Privacy Policy

This policy explains what personal data this website collects, why, where it goes and what you can ask for.

Controller

The controller is MK Surveying, Plateia Aeroporias 1, Ilioupoli 16341, Athens. For anything to do with your data, contact k.manouris@gmail.com or 694 327 8795.

The office is not required to appoint a Data Protection Officer, as it neither monitors individuals systematically on a large scale nor processes special category data on a large scale.

What we collect

The website collects data only when you fill in a form. There is no sign-up, no account and no visitor profiling.

From the contact form: name, phone, email address, optionally the property address and the service you are interested in, your message, and any files you attach.

From the appointment form: name, phone, email address, the format and time you prefer, and optionally a service and a note.

Lawful basis

Processing is carried out to take steps at your request prior to entering into a contract, under Article 6(1)(b) of the General Data Protection Regulation. In plain terms, you write to us so that we can reply.

We do not ask for consent to send your enquiry, because consent is not the right basis here. The box you tick before submitting is a declaration that you are entitled to share the files, not a consent tickbox.

Protecting the form against automated abuse rests on our legitimate interest under Article 6(1)(f).

The files you upload

Files you attach are attached to the email that reaches the office. They are not stored in a database and are not uploaded to any third party storage service.

Property documents frequently contain the personal data of other people: co-owners, neighbours, previous owners or heirs, none of whom are you. For that reason we ask you not to upload identity cards or passports, and to redact details that are not needed for the case.

Where we receive third party data through you, this policy serves as the notice required by Article 14 of the Regulation, as we have no other means of contacting those individuals.

Who else sees it

Resend, for sending and delivering email. Messages are retained in the service history for a limited period.

Vercel, as the website host. It records technical request data such as IP address and browser type.

Cloudflare, for the form security check. That check operates without cookies.

We do not sell data and do not pass it to third parties for advertising.

How long we keep it

Enquiries that do not lead to an engagement, and their files, are deleted after twelve months. Appointment requests are deleted twelve months after the appointment date.

If the contact leads to an engagement, the details become part of the case file and are kept for as long as performance of the contract, the engineer's professional liability and tax law require.

Your rights

You have the right of access, rectification, erasure, restriction of processing, portability and objection. Send your request to k.manouris@gmail.com and we will respond within one month.

If you believe the processing breaches the law, you may lodge a complaint with the Hellenic Data Protection Authority, Kifisias 1-3, 11523 Athens, www.dpa.gr.

Security

The website is served over HTTPS only. Access to the office mailbox is protected by a password and two factor authentication.