Privacy policy

Who we are

The business responsible for your data is “Christodoulakis – Wooden Creations”, 1st km Adele, 741 50 Rethymno, Crete, Greece, email [email protected].

What data we collect

What you send us with the request form: first name, last name, email address, phone number (if you give it), your preferred way of contact, the type of project, your message and any photos or drawings you attach.

To protect the form from abuse, we keep a cryptographic fingerprint of your IP address with the request (never the address itself); it is deleted after one day.

Why we use it

To reply to your request and prepare a quotation for you (Article 6(1)(b) of the General Data Protection Regulation: steps prior to entering into a contract). The IP fingerprint, the server logs and the statistics (see below) serve the security and improvement of the website (Article 6(1)(f): legitimate interest). We do not sell your data, we do not pass it on to third parties for advertising and we do not send you newsletters.

Only those who need to see your data do: we, the provider that hosts the website and our email provider, both only so that these services work.

How long we keep it

As long as needed for your request and a possible collaboration. A completed request (whether or not it led to a collaboration) is deleted automatically, together with its files, 24 months after its last change; any details needed for our accounting records are kept for as long as the law requires. You can ask us to delete your request earlier, at any time.

Our nightly backups keep what was deleted (a request, the IP fingerprint) for up to 14 days and the files for up to 4 weeks; after that they are deleted too. The email that notifies us of each request (with its details and files) stays in our mailbox until we delete it.

Cookies and statistics

The website uses no cookies for its visitors. Your choice of language (if you close the language bar or switch language) is stored only in your browser.

To know how many people visit us, we use cookie-free statistics (Umami) on our own server: we count which pages are opened, where the visit came from, which buttons were used (phone, email, map, language switch, sending the form with the type of project), the device, operating system, browser and its language, the screen size, and the country, region and city. The IP address is not stored: it is used only for the location and, together with the browser, for a visit code that changes every month; we do not identify visitors.

Like every server, ours keeps a log of the requests it receives (IP address, time, page, browser) for a limited time, for the security of the website; these logs are deleted automatically.

Your rights

You can ask for access to your data, its correction, deletion or the restriction of its use, receive it in electronic form (portability) or object to its use, by writing to [email protected]. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).