This policy explains which personal data IDYLI Architects collects through this website, why, for how long and what your rights are, under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.
Who we are
The data controller is:
- Legal name
- Kyriaki Louzi (father’s name: Andrianos)
- Trading as
- IDYLI Architects
- Profession
- Interior decorator services
- Tax ID (ΑΦΜ)
- 108374984
- Tax office
- A′ Athens
- Address
- 12 Omonoias Square, Athens 10564, Greece
- Phone
- (0030) 213 0269 485 · (0030) 693 6652 572
For any question about your personal data, write to us at [email protected].
What we collect and why
- Contact form. Your name, email, phone (optional), the project location, the type and stage of your project, your message and whether you want our newsletter. We use them to answer your enquiry. Legal basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR).
- Personalised proposal (project brief). Your answers about the project (type, service, spaces, area, style, goals, budget, timeline, involvement, notes) and your contact details (name, surname, email, phone, project address, preferred second channel). We use them to study your project and prepare a proposal, and we email a copy of the brief to you and to the studio. Legal basis: steps at your request before a contract (Art. 6(1)(b)), with the consent you give in the form.
- Newsletter and “Notify me”. Your email address, to send studio news or tell you when the collection opens. Legal basis: your consent (Art. 6(1)(a)); you can unsubscribe at any time from the link in every email or by writing to us.
- Comments on the Journal. Your name, email (never published), website (optional) and comment, plus, as WordPress does, your IP address and browser, to prevent spam. Legal basis: our legitimate interest in running a moderated journal (Art. 6(1)(f)). If you tick the box, your browser remembers your name and email for the next comment.
- Cookies and your consent. See the Cookie Policy. We keep your choice and an anonymous record of it (a random ID, the date and the categories you allowed, never your IP address) to be able to prove consent (Art. 7(1)).
- Maps and videos. The studio map (Google Maps) and embedded videos (YouTube, Vimeo) load only after you allow “External media”. Then Google or the video provider receives your IP address and may set cookies under its own policy.
- Statistics and marketing. Tools such as Google Analytics, Google Tag Manager or the Meta Pixel run only if you allow them in the cookie settings; until then they set no cookies (Google Consent Mode). Legal basis: your consent (Art. 6(1)(a)).
- Server logs. Our hosting provider keeps technical logs (IP address, date, page requested, browser) to protect and run the website. Legal basis: legitimate interest (Art. 6(1)(f)).
Who receives your data
Only the studio’s team, and providers who process data on our behalf under a contract: the website hosting provider and our email service. When you allow them: Google (maps, statistics, tags), Meta (advertising measurement) and the video platforms. We never sell your data. We disclose it to public authorities only when the law requires it.
Transfers outside the EU
Google and Meta may process data in the United States. These transfers rely on the EU–US Data Privacy Framework and on the European Commission’s Standard Contractual Clauses.
How long we keep it
- Enquiries and project briefs: up to 2 years after our last contact; if we work together, for the duration of the contract and then for as long as tax and accounting law requires.
- Newsletter: until you unsubscribe.
- Comments: for as long as they are published.
- Records of cookie consent: 24 months.
- Server logs: for a limited period set by the hosting provider.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing and to receive it in a portable format (Articles 15–21 GDPR). Where we rely on consent, you can withdraw it at any time; this does not affect processing carried out before. To exercise your rights, write to [email protected]; we reply within one month.
You can also lodge a complaint with the Hellenic Data Protection Authority, Kifisias 1–3, 115 23 Athens, www.dpa.gr.
Security
The website runs over an encrypted connection (HTTPS), access to submissions is limited to the studio, and the software is kept up to date and backed up.
Children
This website is not addressed to children under 15 and we do not knowingly collect their data.
Automated decisions
We make no decisions based solely on automated processing and we do not create profiles.
Changes to this policy
We may update this policy when the website or the law changes. The date of the last update is shown at the top of the page.
