Start a project

Privacy Policy

How NexSite handles personal data on nexsite.gr: what we collect, why, for how long, and the rights you have.

Last updated: 6 October 2026

1. Who is responsible

The controller of the personal data processed through nexsite.gr is:

Name
NexSite

We have not appointed a Data Protection Officer, as the law does not require one for our activities. For anything concerning your data, write to hello@nexsite.gr.

2. What this policy covers

This policy covers the website nexsite.gr in all its language versions. It does not cover the client portal at app.nexsite.gr or the work we carry out for clients; these are governed by the information provided there and by our agreements with clients.

3. Visiting the website

When you open a page, our web server automatically records technical information in its log files:

  • your IP address;
  • the date and time of the request;
  • the page or file requested and whether it was delivered;
  • the page you came from, if your browser sends it;
  • your browser and operating system (user agent).

Purpose: to deliver the website, keep it secure and investigate errors or misuse. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). The log files are rotated weekly and deleted automatically after about five weeks, unless a specific entry is needed for longer to investigate a security incident.

Browsing the website involves no third parties: pages, fonts, images and code are all served from our own server. We use no analytics, advertising or social-media tracking.

4. Contacting us

When you send the contact form, we receive your name, your email address, the type of project you select, your message, and the language of the page you used.

To keep automated spam out, the form checks how long it took to fill in, contains a hidden field that people do not see, and limits the number of submissions per connection. For this limit we keep a one-way (hashed) value derived from your IP address for up to one hour; the form does not store the IP address itself.

Purpose: to reply to you and, if you wish, to prepare a proposal. Legal basis: your consent, given with the checkbox on the form (Art. 6(1)(a) GDPR), and, where your enquiry concerns a possible project, steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). The same applies when you email or call us directly.

Providing these details is neither a legal nor a contractual requirement, but without your name, email address and message we cannot answer you. Please do not send sensitive information (for example about health) through the form.

Retention: enquiries that do not lead to a collaboration are deleted no later than 24 months after our last contact. If we start working together, our correspondence becomes part of the client file and is kept for as long as the collaboration lasts and afterwards for as long as Greek tax and commercial law requires.

5. Who receives your data

We do not sell personal data and do not share it for advertising. Only the following service providers process it on our behalf, under agreements that bind them to the obligations of the GDPR (Art. 28 GDPR):

  • our hosting provider, whose server for nexsite.gr is located in Greece (website and server logs);
  • Resend, Inc. (USA), which delivers each contact-form submission to our mailboxes by email;
  • Google (Google Workspace and Gmail), which hosts our email accounts, where enquiries and correspondence are stored.

Where necessary, we may also share data with our accountants and legal advisers, who are bound by confidentiality, or with public authorities where the law requires it.

6. Transfers outside the EU

Resend and Google may process data in the United States. Such transfers rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework where the recipient is certified under it, and otherwise on the Standard Contractual Clauses adopted by the Commission (Arts 45 and 46 GDPR). You can ask us for more information about these safeguards at hello@nexsite.gr.

7. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you and receive a copy;
  • have inaccurate data corrected;
  • have your data erased;
  • have processing restricted;
  • receive the data you provided in a structured, machine-readable format (data portability);
  • object at any time to processing based on our legitimate interests;
  • withdraw your consent at any time, without affecting processing carried out before the withdrawal.

To exercise any of these rights, write to hello@nexsite.gr. We reply within one month; for complex requests this period may be extended by two further months, in which case we will tell you why. We may first ask you to confirm your identity.

8. Right to lodge a complaint

If you believe that we process your data unlawfully, you can lodge a complaint with the Hellenic Data Protection Authority (1–3 Kifisias Avenue, 115 23 Athens, Greece, www.dpa.gr) or with the supervisory authority of the EU country where you live or work. We would appreciate the chance to address your concern first.

9. Automated decisions

We do not make decisions about you based solely on automated processing, and we do not create profiles.

10. Children

This website is intended for businesses and adults. We do not knowingly collect data from children under 15, the age of digital consent in Greece.

11. Security

The website is served only over an encrypted connection (HTTPS). Access to enquiries and to our systems is limited to the people who need it, and access credentials are kept outside the public website.

12. Changes to this policy

We update this policy whenever our processing changes. The date at the top shows the current version, and we point out significant changes on this page.