Privacy Policy

• No tracking. The website uses no analytics, no advertising and no social media plugins.
• One cookie. It only remembers your choices in the cookie banner.
• Hosted in the EU. The website and our email run on servers in Frankfurt, Germany.
• Your rights. Write to info@weldgrid.gr and we reply within one month.

1. Who we are

The website weldgrid.gr is operated by Jeremias Maier under the name WeldGrid (we, us). Jeremias Maier is the controller of your personal data.

Controller

Jeremias Maier, WeldGrid

Address

[Διεύθυνση], [Πόλη], Greece

VAT number (ΑΦΜ)

[ΑΦΜ]

Email

info@weldgrid.gr

Phone

+30 698 201 2128

Our contact point for every question about personal data is Jeremias Maier, at info@weldgrid.gr.

This policy follows the General Data Protection Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019 and Greek Law 3471/2006 on the protection of personal data in electronic communications.

It covers the website weldgrid.gr and the ways you can reach us from it. The WeldGrid Cloud platform at cloud.weldgrid.gr is a separate service, and the data that customers keep in the platform is governed by the agreement with each customer.

2. The data we process

We collect only the data we need. You do not have to give us any data to read the website. If you want an answer from us, we need at least a way to reach you.

• Visit data. When you open a page, the server records your IP address, the date and time, the page you asked for, the page you came from and the type of browser, operating system and device.
• Security data. When our firewall blocks a request as an attack, it records the IP address and the details of that request.
• Contact data. When you email us, call us or message us on LinkedIn, we receive your name, your email address or phone number, your company and role if you mention them, and the content of your message.
• Demo data. When you ask for a demo, we also receive the dates that suit you and anything you tell us about your projects and your team.
• Consent data. When you make a choice in the cookie banner, the choice is recorded with a random identifier and the time it was made.
• Settings on your device. Your language choice and your accessibility settings are stored in your own browser. We do not receive them.

We do not ask for sensitive data, such as data about health. Please do not send us drawings, certificates or other project documents that contain personal data, such as the names of welders, before we agree on a secure way to share them.

3. Why we use it and on what legal basis

Purpose	Data	Legal basis
Delivering the website and keeping it secure	Visit data and security data	Our legitimate interest in a website that works and is protected against attacks (Article 6(1)(f) GDPR)
Answering your messages and arranging a demo	Contact data and demo data	Steps you ask for before a possible contract (Article 6(1)(b) GDPR) and our legitimate interest in answering business inquiries (Article 6(1)(f) GDPR)
Keeping the records the law requires, for example tax records when a cooperation follows	Contact data and correspondence	Our legal obligations (Article 6(1)(c) GDPR)
Recording your cookie choices	Consent data	Our legal obligation to show that consent was given (Article 6(1)(c) and Article 7(1) GDPR, Article 4(5) of Law 3471/2006)
Translating the website into Greek when you choose it	Visit data	Your request through the language switch and our legitimate interest in offering the website in Greek (Article 6(1)(f) GDPR)
Establishing, exercising or defending legal claims	Any of the above, only as far as needed	Our legitimate interest (Article 6(1)(f) GDPR)

Where we rely on our legitimate interest, we have weighed it against your rights and interests, and you can object at any time (section 8).

We do not make decisions about you based only on automated processing, and we do not create profiles. We do not use analytics or advertising tools, and we do not follow you across other websites.

4. Our LinkedIn page

The links to LinkedIn on our website are plain links. LinkedIn receives data from your visit only after you click one of them.

When you visit or follow our LinkedIn page, LinkedIn Ireland Unlimited Company processes your data under its own privacy policy. LinkedIn also gives us statistics about visits to our page, called Page Insights, which show only totals and do not identify you. For these statistics LinkedIn and we act as joint controllers, under the Page Insights Joint Controller Addendum of LinkedIn. LinkedIn is responsible for answering requests about this processing, and we pass on to LinkedIn any such request you send us.

Messages you send us on LinkedIn are handled like emails, as described in section 3.

5. Who receives your data

We share data only when it is needed for the purposes above, and only with the recipients below. Providers who process data on our behalf may do so only on our instructions and under a data processing agreement (Article 28 GDPR).

• Hostinger International Ltd, Cyprus, which hosts the website and our email on servers in Frankfurt, Germany.
• Defiant Inc., United States, maker of the Wordfence security plugin. When the firewall blocks an attack, data about the blocked request, including the IP address, is sent to Defiant, so that the protection of all websites that use Wordfence improves.
• CookieYes Limited, United Kingdom, which provides the cookie banner and keeps the record of your consent. The accessibility tool also comes from CookieYes, but it runs from our own server and sends no data.
• Google, through the GTranslate service. Only when you choose Greek, your browser loads the translation script from GTranslate and sends the text of the page to Google Translate, together with your IP address.
• LinkedIn, as described in section 4.
• The developer of the website, which maintains it for us and can access it when support is needed.
• Accountants, lawyers and public authorities, when the law requires it or when it is needed to protect our rights.

We do not sell personal data, and we do not share it for advertising.

6. Transfers outside the European Economic Area

The website and our email are hosted in the European Union. Some of the recipients above are based outside the European Economic Area, and in these cases the transfer relies on a safeguard of the GDPR.

• For CookieYes in the United Kingdom, the adequacy decision of the European Commission for the United Kingdom (Article 45 GDPR).
• For Google and Defiant in the United States, the EU-US Data Privacy Framework where the recipient is certified under it (Article 45 GDPR), or else the standard contractual clauses of the European Commission (Article 46 GDPR).

You can ask us for more information about these safeguards.

7. How long we keep your data

• Server logs are kept by Hostinger for a short period set by the hosting service and are then deleted automatically.
• Security logs of the firewall are kept for up to 30 days.
• Emails and demo requests are kept for up to 24 months after our last contact, unless a cooperation follows.
• Business records of a cooperation are kept for as long as Greek tax and commercial law requires.
• Your cookie choice is kept for 12 months. After that, the banner asks you again.
• Language and accessibility settings stay in your browser until you change them or clear the data of the website.

If data is needed to establish or defend a legal claim, we keep it until the claim is settled.

8. Your rights

• Access. You can ask which data we hold about you and receive a copy (Article 15 GDPR).
• Correction. You can ask us to correct data that is wrong or incomplete (Article 16 GDPR).
• Erasure. You can ask us to delete your data, unless the law requires us to keep it (Article 17 GDPR).
• Restriction. You can ask us to limit the use of your data, for example while we check its accuracy (Article 18 GDPR).
• Portability. You can receive the data you gave us in a common machine-readable format, where the law provides for it (Article 20 GDPR).
• Objection. You can object at any time to processing that is based on our legitimate interest (Article 21 GDPR).
• Withdrawal of consent. Where processing is based on your consent, you can withdraw it at any time, without affecting the processing before (Article 7(3) GDPR).

To use any of these rights, write to info@weldgrid.gr. It is free of charge. We may ask you to confirm your identity. We reply within one month, and if a request is complex we may extend this by two more months, after telling you why (Article 12 GDPR).

9. Complaints

If you believe that we process your data unlawfully, you can lodge a complaint with the Hellenic Data Protection Authority (Article 77 GDPR), 1-3 Kifisias Avenue, 115 23 Athens, Greece, www.dpa.gr. We would be glad if you contacted us first, so that we can try to solve the issue together.

10. Security

We protect your data with technical and organizational measures that suit the risk (Article 32 GDPR). The whole website runs on an encrypted connection (HTTPS). A firewall checks incoming requests and protects the sign-in of administrators, access to the administration is limited to the people who need it, and the software of the website is kept up to date.

No transmission over the internet is completely secure. If a data breach is likely to put your rights at high risk, we will inform you without undue delay (Article 34 GDPR).

11. Children

The website is meant for companies and professionals. It is not directed at children, and we do not knowingly collect data of persons under 15.

12. Changes to this policy

We update this policy when the website, our providers or the law change. The date at the top shows the current version. If a change matters for you, we point it out on the website.

13. Contact

For any question about this policy or your data, write to info@weldgrid.gr or call +30 698 201 2128. The details about cookies are in our Cookie Policy.