Privacy & Cookies

The operational contact for this website is WIN Development Consultants, Egnatia 154, 546 36 Thessaloniki, Greece. Privacy enquiries and requests may be sent to info@winconsulting.gr.

Where another project beneficiary determines the purposes and means of a specific processing activity, that beneficiary acts as controller for that activity and will be identified at the point of collection.

• Essential technical and security logs: website delivery, abuse prevention and troubleshooting; legal basis: legitimate interests and security obligations.
• Contact-form data: responding to your request; legal basis: steps taken at your request and legitimate interests.
• Newsletter data, where offered: sending communications; legal basis: consent, withdrawable at any time.
• Analytics and marketing identifiers: audience measurement or campaign evaluation; legal basis: consent. These technologies must remain disabled until consent is given.

Data may be processed by authorised project personnel and by service providers necessary to operate the website, including hosting, security, email delivery, contact forms, consent management and—only after consent—analytics or newsletter services.

Current technical providers may include Hostinger for hosting, Google services for consented analytics, and Mailchimp for consented newsletters. The exact services active in your browser are shown in the cookie-preferences panel.

Some providers may process data outside the European Economic Area. Where this occurs, transfers must rely on an adequacy decision or appropriate safeguards such as the European Commission Standard Contractual Clauses, together with supplementary measures where required.

• Contact enquiries: for the time required to answer and document the request, normally no longer than 24 months unless a legal claim requires longer retention.
• Newsletter subscriptions: until consent is withdrawn or the list is retired, with a minimal suppression record retained to honour opt-out requests.
• Security logs: for the shortest operational period set by the hosting and security configuration.
• Cookie and analytics retention: as stated in the live cookie-preferences panel for each technology.

• Access, correction, deletion and restriction of your personal data.
• Objection to processing based on legitimate interests and data portability where applicable.
• Withdrawal of consent at any time without affecting earlier lawful processing.
• A complaint to the Hellenic Data Protection Authority at dpa.gr.

Strictly necessary cookies support security, language, consent and core website functions. Optional analytics, marketing and third-party media cookies must not run before consent. Rejecting optional cookies must be as easy as accepting them, and choices can be changed at any time through “Manage preferences”.

Because providers and cookie durations can change, the live consent panel is the authoritative, browser-specific cookie table and should list each active technology, provider, purpose and duration.

This notice is reviewed when website services or processing activities change. Material changes will be shown with an updated date. The project maintains an internal record of processing activities, processor agreements and consent configuration.