: [email protected]. We respond within 30 days.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

We apply technical and organizational measures to protect your data: HTTPS/TLS encryption, Cloudflare WAF, Turnstile anti-bot, regular backups, restricted database access. Nonetheless, no online transmission is 100% secure.

The Website is not directed at minors under 16 and we do not knowingly collect data from them. If you are a parent/guardian and discover such information has been provided, please contact us for deletion.

We may update this Privacy Policy. Significant changes will be announced on the Website. The last update date is shown at the top of the page.

For any matter related to this Privacy Policy: [email protected]