Privacy Policy

Data controller

The controller of personal data submitted through this website is BC & T BUSINESS CONSULTING & TECHNOLOGIES SERVICES Ι.Κ.Ε., established in Corfu, Greece.

For any matter concerning the processing of your data, you can reach us using the details set out at the end of this policy.

What data we collect

The website is static and has no user accounts. We collect data only when you voluntarily complete the contact form.

• Required fields: your name, your email address and the text of your message.
• Optional fields: company or organisation name, telephone number, type of enquiry, estimated investment range and preferred contact method.
• Confirmation of your consent and the time at which the form was submitted.
• The language the enquiry was submitted in, so that we reply in the same language.
• Technical data processed by our hosting provider for security and abuse prevention, such as the IP address the submission came from.

Purpose and legal basis

We use the data solely to respond to your enquiry and, where it develops, to continue the correspondence relating to a possible engagement.

The legal basis is your consent, given explicitly when you submit the form (Article 6(1)(a) GDPR), together with steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR). Processing of technical data for the security of the website relies on our legitimate interest (Article 6(1)(f) GDPR).

We do not use your details to send newsletters or marketing messages. You are not automatically subscribed to anything. If such an option is offered in future it will require separate, explicit consent.

Processors acting on our behalf

We do not sell data and we do not pass it to third parties for commercial purposes. We use the following providers, which act as processors under contract:

• Cloudflare, Inc. — website hosting, content delivery and protection against malicious traffic. The form submission is handled by a function running on Cloudflare’s infrastructure.
• Sendinblue SAS (Brevo) — delivery of your message as an email to BC&T and, where applicable, a short confirmation message to you.
• BC&T’s email provider, which receives and stores your message.

Transfers outside the EEA

Some of the providers above may process data in countries outside the European Economic Area. Where that happens, the transfer takes place on the basis of the European Commission’s standard contractual clauses or another lawful transfer mechanism.

Retention

We keep the correspondence generated by the form for as long as we need it to answer your enquiry and to manage any engagement that follows.

Enquiries that do not lead to an engagement are deleted once there is no longer a reason to keep them. Where correspondence relates to a contract or to tax and accounting obligations, it is retained for as long as the applicable law requires.

Cookies and analytics

The website uses no tracking cookies, no advertising cookies and no profiling cookies. We do not use Google Analytics or comparable tools that would require consent.

Further detail is set out on the cookies page.

Your rights

Under the General Data Protection Regulation (EU) 2016/679 you have the following rights:

• Access to the data we hold about you.
• Rectification of inaccurate or incomplete details.
• Erasure of your data, where no lawful ground for keeping it remains.
• Restriction of processing.
• Portability of your data.
• Objection to processing based on legitimate interest.
• Withdrawal of your consent at any time, without affecting the lawfulness of processing carried out beforehand.
• Lodging a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Security

All communication with the website takes place over an encrypted connection (HTTPS). Credentials for the services we use are held as encrypted environment variables on the server side and are never exposed to your browser.

No method of transmission or storage is completely secure. For particularly sensitive information, please share it with us after we have made contact rather than through the form.

Changes to this policy

We may update this policy, in particular if the services we use change. The date of the most recent update appears at the top of this page.