Privacy Policy & Cookies - DEOUS

1. General information

This Privacy Policy describes how the sole proprietorship “DEOUS / Ioannis Nakos” (hereinafter “Company”, “we”), with registered office at [insert address], provides internet services and processes the personal data of visitors and users of the website www.deous.gr (hereinafter “Website”), in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Greek data protection laws.

Data Controller: DEOUS / Ioannis Nakos
Data protection email: privacy@deous.gr
Website: www.deous.gr

2. Categories of data we process

We process in particular the following categories of personal data:

• Contact details: full name, email address, phone number, company/hotel, when you submit them via contact forms or quote request forms.
• Usage and device data: IP address, cookie identifiers, browser type and version, operating system, device type, pages you visit, time spent on pages, referral URL.
• Analytics and marketing data: identifiers from Google Analytics 4, Google Tag Manager, Meta/Facebook Pixel, as well as data from third-party SEO/analytics tools such as Ahrefs, to the extent they relate to your navigation on the Website.

We do not knowingly collect special categories of personal data (“sensitive” data) through the Website.

3. Purposes of processing and legal bases

We process your personal data for the following purposes:

• Communication and provision of services/quotes: to respond to information requests, quotes and collaboration enquiries. Legal basis: Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures).
• Operation and security of the Website: to ensure proper functioning, detect malicious activity and protect our systems. Legal basis: Article 6(1)(f) GDPR (legitimate interests).
• Traffic analysis (Google Analytics 4 via Tag Manager): to understand how the Website is used and improve our services. Legal basis: Article 6(1)(a) GDPR (consent for analytics cookies) via the cookie banner, using GA4 with Consent Mode.
• Advertising / remarketing (Meta Pixel, and potentially Google Ads): to measure campaign performance and create audiences for advertising on platforms such as Facebook and Instagram. Legal basis: Article 6(1)(a) GDPR (consent for marketing cookies).
• SEO optimisation and performance monitoring (Ahrefs): to monitor the performance of the Website in search results and other SEO indicators. Legal basis: Article 6(1)(f) GDPR (legitimate interests), as the data are mainly aggregate/statistical.
• Compliance with legal obligations: e.g. record keeping for tax and accounting purposes. Legal basis: Article 6(1)(c) GDPR.

4. Google Analytics 4 (GA4) and Google Tag Manager

We use Google Analytics 4 via Google Tag Manager to collect statistics about the use of the Website.

• GA4 collects anonymous or pseudonymous usage data (e.g. page visits, time spent, events) using cookies, only after you have given your consent.
• We may use Consent Mode v2 so that Google tags respect your choices for analytics_storage and ad_storage.
• Google Tag Manager is used as a tag management platform and does not itself process user data beyond what is necessary to load the tags, according to your consent settings.

Cookies and signals related to GA4 are activated only if you accept analytics cookies via the cookie banner.

5. Meta Pixel (Facebook / Instagram Ads)

The Website may use Meta Pixel to measure conversions and optimise advertising campaigns on Facebook and Instagram.

• Meta Pixel allows Meta Platforms Ireland Limited to receive information about your navigation on the Website (e.g. visit to specific pages, form submissions).
• This information may be linked to your Facebook and/or Instagram account in order to display relevant ads to you.
• Meta Pixel and related marketing cookies are activated only if you explicitly consent to marketing cookies.

6. Use of SEO/analytics tools (Ahrefs)

To monitor the performance of our Website in search results and other SEO indicators, we use services such as Ahrefs.

• Ahrefs mainly processes aggregated clickstream data and information related to our domain and public URLs.
• To the extent it processes personal data (e.g. IP addresses in logs), such processing is carried out in accordance with its own Privacy Policy and the relevant data processing agreement, with us acting as Data Controller and Ahrefs as Data Processor.

7. Recipients and transfers to third countries

The main recipients of personal data are:

• hosting and IT infrastructure providers,
• Google Ireland Limited (GA4, Tag Manager),
• Meta Platforms Ireland Limited (Meta Pixel),
• marketing/SEO tool providers such as Ahrefs.

Some of these providers may transfer data outside the EEA on the basis of appropriate safeguards (e.g. standard contractual clauses) in accordance with the GDPR.

8. Data retention

• Contact data: retained for up to 2 years from the last contact, unless a longer period is required for legal reasons.
• Cookies/analytics/marketing data: retained according to the settings of the tools (e.g. GA4, Meta) or until you withdraw your consent.

9. Your rights

Under the GDPR, you have the rights of access, rectification, erasure, restriction of processing, objection, data portability, as well as the right to withdraw your consent at any time.

To exercise your rights, you can contact us at privacy@deous.gr.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

10. Updates to this Privacy Policy

This Privacy Policy may be amended from time to time. The current version is always available on the Website www.deous.gr.

Cookie Policy

1. What are cookies

Cookies are small text files stored on your device when you visit a website. They are used to enable the operation, optimisation and personalisation of your browsing experience.

2. Types of cookies we use

• Strictly necessary cookies: required for the basic operation of the Website (e.g. storing your cookie preferences, basic navigation, forms). No consent is required for these cookies.
• Analytics cookies: used to measure traffic and statistically analyse the use of the Website via Google Analytics 4. They are activated only if you give your consent.
• Marketing cookies: used for advertising/remarketing and conversion tracking via Meta Pixel (and any other advertising tools). They are activated only with your explicit consent.

A cookie table on the Website may provide in detail the names, providers and duration of each cookie.

3. Cookie banner and consent

When you first visit the Website, a cookie banner appears which:

• briefly explains the use of cookies,
• allows you to choose “Accept all”, “Reject all” (except strictly necessary cookies) or “Customise”,
• does not activate analytics or marketing cookies before you give your consent.

Your consent is recorded (e.g. at the level of an anonymous ID and the choices you made) and you can change it at any time via the “Cookie Settings” link located at the bottom of the Website.

4. Third-party cookies (Google, Meta, Ahrefs)

• Google Analytics 4 / Tag Manager: analytics cookies operating under Consent Mode and according to your choices for analytics cookies.
• Meta Pixel: marketing cookies used for conversion tracking and targeted advertising on Facebook and Instagram.
• Ahrefs: mainly processes data at domain/SEO level. Its use is governed by its own Privacy Policy.

These third-party providers may combine information from your visit to www.deous.gr with data from other websites.

5. How you can control cookies

You can:

• change your cookie preferences at any time via the “Cookie Settings” link on the Website,
• configure your browser (e.g. Chrome, Firefox, Safari, Edge) to block or delete cookies.

If you disable all cookies, some functions of the Website may not be fully available.