Last updated: 20 October 2026

We treat the protection of your personal data as an obligation. This page explains what data we collect, why, how long we keep it and what rights you have.

1. Who is responsible for your data

ΔΗΜΙΟΥΡΓΙΚΗ ΑΝΑΠΤΥΞΙΑΚΗ & ΣΥΜΜΕΤΟΧΩΝ Α.Ε. (VantagePoint – Companies’ Advisors)

  • Registered office: 7 Pelopidou St., 542 50 Thessaloniki, Greece · T. +30 2310 322383
  • Athens office: 44 Kifisias Ave., 151 25 Marousi · T. +30 210 4441265
  • Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
  • VAT No.: EL998307288

2. What data we collect

When you send us a message through the contact form:

  • your name and email (required)
  • your phone number (optional)
  • the content of your message

When you call or email us directly: the details you give us in the call or email.

When you visit the website:

  • technical data our server records for security, such as IP address, browser and time of visit
  • visit statistics through Google Analytics, only if you accept them in the cookie notice

We do not ask for, and ask you not to send, special categories of data such as health information.

3. Why we use it and on what legal basis

Purpose Legal basis (GDPR)
Replying to your request and offering our services Art. 6(1)(b) — steps before a contract, and Art. 6(1)(f) — legitimate interest in replying to people who contact us
Carrying out a collaboration, invoicing Art. 6(1)(b) and (c) — contract and tax obligations
Website security, preventing attacks Art. 6(1)(f) — legitimate interest
Visit statistics (Google Analytics) Art. 6(1)(a) — your consent

We do not sell data. We do not use it for advertising. We make no automated decisions about you.

4. Who has access

Only VantagePoint staff handling your request see your data. The following also process it on our behalf, under contract:

  • our website hosting provider
  • our email provider
  • Google Ireland Ltd, for Google Analytics, only with your consent
  • our external accountant and technical support partners, as far as their work requires

We may also share data with public authorities, only when the law requires it.

5. Transfers outside the European Union

Google may also process data in the United States. Google LLC is certified under the EU–US Data Privacy Framework. The European Commission has found that this ensures adequate protection.

6. How long we keep data

  • Contact form messages and emails: up to 24 months after our last contact, unless a collaboration begins
  • Client records and invoices: as long as tax law requires
  • Server security logs: as set by our hosting provider, usually a few weeks
  • Google Analytics statistics: 14 months

7. Your rights

You can ask us at any time for:

  • access to your data and a copy of it
  • correction of inaccurate details
  • erasure, when there is no reason for us to keep it
  • restriction of processing
  • portability, meaning a copy in a file format
  • objection to processing based on legitimate interest

If you gave consent, you can withdraw it through the “Cookie settings” link at the bottom of every page.

For any request, email This email address is being protected from spambots. You need JavaScript enabled to view it.. We reply within one month.

8. Right to complain

If you believe we have not respected your rights, you can complain to the Hellenic Data Protection Authority: 1–3 Kifisias Ave., 115 23 Athens, www.dpa.gr.

9. Security

The website uses an encrypted connection (HTTPS). The server is protected by a security firewall. Access to data is limited to the people who need it.

10. Changes to this policy

If anything important changes, we will update this page and the date at the top.