Privacy policy

This policy explains what personal data we process through stoneinteriors.gr, why, on what legal basis, for how long, and what rights you have, under the General Data Protection Regulation (GDPR 2016/679) and Greek Law 4624/2019.

Controller

Stone Interiors · Λαϊκών Αγώνων 66, Αχαρνές 136 71 · stoneinteriors.gr@gmail.com · +30 210 231 6884

What we collect

• What you give us in the forms: name, phone, email, what you want made, the room, your role, your timeline, your message and, if you used them, the materials you saved and the configuration you chose.
• Photographs of your space, if you choose to attach them (up to three). Before they are sent they are shrunk on your device and their metadata, such as GPS location, is removed. They reach us as attachments to the enquiry email, and are also shown in the confirmation email you receive; they are not stored on the site or in the spreadsheet.
• Technical data every server receives in order to serve a page (IP address, browser type). The IP address is used briefly, in memory, to limit bulk spam submissions, and is not stored with your enquiry.
• Only with your consent: measurement and advertising data through cookies (see the Cookie policy).

Why, and on what legal basis

• To answer your enquiry, arrange a survey and prepare a spec sheet and quotation — steps you ask for before a contract (GDPR art. 6(1)(b)).
• If we work together, to carry out the project and meet our accounting and tax obligations (art. 6(1)(b) and (c)).
• To keep the site secure and stop abuse of the forms — legitimate interest (art. 6(1)(f)).
• For traffic measurement and advertising — only with your consent (art. 6(1)(a) and Greek Law 3471/2006 art. 4(5)). If you have accepted advertising and send a form, your email and phone are sent to Meta and TikTok hashed (SHA-256), so we can measure whether the enquiry came from an ad.

We need your name and email address to answer you. Without them we cannot deal with the enquiry. We do not make decisions about you by automated means alone.

Who receives it

We do not sell or rent data. We use the following providers, who process data on our behalf:

• Vercel Inc. — hosting of the site.
• Resend — delivery of enquiry emails.
• Google — the mailbox where enquiries arrive (Gmail), the spreadsheet where they are recorded (Google Sheets) and, with consent, Google Analytics.
• With advertising consent: Meta Platforms Ireland (Facebook, Instagram) and TikTok.

Transfers outside the European Economic Area

Some of these providers are based in, or have servers in, the United States. Transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework or on Standard Contractual Clauses.

How long we keep it

• Enquiries that did not become a project: up to two years from our last contact.
• Client records: for as long as tax and accounting law requires.
• Your cookie choice: twelve months, then we ask again.
• Measurement and advertising data: as set out in the Cookie policy.

Photographs in the configurator

Unlike photos attached to a form, photographs you open in the “Your photo” tool are never uploaded. All processing happens inside your browser, the file never leaves your device and it is not attached to the enquiry you send us.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. You can withdraw consent at any time from “Cookie settings” at the foot of every page; withdrawal does not affect what happened before. Send your request to stoneinteriors.gr@gmail.com and we will reply within one month.

If you believe the processing breaks the law, you can complain to the Hellenic Data Protection Authority (Kifisias 1–3, 115 23 Athens, www.dpa.gr).

Children

The site is not aimed at anyone under 15 and we do not knowingly collect their data.

Security and changes

The site runs only over an encrypted connection (HTTPS) and access to enquiries is limited to the people who handle them. If the way we process data changes, we will update this page and its date.