How we handle your data.

Who is responsible

Revagon LP (“Revagon”, “we”), Perissa, Santorini 84703, Greece, is the controller of the personal data described here, under the General Data Protection Regulation (Regulation (EU) 2016/679) and Greek Law 4624/2019. Reach us at info@revagon.com or +30 22861 86636. We are a small company and are not required to appoint a data protection officer.

What we collect, and why

Only what the site needs to work and to answer you.

• Contact form — your name, email address and message, and the time you sent it. We use them to answer your enquiry and, if you ask for one, to prepare a proposal. Legal basis: our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR) and, where you request a proposal, steps preliminary to a contract (Art. 6(1)(b)). You are not added to any marketing list.
• Spam protection — when you press Send, the form loads Google reCAPTCHA v3, which looks at your IP address, browser details and how you interacted with the page to tell people from bots. It runs only at that moment, not while you read. Legal basis: legitimate interest in keeping the form usable (Art. 6(1)(f)). Google’s privacy policy and terms apply.
• Analytics — only if you accept it in the cookie box, Google Analytics 4 records page views, device type and an approximate location derived from a truncated IP address. It stays off until you say yes, and you can change your mind at any time in Cookie settings . Legal basis: consent (Art. 6(1)(a) GDPR; Art. 4(5) of Greek Law 3471/2006).
• Hosting — the site is served by Firebase Hosting (Google). Like any web server it keeps technical logs of requests, including IP addresses, for security and to keep the service running. Legal basis: legitimate interest (Art. 6(1)(f)).
• Your settings — your cookie choice and your light/dark theme are stored in your browser’s local storage (revagonCookieConsent, revagonCookieBar, revagonTheme). They hold nothing beyond the choice itself, never leave your device, and stay until you clear your browser data.

Who else sees it

We do not sell personal data or share it for advertising. The one third party involved is Google (Google Ireland Ltd and Google LLC), acting as our processor: the form’s message is relayed to our inbox through Google Apps Script, and Google also provides reCAPTCHA, Analytics and hosting. Some of this processing happens on servers in the United States; those transfers are covered by the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.

We disclose data when the law obliges us to, and not otherwise.

How long we keep it

• Enquiries: while we are in conversation, and up to 24 months after our last exchange. If an enquiry becomes a project, the correspondence stays with the project records for as long as Greek contract and tax law requires.
• Analytics data: up to 14 months, after which Google Analytics deletes or aggregates it.
• Hosting logs: for a limited period on Google’s infrastructure, for security purposes.

Your rights

Under the GDPR you can ask us for access to your data, to correct or delete it, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent (analytics) you can withdraw it at any time; where we rely on legitimate interest you can object. Write to info@revagon.com — we answer within one month.

If you believe we have handled your data wrongly, you can complain to the Hellenic Data Protection Authority, Kifissias 1-3, 115 23 Athens, www.dpa.gr, or to the supervisory authority in your own EU country.

Security, children, changes

The site is served over HTTPS only. Enquiries land in a mailbox that only Revagon staff can read. The site collects no payment details.

The site is addressed to businesses and is not directed at children; we do not knowingly collect data from anyone under 15.

If we change this notice we will publish the new version here with a new date. Questions go to info@revagon.com.