1. Scope and contact
This policy explains what personal data this Site ("we", "us") processes, why, and what rights you have. For any question or request about your data, write to [CONTACT EMAIL].
2. What we process, why, and on what basis
Quiz answers (the free match). Your nine answers (passport, what pays for your life in Greece, household, kind of place, weather, pace, housing budget, an optional income band, your main concern) are sent to our server to compute the comparison and are returned to your browser. They are not stored. Legal basis: performance of the service you request (GDPR art. 6(1)(b)). We do not ask about health.
Saving your result. If you choose to save your result, we store your email address, your three matched cities and your answers so we can email them to you, and, if you agreed, send occasional updates about Greek residence rules. Legal basis: consent (art. 6(1)(a)); every message has a one-click unsubscribe. Retention: until you unsubscribe or ask us to delete it.
Paid report. When you buy a report, your answers are sent to our AI provider to write the text, and the finished report is stored, keyed to the payment transaction, so that you can open it again from its link and download the PDF. We store a cryptographic hash of your answers next to the report so a payment stays tied to the answers it was made for. Legal basis: performance of a contract (art. 6(1)(b)). Retention: [24 months] after purchase, then deletion. Anyone holding the private link to a report can open it; keep the link to yourself.
Payment. Payment is handled by Paddle as merchant of record. Paddle collects your name, email, billing country, tax identifiers where relevant and payment details, and is an independent controller for that processing under its own privacy policy. We receive the transaction identifier, status, country and the product bought; we do not receive your card details.
Request for us to handle your matter. If you use the form, we process your name, email, citizenship, place of residence, what you need help with, your description, timeline and household, so that an authorised lawyer admitted in Greece can answer it and take the matter on. Legal basis: steps at your request before a possible contract (art. 6(1)(b)), and your consent to the lawyer receiving it (art. 6(1)(a)). Retention: [12 months].
Technical data. Our hosting provider logs IP address, request time and user agent for security and to keep the service running. Legal basis: legitimate interest (art. 6(1)(f)). Retention: [30 days].
3. Cookies and local storage
The Site sets no cookies of its own and uses no advertising or third-party analytics. The checkout, provided by Paddle, sets the cookies Paddle needs to process a payment. The result page may keep your last report link in your browser's local storage so that you can reopen it on the same device. [Update if analytics is added.]
4. Processors and recipients
- Netlify (United States): hosting of the Site, storage of paid reports, and the forms for saving a result and requesting a lawyer. Transfer to the US relies on [the EU-US Data Privacy Framework and/or standard contractual clauses — verify Netlify's current basis].
- Anthropic PBC (United States): writes the paid report from the data we send. Under our agreement Anthropic does not use the data to train its models. Transfer to the US relies on [the EU-US Data Privacy Framework, if Anthropic's certification is confirmed, and/or standard contractual clauses — verify].
- Paddle (United Kingdom / United States): payment, invoicing and taxes, as an independent controller.
- The authorised lawyer admitted in Greece who handles your request, who becomes an independent controller of it.
We do not sell personal data and we do not share it with advertisers.
5. Your rights
Under the GDPR and the UK GDPR you have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise them, write to [CONTACT EMAIL]. You may complain to a supervisory authority; in Greece this is the Hellenic Data Protection Authority (dpa.gr), and in the UK the Information Commissioner's Office.
If you are in California, Australia, Canada or another jurisdiction with its own privacy law, the rights given to you there apply alongside the above; we honour access and deletion requests from anywhere.
6. Children
The Site is for adults. We do not knowingly process data of people under 18.
7. Changes
We will post changes here with a new date. Material changes affecting stored reports will be notified by email where we have one.