Privacy Policy Aegean Aputure

Privacy Policy – Aegean Aputure
General Information
This policy offers a clear overview of how your personal data is handled when you visit our website or book a photographic expedition. Personal data refers to any information that can identify you directly or indirectly.
Who Is Responsible for Data Collection?
Data processing is carried out by the website operator:
Konstantinos Georgiadis Founder & Creative Director, Aegean Aputure Sidirokastro 62300, Greece
Email: info@aegeanaputure.com Website: www.aegeanaputure.com
How Do We Collect Your Data?
Directly: When you contact us via email or form, or book an expedition.
Automatically: Technical data (browser type, device, IP address, time of visit) is collected for security and performance.
Why Do We Collect Your Data?
To respond to inquiries and bookings
To ensure website functionality and security
To comply with legal obligations
To prevent misuse or fraud We do not sell, rent, or trade your data. Ever.
2. Your Rights
You have the right to:
Access your personal data
Correct inaccurate data
Request deletion or restriction
Object to processing
Withdraw consent at any time
Lodge a complaint with the Hellenic Data Protection Authority (HDPA)
To exercise these rights, contact: info@aegeanaputure.com
3. Legal Basis for Processing
We process your data under:
Consent (Art. 6(1)(a) GDPR): e.g., contact forms, cookies
Contractual necessity (Art. 6(1)(b)): e.g., bookings
Legal obligation (Art. 6(1)(c)): e.g., invoicing
Legitimate interest (Art. 6(1)(f)): e.g., site protection
4. Cookies & Analytics
We use cookies only with your consent:
Essential cookies for site functionality
Analytics cookies for performance insights
Third-party cookies (e.g., embedded media)
You can manage cookie settings anytime via your browser or our banner.
Analytics tools (e.g., Matomo or Google Analytics) may anonymize your browsing behavior. You can opt out at any time.
5. Hosting & Security
Our website is hosted by IONOS SE, with servers located in the EU. All data is encrypted, monitored, and access-controlled. Attempts to breach or manipulate this site will be investigated and may result in legal action.
6. Data Retention
Contact form data: up to 12 months
Booking and invoicing data: retained per legal requirements
Analytics: anonymized and retained for performance tracking
Cookies: until revoked or expired
After retention, data is securely deleted or anonymized.
7. Third-Party Services
We may use GDPR-compliant third-party tools (e.g., PayPal, Vimeo, Google Analytics). We do not share your data unless legally required.
8. Abuse & Enforcement
We reserve the right to:
Block access from abusive users
Report unlawful behavior
Pursue legal action for violations of this policy or misuse of our platform
This is a protected space. Respect it.
9. Changes to This Policy
We may update this policy to reflect legal or operational changes. The latest version will always be posted here. Continued use implies acceptance.
10. Governing Law
This policy is governed by the laws of Greece and the European Union. Disputes shall be resolved exclusively by the competent courts in Greece.