Web-WorksPrivacy Policy
How we handle your personal data when you visit our website, ask us for a quote or work with us. In plain language, as far as possible.
Who we are
The controller of your data is the company:
- Company name
- WebWorks96 ЕООД
- Trading name
- Web-Works
- info@web-works.gr
- Phone
- +30 697 350 0887
As a small business we have not appointed a Data Protection Officer (DPO), because one is not required for our activity. For anything about your data, contact info@web-works.gr.
When this policy applies
This policy covers:
- people who visit the web-works.gr website,
- people who contact us by form, phone or email,
- our prospective and existing clients, and their staff who contact us about a project.
It doesn’t cover the data we process on behalf of our clients, for example the orders of an eshop we build or host. There, the client is the controller and we act as processor, under the contract between us.
What data we collect
| When | Which data |
|---|---|
| Contact form | Name, email, purpose of contact, message and, if you fill them in, phone and your website address. |
| Quote form (offer pages) | Name, phone, email, a message if you write one, and which ad or campaign you came from (the Google Ads click ID and the link’s UTM parameters). |
| Phone and email | Your number or address and whatever you tell us about your project. |
| Working together | Contact persons’ details, billing details (company name, VAT number, tax office, address), correspondence, and access to accounts or systems you give us for the project. |
| Browsing the website | Technical data recorded automatically by the server: IP address, date and time, page, browser. |
| Only with your consent | Traffic statistics and ad measurement through Google Analytics, Google Ads and, on our offer pages, the Meta Pixel: identifying cookies, pages viewed, device type, approximate location. See the Cookie Policy. |
We don’t ask for sensitive data (e.g. health data), and we ask you not to include it in your messages.
Why we use it and on what legal basis
| Purpose | Legal basis (GDPR Article 6) |
|---|---|
| To reply to your request and send you a quote | Steps taken at your request before entering into a contract (para. 1(b)) |
| To deliver the project and support you | Performance of a contract (para. 1(b)) |
| Billing and accounting obligations | Compliance with a legal obligation, mainly tax law (para. 1(c)) |
| Website security, protection from spam and abuse | Legitimate interest in running the website securely (para. 1(f)) |
| Knowing which ads bring enquiries (visit source on the quote form) | Legitimate interest in measuring the performance of our ads (para. 1(f)). Measurements are sent to Google only if you have accepted advertising cookies |
| Traffic statistics and ad measurement with cookies | Consent (para. 1(a) and Article 5(3) of Directive 2002/58/EC), which you can withdraw at any time |
| Establishing or defending legal claims | Legitimate interest (para. 1(f)) |
We don’t send you marketing emails or newsletters unless you have asked for them. We don’t make decisions about you based solely on automated processing or profiling.
Who else has access
We don’t sell, rent or give your data to third parties for their own marketing. Only those who help us operate have access, under a contract that obliges them to protect it:
- the website’s hosting provider, with servers within the European Union, where form requests and server logs are stored,
- our email provider, through which we receive and reply to your messages,
- Google Ireland Ltd for Google Analytics and Google Ads, only if you have given consent,
- Meta Platforms Ireland Ltd for the Meta Pixel on our offer pages, only if you have accepted advertising cookies,
- Cloudflare, to protect the forms from spam (Cloudflare Turnstile): when you fill in a form, it checks technical browser details and your IP address to tell people from bots, without tracking cookies,
- our accountant, for billing details,
- public authorities, when the law requires it.
Transfers outside Europe
Google may also process data in the US. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision, and also uses standard contractual clauses. More in Google’s privacy policy undefined.
Meta may also process data in the US. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework. More in Meta’s privacy policy undefined.
The same applies to Cloudflare, Inc., which is also certified under the EU-U.S. Data Privacy Framework. More in Cloudflare’s privacy policy undefined.
How long we keep it
| Data | Period |
|---|---|
| Requests that didn’t lead to working together | Up to 12 months from the last contact, so we can pick up the conversation. Then deleted. |
| Project details and correspondence | For as long as we work together and up to 5 years after it ends, in case of legal claims. |
| Billing details | For as long as tax law requires. |
| Server logs | A few weeks, according to the hosting provider’s settings. |
| Google Analytics statistics | 14 months, then deleted automatically. |
| Your cookie choice | 6 months, then we ask again. |
How we protect it
The website runs only over an encrypted connection (HTTPS). Access to requests and client data is limited to the team members who need it, with individual passwords. We keep backups and update our systems regularly. No system is completely secure; if a breach affecting you occurs, we will inform the authority and, where required, you, as the law provides.
Client reviews on the website
We show reviews that have been published publicly on Google about our business, with the name as it appears there, the text and the date. Where a review was written in Greek, the English pages show our translation and say so. If you wrote a review and don’t want it shown on the website, write to us at info@web-works.gr and we will remove it.
Your rights
Under the General Data Protection Regulation (EU) 2016/679 you have the right:
- of access: to find out whether and what data of yours we hold, and get a copy,
- to rectification of inaccurate or incomplete data,
- to erasure, when there is no longer a reason or obligation to keep it,
- to restriction of processing, for example while a correction request is being examined,
- to portability: to receive the data you gave us in a common digital format,
- to object to processing based on legitimate interest,
- to withdraw consent at any time, without affecting the lawfulness of processing before then. For cookies, through “Cookie settings” at the bottom of every page.
Send us your request at info@web-works.gr. We reply free of charge and within one month at the latest. If needed, we may ask for details to confirm the request comes from you.
Right to complain
If you believe the processing of your data breaks the law, you can lodge a complaint with the data protection authority of the country where you live or work, or with the competent authority of the country where our company is established. We would appreciate it, though, if you wrote to us first, so we can try to resolve it.
Minors
Our services are aimed at businesses and professionals. We do not knowingly collect data from children under 15.
Changes to this policy
When the way we process data changes, we update this page and the date at the top. If the change is significant and affects you directly, we will also let you know in another way.
10Our social media pages
The links to LinkedIn, Instagram and Facebook take you to third-party websites. When you visit them, their own privacy policies apply. For the statistics of our pages on these platforms, responsibility may be shared with the platform provider.