Privacy policy
The Greek version of this policy is the binding one.
This policy explains what personal data we process, why, who receives it and how long we keep it. We collect only what we need.
1. Who is responsible
The controller is the business trading as Tareno Systems, which is being registered. Its full details will be published on the Business details page.
Email for anything in this policy: hello@tarenosystems.com.
2. What we process and why
2.1 The contact form
- Data: name, email, company (optional), the options you choose (type of business, service, timeline, budget) and your message.
- Purpose: to answer your enquiry and, if you wish, prepare a proposal.
- Legal basis: steps taken at your request before a contract (GDPR Art. 6(1)(b)).
- How: the form is processed on a server in Frankfurt and reaches us as an email. It is not stored in a database. Your IP address is held in the server’s memory for up to 10 minutes to limit abusive submissions.
- Required fields: name, email, message and the required options. Without them we cannot reply.
2.2 Email and contact records
- Data: what you send us by email, and your contact details in our records while we are talking or working together: name, company, role, email and, if you give us one, a phone number.
- Purpose: to communicate with you and organise our work together.
- Legal basis: steps before, or the performance of, a contract (GDPR Art. 6(1)(b)); where there is no contract, our legitimate interest in contacting businesses about work relevant to them (GDPR Art. 6(1)(f)).
2.3 When we write to you first
We contact people at businesses personally, one at a time, about work relevant to what their business does. We do not buy lists and we do not send bulk messages.
- Data: name, company, role and business email.
- Source: a public professional source, such as your company’s website, or a person who introduced us. Our first message says which.
- Legal basis: legitimate interest (GDPR Art. 6(1)(f)): presenting relevant work to a business. We limit it to business details and a few messages, and we stop as soon as you ask.
- If you ask us not to write again, we keep only your email on a suppression list so that we do not contact you again, and delete the rest.
2.4 Running and securing the website
- Data: IP address, date and time, the page requested, browser details.
- Purpose: delivering the pages and protecting against abuse.
- Legal basis: legitimate interest in running the site securely (GDPR Art. 6(1)(f)). We do not use this data to identify you.
2.5 Clients
- Data: our clients’ contact and invoicing details.
- Legal basis: performance of a contract (GDPR Art. 6(1)(b)) and compliance with tax law (GDPR Art. 6(1)(c)).
3. Recipients
| Recipient | Role | Where |
|---|---|---|
| Vercel Inc. | Hosts the website and the form | The form is processed in Frankfurt. Pages are served from the nearest node of its network. |
| Microsoft Ireland Operations Ltd (Microsoft 365) | Email and contact records | Stored in the EU |
| Accountant | Bookkeeping, clients only | Greece |
We do not sell or share data for advertising. We make no automated decisions and build no profiles.
4. Transfers outside the EU
Data is stored in the EU. Vercel Inc. is a US company and Microsoft belongs to a US group. Any access from the USA is covered by the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.
5. How long we keep data
| Data | Period |
|---|---|
| Enquiries, emails and contact details that do not lead to work | 12 months after the last message, or at once if you ask |
| Email on the suppression list | As long as needed so we do not write again |
| Client details and project correspondence | For the contract and as long as tax law requires, generally five years from the end of the tax year |
| IP address in the form’s memory | Up to 10 minutes |
| Hosting logs | A short period set by the hosting provider |
6. Cookies
This website uses no cookies and no other storage on your device. See the Cookie policy.
7. Your rights
You can ask for access, correction, deletion, restriction or a portable copy of your data, and you can object to processing, in particular processing based on legitimate interest. Where processing is based on consent you can withdraw it at any time; today none of our processing is.
One email to hello@tarenosystems.com is enough. We reply within one month.
You can also complain to the Hellenic Data Protection Authority, 1-3 Kifisias Ave, 115 23 Athens, www.dpa.gr.
8. Changes
When our processing changes, we update this policy and its date.
Version 1 · effective