Privacy policy

The data controller is:

• [LEGAL NAME], trading as “Τα Φιλαράκια / Kos Handyman”
• Address: [STREET ADDRESS], 853 00 Kos, Greece
• VAT number (ΑΦΜ): [ΑΦΜ / VAT NUMBER]
• General Commercial Registry (ΓΕΜΗ) no.: [ΓΕΜΗ NUMBER]
• Email: info@kos-handyman.gr · Phone: +30 694 419 4080

We are a small local business and are not required to appoint a Data Protection Officer. For anything about your data, write to us at the email above.

Quote form. Your name, phone number, email (optional), the type of work, the area on Kos, your description of the job and any photos you add, plus the language of the page. We use them to reply to you, call you back and prepare a quote. Legal basis: steps you ask us to take before a contract (Art. 6(1)(b) GDPR).

Phone, WhatsApp, Viber and email. If you call or message us, we receive your number or email address, your name as shown in the app, and whatever you send us (texts, photos, voice notes). We use them for the same purpose and on the same basis as the form. WhatsApp and Viber are run by WhatsApp Ireland Ltd and Viber Media S.à r.l., under their own privacy policies.

Customers. If we do a job for you, we also keep the address of the job, what was agreed, payments and invoices. Legal basis: performing our contract with you (Art. 6(1)(b)) and our tax and accounting obligations (Art. 6(1)(c)).

Security of the site. When you send the form, your IP address and technical details about your browser are checked by Cloudflare Turnstile to stop spam and bots, and your IP address is used for a short-term limit on how many requests can be sent. Our hosting provider keeps short technical logs (IP address, time, page requested). Legal basis: our legitimate interest in keeping the site and our inbox safe (Art. 6(1)(f)).

Analytics and advertising cookies. Only if you accept them in the cookie banner. Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 4(5) of Greek Law 3471/2006). Details are in our cookie policy.

Please don't include other people, ID documents or anything you would not want us to see in the photos you send. We do not collect special categories of data (health, religion and so on) and do not need them.

We do not sell your data and do not share it for other companies' marketing. To run the site and our work we use these providers, who process data on our behalf and under contract with us:

• Vercel Inc. (USA): hosts the website and processes the form submission.
• Cloudflare, Inc. (USA): stores and delivers the photos you upload, runs the Turnstile security check and stores our project gallery.
• Resend (Plus Five Five, Inc., USA): delivers the emails the form generates, to us and, if you gave an email, the confirmation to you.
• Our email provider, where those emails and your messages are kept.
• Google Ireland Ltd: Google Tag Manager and Google Analytics, and Google Ads measurement if we run ads, only if you accept those cookies.

We may also share data with our accountant (for invoices and tax), with professionals who help us with a job you have agreed to (for example a plumber or electrician, only what they need), and with public authorities when the law requires it.

Some of the providers above are based in the USA or may access data from there. Such transfers rely on the EU-US Data Privacy Framework, for providers certified under it, or on the European Commission's Standard Contractual Clauses, with additional safeguards where needed.

• Quote requests and messages that don't lead to a job: up to 12 months after our last contact, then deleted, including the photos.
• Customers: for as long as the job and any guarantee or claim related to it lasts, and invoices and accounting records for as long as Greek tax law requires (in general 5 years, longer in specific cases).
• Security logs: a few days to a few weeks, as set by our hosting provider.
• Analytics: as stated in the cookie policy; data in Google Analytics is kept for no more than 14 months.

You can ask us to delete your request earlier at any time.

You have the right to:

• know whether we hold data about you and get a copy (access);
• have incorrect data corrected (rectification);
• have your data deleted, where we have no legal reason to keep it (erasure);
• restrict how we use it while an issue is being resolved (restriction);
• receive the data you gave us in a common format, or have it sent to someone else (portability);
• object to processing based on our legitimate interest (objection);
• withdraw your consent to cookies at any time, without affecting what happened before.

To use any of these rights, email info@kos-handyman.gr or call +30 694 419 4080. It is free. We reply within one month, and may ask you to confirm who you are first.

If you think we have mishandled your data, please tell us first so we can put it right. You also have the right to complain to the Greek supervisory authority:

• Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα)
• Kifisias 1-3, 115 23 Athens, Greece · +30 210 6475600
• www.dpa.gr (opens in a new tab) · complaints@dpa.gr

If you live in another EU country, you can also complain to the authority there.

Do you have to give us your data? No, but without a name, phone number, area and a description of the job we cannot prepare a quote. Your email is optional.

Automated decisions. We do not make decisions about you by automated means alone and do not create profiles.

Children. The site is meant for adults. We do not knowingly collect data from children under 15.

Security. The site uses an encrypted connection (HTTPS), photos are uploaded straight to Cloudflare with one-time links, and access to our accounts is limited to the team and protected by passwords.

We may update this policy when our services, providers or the law change. The date at the top shows the latest version. If a change matters to you, for example a new use of your data, we will tell you before it applies.