Privacy Policy

1. Who is responsible for your data

This policy covers use of the website and communication through its available forms. The data controller is the operator of the website. This text is intentionally general and does not list a company name, address, tax details or registration information.

For privacy matters and to exercise your rights, use the contact page and include “Personal data” in the subject.

2. Communication and project enquiries

When you contact us, we collect your name, email, selected service, message and, if supplied, your business name and additional project details. These may include your phone number, current situation, goals, audience, features, integrations, indicative budget, timeframe and examples. When arranging an appointment, you may also provide a preferred date and time.

We use these details to understand your enquiry, respond, prepare a quote and organise related communication. Where you ask us to take steps before a possible contract with you, the legal basis is Article 6(1)(b) GDPR. For general business correspondence and communication with business representatives, the basis is our legitimate interest in responding to enquiries and organising communication under Article 6(1)(f).

Fields marked with an asterisk are needed to process the relevant form. If the required information is not provided, the form cannot be submitted. The other fields are optional. You can also contact us by email.

Contact and project enquiries are recorded in the website's management system together with the submission time, processing status and necessary internal notes. When email delivery is enabled, notifications are sent to TechCover and a confirmation to the sender. Submitting an enquiry does not subscribe you to a newsletter.

3. Employment and collaboration applications

The application form collects your full name, email, area, type of interest, professional field, message and CV. Your phone number, portfolio link and availability are supplied at your discretion. Your CV may contain your education, work experience and other information you choose to share.

The purpose is to assess the specific application and communicate about a possible employment or professional relationship. The basis is taking pre-contractual steps at your request under Article 6(1)(b) GDPR. The form does not request consent to retain your details in a separate pool of candidates for unrelated future roles.

The application and CV are sent to TechCover by email. The CV is not stored as a permanent file in the project form database. Please do not include health information, political or religious beliefs, identity document numbers or other information unnecessary for the assessment.

4. Technical data and security

To handle network requests, the server receives the IP address, connection time, requested URL and technical browser information. Server logs may contain such details for operation, troubleshooting and protection against abuse.

The application uses temporary pseudonymised rate-limiting identifiers derived from the IP address using a security key, the purpose of the check and a time window. Records expire and are cleared when a subsequent check runs. They are not permanent visitor identifiers. Pseudonymisation is not the same as full anonymisation.

The legal basis for necessary security measures is the legitimate interest in protecting the service and data under Article 6(1)(f) GDPR. Access to enquiry details is restricted to the administration area. No technical measure can eliminate every risk.

5. Optional visitor statistics

The website uses its own aggregate measurement mechanism. It stores page-view counts by day and page, a broad device category and a source category such as direct visit, search or social network. This mechanism does not use Google Analytics or an advertising pixel.

When a measurement is sent, the application receives the page path and the referrer address permitted by the browser. It uses the referring domain only to classify the source. The statistics table does not store the full referrer, IP address, email, unique visitor ID or an individual's browsing history. Communication with the server still includes technical data and may be subject to the logs described above.

The mechanism is enabled only after you select “Accept statistics” in the popup. Your choice is stored locally in the browser so you are not asked on every visit, and you can change it at any time using the persistent “Cookie settings” button. Refusal does not restrict use of the website. No measurement is sent when the browser reports Do Not Track with a value of 1.

6. Cookies, local storage and external services

The public website has no advertising cookie mechanism. Access by an authorised administrator uses the necessary session cookie techcover_admin, restricted to the administration path. It supports login and session protection and is a session cookie whose duration is also affected by browser settings.

Fonts are loaded from Google Fonts through fonts.googleapis.com and fonts.gstatic.com. During loading, the browser connects to Google and sends the IP address and technical request details. Google provides privacy information for its font service. This external connection is separate from TechCover's aggregate statistics.

Your cookie preference is stored in localStorage under the key techcover_cookie_preferences and contains only your choice about statistics and the time it was updated. Strictly necessary technical mechanisms operate without consent; optional mechanisms are enabled only after a positive choice. Continuing to browse is not considered consent.

7. Data recipients and transfers

Access is available to authorised TechCover personnel handling enquiries, applications and technical support, only to the extent necessary for their role. Hosting, email and technical maintenance providers may process data to operate those services. Competent authorities or professional advisers may receive details where there is a legal obligation or a need to establish, exercise or defend legal claims.

The processing location and any access from countries outside the European Economic Area depend on the provider and service contract. Where an international transfer is necessary, a lawful mechanism such as an adequacy decision or appropriate safeguards is used. You can request information about recipient categories and applicable safeguards through the contact page.

8. How long data is retained

The duration depends on the purpose, progress of communication and any legal obligations. The following criteria also cover related emails, attachments, copies and internal notes:

• Enquiries and quotes: while assessment, a proposal or related communication is ongoing. If a contract is concluded, the necessary information becomes part of the client file. If an enquiry is closed without a collaboration, retention is reviewed and information no longer needed is deleted.
• Applications: for assessing the specific application and completing related communication. Further retention for different future roles requires separate information and an appropriate legal basis.
• Contractual or accounting records: for the applicable statutory periods and, where necessary, pending claims. These periods do not justify retaining unrelated data.
• Security and logs: for the period needed to investigate technical incidents and protect the service. Log and backup retention is also determined by the provider's confirmed configuration.
• Aggregate statistics: where they do not allow visitors to be identified, they may be retained to compare content performance.

Deletion may not be immediate where retention is required for a specific legal obligation or claim. In that case, retention is limited to the necessary information and relevant purpose.

9. Your rights

Subject to the legal conditions, you may request access, rectification, erasure or restriction of processing and exercise your right to object. Where applicable, you have the right to data portability. If specific processing is based on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing.

Submit your request through the contact page. Only the information necessary to verify your identity may be requested. We respond without undue delay and normally within one month. For complex or numerous requests, a lawful extension may apply, with timely notice to you.

You have the right to lodge a complaint with the Hellenic Data Protection Authority or the competent supervisory authority, subject to the relevant procedure. For a complaint about a response to a rights request, contact TechCover first.

10. Automated decisions and minors

The website's forms do not make automated recruitment, project assignment or other decisions that have legal or similarly significant effects on you. Automated field validation and abuse checks support correct submission processing.

The website is primarily intended for professionals and prospective collaborators. If we receive a minor's information without an appropriate processing basis, we will consider restricting or deleting it. Do not submit third-party information unless you have the right to share it.

11. Scope and updates

This policy concerns TechCover's website. Processing data for a particular client project may require a separate agreement and notice. Independent third-party websites reached through links are not covered.

The update date appears at the top of the page. Material changes to the purpose or method of processing are accompanied by the necessary information and, where required, a new choice from you. The applicable framework includes the General Data Protection Regulation and applicable Greek law.