Privacy Policy

1. Who we are (Data Controller)

IN THE BRAND L.P., Fokilidou 8, Kolonaki, 10673 Athens, Greece. VAT No. (Α.Φ.Μ.) 803324573, G.E.MI. No. 194606303000. Email for privacy matters: [email protected]

2. What data we collect

When you use our contact form, we collect: full name, company, role (optional), work email, and the information you choose to share about your enquiry (what needs to move forward, what is blocking progress, desired outcome, target timeline). When you visit our website, we may collect technical data (such as IP address, browser type and pages visited) through essential cookies and, only with your consent, analytics cookies. Please do not include sensitive personal data in your message.

3. Why we use your data and legal basis

• —To respond to your enquiry and take steps before a possible contract (Art. 6(1)(b) GDPR) and on the basis of our legitimate interest in responding to business communications (Art. 6(1)(f) GDPR).
• —To send you updates about our work, only if you have opted in (Art. 6(1)(a) GDPR). You can withdraw your consent at any time.
• —To operate and secure our website (Art. 6(1)(f) GDPR).
• —To measure website usage through analytics cookies, only with your consent (Art. 6(1)(a) GDPR).
• —To comply with legal obligations (Art. 6(1)(c) GDPR).

4. Who receives your data

We do not sell or rent your personal data. We share data only with service providers who process it on our behalf under data processing agreements, namely our website and hosting provider (GoDaddy), our content delivery and security provider (Cloudflare) and, only if you consent to analytics cookies, Google (Google Analytics). We may also share data with authorities where required by law.

5. International transfers

Some of our providers may process data outside the European Economic Area, including in the United States. In such cases, transfers are based on the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

6. How long we keep your data

Enquiry data is kept for up to 24 months from our last communication, unless a business relationship follows, in which case it is kept for as long as required by law. Marketing data is kept until you withdraw your consent.

7. Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting the lawfulness of prior processing. To exercise your rights, email [email protected]. We will reply within one month. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr), Kifisias 1-3, 11523 Athens.

8. Cookies

For information on cookies, please see our Cookie Policy.

9. Changes to this policy

We may update this policy from time to time. The latest version is always available on this page.