Skip to content

Privacy Policy

Last updated: June 4, 2026

1. Data controller

VSME Hellas — Dr. Dimosthenis Chatzinikolaou Email: contact@vsme-hellas.gr

The processing of personal data is governed by the General Data Protection Regulation (Reg. (EU) 2016/679 — GDPR) and Law 4624/2019 (the national implementation of the GDPR).

3. What data we collect

In the course of contact through the website or during an engagement, we may collect:

  • Contact details: full name, email, phone
  • Business details: company name, VAT number (ΑΦΜ), business activity code (ΚΑΔ), size
  • Business data: the ESG information the client provides to prepare the VSME statement

4. Purpose of processing

  • Responding to contact requests
  • Preparing and delivering contractual services (VSME statement, advisory services)
  • Complying with legal obligations (tax, social security)

5. Retention period

  • Contact data: 24 months from the last contact
  • Engagement business data: 12 months after delivery, unless extended by a legal obligation
  • Tax / accounting data: 5 years (Tax Procedure Code)

6. Data recipients

Your data is not shared with third parties, except:

  • An accounting office for issuing invoices (only the required tax details)
  • Judicial authorities, if requested by a lawful court order

To operate the website and the contact form, we use the following providers as data processors, bound by their terms and by EU law:

  • Cloudflare, Inc. — website hosting, content delivery network (CDN), inbound email routing (Email Routing), execution of the contact form (Pages Functions), and anonymous traffic analytics (Cloudflare Web Analytics) at the edge network. The analytics are collected without cookies, without personal identifiers, and without fingerprinting or cross-site tracking.
  • Resend (Resend, Inc. — EU/Ireland region) — relaying to our email the messages you submit through the contact form. It processes only the details you fill in on the form (full name, email, business details, description of need), solely to send the message to us.

7. Your rights

Under the GDPR, you retain the rights of:

  • Access (Article 15)
  • Rectification (Article 16)
  • Erasure (Article 17)
  • Restriction of processing (Article 18)
  • Portability (Article 20)
  • Objection (Article 21)

To exercise any right, email contact@vsme-hellas.gr.

8. Complaint to the HDPA

You retain the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

9. Cookies

The website does not use advertising or tracking cookies. It uses only technically necessary cookies for its operation (theme preference). The traffic analytics (Cloudflare Web Analytics) operate without cookies. No consent is required for technically necessary cookies (Article 5(3) of Directive 2002/58/EC).

10. Data security

  • Communication solely over encrypted channels (TLS/SSL)
  • Storage in end-to-end encrypted cloud storage (the provider has no access to the content)
  • Local working files on a fully encrypted hard drive (full-disk encryption)
  • Versioned backups in a separate encrypted location (encrypted snapshots)
  • Data access only by the data controller

11. Policy changes

We reserve the right to update this policy. The date of the last update appears at the top.