endeel
endeel

Privacy Policy

I. Information on the Collection of Personal Data

1. Privacy at a Glance

This policy outlines how we handle personal data on ks-webdevelopment.com. Personal data is all data that can be related to you personally, e.g., name, address, email addresses, user behavior.


2. Data Controller

The controller according to Art. 4 (7) GDPR is
Stoffler Kay Eugen (KS Web Development),
Address: Glymata 0, 72100 Agios Nikolaos, Lasithi, Griechenland,
Telephone: +30 699 534 5213,
Email: info@ks-webdevelopment.com.

II. Data Collection on Our Website

1. Hosting & Server Log Files

Our website is hosted by Pointer (Pointer.gr). The host automatically collects and stores information in "server log files" (IP address, browser type, referrer URL, time of request). This is technically necessary for the security and stability of the website (Art. 6 (1)(f) GDPR).


2. SSL/TLS Encryption

For security reasons, this site uses SSL/TLS encryption. Data you transmit via our forms is encrypted and cannot be read by third parties.


3. Data Collection via Forms & Client Checkout

We utilize forms and a client checkout system on our website:


Data collected:

  • For general inquiries/quotes: Name, email address, phone number, and project-specific details.
  • For account creation and subscriptions: At checkout, we collect your name, email address, username, and password to set up your account on our site. If you are redirected to an offsite payment gateway to complete your payment, we may store this information in a temporary session variable to setup your account when you return to our site.
  • For billing and security verification: At checkout, we may also collect your billing address and phone number to confirm your credit card. The billing address and phone number are saved by our site to prepopulate the checkout form for future purchases and so we can get in touch with you if needed to discuss your order.
  • For payment processing: At checkout, we may collect your credit card number, expiration date, and security code. This information is passed directly to our payment gateway to process your purchase. The last 4 digits of your credit card number and the expiration date are saved by our site to use for reference and to send you an email if your credit card will expire before the next recurring payment.
Legal Basis: Processing is necessary for pre-contractual measures or the performance of a contract to which you are a party (Art. 6(1)(b) GDPR).


4. Temporary Storage, Email Transmission & Operational Logs

When you submit data to our site, it is transmitted using secure encryption.

  • Email Delivery: The data is forwarded to us as an email.
  • Database Backup: To ensure no inquiry is lost due to potential server-side email failures, general form data is temporarily stored in the web server's database and deleted as soon as we successfully receive the request via email (usually within 24 hours).
  • Transactional Email Logs: We maintain internal system logs of transactional and operational emails sent to you for support purposes. These logs include the email content, recipient address, subject line, and delivery status. These entries are automatically purged from our database after 90 days.


5. Cookies & User Tracking

When you are logged into an active account on our site, we use cookies to track some of your activity - including logins, visits, and page views - to maintain your session, manage client access levels, and ensure functional site operations.


6. Disclosure of Data to Third Parties

We do not transfer your personal data to third parties for purposes other than those listed below. We only share your data if:

  • you have given explicit consent (Art. 6 (1)(a) GDPR),
  • it is necessary for the performance of a contract with you (Art. 6 (1)(b) GDPR) - such as securely transferring encrypted payment information to our payment gateway to process transactions,
  • it is required due to a legal obligation.

III. Your Rights

You have the right to access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object to the processing of your personal data.
Specific Erasure Provision: If you request the deletion of your personal data under your Right to be Forgotten, all data including account parameters and transactional email log entries associated with your account will be permanently and securely removed.