Legal

Privacy Policy

Last updated: 3 August 2026

Plain-language summary: We collect your name and email only when you contact us. We use Google Analytics to understand how our site is used — but only if you consent. We never sell your data. You can request deletion at any time by emailing info@datadynamics.agency.

1. Who We Are

Data Dynamics is a performance marketing consultancy based in Athens, Greece. We provide digital advertising strategy, campaign management, and analytics services to businesses.

For the purposes of the EU General Data Protection Regulation (GDPR) and applicable Greek data protection law, Data Dynamics is the data controller for the personal data described in this policy.

Business name: Data Dynamics

Address: Athens, Greece

Email: info@datadynamics.agency

Website: www.datadynamics.gr

2. Personal Data We Collect

2.1 Information you provide directly

When you submit our contact form, we collect:

  • Your name
  • Your email address
  • The content of your message or enquiry

We do not collect payment information directly — if applicable, payments are handled by third-party providers under their own privacy policies.

2.2 Information collected automatically

When you visit our website, we automatically collect certain technical information — but only if you have consented to analytics cookies. This includes:

  • Anonymised IP address
  • Browser type and version
  • Device type and operating system
  • Pages you visit and time spent on each page
  • The source through which you arrived at our website (referrer URL)
  • Geographic region (country/city level, derived from anonymised IP)
  • Session and interaction data (clicks, scroll depth)

This data is collected via Google Analytics 4. If you decline analytics cookies, no analytics data is sent to Google.

3. How We Use Your Data

PurposeData usedLegal basis
Responding to your enquiry and communicating with youName, email, messageLegitimate interest
Understanding how visitors use our website and improving our contentUsage and analytics dataConsent
Complying with legal obligationsAny relevant dataLegal obligation
Protecting our rights and interests in the event of a disputeAny relevant dataLegitimate interest

5. Third-Party Service Providers

We share data with the following trusted third parties who process data on our behalf. Each is bound by a data processing agreement and appropriate safeguards.

Formspree, Inc.

Purpose: Contact form processing — receives form submissions and forwards them to us.

Data processed: Name, email address, message content

Location: United States

Privacy policy: formspree.io/legal/privacy-policy

Google LLC (Google Analytics 4)

Purpose: Website analytics and performance measurement. We have enabled IP anonymisation and use Google Consent Mode v2, so no analytics data is sent unless you consent.

Data processed: Anonymised usage data, device and browser information, geographic region

Location: United States (global infrastructure)

Privacy policy: policies.google.com/privacy

Vercel, Inc.

Purpose: Website hosting and global content delivery.

Data processed: Server request logs, IP addresses (temporarily, for security and reliability)

Location: United States (global CDN)

Privacy policy: vercel.com/legal/privacy-policy

We do not sell your personal data to any third party, nor do we share it for advertising, profiling, or direct marketing purposes other than as described above.

6. International Data Transfers

Our service providers (Formspree, Google, Vercel) are based in the United States. Transfers of your personal data to the US are protected by:

  • Standard Contractual Clauses (SCCs) approved by the European Commission under Article 46(2)(c) GDPR
  • EU-US Data Privacy Framework certification (Google LLC is a certified participant)
  • Appropriate technical and organisational security measures applied by each provider

Where we are unsatisfied that a transfer can be made with adequate protection, we will not make that transfer.

7. Data Retention

We keep your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Specific retention periods:

Contact form enquiries

Up to 24 months from the date of submission, or until our correspondence is concluded and there is no reasonable expectation of further contact.

Google Analytics data

14 months within Google Analytics, after which it is automatically deleted by Google.

Web server logs (Vercel)

Up to 30 days, retained for security and infrastructure purposes.

Cookie consent preference

Stored in your browser's localStorage indefinitely until you clear it or change your preference.

8. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights. We will respond to any request within one calendar month of receipt. There is no charge for exercising your rights.

Right of access (Article 15)

You can request a copy of the personal data we hold about you, along with information about how we process it.

Right to rectification (Article 16)

You can ask us to correct any personal data that is inaccurate or to complete data that is incomplete.

Right to erasure — 'right to be forgotten' (Article 17)

You can ask us to delete your personal data. This right applies in certain circumstances, such as where the data is no longer necessary for the purpose it was collected, or where you withdraw consent. Some exceptions apply (e.g. where we are required to retain data by law).

Right to restriction of processing (Article 18)

You can ask us to restrict how we use your data in certain circumstances — for example, while we investigate a dispute about accuracy.

Right to data portability (Article 20)

Where we process your data by automated means on the basis of consent or contract, you can request that we provide your data in a structured, commonly used, machine-readable format.

Right to object (Article 21)

You have the right to object to processing based on legitimate interests or for direct marketing. Where you object on legitimate interest grounds, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Rights related to automated decision-making (Article 22)

We do not make decisions that produce significant effects on individuals solely by automated means. This right therefore does not currently apply to our processing.

Right to withdraw consent

Where we process your data on the basis of consent (such as analytics cookies), you may withdraw that consent at any time using the cookie settings in our footer. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please email us at info@datadynamics.agency. Please include your full name and email address so we can identify you. We may ask for additional verification in appropriate circumstances.

9. Right to Complain

If you believe we have not handled your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with a supervisory authority. In Greece, the competent authority is the Hellenic Data Protection Authority (HDPA) (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα — ΑΠΔΠΧ):

Hellenic Data Protection Authority

1–3 Kifissias Avenue, 115 23 Athens, Greece

Phone: +30 210 6475 600

Email: contact@dpa.gr

Website: www.dpa.gr

We would appreciate the opportunity to address your concern directly before you approach the HDPA. Please contact us first at info@datadynamics.agency.

10. Cookies

We use cookies and similar technologies to analyse how our website is used. Full details — including a list of specific cookies, their duration, and how to manage them — are available in our Cookie Policy.

11. Security

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

  • HTTPS encryption for all data transmitted to and from our website
  • Use of reputable, security-certified hosting and infrastructure providers
  • Limiting access to personal data to those who have a genuine need
  • Regular assessment of our third-party processors' security posture

No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee its absolute security.

12. Children's Privacy

Our website is directed at business professionals and is not intended for children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you are a parent or guardian and believe we have inadvertently collected information from a child, please contact us immediately at info@datadynamics.agency and we will take steps to delete that information.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will update the “Last updated” date at the top of this page. Where changes are material, we will take reasonable steps to notify active clients directly. Your continued use of our website after changes are posted constitutes your acknowledgement of the updated policy.

15. Contact Us

For any questions about this Privacy Policy, to exercise your data rights, or for any other data protection enquiry: