Privacy Policy

1. Who we are

This website (fidesadvisory.gr) is operated by A. FERENTINOU L.P., trading commercially as Fides Advisory, Greece (“we”, “us”). We are the data controller for the personal data described in this policy. For any privacy question or to exercise your rights, contact us at contact@fidesadvisory.gr.

2. Scope

This policy explains what personal data we process when you visit this website or contact us through it, and your rights under the EU General Data Protection Regulation (GDPR) and Greek data-protection law.

3. The personal data we process

a. Information you choose to send us. If you use the contact form or email us, we process the details you provide — your name, email address, company (optional) and the content of your message.

• How the form works: when you submit the form, its contents are sent directly to our form-delivery provider (see section 5), which forwards them to our inbox as email. We do not operate our own server-side database of submissions.
• Purpose: to read and respond to your enquiry and, where relevant, to take steps at your request before entering into a possible engagement.
• Legal basis: Article 6(1)(b) (steps prior to a contract) and/or Article 6(1)(f) legitimate interest in responding to enquiries.

b. Data we collect automatically (hosting). Our website is hosted on Vercel. When you visit, Vercel automatically processes certain technical data on our behalf so the site can be delivered and kept secure. This typically includes:

• your IP address (which is personal data under the GDPR);
• your browser, device and operating system;
• the pages and resources you request and the referring page;
• approximate location derived from your IP address; and
• the date and time of each request.

This data is generated in standard server and edge-network logs. We use it only to deliver the website, keep it secure and stable, and diagnose technical problems — never to identify you personally or build a profile. The legal basis is our legitimate interest (Article 6(1)(f)) in operating a secure, reliable website. It is retained only for a limited period in line with our hosting provider’s standard retention.

4. Cookies and analytics

We do not use cookies or similar tracking technologies, and we do not set non-essential cookies — so no cookie-consent banner is required. To understand how the site is used, we use Vercel Web Analytics, a privacy-friendly, cookieless analytics tool that records aggregate usage (such as page views, referrers and approximate country) and no personally identifying information. It does not track you across other websites or build a profile of you.

5. Who we share data with

We do not sell your personal data. We share it only with service providers acting as our processors under contract:

• Vercel Inc. — website hosting and content delivery (processes the technical/log data and cookieless analytics described above), under a Data Processing Addendum.
• Formspree — receives contact-form submissions and delivers them to our inbox as email, under a Data Processing Addendum.
• Microsoft (Outlook / Microsoft 365) — hosts and stores the mailbox that receives your email, under a Data Processing Addendum.

We may also disclose data where required by law.

6. International transfers

Vercel and Formspree are based in the United States and may process data outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, it is protected by appropriate safeguards — principally the EU Standard Contractual Clauses incorporated in each provider’s Data Processing Addendum.

7. How long we keep it

We keep email correspondence for as long as needed to handle your enquiry and any resulting relationship, and thereafter only as required for legal or record-keeping purposes (up to 2 years after last contact). Technical server logs are retained by our hosting provider for a short period in line with their policy.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to our processing of your personal data, and to data portability, and to withdraw consent where processing is based on consent. To exercise any of these, contact us at contact@fidesadvisory.gr. You also have the right to lodge a complaint with the Greek supervisory authority, the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) — www.dpa.gr.

9. Security

We take reasonable technical and organisational measures to protect personal data. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the latest version.