PRIVACY POLICY

Last updated: 3 October 2026

This Privacy Policy explains how AthensEconomy collects and processes personal data through athenseconomy.gr, particularly when a visitor contacts us or uses our preliminary assessment tools.

1. Data Controller

The controller responsible for the processing of personal data is:

Maria Yurchenko — Sole Proprietorship

Trading name: AthensEconomy

28 Ikoniou Street, Nea Smyrni, Athens, 17123, Greece

G.E.MI. (General Commercial Registry): 165361203000

EUID: ELGEMI.165361203000

Email for privacy-related matters: info@athenseconomy.gr

2. Scope

This Privacy Policy covers the processing of personal data through:

• the general Contact Form;
• the Funding Pre-Check and related preliminary funding assessments;
• the Business & Digital Pre-Check;
• communications and the management of enquiries arising from the above processes.

3. Personal Data We Collect

The data collected depends on the form used and on the information the user chooses to provide.

General Contact Form

We may collect:

• full name or business name;
• email address;
• telephone / WhatsApp number;
• category or subject of interest;
• information relating to a business, investment or real-estate enquiry;
• property-related information, where relevant to the enquiry;
• the content of the message and other information the user chooses to provide.

Funding Pre-Check

We may collect:

• contact details;
• business information, such as business name, tax identification number, legal form and registered location;
• information about business activity and KAD (Greek business activity code);
• information about the proposed investment and budget;
• information relating to business size, financing and investment readiness;
• other information relevant to the preliminary assessment of the enquiry.

Business & Digital Pre-Check

We may collect:

• contact details;
• information about the business, its activities and location;
• website address;
• links to publicly available business or professional profiles and platforms;
• business and digital objectives;
• information concerning the business's needs, challenges or priorities.

Please do not provide information through free-text fields that is not necessary for the assessment of your enquiry, particularly special categories of personal data.

4. Purposes of Processing

Depending on the nature of the enquiry, personal data may be used:

• to receive, review and respond to enquiries;
• to carry out a preliminary assessment of potential funding opportunities;
• to carry out a preliminary business and digital assessment;
• to enable human review of the information submitted;
• to communicate with the person concerned regarding their specific enquiry;
• to organise and follow up the relevant case.

The Pre-Check processes are preliminary and informational in nature and do not constitute an official approval of funding, investment or any other service.

5. Legal Basis for Processing

Where the processing is necessary to review and manage an enquiry submitted at the initiative of the person concerned for the purpose of exploring or potentially obtaining services from AthensEconomy, the processing is based, where applicable, on Article 6(1)(b) of the General Data Protection Regulation (GDPR), namely taking steps at the request of the data subject prior to entering into a contract.

Where consent is requested for a specific and separate processing activity and that processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.

6. Provision of Personal Data

The information identified as mandatory in the relevant forms is necessary for the submission and management of the enquiry.

If this information is not provided, AthensEconomy may be unable to receive, assess or respond to the relevant enquiry.

Providing other information identified as optional is not mandatory.

7. Where and How Personal Data Is Processed

Infrastructure provided by Cloudflare is used for the technical operation of the website, forms and related services.

For the Pre-Check forms, submitted data is stored within the technical infrastructure used to manage the relevant enquiries.

The Resend service is used to send email notifications. Relevant messages are also delivered through the email systems used by AthensEconomy.

Under the current implementation, the general Contact Form does not create a separate record of the enquiry in the Pre-Check database. The enquiry is transmitted to AthensEconomy by email.

AthensEconomy does not sell personal data submitted through these forms.

8. Recipients and Service Providers

Personal data may be accessed by persons who need to process it for the review and management of the relevant enquiry.

For the technical operation of the website and forms, data storage and email transmission, personal data may also be processed by service providers used by AthensEconomy, in particular Cloudflare and Resend, as well as the relevant email service providers.

9. Transfers of Personal Data Outside the European Economic Area

Certain technical service providers used by AthensEconomy may process personal data outside the European Economic Area (EEA), including in the United States.

Where personal data is transferred to a country outside the EEA, the mechanisms and appropriate safeguards provided for under applicable data protection law are used, such as, where applicable, the European Commission's Standard Contractual Clauses (SCCs).

For further information regarding the safeguards applicable to international transfers of personal data, you may contact AthensEconomy at info@athenseconomy.gr.

10. Data Retention

Personal data is retained for as long as necessary to review and manage the enquiry, conduct the related communication and, where required, comply with legal obligations or establish, exercise or defend legal claims.

The retention period may vary depending on the nature of the enquiry, the progress of the relevant case and the systems through which the processing takes place.

When personal data is no longer necessary for the above purposes and there is no other lawful reason for retaining it, it should be deleted or anonymised, as appropriate.

11. Automated Decision-Making

The Pre-Check processes may use technical rules or indicators to organise and preliminarily assess the information submitted.

No decision based solely on automated processing is made that results in an official approval or rejection of funding, investment or any other service.

The relevant information and indicators may be reviewed by a person.

12. Links and Public Professional Profiles

Where a user voluntarily provides a link to a website or a publicly available business or professional profile as part of the Business & Digital Pre-Check, that link may be used to review the publicly available business and digital presence relevant to the enquiry.

Providing such a link does not mean that AthensEconomy transfers the personal data contained in the form to the relevant platform.

13. Data Subject Rights

Under the GDPR and subject to the conditions provided by applicable law, you may, where applicable, exercise:

• the right of access to personal data concerning you;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure;
• the right to restriction of processing;
• the right to object to processing, where applicable;
• the right to data portability, where applicable;
• the right to withdraw consent where the relevant processing is based on consent.

To exercise your rights, you may contact AthensEconomy at info@athenseconomy.gr.

AthensEconomy may request only such information as is reasonably necessary to verify the identity of the person making the request before responding to it.

14. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the:

Hellenic Data Protection Authority

You may also contact the Authority through its official website.

15. Security

AthensEconomy implements appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or unjustified disclosure.

However, no system for transmitting or storing data over the internet can be considered absolutely secure.

16. Changes to this Privacy Policy

This Privacy Policy may be updated when AthensEconomy's services, personal-data processing activities, technologies used or applicable legal requirements change.

The date of the latest update is displayed at the beginning of this page.