Privacy Policy
ENGLISH — Privacy Policy
Last updated: 2026-08-31
1. Who is responsible
The controller of the personal data described here is:
Vasilis Panagiotopoulos
Agiou Tryfonos 13, 272 00 Amaliada, Ilia, Greece
Email: info@forgeint.gr
FORGEINT is the trade name under which I operate. In this text, "we" means the person above and "you" means the visitor of forgeint.gr.
For anything concerning personal data — a question, a request or a complaint — write to info@forgeint.gr.
2. The basic principle of this website
This website collects as little as possible. There are no user accounts, there is no shopping cart, we use no analytics tools and we do not track you. You can read the whole of forgeint.gr without giving any personal detail and without being recorded by us.
3. What data reaches us, and how
a) The onboarding form
In the form you may fill in: business name, which tasks you want the system to take over, which channels your work comes from, your name, your email and an optional free-text comment.
Read this carefully, because it differs from what most websites do: the form sends nothing to any server, not even to us. Whatever you type stays in your browser. When you press the final button, your browser prepares a pre-filled email and opens your own email program. The email does not leave unless you press "Send" — and you can correct it or delete it before you send it.
In practice:
- If you do not send it, we never learn that you filled anything in.
- If you close or reload the page, whatever you typed is lost. It is not stored on your device either.
- There is no "submission" that gets recorded anywhere.
b) The email you send us
From the moment your email reaches our mailbox, its contents — and whatever details your own email program adds automatically, such as your address — are processed by us, in order to reply to you. The same applies to every email you send us directly.
c) Technical connection data
Our hosting provider keeps, as every web server does, log files with the IP address, the browser type, the page requested and the time. They serve to keep the website running and to detect attacks or faults. We do not use them to identify or profile visitors and we do not link them to anything else.
d) What we do NOT collect
We do not collect location, we have no access to camera or microphone, we use no advertising pixels, we do no profiling and we take no automated decisions about you (Article 22 GDPR). We do not knowingly collect special categories of data (health, political opinions, etc.) — please do not write such data in the free-text field.
4. Why we process it and on what legal basis
| What we do | Purpose | Legal basis |
|---|---|---|
| We read your brief and reply to you | To assess your request and discuss working together | Article 6(1)(b) GDPR — steps taken prior to entering into a contract, at your own request |
| We keep the related correspondence for as long as the discussion lasts | To remember what has been said | Article 6(1)(b) and (f) (legitimate interest in consistent communication) |
| Server log files | Security, availability, error detection | Article 6(1)(f) — legitimate interest in operating a secure website |
We do not rely on consent for the above, because none is required: you write to us because you asked for contact. If at some point we want to send you informational material, we will ask you separately and explicitly — and you will be able to withdraw it at any time.
5. Who else is involved
We do not sell and we do not rent data to anyone. Your personal data is seen only by the following providers, in the roles described below:
| Provider | What it does | What it sees |
|---|---|---|
| Vercel Inc. (USA) | Hosting of the website | Technical connection data (IP, browser, page, time). Traffic from Europe is served from a node in Frankfurt. |
| Cloudflare, Inc. (USA) | Routing of the forgeint.gr mail | The content of the emails you send us, as they pass towards our mailbox |
| The provider of the mailbox to which our mail is routed | Hosting of the mailbox | The content of your emails |
As regards the server logs, Vercel does not act solely on our behalf: under its Terms of Service (section 10.4) that data qualifies as "System Data" and the company also uses it for its own business purposes, i.e. as an independent controller. The same terms permit it to disclose that data to third parties only in aggregate or de-identified form. The content we upload — the website's code and files — is public and contains none of your personal data. Cloudflare and the mailbox provider act as processors on our behalf.
We do not load fonts, scripts or any other content from third-party servers. Everything the website needs is served by forgeint.gr itself, so that your IP address is not transmitted to third parties. There are no embedded videos, maps, social network widgets, booking tools or analytics tools.
The website does contain links to third-party pages (for example, the public demonstration of the system). Those pages are not loaded inside forgeint.gr: nothing is sent to them unless you click the link, at which point their own privacy policy applies.
We may also have to disclose data to a public authority, if the law so requires.
6. Cookies and local storage
This website does not use cookies. Neither our own, nor third-party, nor advertising, nor analytics ones. That is why you will not see a cookie consent window — there is nothing to consent to.
On most pages of the website your browser stores nothing at all. There is one single exception, on the onboarding page:
| Name | Where it is written | What it holds | Duration |
|---|---|---|---|
fi_ob_seen | Only on the onboarding page (/onboarding and /en/onboarding) | The value 1 — that the page's intro animation has already finished, so that it is shorter the second time | In the tab's memory (sessionStorage) — it is erased the moment you close the tab |
This flag is written automatically, as soon as the page's intro animation ends — you do not have to press anything and it does not depend on any choice of yours. It is not a cookie: it stays in the tab's memory and, unlike cookies, the browser never sends it along with its requests — so it never reaches us, nor anyone else. It does not identify you, it holds no personal detail and it is not linked to anything else. It disappears the moment you close the tab, and you can also delete it earlier from your browser settings.
Because it is strictly necessary for the functioning of the page you requested and serves no other purpose, it requires no consent (Article 4(5) of Greek Law 3471/2006).
What you fill into the onboarding form is not stored on your device either — see section 3(a).
7. Transfers outside the European Economic Area
Vercel and Cloudflare are US companies, so some data may be processed outside the EEA. The transfer is covered by:
- Vercel Inc. — its certification under the EU-U.S. Data Privacy Framework, for which the European Commission has issued an adequacy decision (Article 45 GDPR), as stated in Vercel's own privacy policy (vercel.com/legal/privacy-policy).
- Cloudflare, Inc. — its certification under the EU-U.S. Data Privacy Framework, for which the European Commission has issued an adequacy decision (Article 45 GDPR), with the Standard Contractual Clauses as a fallback mechanism.
You may request a copy of the relevant safeguards at info@forgeint.gr.
8. How long we keep it
| Data | Retention |
|---|---|
| Your brief and your correspondence, if we do not proceed to work together | 24 months from the last communication, then deletion |
| Your correspondence, if we do proceed to work together | For as long as the collaboration lasts and thereafter for as long as applicable tax and commercial legislation requires |
| Server log files | According to the hosting provider's policy, for a short period |
After these periods have elapsed, the data is deleted. You can also ask for it to be deleted earlier (section 9).
9. Your rights
You have, free of charge, the following rights:
- Access (Article 15) — to learn what data of yours we hold and to receive a copy.
- Rectification (Article 16) — to have inaccurate details corrected.
- Erasure (Article 17) — to have your data deleted, provided there is no lawful ground for keeping it.
- Restriction of processing (Article 18).
- Portability (Article 20) — to receive your data in a structured, commonly used format.
- Objection (Article 21) — to object to processing based on our legitimate interest.
Send your request to info@forgeint.gr. We reply within one month; if the request is complex, we may extend the deadline by two further months, informing you of the reason.
Complaint. If you believe that we have not respected your rights, you can lodge a complaint with the Hellenic Data Protection Authority:
1-3 Kifissias Avenue, 115 23 Athens, Greece · tel. +30 210 6475600 · www.dpa.gr
10. Security
The website is served exclusively over an encrypted HTTPS connection. Access to our mailbox is limited to the persons who must reply to your message. No transmission over the internet is absolutely secure — so do not send sensitive details by email (passwords, card numbers, health data). We never ask you for them.
11. Minors
The website is addressed to businesses and professionals. It is not addressed to children and we do not knowingly collect data of minors under the age of 15. If we discover that we have received such data, we delete it.
12. Changes to this policy
If the way the website works changes — for example, if an analytics tool, a booking system or a real contact form is added — we will update this text before the change takes effect and we will change the date at the top. The version published here is always the one in force.
This is a translation for convenience. In case of any discrepancy, the Greek version prevails.