Privacy Policy

This website, kiefer.gr, is run by KIEFER, with headquarters at 1, Isthmionikon, P.O. 1512 Marousi Attikis / Greece, call center number +30 210 6095 795 and email address info@kiefer.gr. KIEFER is the controller of the personal data described in this policy. Questions about it can be sent to info@kiefer.gr.

This policy applies only to this website. If you follow a link to another site, that site is subject to its own privacy policy and terms of use, which we do not control and are not responsible for. Please read them before you give that site any personal data.

In brief:

• You can read the whole site without giving us any personal data.
• If you subscribe to the newsletter, we store your email address and the date you subscribed.
• If you use the contact form, the site only opens a draft in your own email app. It does not send or store anything itself.
• The careers page loads our open positions from Ashby, and you apply on Ashby's job board.
• We do not use analytics or advertising services, we do not sell your data and we do not build profiles of visitors.
• The service providers named below process data on our behalf to run the site.

If you enter your email address in the newsletter form in the site's footer, we use it to send you our newsletter. Below is what happens to it.

• Data: your email address, the language of the sign-up (currently English), whether you are subscribed and the date and time you subscribed.
• Purpose: to send you news and updates from KIEFER.
• Legal basis: your consent (Article 6(1)(a) GDPR), given when you submit the form. You can withdraw it at any time.
• How long we keep it: until you unsubscribe or ask us to delete it. If you unsubscribe, we mark the address as unsubscribed so that it is not mailed again, until you ask us to erase it.
• Who receives it: the data is stored in our database provider, Supabase, and our email provider, Resend, sends the emails below (see Service providers). Only the administrators and editors of our content studio, and the people who manage our hosting and database, can access the list. We do not sell it or share it with anyone else.
• When you subscribe, we send a confirmation email to the address you entered, and a notice of the new subscription (with the address) to our team. The site does not ask you to confirm first, so please subscribe only with your own address.
• If you unsubscribed and subscribe again with the same address, you are subscribed again.

To unsubscribe, or to have your address deleted, email info@kiefer.gr from the address you subscribed with, and we will remove you. There is not yet an unsubscribe link or a self-service page.

The contact form on the Contact page, and the Talk To An Expert button that leads to it, do not send your details to our servers. When you press Send, the site fills in an email draft addressed to info@kiefer.gr with what you typed (name, email address, phone number, company, area of interest and message) and hands it to the email app on your device. Nothing is sent until you send that email yourself.

If you email or phone us, we keep a record of your message and our reply, and use them to answer your enquiry and to handle any follow-up.

• Data: what you give us in the message, including your name, email address, phone number and company if you include them.
• Purpose: to answer your enquiry and discuss our services with you.
• Legal basis: our legitimate interest in replying to people who contact us, or, where you ask about a contract or a service, steps taken at your request before entering into a contract (Article 6(1)(b) and (f) GDPR).
• How long we keep it: as long as needed to deal with your enquiry and any resulting relationship, and then until you ask us to delete it.
• Who receives it: our staff who handle enquiries.

The careers page shows our open positions. Your browser loads the list from Ashby (api.ashbyhq.com) when you open the page, so Ashby receives your IP address and ordinary technical details of your request. Each position links to our job board at jobs.ashbyhq.com.

If you apply, you do so on Ashby's job board, not on this website. This site does not receive or store your application. The data you give there is handled by Ashby and by KIEFER, as described in Ashby's own privacy notice and in the notice shown when you apply. Please read them before you apply.

A small number of people sign in to the content studio at /admin to edit the site's news and projects and, for administrators, to read the newsletter list. Visitors who only read the site never see this.

• Data: the person's email address, their account and sign-in details held by our authentication provider (Supabase), and their editor or administrator role.
• Purpose: to let authorised people sign in, to keep the studio secure and to manage the site's content.
• Legal basis: our legitimate interest in running and securing the site, or, for our own staff and contractors, the contract or working relationship with them (Article 6(1)(b) and (f) GDPR).
• How long we keep it: while the person is an editor or administrator, and until we remove their account.
• Who receives it: our administrators, and Supabase as our provider. While an editor is signed in, their browser keeps a sign-in session in its local storage, as described in the Cookie Policy (/cookies).

Like any website, this one is delivered by a hosting provider (at present Vercel). To serve the site and keep it secure and working, the host may process technical information about each request, such as your IP address, the page requested, the date and time, and your browser type, and may keep it in its logs. We do not use this information to identify visitors or to build profiles, and we do not use it for statistics or advertising.

• Legal basis: our legitimate interest in delivering, securing and troubleshooting the site (Article 6(1)(f) GDPR).
• How long it is kept: according to the hosting provider's own log retention. We do not set a separate period.
• Who receives it: the hosting provider.

This site does not set cookies of its own and does not use analytics or advertising cookies. It stores two things in your browser: a copy of the site's own files (its code, styles, fonts and images), so that pages open faster and are not downloaded again on every visit, and, only for a content editor, their sign-in session. Neither is used to track you. For details, see our Cookie Policy at /cookies.

This website does not:

• Use analytics or statistics services.
• Show advertising or pass visitor data to ad networks.
• Sell anything online or ask visitors to create an account.
• Build profiles of visitors or make automated decisions about them.
• Sell your personal data.

We use a few providers who process personal data on our behalf, only to run the site:

• Supabase: our database and sign-in provider. It stores the newsletter list and the editor and administrator accounts, runs the newsletter sign-up, and serves our published news, which your browser loads from it when you open the news pages, so it receives your IP address and ordinary technical details of that request.
• Resend: our email provider. It sends the newsletter confirmation email to subscribers and the notice of a new subscription to our team.
• Ashby: runs our careers board and handles job applications. It receives your technical request data when the careers page loads, and your application if you apply there.
• Our hosting provider (at present Vercel): serves the site and may keep request logs.
• Other sites' image hosts: a news article may occasionally show an image hosted on another site. In that case your browser requests the image from that host, which receives your IP address.

We do not disclose your personal data to anyone else without your consent, except where a public or judicial authority requires it by law and following the process the law provides.

Some of these providers may process data outside the European Economic Area. Where that happens, the transfer relies on the safeguards the provider itself puts in place, such as the European Commission's standard contractual clauses or an adequacy decision. You can ask us at info@kiefer.gr for more information.

Your data is stored with our providers on secured systems, and access to the newsletter list is limited to the administrators and editors of our content studio. Unfortunately, the transmission of information over the Internet is never completely secure. We do our best to protect your personal data, but we cannot guarantee the security of data you send to this website, and you do so at your own risk. If we become aware of a data protection incident, we will act promptly to limit and correct it and will notify the authority and the people affected where the law requires it.

Under the General Data Protection Regulation (GDPR) and Greek data protection law, you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased, in the cases the law provides.
• Restrict how we process your data.
• Receive your data in a portable format, where this applies.
• Object to processing based on our legitimate interests, and to processing for marketing purposes.
• Withdraw your consent at any time, for example by unsubscribing from the newsletter. Withdrawing does not affect processing done before.

To use any of these rights, contact us at info@kiefer.gr. We will answer within the time the law allows. You also have the right to complain to the Hellenic Data Protection Authority (www.dpa.gr (opens in a new tab)) if you believe your data is being processed unlawfully.

Any changes to this policy will be posted on this page, with the date of the latest update shown at the top. If we add something that changes how your data is used, such as analytics or a new service provider, we will update this policy first. Please check it regularly.

Questions, comments and requests regarding this privacy policy are welcome and can be sent via info@kiefer.gr or by phone on +30 210 6095 795.