Privacy & Cookies Notice
Last updated: 27 October 2026
In short: this website uses no cookies, no analytics, no advertising and no tracking of any kind. It has no forms and no user accounts. The only personal data involved is the technical information every web server needs to deliver a page, and whatever you choose to send us when you email or call us.
1. Who is responsible for your data
The controller of personal data processed through this website is VisionIT, Theodora 1, Metamorfosi 144 52, Athens, Greece. For any question about this notice or about your personal data, contact us at info@visionit.gr or +30 210-2810.622.
This notice is provided in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Greek Law 4624/2019.
2. Cookies and similar technologies
This website does not place any cookies on your device and does not use local storage, tracking pixels, fingerprinting or any similar technology. For that reason no cookie banner or cookie consent is shown.
All fonts and images are served from our own server. The website does not load any content from third parties (such as Google Fonts, analytics services, social media plugins or embedded maps), so visiting it does not share your data with them.
Your browser may keep copies of the website’s files (its normal cache) to load pages faster. This is controlled by your browser, contains no personal data and can be cleared in your browser settings at any time.
3. What personal data we process, why and for how long
a) Visiting the website: technical server logs
When you open a page, our web server automatically records technical information: your IP address, the date and time of the request, the page or file requested, the response code, the referring page and your browser type (user agent). This information is needed to deliver the website and to keep it secure (for example, to detect and block attacks).
- Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).
- Retention: server logs are kept only for a limited period by our hosting provider for operation and security, and are then deleted automatically. We do not use them to identify or profile visitors.
b) Contacting us by email or phone
If you email us (for example through the “Email us” links) or call us, we receive the information you choose to give us, typically your name, email address, phone number, company and the content of your message.
- Purpose: to answer your enquiry and, where relevant, to take steps towards or perform a business relationship with you.
- Legal basis: steps prior to entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR).
- Retention: as long as needed to handle your enquiry and any resulting business relationship, and afterwards only as long as required by law (for example, tax and commercial record-keeping obligations).
c) Job applications
Open positions are published on our LinkedIn page. Applications made through LinkedIn are processed by LinkedIn under its own privacy policy and then shared with us. If you send us your CV directly by email, we use it only to assess your application.
- Legal basis: steps prior to entering into an employment contract (Article 6(1)(b) GDPR).
- Retention: for the duration of the recruitment process. If your application is not successful, we delete it afterwards unless you agree that we keep it for future openings.
4. Who receives your data
We do not sell or rent personal data, and we do not use it for advertising. We share it only with service providers that process it on our behalf and under our instructions (processors), bound by data processing agreements:
- Website hosting: Papaki (Greece, EU), which hosts this website and its server logs.
- Email: Microsoft (Microsoft 365), which provides our email service.
We may also disclose personal data where required by law or by a competent public authority.
5. Transfers outside the European Economic Area
Our website is hosted in the EU. Microsoft may process email data outside the European Economic Area. Where this happens, it is protected by appropriate safeguards under the GDPR, such as the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased (“right to be forgotten”);
- restrict how we process your data;
- receive your data in a portable format;
- object to processing based on our legitimate interests.
To exercise any of these rights, email info@visionit.gr. We will reply within one month, as the GDPR requires. We may ask you to confirm your identity before acting on a request.
You also have the right to lodge a complaint with the Greek supervisory authority: the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifisias 1–3, 115 23 Athens, www.dpa.gr.
7. Security
The website is served only over encrypted connections (HTTPS), runs no scripts and applies strict security policies in the browser. Access to our systems and to personal data is limited to people who need it for their work.
8. Links to other websites
This website links to other websites, such as LinkedIn. When you follow such a link, the other website’s own privacy policy applies, and we are not responsible for how it processes your data.
9. Automated decisions
We do not make decisions about you based solely on automated processing, and we do not profile visitors.
10. Changes to this notice
We may update this notice, for example if the website or the law changes. The current version is always available on this page, with the date of the last update at the top.