Teraburn is committed to protecting your personal data. This policy explains what data we collect, why we use it and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data Controller
The data controller for your personal data is:
- Name: Avyerinos Kattopatis (Teraburn)
- Location: Cyprus
- Email: [email protected]
- Phone: +357 96522464
For any matter related to the protection of your data, contact us at the email above.
2. What Data We Collect
We collect only the data necessary for our operations:
2.1 Data you provide to us:
- Full name
- Email address
- Phone number (optional)
- Message / communication content
- Service of interest
2.2 Automatically collected data:
- IP address
- Browser type and version
- Pages visited and time spent
- Visit source (referrer)
- Technical operation cookies
3. Purpose and Legal Basis of Processing
| Purpose | Legal Basis |
|---|
| Responding to a contact request | Art. 6(1)(b) GDPR (pre-contractual measures) |
| Providing web design services | Art. 6(1)(b) GDPR (performance of contract) |
| Sending informational emails, only with consent | Art. 6(1)(a) GDPR (consent) |
| Website traffic analysis | Art. 6(1)(f) GDPR (legitimate interest) |
| Compliance with legal obligations | Art. 6(1)(c) GDPR (legal obligation) |
4. Data Retention Period
- Contact form data: 3 years from last contact (7 years if a commercial relationship develops).
- Client data: 7 years after the end of the collaboration.
- Newsletter / marketing: Until you withdraw your consent.
- Website logs: 90 days.
After these periods expire, data is deleted or anonymised.
5. Sharing with Third Parties
We do not sell or rent your data. We may share data only with:
- Hosting providers: For technical operation (servers within the EU/EEA).
- Google Analytics / Search Console: Anonymised traffic statistics.
- Email tools: Only with explicit consent.
- Judicial authorities: When required by law.
All third-party providers are bound by DPAs compliant with GDPR.
6. Your Rights
- Access (Art. 15): Receive a copy of the data we hold about you.
- Rectification (Art. 16): Request correction of inaccurate data.
- Erasure (Art. 17): The "right to be forgotten", where no legal obligation requires retention.
- Restriction (Art. 18): Restrict processing under certain conditions.
- Portability (Art. 20): Receive your data in a structured, commonly used format.
- Objection (Art. 21): Object to processing based on legitimate interest.
- Withdraw consent: At any time, without retroactive effect.
Contact us at [email protected]. We respond within 30 days.
7. Cookies
- Essential (session): For the contact form (CSRF protection). No consent required.
- Analytics (Google Analytics): Anonymised measurement. Only with consent.
You can manage or disable cookies through your browser settings.
Change cookie preferences
8. Data Security
- SSL/TLS encryption on all communications
- Storage on secure servers within the EU
- Access only by authorised personnel
- Regular backups and security updates
In the event of a high-risk data breach, we will notify you within 72 hours as required by GDPR.
9. International Data Transfers
We may transfer data outside the EU/EEA only with appropriate safeguards:
- European Commission adequacy decision
- Standard Contractual Clauses (SCCs)
- Data Privacy Framework (EU-US)
10. Changes to This Policy
We may periodically update this policy. Significant changes will be announced on our website. Continued use after changes constitutes acceptance.