What this site
does with your data

Who the controller is

The data controller is OBSITH — a sole proprietorship (Ατομική Επιχείρηση) established and registered in Greece, EU VAT EL134747475, ΓΕΜΗ 195473709000. Full registration details are on the legal notice. Reach us at hello@obsith.com.

What is collected, and only when

Only when you submit the contact form, and only what the form asks for:

• Your email address — required, because it is the only way to reply.
• Your name and company — optional, so a reply can be addressed properly.
• The kind of enquiry and your message — what you choose to tell us.
• Technical facts that arrive with any web request — the originating IP address and the country the request came from. These are used to rate-limit the form and to verify the bot challenge, not to identify you.

The form carries a hidden field that only automated submitters fill in. If it is filled, the message is discarded.

There are no analytics on this site and no advertising. Nothing follows you between pages, and nothing is shared with a third party for marketing.

Why, and on what legal basis

To read your enquiry and answer it. The lawful basis is our legitimate interest, and yours, in corresponding about work you have asked us about (Article 6(1)(f) GDPR). If your message leads to a project, the basis for continuing to hold it becomes the performance of that contract.

Who else sees it

• Our hosting and mail provider serves this site and delivers the message to our inbox. It processes the data on our instructions.
• The bot challenge on the form is provided by the same host and sees the technical request data only, never your message.

Nothing is sold, and nothing is transferred to anyone for their own purposes.

How long it is kept

Enquiries that do not lead to work are deleted within 24 months. Enquiries that become a project are kept for as long as the project needs and then for the period Greek accounting and tax law requires. Ask us to delete yours sooner and we will, unless the law requires us to keep it.

Your rights

You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict what we do with it, to receive it in a portable form, or to object to our using it at all. Write to hello@obsith.com. We may ask you to evidence your identity first, so that your data is never disclosed to anyone but you.

If you think we have handled your data badly you can complain to the Hellenic Data Protection Authority (dpa.gr), or to the supervisory authority where you live.

If you are in the United Kingdom

We have appointed a UK representative under Article 27 of the UK GDPR: DataRep. You may contact them about your data instead of us, in any of these ways:

• Email datarequest@datarep.com, quoting OBSITH / OreML in the subject line
• The form at datarep.com/data-request
• By post to DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom

Address your letter to DataRep and not to us — post addressed to us may not reach them. Please name OBSITH / OreML clearly so it can be routed back.

Cookies

This site sets no cookies of its own and no tracking cookies of any kind. If you turn the music on, that preference is remembered in your own browser's local storage — it never leaves your device and we never see it. The bot challenge on the contact form may set what it needs to work; it runs only on that page.