Privacy Policy
Last updated: 17 September 2026
Who is responsible
The data controller is Giorgos Grispos, trading as Primecut, Anagnostou Mantaka 92, Chania 731 36, Greece. For anything concerning your data, write to [email protected].
What data we collect
What you give us
When you fill in the contact form you give us a name and an email address, and optionally a phone number, a company, the kind of service you are interested in, an indicative budget and your message. When you book a call, you give a name, an email address and the slot you picked.
What is collected automatically
Browsing data through Google Analytics: which pages you viewed, where you came from, device and browser type, approximate location. Your IP address is anonymised by the service and is not stored in full.
The server keeps technical logs for security and for keeping the site running properly.
Why we process it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your message and discussing possible work together | Steps prior to entering a contract, Article 6(1)(b) GDPR |
| Delivering work we have agreed | Performance of a contract, Article 6(1)(b) GDPR |
| Traffic statistics and improving the site | Consent, Article 6(1)(a) GDPR |
| Site security and preventing abuse | Legitimate interest, Article 6(1)(f) GDPR |
| Meeting tax and accounting obligations | Legal obligation, Article 6(1)(c) GDPR |
Who else sees it
We do not sell data and we do not hand it to third parties for their own use. The following process it on our behalf, or because their service is embedded here:
- Hetzner Online GmbH, Germany. Hosting for the site and for our automations. The data stays inside the European Union.
- Google Ireland Limited. Google Analytics and Google Tag Manager for statistics, and an embedded Google Maps view on the contact page.
- Cal.com. The platform you book a call through.
The contact form sends your message to an automation running on our own server in Germany, not to a third party service.
Transfers outside the European Union
Google and Cal.com may process data on servers in the United States. That happens under the EU to US Data Privacy Framework and the European Commission's standard contractual clauses.
How long we keep it
- Form messages that did not lead to work together: two years.
- Client and project records: for the length of the engagement and five years after.
- Invoices and accounting records: ten years, as tax law requires.
- Google Analytics statistics: fourteen months.
- Your cookie choice: one year, stored locally on your own device.
Your rights
At any time you can ask for:
- Access to the data we hold about you.
- Correction of anything inaccurate.
- Erasure, where there is no reason for us to keep it.
- Restriction of processing.
- Portability, meaning a copy in a machine readable format.
- Objection to processing that rests on legitimate interest.
- Withdrawal of your consent, without affecting what was done before you withdrew it.
Write to [email protected] and we answer within one month. If you believe we have handled your data badly, you can complain to the Hellenic Data Protection Authority, dpa.gr, Kifisias 1 to 3, Athens 115 23.
Cookies
Which cookies are used, what each one does and how to change your mind are all set out in the Cookie Policy.
Security
The site is served over an encrypted connection only. Server access uses keys rather than passwords, and your contact details are seen only by whoever needs them to reply.
Changes to this text
If something material changes, the date at the top changes with it. It is worth a look every now and then.
Primecut · Chania, Crete · primecut.gr