Privacy Policy

1. Who we are

Data controller: Γοργόνες & Μάγκες (Gorgones kai Mages AQUAVITA)

Facilities: Glyfada — 88 Archipelagous & Propontidos, Ano Glyfada, Attica 165 62 · Nea Ionia — 15 Emmanouil Pappa, Nea Ionia, Attica 142 34

Contact for privacy matters: info@gorgoneskaimages.gr

2. What personal data we collect

Contact form (gorgoneskaimages.gr/contact): full name, email address, phone number (optional), the facility you selected, and the content of your message. This data is submitted to us via email and is used solely to respond to your inquiry.

Newsletter signup: your email address, submitted through our newsletter form and processed by our email marketing provider (Mailchimp), for the purpose of sending you updates about our classes and facilities. You may unsubscribe at any time via the link in every email we send.

Website analytics: when you browse our site, Google Analytics (via Google Site Kit) collects anonymized/pseudonymized usage data such as pages visited, time on site, device type, and approximate location, to help us understand how visitors use the site.

Google Maps embeds: our Facilities and Contact pages embed Google Maps to show our locations. Loading these embeds may allow Google to set its own cookies and collect data according to Google's own privacy policy, independent of us.

Cookies: see Section 6 below.

3. Why we process your data (legal basis)

Consent — for newsletter subscriptions and non-essential cookies (analytics, embedded maps), we rely on your explicit consent, which you may withdraw at any time.

Legitimate interest — for responding to contact form inquiries, we process your data based on our legitimate interest in providing customer service and answering questions about our classes.

Contract / pre-contractual steps — where you are inquiring about or enrolling in classes, we process your data as necessary to take steps at your request prior to entering into an agreement, or to perform that agreement.

4. Who we share your data with

We do not sell your personal data. We share data only with the service providers necessary to operate our website and communications, specifically:

Mailchimp (newsletter delivery) — email address only, for subscribers who opt in.

Google (Google Analytics/Site Kit, Google Maps) — pseudonymized analytics data and, where you interact with an embedded map, data collected directly by Google under its own privacy terms.

Hostinger (our web hosting provider) — as the infrastructure processor for all data submitted through this website.

We do not share your data with any other third party unless required by law.

5. How long we keep your data

Contact form submissions are retained for as long as necessary to respond to and resolve your inquiry, and are then deleted or archived in line with our internal record-keeping needs, typically no longer than [RETENTION PERIOD — e.g. 12 months].

Newsletter subscriber data is retained until you unsubscribe, after which it is removed from our mailing list within [PERIOD].

Google Analytics data retention follows Google's own configurable retention settings, currently set to [PERIOD, e.g. 14 months].

6. Cookies

Our site uses a cookie consent tool (Cookie-Script) to let you choose which categories of cookies you accept. Categories may include:

Necessary cookies — required for the site to function (e.g. language preference, cookie consent choice itself).

Analytics cookies — Google Analytics, used only with your consent, to understand site usage.

Third-party embed cookies — set by Google Maps when a map is loaded on a page you visit.

You can change or withdraw your cookie consent at any time via the cookie preferences link in our site footer, or by adjusting your browser's cookie settings.

7. Your rights under GDPR

If you are located in the EU/EEA, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data ("right to be forgotten"); object to or restrict certain processing; request a copy of your data in a portable format; and withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at info@gorgoneskaimages.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (ΑΠΔΠΧ) at www.dpa.gr.

8. Children's data

As a baby-swimming and children's activity provider, we necessarily process limited information about children (e.g. a child's name and age) when a parent or guardian enrolls them in a class or asks a question on their behalf. This information is provided to us by the parent/guardian, who is responsible for its accuracy, and is used solely for class administration and safety purposes. We do not knowingly collect data directly from children through this website.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be reflected here; we encourage you to review this page periodically.

10. Contact us

For any question about this Privacy Policy or how we handle your data, contact us at info@gorgoneskaimages.gr or n.ionia@gorgoneskaimages.gr, or by phone at 210 96 06 786 (Glyfada) / 211 0013 287 (Nea Ionia).