Privacy Policy

• Information you fill in on the contact form: your name, email, phone (optional), the service you are interested in and the content of your message.
• Information you give us when you contact us by email or phone and, where an engagement follows, the details required for the agreement and invoicing.
• Technical data logged automatically by our hosting provider, such as IP address, device type, browser and request time, for security and stability reasons.

We use a cookieless analytics tool (Ahrefs Web Analytics) that counts page views and referring sites in aggregate. It stores nothing on your device, sets no cookies and builds no visitor profile, so you cannot be identified or tracked across sites from it. It runs for every visitor and does not depend on your consent, because it does not need it.

If, and only if, you give your consent, we additionally use Google Analytics 4 for statistics and the Meta Pixel to measure our advertising and for remarketing. These tools set cookies and may create an identifier for your device or browser. If you do not consent they are not loaded at all, and no such processing takes place.

We do not request or collect special categories of personal data, such as health data, political or religious beliefs, or other sensitive data.

Data is collected when you fill in the website contact form, when you contact us by email or phone, and when you browse the website, through the server's technical logs.

Also when you choose a display language, at which point a strictly necessary cookie holding your choice is stored on your device.

• To respond to contact requests and send you an automatic acknowledgement that your message arrived.
• To give you information and a quote for our services and, where an engagement follows, to manage our collaboration.
• For the correct operation, stability and security of the website.
• To keep your language preference, so you do not have to choose it again.
• To comply with legal obligations, where required.

• Legitimate interest: to respond to requests and for the security and correct operation of the website.
• Performance of a contract or pre-contractual steps at your request: to prepare a quote and manage the engagement.
• Consent: for the non-essential cookies and the tools that come with them, namely statistics (Google Analytics 4) and marketing (Meta Pixel). It is requested before they are set, and you can withdraw it at any time.
• Legal obligation: where required by applicable law, such as for tax records.

Cookies are small text files stored on your device when you visit a website, letting the site remember your actions and preferences.

• Essential cookies: required for the basic operation of the website. There are two. NEXT_LOCALE stores only the value el or en, is set exclusively when you use the language toggle and lasts one year. cg_consent records your choice about the optional cookies and lasts six months. Neither contains a visitor identifier.
• Statistics / analytics cookies: help understand traffic. Used (Google Analytics 4) solely on the basis of your consent.
• Marketing cookies: used for advertising and remarketing. Used (Meta Pixel) solely on the basis of your consent.

Non-essential cookies are set only if you consent, in accordance with Article 4(5) of Greek Law 3471/2006. Consent is requested by a notice shown before any such cookie is set, refusing is as easy as accepting, and you can withdraw your choice at any time from the “Cookie settings” link at the foot of every page.

You can in any case delete or block cookies from your browser settings (Chrome: Settings, Privacy and security, Cookies · Firefox: Settings, Privacy and security · Safari: Preferences, Privacy · Edge: Settings, Cookies and site permissions).

For a per-cookie breakdown, see the Cookie Policy.

We do not sell or make your personal data available to third parties for their own independent commercial use, and we do not use it for advertising purposes.

We may share data only where necessary for the operation of the website or compliance with legal obligations: with our website hosting provider, with the provider of our company email account (through which contact-form messages are delivered), with our cookieless analytics provider, which receives only aggregate page-view data, with accounting or legal partners bound by confidentiality, and with competent authorities where there is a legal obligation.

In addition, where you have consented to the corresponding cookies, data is received by Google Ireland Limited (Google Analytics 4) and Meta Platforms Ireland Limited (Meta Pixel). Those companies act as separate or joint controllers for their own purposes, under their own terms. If you withhold or withdraw consent, nothing is shared with them.

As a rule, we aim for personal data to be processed within the European Union or European Economic Area.

Some providers, such as those hosting the website or our analytics, may process data outside the EEA. In those cases the transfer is covered by the European Commission's Standard Contractual Clauses or by an adequacy decision, in accordance with the GDPR.

We keep personal data only for as long as necessary for the purpose for which it was collected.

Indicatively: contact data is kept for as long as the exchange lasts and, where no engagement follows, for a reasonable period of up to two years so that we keep a record of the correspondence. Data for active engagements is kept for the duration of the agreement and for as long as tax law requires. Technical logs are kept for a reasonable period for security reasons. The language cookie expires after one year.

After the required period, data is deleted or anonymised, unless there is a legal reason for further retention.

Under the GDPR, you have the right to access your data, rectify inaccurate or incomplete data, erase it (where permitted), restrict processing, object, port your data and withdraw consent where processing is based on it.

To exercise your rights, you can contact us at info@codegraph.gr. We respond within one month of receiving your request.

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, alteration or disclosure.

These measures include, indicatively, use of a secure SSL/TLS connection across the site, encrypted transmission of contact-form messages, limited access to authorised persons and two-factor authentication on our accounts.

The website may contain links to third-party sites or platforms, such as client projects or social media. We are not responsible for the privacy practices or content of those sites. We recommend reading their policies before providing personal data.

This Privacy Policy may be updated from time to time to reflect changes in the operation of the website, the technologies used or applicable law. Each new version is posted on this page with an updated date.

The data controller is MLANTENOVITS ALEXANTER KAI SIA G.P.. For any question about this Policy or the processing of your personal data, you can contact us:

If you believe the processing of your personal data infringes applicable law, you have the right to lodge a complaint with the Hellenic Data Protection Authority.