Privacy Policy
Last updated: 3 October 2026
This Policy explains what personal data we collect when you visit dontmatter.eu and dontmatter.gr, why we need it, how long we keep it and what rights you have, under the EU General Data Protection Regulation 2016/679 (“GDPR”) and applicable Greek law (Laws 4624/2019 and 3471/2006).
1. Data controller
The controller of your personal data is DONTMATTER SINGLE-MEMBER P.C. (DontMatter), Cosmos Offices, 5 Agiou Georgiou, 57001 Thermi, Thessaloniki, Greece, phone +30 2313 008705, email info@dontmatter.gr.
Given the nature and scale of our processing, we are not required to appoint a Data Protection Officer (DPO). For any question about your data, please contact us directly using the details above.
2. What data we collect and why
2.1 Contact form
When you send us a message, we collect what you enter: your name, email, phone (optional), company name (optional) and your message. We use this only to respond to your enquiry.
2.2 Project / collaboration enquiry form
If you are interested in a project or in working with us, we collect your contact details, details about your business (company name, website, your role) and whatever you tell us about your needs, timeline or budget. We use this to assess your request, get in touch and send you a proposal.
If you apply for one of our job openings and upload a CV or portfolio, we use it only to assess your application.
2.3 Technical visit data
Like any website, our servers and our content delivery network (CDN) provider automatically log technical details of each request: IP address, date and time, requested page, referring page, browser and operating system. This is necessary to run the website securely, protect it against attacks and abuse, and diagnose technical problems.
2.4 Analytics and advertising
With your consent, we use cookies and similar technologies to measure website traffic (Google Analytics 4), to measure and improve our advertising campaigns, and to show you relevant ads on other platforms (remarketing). See section 4 and our Cookie Policy for details.
3. At a glance: purpose, legal basis, retention
| Processing | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Contact form | Responding to your enquiry | Legitimate interest (Art. 6(1)(f)) or steps prior to a contract at your request (Art. 6(1)(b)) | Up to 24 months from our last communication |
| Project / collaboration form | Assessing your request, preparing a proposal | Steps prior to a contract at your request (Art. 6(1)(b)) | Up to 24 months from our last communication. If we start working together, for the duration of the engagement and as required by tax law |
| CV / portfolio | Assessing your application | Steps prior to a contract (Art. 6(1)(b)) | Up to 12 months, unless you ask us to delete it sooner |
| Technical data (logs) | Operation, security, abuse prevention | Legitimate interest (Art. 6(1)(f)) | Up to 90 days, unless needed to investigate a security incident |
| Google Analytics 4 | Website traffic statistics | Consent (Art. 6(1)(a); Art. 4(5) of Greek Law 3471/2006) | Up to 14 months |
| Advertising & remarketing | Measuring and optimising campaigns, personalised ads | Consent (Art. 6(1)(a); Art. 4(5) of Greek Law 3471/2006) | As set out in the Cookie Policy, until consent is withdrawn |
| Cookie consent record | Demonstrating and respecting your choices | Legal obligation (Art. 6(1)(c)) | 30 days; after that we ask for your choice again |
4. Advertising and remarketing
We advertise on Google Ads, Meta (Facebook, Instagram), TikTok and ChatGPT (OpenAI). Only if you have accepted advertising cookies, the website activates these platforms’ measurement tools (tags / pixels), which:
- record that you visited the website, which pages you viewed and whether you submitted a form (a conversion);
- allow us to measure how well our ads perform and improve our campaigns;
- allow our ads to be shown to you on other websites and apps (remarketing).
Where you have consented, when you submit a form we may send these platforms your email or phone number in irreversibly hashed form (e.g. Google Enhanced Conversions, Meta Conversions API), solely to measure campaign results more accurately. We never share the content of your messages.
For the collection and transmission of data through the Meta Pixel, we are joint controllers with Meta Platforms Ireland Ltd. Any further processing by each platform is governed by its own privacy policy.
You can withdraw your consent at any time via the “Cookie settings” link at the bottom of every page.
5. Who we share data with
We do not sell, rent or hand over your data to third parties for their own use. To run the website we work with selected service providers who process data only on our behalf, under a written agreement and our instructions:
| Category | Provider | Location |
|---|---|---|
| Hosting | Scaleforce (Simnet), Elastic Cloud Hosting Partner | EU |
| CDN and security | Fastly | EU / USA |
| DNS | ClouDNS | EU |
| Form notification emails | Mandrill (Mailchimp Transactional) | USA |
| Business email | Google Workspace | EU / USA |
| Cookie consent management | Cookie Script | EU |
| Analytics & advertising (consent only) | Google, Meta, TikTok, OpenAI | EU / USA and other countries |
We may also disclose data to public authorities where required by law, or to our legal and accounting advisers where necessary.
6. Transfers outside the European Economic Area
Some providers (e.g. Google, Meta, Fastly, Mandrill, OpenAI) may process data outside the EEA, mainly in the USA. In such cases, transfers rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework (for certified providers) or on the European Commission’s Standard Contractual Clauses, with supplementary safeguards where required.
7. How we protect your data
The website is hosted on EU-based infrastructure and all traffic is encrypted (HTTPS). Access to form submissions is limited to team members who need it to serve you, and we apply technical and organisational measures to protect data against loss, unauthorised access or misuse.
8. Your rights
Under the GDPR you have the right to:
- find out whether we process your data and receive a copy (access);
- correct inaccurate or incomplete data;
- request erasure;
- request restriction of processing;
- object to processing based on our legitimate interest;
- receive the data you provided to us in a structured, machine-readable format (portability);
- withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, email info@dontmatter.gr. We will respond free of charge within one month. We may ask for information to verify your identity. We do not make decisions about you based solely on automated processing.
9. Right to lodge a complaint
If you believe our processing of your data breaches the law, you may lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, Greece, tel. +30 210 6475600, www.dpa.gr) or with the supervisory authority in the EU country where you live or work. We would appreciate the chance to resolve the issue with you first.
10. Children
The website is intended for businesses and professionals. We do not knowingly collect data from anyone under 15.
11. Changes to this Policy
We may update this Policy, for example when our tools or the law change. The version in force is always the one published on the website.
12. Contact
DONTMATTER SINGLE-MEMBER P.C., Cosmos Offices, 5 Agiou Georgiou, 57001 Thermi, Thessaloniki, Greece · +30 2313 008705 · info@dontmatter.gr