Privacy Policy
Last updated: 13 October 2026
Atractos respects your privacy and complies with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek data protection law. This policy explains what data we collect through atractos.com, for what purpose, on what legal basis, and what rights you have.
1. Data controller
The controller of your data is Atractos (Electrical Engineering Technical Office, owner: Nefeli M.P. Kavouni).
Address: 37 2nd Paraliaki Str., Nea Vrasna, Greece. Email: [email protected]. Phone: +30 231 005 2519.
2. What data we collect
Our website is designed to collect the bare minimum. We have no user login system and we do not use advertising or tracking cookies.
We collect data in only two cases:
- When you submit the contact form: name, email, phone, company, service of interest, preferred language and your message.
- While browsing: anonymous, non-identifiable traffic statistics (see section 5).
3. Legal basis and purpose
Processing of form data is carried out to receive and handle your enquiry, based on your consent and our legitimate interest in responding to commercial enquiries (Article 6(1)(a) and 6(1)(f) GDPR).
Anonymous traffic measurement is based on our legitimate interest in improving the website (Article 6(1)(f) GDPR) and, because it stores no information on your device and does not identify you, it does not require your consent.
4. Contact form and HubSpot
The details you submit through the contact form are transmitted over a secure connection (HTTPS) to the HubSpot customer relationship management platform (HubSpot Inc., 25 First Street, Cambridge, MA 02141, USA), which we use to record and manage enquiries.
- Data sent: name, email, phone, company, message, service of interest, preferred language.
- Attribution parameters: utm_source, utm_medium, utm_campaign and the page address, so we know where the enquiry originated.
- We do not use the data for automated decision-making or profiling.
5. Anonymous analytics (Buddystat)
We use Buddystat to measure traffic. It operates without cookies (cookieless). This means no cookies or other identifiers are placed on your device and the data is not linked to you as an individual.
- No cross-site tracking is performed.
- No behavioural or advertising profile is created.
- Because nothing is stored on your device, no cookie consent banner is required.
6. Google and Bing tools
The website uses Google Search Console and Bing Webmaster Tools for technical monitoring of indexing and search performance.
These tools provide us with aggregated, anonymised data (such as impressions and search queries). They are not used for advertising or to identify individual visitors.
7. Cookies
The website does not use tracking, advertising or profiling cookies. Only strictly necessary technical items are used (such as storing your language preference on your device) along with Cloudflare cookies, which are strictly necessary for the security and operation of the website.
Since no non-essential cookies are used, no consent banner is displayed.
8. Recipients and transfers outside the EEA
Your data is shared only with providers that help us operate the website: HubSpot (CRM, USA), Cloudflare (hosting and content delivery network, USA) and Buddystat (anonymous analytics).
For transfers outside the European Economic Area, providers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or an equivalent lawful transfer framework.
We do not sell, rent or share your data with third parties for advertising purposes.
9. Retention
Contact form details are retained for as long as needed to handle your enquiry and any resulting engagement, and thereafter for as long as tax or other legal obligations require, after which they are deleted.
Anonymous statistics contain no personal data and may be retained indefinitely.
10. Your rights
Under the GDPR you have the following rights:
- Access to the data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure (the “right to be forgotten”), where no lawful ground for retention applies.
- Restriction of processing.
- Objection to processing based on legitimate interest.
- Portability of the data you provided to us.
- Withdrawal of consent at any time, without affecting the lawfulness of prior processing.
11. Lodging a complaint
To exercise any of your rights, contact us at [email protected]. We respond within one month.
If you believe the processing infringes the law, you have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, www.dpa.gr) or the supervisory authority of your country of residence.
12. Security and changes
The website operates exclusively over an encrypted connection (HTTPS/TLS 1.2+) and we apply appropriate technical and organisational measures to protect your data.
We may update this policy. The last-updated date is shown at the top of the page.
Privacy enquiries
For any question about your personal data, contact [email protected].
Atractos · 37 2nd Paraliaki Str., Nea Vrasna, Greece