1. Who we are (Data Controller)
Not Just Pixels is a web design agency based in Athens, Greece (“we”, “us”). We act as the Data Controller for personal data processed through this website.
Contact (privacy): info@notjustpixels.gr
2. What data we collect
We collect only what we need to communicate with you.
- Contact Form: name and email address (and any information you include in your message)
We do not use your contact form details for marketing, newsletters, or unrelated purposes.
3. Why we process your data (purposes and legal bases)
We process personal data for the following purposes:
- To respond to your inquiry and communicate with you
Legal basis: legitimate interests (GDPR Art. 6(1)(f)) and, where relevant, steps prior to entering into a contract (GDPR Art. 6(1)(b)).
4. Analytics and cookies (Google Analytics 4)
We use Google Analytics 4 (GA4) to understand how visitors use our website and to improve performance and content.
- We use GA4 for aggregated statistics and do not use it to identify you.
- We use a Cookie Consent Banner and load non-essential analytics only after your consent.
- We respect Do Not Track (DNT) signals and treat them as an opt-out for analytics.
You can update your cookie preferences anytime via the banner (or any “Cookie Settings” link available on the website).
5. Sharing your data
We do not sell your personal data. We may share data only when necessary to operate the website and provide communications, such as:
- website hosting / infrastructure providers
- email service providers used to receive and reply to messages
- Google Analytics (Google LLC) for traffic measurement (where consent is given)
6. International transfers
Some providers may process data outside the European Economic Area (EEA). Where transfers occur, we rely on appropriate safeguards under GDPR (such as adequacy decisions and/or contractual and technical measures, as applicable).
7. How long we keep your data (retention)
- Contact Form submissions: kept for up to 12 months, unless we need to keep them longer to handle an ongoing request, provide services, comply with legal obligations, or establish/exercise legal claims.
- Analytics data: retained according to our GA4 settings and only where you have provided consent.
8. Security
We apply reasonable technical and organizational measures to protect your data (access controls, least-privilege access, and secure hosting practices). No system is perfect, but we take security seriously.
9. Your rights under GDPR
Subject to the conditions and limitations of GDPR, you have the right to:
- access your personal data
- rectify inaccurate or incomplete data
- delete your data (“right to be forgotten”)
- restrict processing
- object to processing based on legitimate interests
- data portability (where applicable)
- withdraw consent at any time (where processing is based on consent, e.g., analytics cookies)
10. How to exercise your rights
Email us at info@notjustpixels.gr with your request. We may ask for information necessary to confirm your identity before we act on your request.
11. Complaints
You have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).
12. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date above will always show when the latest version took effect.