- This website uses no cookies and no advertising or tracking tools.
- We use your details to reply to your enquiry and, if we work together, for our collaboration.
- We never sell your data or share it for advertising.
- You can ask to see or delete your data at any time at info@nextdevstudio.gr.
Data controller
The controller responsible for your personal data is Georgios Kapatsinas, a sole proprietorship trading as NextDevStudio, based in Athens, Greece.
- Registered name
- Georgios Kapatsinas
- Trading as
- NextDevStudio
- Tax ID (ΑΦΜ)
- 134244349
- Business registry no. (ΓΕΜΗ)
- 192559203000
- Registered office
- Athens
- Phone
- +30 694 254 0940
We have not appointed a Data Protection Officer (DPO), as one is not required for the type and scale of our processing. For anything about your data, email us at info@nextdevstudio.gr.
What data we process
- Contact form: your name, email, phone number (optional), the type of project you are interested in (optional) and your message, together with the date and time it was sent and the language of the page. To protect the form from spam we also check how long it took to fill in, and a hidden field that people never see helps us recognise automated submissions. Once you send the form, we automatically email a short confirmation to the address you gave.
- Email, phone, Viber and WhatsApp: your contact details (email address, phone number, profile name) and whatever you write or tell us.
- Technical data (server logs): when you visit the website, our hosting provider automatically logs your IP address, the date and time, the page requested and your browser and device type.
- Protecting the form from abuse: when you send the form, the server briefly keeps, in its memory only and for up to 24 hours, the IP address it was sent from and your email address, to limit how many messages can be sent in a short time and to avoid sending the confirmation email to the same address more than once a day.
- Visitor and performance statistics: with Vercel Web Analytics and Vercel Speed Insights we see, in aggregate, which pages are read, which page or search visitors come from, their country and device type, how fast pages load and how often the contact buttons (phone, email, Viber, WhatsApp) and other buttons on the site are tapped and how often the form is sent, never with the details or message you wrote. No cookies are used, and nothing is stored on your device. Visits are told apart by a hash of the request that is discarded within 24 hours, so we cannot identify you or follow you across other websites.
We do not ask for special categories of data, such as health information. Please do not include them in your message.
Why we process it and on what legal basis
- To reply to your enquiry and send you a cost estimate or quote: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)).
- To carry out our work together, if we agree on a project: performance of a contract (GDPR Article 6(1)(b)).
- To keep the website and form secure and working, to protect them from spam and abuse (including the brief use of your IP address and email address for the form's sending limits), and for aggregate visitor and performance statistics: our legitimate interest in running a secure, fast and useful website (GDPR Article 6(1)(f)).
- To meet our tax and accounting obligations, if we work together (for example, issuing invoices): compliance with a legal obligation (GDPR Article 6(1)(c)).
We do not use your data for advertising or newsletters, and we never sell it.
Who has access to your data
Apart from us, only the following have access to your data:
- Vercel Inc. (USA): on our behalf and only on our instructions, for website hosting, sending contact-form messages, server logs, Web Analytics and Speed Insights.
- An email hosting provider within the EU: on our behalf and only on our instructions, for storing contact-form messages and our email correspondence.
- Viber and WhatsApp: only if you choose to message us there. Your messages are then handled by those services (Viber Media S.à r.l. and WhatsApp Ireland Ltd.) under their own terms and privacy policies.
- An external accountant and the tax authorities: only if we work together, and only what the law requires.
Transfers outside the European Union
Vercel Inc. is based in the USA, so some data may be transferred there. Such transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework, under which Vercel is certified, and on the European Commission's Standard Contractual Clauses (SCCs) included in Vercel's data processing addendum. You can read more in Vercel's privacy policy.
Our email is stored by an email hosting provider within the European Union.
How long we keep your data
- Messages and enquiries that do not lead to a project: up to 12 months after our last contact, so we can pick up where we left off if you come back. After that we delete them.
- If we work together: for as long as our collaboration lasts and then for as long as tax law requires (usually 5 years from the end of the financial year concerned), or as needed to establish or defend legal claims.
- Server logs: for a short period set by our hosting provider, and no longer than 30 days, unless they are needed to investigate a security incident.
- IP address and email used to protect the form: in the server's memory only, for no more than 24 hours, after which they are deleted automatically.
- Visitor statistics: in aggregate form only, with nothing that identifies you.
Your rights
Under Articles 15 to 21 of the GDPR you have the right to:
- access: find out whether we process your data and get a copy of it,
- rectification: have inaccurate or incomplete data corrected,
- erasure: have your data deleted, unless the law requires us to keep it,
- restriction: have processing restricted, for example while we check the data is accurate,
- portability: receive the data you gave us in a structured, commonly used format, or have it sent to someone else,
- objection: object to processing based on our legitimate interest,
- withdraw consent: if any processing is based on your consent, withdraw it at any time, without affecting the lawfulness of processing before the withdrawal.
To exercise any of these rights, email us at info@nextdevstudio.gr or call +30 694 254 0940. We will reply without undue delay and within one month at the latest. We may ask for information to confirm your identity. Exercising your rights is free of charge.
Right to lodge a complaint
If you believe the processing of your data breaches the GDPR, you have the right to lodge a complaint with the Hellenic Data Protection Authority (1–3 Kifisias Avenue, 115 23 Athens, Greece, www.dpa.gr). We would appreciate the chance to resolve it with you first, though.
Required information and automated decisions
You are not obliged to give us any data. Without your name, email and message, however, we cannot reply to your enquiry through the form. You can always call or email us directly instead.
We do not make decisions based solely on automated processing, and we do not carry out profiling (GDPR Article 22).
Security
We take appropriate technical and organisational measures to protect your data. The website only works over an encrypted (https) connection, and your messages are accessible only to us and, as far as they need it to run their services, to the providers listed above.
Changes to this policy
If anything changes in the way we process data, we will update this page and the "Last updated" date at the top.