Privacy Policy

1. Data controller

The website www.xentrix.gr is owned and operated by Xentrix, a software development company based in Athens, Greece.

Address

Mikras Asias 11, 115 27 Athens, Greece

Phone

+30 210 700 5831

Email

info@xentrix.gr

This policy describes how we process personal data through www.xentrix.gr, in accordance with Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

It does not cover processing carried out by our clients inside the Xentrix Flow software. There, the client is the data controller and we act as a processor under a separate agreement.

2. What data we collect

Contact form

When you fill in the form we collect: your name, email address, phone number (optional), company name (optional), the topic you select and the text of your message.

Technical logs

Our servers record the IP address, the date and time of the request and basic browser information. These are used solely for security, error diagnosis and protection against automated abuse of the form.

What we do not do

We use no analytics or advertising trackers, we do not build user profiles, we take no automated decisions, and we neither sell nor rent personal data.

3. Purposes and legal basis

• Responding to your enquiry. Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) and your consent, given via the form's checkbox (Article 6(1)(a)).
• Security and abuse prevention. Legal basis: our legitimate interest in operating the website securely (Article 6(1)(f)).
• Compliance with legal obligations where applicable (Article 6(1)(c)).

Providing your details is optional, but necessary for us to be able to reply.

4. Retention

• Messages from the form: kept in our mailbox for the duration of the correspondence and, if no engagement follows, for up to 24 months after the last contact.
• Technical logs: kept for a limited period not exceeding 12 months, then deleted.

If an engagement follows, the retention periods set out in that agreement and in tax legislation apply.

5. Recipients

Only our staff involved in answering your enquiry has access to the data. In addition, we work with:

• A hosting provider. Our website and applications run on servers located within the European Union (Germany).
• An email provider, for sending and receiving the form's messages.
• Google Fonts (Google Ireland Ltd), to serve the website's typefaces. When the page loads, your browser contacts Google servers and your IP address is transmitted.

We do not share data with third parties for commercial or advertising purposes.

6. Transfers outside the EU

Data is stored within the EU. In the case of Google Fonts, a transfer to servers outside the EU may occur, based on the safeguards of Article 46 GDPR and the EU–US Data Privacy Framework.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, write to info@xentrix.gr. We respond within one month.

If you believe the processing infringes the law, you may lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifissias Ave, 115 23 Athens, www.dpa.gr).

8. Security

The website is served exclusively over an encrypted connection (HTTPS). We apply technical and organisational measures such as rate limiting on the form, controlled server access and regular security updates.

9. Minors

This website addresses businesses and is not intended for minors. We do not knowingly collect data from persons under 16.

10. Changes to this policy

We may update this policy. Any change is published on this page with a new last-updated date.

11. Contact

For data protection matters: info@xentrix.gr, phone +30 210 700 5831, Mikras Asias 11, 115 27 Athens, Greece.