Privacy policy

Last updated:

Who I am

The data controller for gtsif.com is me, George Tsiftsis, as an individual. For anything about your data, write to me at [email protected].

What data I collect

  • Usage data (only if you accept analytics): which pages you visit, which buttons you press, device and browser type, and a random identifier stored in a cookie. Your IP address is not stored.
  • Booking data: if you book a call through Calendly, your name, email and anything else you enter in the booking form.
  • Correspondence: if you email me, the message and your address.
  • Technical data: the hosting provider (Vercel) briefly logs the IP address and request of each visit, for security and operation.

Why, and on what legal basis

  • Analytics: to understand what gets read and improve the site. Basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • Bookings and email: to reply and arrange the meeting. Basis: steps taken at your request before a possible engagement (Art. 6(1)(b)).
  • Hosting and security: to keep the site running and protected from abusive traffic. Basis: legitimate interest (Art. 6(1)(f)).

Who it is shared with

I do not sell or give your data to anyone. It is processed only by the providers the site needs in order to work:

Where data is transferred outside the EU (Vercel and Calendly are US-based), this relies on the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses.

How long I keep it

  • Analytics data: up to 24 months.
  • Email and booking data: as long as our conversation or engagement needs it, and no longer than 3 years after our last contact.
  • Hosting logs: for the short period set by the provider.

Cookies

The cookies this site uses, and how to change your choices, are described in the cookie policy: https://gtsif.com/en/cookies

Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise any of them, write to me at [email protected]. I will reply within one month.

If you believe your rights are being infringed, you can lodge a complaint with the Hellenic Data Protection Authority: https://www.dpa.gr, or with the supervisory authority where you live.

Changes

If anything material changes, I will update this page and the date at its top. If the change concerns cookies, you will be asked for your consent again.