Privacy Policy

1. Who this policy applies to

This Privacy Policy explains how personal data is handled when you visit evanchristidis.com, use its contact form, or otherwise contact Evan Christidis about potential services.

The website is a professional portfolio and lead-generation website. It does not provide an online checkout or automatically create a paid client relationship when a form is submitted.

2. Data controller

The controller of personal data described in this policy is:

Evan Christidis Greece Email: hello@evanchristidis.com

No data protection officer has been appointed because one is not currently required for the nature and scale of the processing described here.

3. Personal data collected

3.1 Information you provide through the contact form

The contact form may collect:

• the services you select;
• your name;
• your email address;
• the website or domain you provide;
• the client or organisation category you select in the “You are” field; and
• the information you write in the project-description field.

Please do not include sensitive personal data, passwords, payment-card information, confidential credentials, or other information that is not necessary for the enquiry.

3.2 Information processed when the website is visited

The website is hosted on Vercel. Like other website-hosting infrastructure, the hosting environment may process technical request information needed to deliver and protect the website, such as IP address, date and time of access, requested URL, browser/device information, and security or diagnostic logs.

3.3 Analytics data

Google Analytics 4 (“GA4”) is used through Google Tag Manager (“GTM”) only after you consent to analytics. Analytics is disabled by default and is not intended to load before a positive analytics-consent choice.

Depending on the GA4 configuration, analytics data may include page views, interactions, session statistics, referral information, approximate location, browser/device information, and pseudonymous identifiers used to distinguish users and sessions. The website does not currently use Meta Pixel, TikTok Pixel, LinkedIn Insight Tag, Microsoft Clarity, Hotjar, advertising remarketing pixels, or similar advertising trackers on its own visitors.

Google Search Console is also used to understand aggregate search visibility and performance. It is not used as a separate behavioural tracking tag on this website.

4. Why personal data is used and the legal bases

Personal data may be processed for the following purposes:

4.1 Responding to enquiries and discussing potential work

Information submitted through the contact form or by email is used to understand your request, reply to you, discuss a possible project, prepare a quote, and take steps requested by you before a potential service agreement.

Legal basis: Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract, and Article 6(1)(f) GDPR for related legitimate interests such as managing genuine professional enquiries and correspondence where Article 6(1)(b) does not apply.

4.2 Website operation, security, and abuse prevention

Technical information may be processed to operate the website, maintain availability, diagnose faults, prevent abuse, and protect the website and its infrastructure.

Legal basis: Article 6(1)(f) GDPR, based on the legitimate interest in operating and protecting the website.

4.3 Analytics

GA4 is used to understand how visitors use the website and to improve content, navigation, and performance.

Legal basis: Article 6(1)(a) GDPR (consent). Analytics cookies and equivalent non-essential storage are not intended to be activated until consent is given. Consent may be withdrawn at any time through the website’s Cookie Settings control.

4.4 Legal, accounting, and dispute-related purposes

Information may be kept or used where reasonably necessary to comply with applicable law, establish or exercise legal rights, respond to lawful requests, or defend legal claims.

Legal basis: Article 6(1)(c) GDPR where a legal obligation applies, and Article 6(1)(f) GDPR where processing is necessary for legitimate legal interests.

5. Service providers and recipients

Personal data may be processed by service providers used to operate the website and communications, including:

• Resend, used to transmit contact-form email messages;
• Zoho, used as the email service through which enquiries and replies are handled;
• Vercel, used to host and deliver the website; and
• Google, in connection with Google Tag Manager, Google Analytics 4, and Google Search Console.

These providers may use subprocessors and infrastructure in different countries. They process data according to their applicable terms, privacy documentation, and data-protection arrangements.

Resend’s current published documentation states that email and log data is retained for 30 days on Free, Pro, and Scale plans, while Enterprise retention may vary. A copy of an enquiry received in Zoho may remain in the mailbox for longer in accordance with the retention approach described below.

Personal data is not sold. The website is not currently configured to disclose visitor data to advertising platforms for behavioural advertising or remarketing.

6. International transfers

Some service providers may process personal data outside Greece or the European Economic Area. Where GDPR requires a transfer mechanism, relevant providers may rely on safeguards such as an adequacy decision, the EU-U.S. Data Privacy Framework where applicable, or Standard Contractual Clauses approved by the European Commission.

7. Retention

Personal data is not intended to be kept longer than reasonably necessary for the purpose for which it was collected.

Enquiry and correspondence data is retained for as long as reasonably necessary to communicate with you, assess or provide requested services, maintain appropriate records, comply with legal obligations, or resolve disputes. If an enquiry becomes a client project, relevant correspondence may be retained for the duration of the project and for any additional period reasonably required for contractual, legal, accounting, security, or record-keeping purposes.

Analytics data is retained according to the active Google Analytics property settings and only for as long as reasonably necessary to understand website performance and usage trends. Cookie lifetimes are described in the Cookie Policy.

8. Your rights

Subject to the conditions and exceptions in applicable data-protection law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request erasure of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain personal data in a portable format where the legal requirements are met; and
• withdraw consent at any time where processing is based on consent, without affecting processing that took place before withdrawal.

To exercise a privacy right, email hello@evanchristidis.com. Reasonable information may be requested to verify the request where necessary.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority or, where applicable, another competent supervisory authority.

9. Automated decision-making

The website is not intended to make decisions about you solely by automated means that produce legal effects or similarly significant effects.

10. Security

Reasonable technical and organisational measures are used to protect personal data. No internet transmission or storage system can be guaranteed to be completely secure, so absolute security cannot be promised.

11. Third-party websites

The website may link to third-party websites or services. Their privacy practices are governed by their own policies, not this Privacy Policy.

12. Changes to this policy

This Privacy Policy may be updated when the website, tools, or legal requirements change. The “Last updated” date will be revised when material changes are made.

13. Contact

For privacy questions or requests, contact:

Evan Christidis Email: hello@evanchristidis.com