Privacy Policy
Last updated: 17 August 2026
This Privacy Policy explains how Alex Prevezanos (“Alex Prevezanos”, “we”, “us” or “our”) collects, uses, stores and protects personal data when you visit alexprevezanos.com (the “Website”), contact us, submit a form, request information or engage our services.
We respect your privacy and process personal data in accordance with applicable data-protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek data-protection laws.
By using the Website or voluntarily providing personal information to us, you acknowledge that your personal data will be handled as described in this Privacy Policy.
1. Who Is Responsible for Your Data
For the purposes of applicable data-protection law, the data controller is:
Alex Prevezanos
Greece
Website: alexprevezanos.com
Contact: alexprevezanos.com/contact
As data controller, we determine why and how personal data collected through this Website is processed.
2. Personal Data We May Collect
Depending on how you interact with the Website, we may collect different categories of personal data.
This may include:
first name
last name
email address
telephone number
company or business name
country or location information voluntarily provided by you
services you are interested in
project requirements
budget information
project timelines
business information
messages and enquiries
information submitted through contact or project forms
files, photographs, images or other materials uploaded by you
correspondence between you and us
billing and invoicing information where applicable
technical information relating to your use of the Website
IP address
browser type
device type
operating system
referring website
pages visited
approximate geographic information derived from technical data
cookie identifiers and similar online identifiers
analytics and interaction information
We only seek to collect information that is reasonably necessary for the relevant purpose.
3. Information You Provide Directly
You may provide personal data directly to us when you:
complete a contact form
request information about a service
submit a project enquiry
use one of our project planning forms
upload content or files
request a quotation
communicate with us by email
communicate with us through social media
become a client
provide information necessary for a project
request technical support or assistance
You are responsible for ensuring that information you provide is accurate and that you have the right to provide any personal data relating to another person.
4. Contact Forms and Project Enquiries
When you submit a contact or project form, we may collect information such as:
your name
your email address
your telephone number where provided
the service you are interested in
information about your business
project requirements
budget information
your message
any other information you voluntarily provide
We use this information to:
respond to your enquiry
understand your requirements
recommend appropriate services
prepare quotations or proposals
communicate with you
provide requested services
maintain reasonable records of enquiries and client communications
Submitting a form does not automatically subscribe you to marketing communications unless this is clearly stated and you have provided the necessary consent.
5. File and Image Uploads
Certain services or forms may allow users or clients to upload:
photographs
images
graphics
logos
screenshots
reference material
documents
other project files
These files may contain personal data.
Uploaded materials are processed only for purposes reasonably connected with the service requested, such as reviewing a project, preparing content, generating or editing visual material, developing software or delivering another agreed service.
Where appropriate, uploaded files may also be subject to automated security or malware scanning.
You should not upload unnecessary sensitive personal data.
You are responsible for ensuring that you have the necessary rights, permissions and lawful basis to provide any materials containing personal data relating to other individuals.
6. Content Studio and AI-Assisted Processing
Some Content Studio services may involve artificial intelligence, generative AI tools, image-generation systems or other automated technologies.
Where you request such a service, information or content you provide may be processed using third-party technology providers where reasonably necessary to create, edit, enhance or otherwise process the requested content.
This may include:
images
photographs
visual references
text instructions
project descriptions
product information
creative briefs
We aim to minimise the amount of personal information provided to external AI services wherever reasonably possible.
You should avoid submitting unnecessary sensitive personal data through Content Studio services.
Where identifiable individuals appear in material you provide, you are responsible for ensuring that you have any necessary rights, permissions or consents to use that material for the requested purpose.
7. Client and Project Data
When you become a client, we may process additional information necessary to establish and manage our professional relationship.
This may include:
contact information
business information
project documentation
project communications
technical credentials provided for project purposes
website or hosting information
domain information
software requirements
project files
invoices
payment records
accounting information
contractual information
We process this information where necessary to perform the requested services, manage our contractual relationship, comply with legal obligations and protect our legitimate business interests.
8. Technical Data Collected Automatically
When you visit the Website, certain technical information may be collected automatically by the Website, hosting environment, security systems or analytics technologies.
This may include:
IP address
browser type and version
device type
operating system
screen resolution
language settings
approximate location
date and time of access
referring URL
pages viewed
time spent on pages
navigation behaviour
interactions with Website elements
technical error information
This information may be used for:
Website operation
security
fraud prevention
troubleshooting
analytics
performance measurement
improving the Website
understanding how visitors use the Website
9. How We Use Personal Data
We may process personal data for the following purposes:
operating and maintaining the Website
responding to enquiries
providing requested information
preparing quotations and proposals
providing our services
managing client relationships
communicating about projects
processing uploaded files
producing requested content
developing websites or software
providing support
administering hosting or technical services where applicable
issuing invoices
maintaining accounting records
preventing fraud and abuse
maintaining Website security
diagnosing technical problems
analysing Website performance
improving our services
measuring marketing performance
complying with legal obligations
establishing, exercising or defending legal claims
protecting our rights and legitimate business interests
We do not use personal data for purposes that are incompatible with the purposes for which it was collected unless permitted or required by law.
10. Legal Bases for Processing
Depending on the circumstances, we may process personal data on one or more of the following legal bases:
Performance of a contract
Where processing is necessary to provide services you have requested or to perform an agreement with you.
Steps prior to entering into a contract
Where you contact us for information, request a quotation or ask us to evaluate a potential project.
Consent
Where you have specifically consented to certain processing, including where consent is required for optional cookies, analytics or advertising technologies.
Legitimate interests
Where processing is reasonably necessary for legitimate business purposes and those interests are not overridden by your fundamental rights and freedoms.
Legitimate interests may include:
responding to business enquiries
maintaining business records
improving our Website and services
maintaining Website security
preventing fraud or misuse
managing professional relationships
defending legal claims
Legal obligations
Where processing is necessary to comply with applicable laws, accounting obligations, tax requirements, court orders or other legal requirements.
11. Cookies and Similar Technologies
The Website may use cookies and similar technologies.
Cookies are small files or pieces of information stored on or accessed through your device when you visit a website.
Depending on their purpose, cookies may include:
strictly necessary cookies
preference cookies
analytics cookies
performance cookies
advertising or marketing cookies
Strictly necessary cookies may be used without consent where they are required for the Website to function or to provide a service specifically requested by the user.
Where required by law, optional cookies and similar technologies are activated only after you provide consent.
You may be able to manage or withdraw your cookie preferences through the Website’s cookie consent mechanism.
12. Google Analytics
We may use Google Analytics to understand how visitors interact with the Website.
Google Analytics may process information such as:
pages visited
approximate location
device information
browser information
Website interactions
referral information
session information
online identifiers
This information helps us understand Website usage, identify technical or usability issues and improve our services and Website content.
Where consent is required, Google Analytics will only be activated after the user has provided the appropriate consent.
Google’s processing of information is also subject to Google’s own privacy and data-processing terms.
13. Google Tag Manager
The Website may use Google Tag Manager to manage Website tags and technologies.
Google Tag Manager allows us to control and deploy certain Website technologies, such as analytics or marketing tags.
The presence of Google Tag Manager does not necessarily mean that every available tracking technology is active.
Where a tag requires consent, it should only be activated according to the user’s applicable cookie preferences.
14. Meta Pixel
The Website may use the Meta Pixel or related Meta Business Tools for purposes such as:
measuring Website activity
measuring advertising performance
understanding user interactions
creating aggregated advertising reports
improving advertising campaigns
audience measurement
remarketing where permitted
Depending on configuration and user consent, information relating to Website activity may be transmitted to Meta.
This may include:
Website visits
viewed pages
browser information
device information
online identifiers
IP address
interaction or event information
Where consent is required, the Meta Pixel and other non-essential Meta tracking technologies will only be activated after the appropriate consent has been provided.
Meta processes information according to its own privacy policies and applicable agreements relating to Meta Business Tools.
15. Social Media Links
The Website may contain links to social media platforms including Instagram, LinkedIn or other services.
Clicking an external social-media link may result in the relevant platform processing information about you according to its own privacy policy.
We do not control the privacy practices of external social-media platforms.
You should review the privacy policies of the relevant platforms for information about how they process your data.
16. Third-Party Service Providers
We may use trusted third-party providers where reasonably necessary to operate our Website or provide our services.
These providers may include:
hosting providers
domain providers
cloud infrastructure providers
email providers
website technology providers
WordPress plugins or services
security providers
analytics providers
advertising platforms
AI technology providers
payment providers where applicable
accounting or professional advisers
software and API providers
backup providers
file-storage providers
These providers may process personal information only to the extent reasonably necessary for the relevant service and subject to their respective contractual and legal obligations.
We aim to use providers that maintain appropriate privacy and security practices.
17. Sharing Personal Data
We do not sell personal data.
We may disclose personal data where reasonably necessary to:
provide the requested service
operate the Website
use trusted service providers
process a project
obtain professional advice
comply with legal obligations
respond to lawful requests from authorities
establish or defend legal claims
protect our rights or property
investigate fraud, abuse or security incidents
protect users or third parties from harm
Personal data may also be disclosed in connection with a legitimate business restructuring, transfer or succession where permitted by law.
18. International Data Transfers
Some third-party service providers may process or store information outside Greece or outside the European Economic Area.
Where personal data is transferred internationally, we aim to rely on a lawful transfer mechanism where required.
Depending on the provider and destination, these safeguards may include:
a European Commission adequacy decision
Standard Contractual Clauses
contractual data-protection safeguards
another legally recognised transfer mechanism
Where third-party platforms independently determine how they process information, their own privacy terms and international transfer arrangements may also apply.
19. How Long We Keep Personal Data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or where continued retention is required by law.
Retention periods depend on the type of information and the reason for processing.
For example:
general enquiries may be retained for a reasonable period in case of follow-up
project communications may be retained throughout the client relationship and for a reasonable period afterwards
project files may be retained where necessary for support, continuity, evidence or legitimate business purposes
accounting and invoicing records are retained for the period required by applicable tax and accounting laws
security logs may be retained for a limited period for Website security and troubleshooting
consent records may be retained where necessary to demonstrate compliance
information connected with legal disputes may be retained for as long as reasonably necessary to establish, exercise or defend legal claims
When personal information is no longer reasonably required, we may securely delete or anonymise it.
20. Security of Personal Data
We take reasonable technical and organisational measures designed to protect personal information against:
unauthorised access
unlawful processing
accidental loss
alteration
disclosure
destruction
misuse
Measures may include, where appropriate:
encrypted connections
SSL/TLS
access controls
restricted administrative access
password protection
server security measures
security updates
malware protection
security monitoring
backups
file scanning
However, no method of online transmission, electronic storage, Website hosting or computer system can be guaranteed to be completely secure.
21. Data Submitted Through Client Projects
During website development, software development, marketing, Content Studio or other client projects, a client may provide us with personal data relating to its own customers, employees, users or other individuals.
Depending on the circumstances, the client may remain the data controller and we may process such data on the client’s behalf.
Where required by applicable law, appropriate data-processing terms or a Data Processing Agreement may be entered into between the parties.
Clients are responsible for ensuring that personal data they provide to us has been collected lawfully and may lawfully be processed for the requested purpose.
22. Sensitive Personal Data
Please do not provide sensitive personal data unless it is genuinely necessary for the requested service and there is a lawful basis for doing so.
Sensitive or special-category information may include information relating to:
health
racial or ethnic origin
political opinions
religious or philosophical beliefs
trade union membership
genetic data
biometric data used for identification
sex life or sexual orientation
If such information is provided without being requested and is not necessary for the relevant service, we may delete it where appropriate.
23. Your Rights Under the GDPR
Where the GDPR applies, you may have the right to:
request access to personal data we hold about you
request correction of inaccurate or incomplete personal data
request deletion of your personal data in certain circumstances
request restriction of processing in certain circumstances
object to certain types of processing
withdraw consent where processing is based on consent
request portability of certain personal data
obtain information about how your personal data is processed
lodge a complaint with a competent data-protection authority
These rights are subject to the conditions and limitations provided by applicable law.
24. Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Where applicable, cookie consent may be changed through the Website’s cookie preference mechanism.
For other consent-based processing, you may contact us through the Website.
25. Right to Object
Where personal data is processed on the basis of legitimate interests, you may have the right to object to that processing based on your particular circumstances.
Where personal data is processed for direct marketing purposes, you may object to such processing at any time.
26. Right to Erasure
You may request deletion of personal data where permitted by law.
A deletion request may not apply where information must be retained for purposes such as:
compliance with a legal obligation
accounting or tax requirements
establishment or defence of legal claims
exercising freedom of expression or information where applicable
another lawful reason for retention
27. Exercising Your Privacy Rights
To exercise a privacy right or ask a question about your personal data, you may contact us through:
alexprevezanos.com/contact
We may need to request reasonable information to confirm your identity before completing certain privacy requests.
We aim to respond to valid requests within the time limits required by applicable law.
28. Complaints
If you believe your personal data has been processed unlawfully, you may contact us first so that we can investigate the matter.
You also have the right, where applicable, to lodge a complaint with the competent supervisory authority.
For individuals in Greece, the competent supervisory authority is the Hellenic Data Protection Authority.
29. Marketing Communications
We may contact existing or prospective clients about services where permitted by applicable law.
Where consent is legally required for marketing communications, marketing messages will only be sent where the appropriate consent has been obtained.
You may opt out of direct marketing communications at any time.
Transactional, contractual, administrative or project-related communications are not marketing communications and may still be sent where necessary.
30. Children
The Website and our professional services are primarily intended for adults, businesses and professionals.
We do not knowingly seek to collect personal information from children where such processing would be unlawful.
If you believe that a child has provided personal information to us without appropriate authorisation, please contact us so that we can review the matter.
31. Automated Decision-Making
We do not ordinarily use information collected through this Website to make decisions about individuals solely by automated means that produce legal effects or similarly significant effects.
Analytics, advertising and AI technologies may involve automated processing, but this does not necessarily constitute automated decision-making of this kind.
If this changes in a way that requires additional information or consent under applicable law, this Privacy Policy will be updated accordingly.
32. External Websites
The Website may contain links to websites operated by third parties.
Once you leave alexprevezanos.com, the processing of your information by another website is governed by that website’s own privacy policy.
We are not responsible for the privacy, security, content or practices of third-party websites.
33. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
changes to our Website
changes to our services
changes in technology
changes in service providers
legal or regulatory requirements
changes to our data-processing practices
The latest version will be published on this page together with the date it was last updated.
We encourage visitors to review this Privacy Policy periodically.
34. Relationship With Our Terms and Conditions
Use of the Website and engagement of our services may also be subject to our Terms and Conditions.
The Terms and Conditions and this Privacy Policy should be read together where relevant.
35. Contact
For questions, requests or concerns regarding this Privacy Policy or the processing of your personal data, please contact:
Alex Prevezanos
Greece
Website: alexprevezanos.com
Contact: alexprevezanos.com/contact
We will take reasonable steps to review and respond to legitimate privacy enquiries in accordance with applicable data-protection law.