1. Who we are
Thallo is the data controller for the information described on this page. For anything about your data, write to privacy@thallotech.gr.
2. What this policy covers
This policy covers this website and the people who visit it or contact us through it. The websites and web apps we build for our customers each have their own privacy policy, which we prepare together with that customer; those policies describe how their sites handle their visitors' data.
3. What we collect and why
When you contact us
Your name, email address, the business or website you mention, and your message. They reach us as an email; this site's server keeps no copy. We use them to reply and to prepare a plan if you ask for one. Legal basis: taking steps at your request before a contract (Article 6(1)(b) GDPR). Kept for 12 months after our last exchange, or for the life of the project if you become a customer.
Spam protection (Cloudflare Turnstile)
On the pages with the contact form, Cloudflare Turnstile checks that a person, not a program, is sending it. It reads signals from your browser and device, including your IP address, and does not use cookies to track you. We use the check only to stop automated spam. Legal basis: our legitimate interest in protecting the form from abuse (Article 6(1)(f) GDPR).
Visitor analytics (Google Analytics 4)
Only if you accept analytics cookies, this site uses Google Analytics 4 to count visits. It records the pages you view, the site you came from, your browser, device type, screen size and language, and an approximate location (country and city) that Google derives from your IP address. It also records how far down each page you scroll (a quarter, half, three quarters, all of it), clicks on links to other sites, file downloads, video plays, the words you search for on this site, and how far you get with a contact form: when you start typing, each question you answer, and whether you send it or leave without sending. It records only which field you were on, never what you type. Google Analytics 4 does not store IP addresses. No advertising features are on: your data is not used or shared for advertising.
We use these statistics to learn which pages are useful and to improve the site. Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time under Cookie settings. Without it, nothing from Google is loaded.
Technical logs
Cloudflare, which hosts this site, handles every request to it, and our server keeps short technical logs: the page requested, the time, the result and, if something fails, the error. These logs can include your IP address and browser. We use them to keep the site secure and working. Legal basis: our legitimate interest in running a safe service (Article 6(1)(f) GDPR). Kept for 7 days at most.
6. How long we keep it
- Contact messages12 months after the last exchange
- Analytics data2 months; reports keep only totals
- Technical logs7 days at most
- Customer records (if you become a customer)Life of the contract, then as tax law requires
7. Your rights
Under the GDPR you can ask us for a copy of the data we hold about you, have it corrected or deleted, restrict or object to how we use it, and receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Write to privacy@thallotech.gr and we will answer within one month. You can also complain to the Hellenic Data Protection Authority at dpa.gr.
8. Changes to this policy
If we change how we handle data, we update this page and the date at the top. For a significant change we also say so on the home page for a while. We keep earlier versions and can send them on request.
9. Contact
Thallo
privacy@thallotech.gr