Privacy Policy & Legal Notice

Who we are (data controller)

SepeTech L.P. ("SepeTech", "we", "us") is a software development studio based in Athens, Greece, and is the data controller responsible for the personal data processed through this website.

You can reach us at info@sepetech.com or +30 21 0749 9392.

What personal data we collect

We only collect the data you choose to give us. When you use our project form or email us, we process the information you provide: your name, email address, the type of project, your budget range, your timeline, the details of your message and any files you attach. We also record which page the form was sent from and which language you were reading, so we can answer you properly.

Our hosting provider may automatically process limited technical data (such as your IP address and browser type) in server logs, for security and to deliver the site. We do not use this data to identify or track you.

How and why we use your data

We use the information you send us solely to respond to your enquiry, prepare a quote or proposal, and communicate with you about your project. We never sell your data, and we never use the contents of your enquiry for advertising. If you have accepted advertising cookies, we do measure whether an advertisement led to an enquiry, as described under Cookies and local storage below.

Our lawful bases under the GDPR are:

• taking steps at your request before entering into a contract (Article 6(1)(b));
• your consent, which you can withdraw at any time (Article 6(1)(a));
• our legitimate interest in responding to enquiries and running our business (Article 6(1)(f)).

Cookies and local storage

This website uses cookies and similar technologies for two purposes: to make the site work, and, only if you agree, to measure how our advertising performs.

Strictly necessary storage. We keep a small amount of data in your browser to remember your cookie choice, your language preference, and anything you have part-typed into our project form so it is not lost if you close it. This is necessary for the site to function, is never used to track you, and requires no consent.

Analytics and advertising cookies. If you accept, we load Google Analytics 4 and Google Ads. These set cookies that record which pages you visit, which advertisement or search result brought you here, and whether you go on to send us an enquiry. Nothing is loaded and no such cookie is set before you accept: until then these services are switched off by default, using Google Consent Mode with consent denied.

If you send the form after accepting, we pass Google Ads a one-way scrambled (SHA-256 hashed) version of your email address, so that Google can confirm an advertisement led to a real enquiry. Google cannot recover your address from it, and we send no other contact detail. Google calls this Enhanced Conversions for leads.

You can refuse at the banner, and refusing is remembered. You can withdraw your consent at any time using the Cookie settings link in the footer of every page: the banner returns and nothing further is loaded. You can also opt out of Google Analytics across all websites using the browser add-on Google provides.

Third parties and processors

We host this website with Google Firebase Hosting and run our contact form on Google Cloud (Cloud Run, Cloud Storage and Firestore) in the EU (europe-west1), all as our processors. When you submit the form, we protect it from abuse with Cloudflare Turnstile (spam prevention, our legitimate interest under Art. 6(1)(f)), which does not use tracking cookies. The contents of your message are delivered to us by email through MailerSend. Any files you attach are stored privately on Google Cloud Storage, reachable only by a link that expires after 7 days, and are automatically deleted after 30 days.

If, and only if, you accept analytics and advertising cookies, Google Ireland Limited also provides Google Analytics 4 and Google Ads, which we use to measure site traffic and advertising performance. For parts of that processing Google acts as an independent controller under its own terms.

Where a provider processes data outside the EU/EEA, appropriate safeguards (such as Standard Contractual Clauses) apply. Our fonts are self-hosted on our own servers, so no data is sent to third-party font providers.

How long we keep your data

We keep enquiry data only for as long as necessary to respond to you and, where a project follows, for its duration plus a reasonable period afterwards to meet legal and accounting obligations. You can ask us to delete it sooner.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased (the right to be forgotten);
• restrict or object to our processing;
• receive your data in a portable format;
• withdraw your consent at any time.

You are not subject to any automated decision-making or profiling.

How to exercise your rights and complaints

To exercise any of these rights, email us at info@sepetech.com. We will respond within one month.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA), 1-3 Kifisias Avenue, 115 23 Athens, Greece, www.dpa.gr.

Security

This site is served over HTTPS with strict transport security and other protective headers. No method of transmission over the internet is completely secure, but we apply appropriate technical and organisational measures to protect your data.

Changes to this policy

We may update this policy from time to time. The "last updated" date above always reflects the current version.

Legal notice (company details)

• Company: SepeTech L.P. (Limited Partnership / E.E.)
• Registered office: Mesogeion Avenue 15, 115 26 Athens, Greece
• Email: info@sepetech.com
• Phone: +30 21 0749 9392
• Founder: George Sepetadelis
• General Commercial Registry (GEMI) No.: 192259703000
• VAT number (AFM): 803213897