Last updated: 5 November 2026.
1. Who is responsible
The controller of personal data processed through gelastifraoula.gr is ΑΘΗΝΑ ΤΣΙΑΚΑ ΚΑΙ ΣΙΑ Ε.Ε., trading as Gelasti Fraoula, GEMI 186563054000. Registered address: ΘΕΣΗ ΜΑΡΜΑΡΑ ΕΠΑΡΧΙΑΚΗ ΟΔΟ ΛΑΜ, ΛΑΜΙΕΩΝ / ΦΘΙΩΤΙΔΑΣ, 35100, Greece. Contact for privacy matters: smilestrawberry92@yahoo.com.
This notice concerns browsing this website and related email enquiries. It does not cover the separate processing associated with children’s enrollment, attendance or health records. The website has no contact or enrollment forms, visitor accounts or newsletter subscriptions.
2. Website operation and security
Our hosting provider, HostPlus, processes technical information such as IP addresses, request dates and times, requested pages, browser information and error or security events to deliver and protect the website and investigate faults or attacks. The hosting infrastructure described by HostPlus is in Greece. Our legal basis is our legitimate interest in operating a reliable and secure website (Article 6(1)(f) GDPR).
Jetpack/Automattic also provides connection and security functions, which may process technical connection and login information. Jetpack Stats is disabled; this does not itself delete previously collected statistics.
3. Email enquiries
If you email us, we use your email address, name and the information you provide to respond. General enquiries are processed on the basis of our legitimate interest in handling communications (Article 6(1)(f) GDPR). Where an enquiry involves steps towards a contract at your request, Article 6(1)(b) GDPR applies. Providing information is voluntary, but without sufficient details we may be unable to answer. Our email service is Yahoo Mail.
4. Analytics and cookies
Google Analytics, connected through Google Site Kit, is used to understand website usage. It may process cookie identifiers, page views, interactions and device/browser information. Non-essential analytics requires your consent (Article 6(1)(a) GDPR). You have the right to refuse or withdraw consent without affecting the lawfulness of earlier processing.
Search Console and PageSpeed Insights are also connected through Site Kit for search-performance and technical-performance information. They are distinct from the visitor tracking performed by Analytics. No embedded maps, videos or social feeds are configured to load on the website.
5. Retention
Email enquiries are deleted after two months under our email-retention policy. The reported Google Analytics retention settings are 14 months for user data and two months for event data; these settings do not apply uniformly to every aggregated report.
Under HostPlus’s stated default policy, archived website access-log entries may remain for approximately up to two calendar months. Security and technical logs have separate deletion or rotation cycles. Their retention depends on the log category, operational and security needs, and the applicable rotation mechanism. Relevant records may be retained longer for a documented security incident where necessary for investigation or legal evidence. There is no single two-month limit covering all technical records.
6. Recipients and international processing
Information is accessible to authorised personnel and, as relevant to their services, HostPlus for hosting, Google for analytics and related services, Yahoo for email, and Automattic/Jetpack for website connection and security. Information may also be disclosed to competent authorities where legally required.
Google, Yahoo and Automattic operate internationally, and their services may involve processing outside the European Economic Area, including in the United States. Transfer arrangements depend on the provider and service; these include applicable adequacy decisions and/or European Commission standard contractual clauses. Provider information is available from Google, Yahoo and Automattic. Contact us to request information about the safeguards relevant to your data. The Greek hosting location does not imply that all services process data exclusively within the EEA.
7. Your rights
Subject to the applicable GDPR conditions, you can request access, correction, deletion, restriction of processing and portability, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it at any time. Send requests to smilestrawberry92@yahoo.com. We may request information necessary to verify your identity. You may also lodge a complaint with the Hellenic Data Protection Authority.
8. Changes to this notice
This notice may be updated when the website’s services or data-processing practices change. The revision date will be shown with the updated notice.