Privacy Policy
This Privacy Policy explains how RED CROWD (“we”, “us”, “our”) collects, uses, and protects personal data when you visit redcrowd.eu or contact us through the website. We process personal data in accordance with the EU General Data Protection Regulation 2016/679 (“GDPR”) and Greek Law 4624/2019.
1. Data controller
RED CROWD
Damokleous 1, 12131 Athens, Greece
Email: [email protected]
2. What personal data we collect
2.1 Contact form
When you submit our contact form, we collect:
- Your name
- Your email address
- The subject and message you provide
2.2 Direct email
If you contact us at [email protected], we receive the data you choose to include in your message, together with the metadata of your email.
2.3 Server access data
Our hosting provider may automatically record technical information when you access the site (e.g. IP address, browser type, date and time of request). This data is used solely for the secure and stable operation of the website and is not combined with other data about you.
2.4 Cookies and tracking
This website does not set any first-party tracking cookies and does not use analytics services that profile visitors.
3. How and why we use your data
- To respond to your inquiry. When you contact us via the form or email, we use your data to reply and to assess whether and how we can work together.
- To operate and secure the website. Technical access data is processed to deliver the site and to detect and prevent abuse.
4. Legal basis
- Art. 6(1)(b) GDPR: processing necessary for steps taken at your request prior to entering into a contract (for contact form and email inquiries).
- Art. 6(1)(f) GDPR: our legitimate interest in operating and securing the website and in responding to general inquiries.
5. Third-party processors
5.1 EmailJS
The contact form on our website is delivered via EmailJS (operated by EmailJS Inc., based in the United States). When you submit the form, the data you enter is transmitted to EmailJS, which forwards it to us by email. EmailJS acts as a data processor on our behalf.
Because EmailJS is based outside the European Economic Area, your data may be transferred to and processed in the United States. Such transfers are protected by the appropriate safeguards required by the GDPR, including Standard Contractual Clauses where applicable. Further information is available in the EmailJS Privacy Policy.
5.2 Cloudflare Turnstile (anti-spam)
To protect the contact form against automated abuse, we use Cloudflare Turnstile, a privacy-friendly bot-detection service operated by Cloudflare, Inc. When the contact form is displayed, your browser loads a small script from Cloudflare. Cloudflare may process limited technical signals (such as your IP address, browser configuration, and interaction data) to determine whether the request is likely automated. Turnstile does not set tracking cookies and is not used for advertising or analytics. Further information is available in the Cloudflare Privacy Policy.
5.3 Hosting provider
Our website is hosted by a third-party hosting provider that processes technical access data as described in section 2.3 on our behalf and bound by a data processing agreement.
6. How long we keep your data
- Contact inquiries are retained for as long as necessary to handle your request and for a reasonable follow-up period afterwards, typically no longer than 24 months, unless a longer retention is required by law or by an ongoing business relationship.
- Server access logs are kept for a short period for security purposes and are then deleted or anonymised.
7. Recipients
We do not sell or rent your personal data. Data may be disclosed to:
- Our processors (e.g. EmailJS, hosting provider), bound by contract;
- Public authorities, where we are required to do so by law.
8. Your rights
Under the GDPR you have the right to:
- Request access to the personal data we hold about you (Art. 15);
- Request rectification of inaccurate data (Art. 16);
- Request erasure of your data (Art. 17);
- Request restriction of processing (Art. 18);
- Receive your data in a portable format (Art. 20);
- Object to processing based on legitimate interests (Art. 21);
- Withdraw any consent you have given, at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at [email protected].
9. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or where you believe an infringement of the GDPR has occurred. In Greece, the competent authority is:
Hellenic Data Protection Authority
Kifissias Avenue 1-3, 11523 Athens, Greece
www.dpa.gr
10. Security
Our website is delivered over HTTPS. We use appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons. The “Last updated” date at the top of this page indicates when the policy was last revised.