Infinity Partners

Privacy Policy

Last updated 7 August 2026

This policy explains what personal data Infinity Partners processes through infinitypartners.gr, on what legal basis, and what rights you have under the General Data Protection Regulation.

1. Data controller

The controller for the processing described in this policy is Infinity Partners, a technology and consulting company established in Athens, Greece and entered in the Greek General Commercial Registry (GEMI).

Controller
Infinity Partners
Established in
Athens, Greece
GEMI
184001903000
VAT (AFM)
802854064

We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR. Privacy enquiries are handled at the address above.

2. Scope

This policy covers the website infinitypartners.gr. Personal data processed in the course of delivering a project to a client is governed by the data processing terms of the relevant service agreement, where Infinity Partners normally acts as a processor on behalf of the client.

3. What we process

3.1 Data you send us

This website has no contact form, no account registration and no newsletter. The only way to reach us from it is by email. If you write to us, we receive your email address, your name if you give it, and whatever else you choose to include in your message and its attachments.

3.2 Technical data

Like any website, ours is served over the internet, and our hosting provider records standard server log data for security and operational reasons. This typically includes the IP address of the requesting device, the date and time of the request, the resource requested, the HTTP status code, the referring page and the browser user agent string.

3.3 What we do not do

We do not use analytics, advertising, profiling, social media plug-ins or third-party tracking on this website. Fonts and images are served from our own domain, so loading a page does not disclose your IP address to any third-party content network.

4. Purposes and legal bases

  • Answering your enquiry. Purpose: responding to messages and, where relevant, preparing an offer. Legal basis: Article 6(1)(b) GDPR (steps prior to entering a contract), or Article 6(1)(f) GDPR (our legitimate interest in replying to business correspondence).
  • Operating and securing the website. Purpose: delivering the pages, keeping the service available, detecting and investigating abuse. Legal basis: Article 6(1)(f) GDPR (our legitimate interest in a secure, functioning website).
  • Meeting legal obligations. Purpose: retaining commercial and tax correspondence where the law requires it. Legal basis: Article 6(1)(c) GDPR.

5. Cookies

This website does not set cookies and does not write to local storage. Because no non-essential cookies or similar technologies are used, no consent banner is required under Article 5(3) of Directive 2002/58/EC as transposed into Greek law by Law 3471/2006.

6. Recipients of your data

We do not sell personal data and we do not share it for marketing purposes. Personal data may be accessible to:

  • our hosting and email providers, acting as processors under a data processing agreement pursuant to Article 28 GDPR;
  • our accountants, auditors and legal advisers, where a professional or statutory duty requires it;
  • public authorities, where disclosure is required by Greek or European Union law.

7. Transfers outside the EEA

We aim to keep processing within the European Economic Area. Where a provider processes data outside the EEA, the transfer takes place under an adequacy decision of the European Commission or under the Standard Contractual Clauses adopted by the Commission, together with any supplementary measures required by Article 46 GDPR. You may request details of the safeguards in place by writing to us.

8. Retention

  • Email correspondence: kept for as long as the enquiry is active and for up to two years afterwards, so that we can follow up and evidence what was agreed.
  • Contractual and accounting records: kept for the periods required by Greek tax and commercial legislation, which is generally five to ten years.
  • Server logs: kept for a short period, normally not longer than thirty days, unless a longer period is needed to investigate a security incident.

9. Your rights

Under Articles 15 to 22 GDPR and Greek Law 4624/2019 you have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, and portability, and the right to object to processing based on our legitimate interests. Where processing rests on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, write to info@infinitypartners.gr. We reply within one month, which may be extended by two further months for complex requests, in which case we will tell you. We may ask for information to confirm your identity before acting on a request.

10. Complaints

If you believe we have handled your personal data unlawfully, you may lodge a complaint with the Hellenic Data Protection Authority:

  • Hellenic Data Protection Authority, 1-3 Kifissias Avenue, 115 23 Athens, Greece
  • Telephone: +30 210 6475600
  • Website: www.dpa.gr

You may also complain to the supervisory authority of the EU Member State where you live or work.

11. Security

We apply technical and organisational measures appropriate to the risk, including transport encryption (HTTPS), access control on the systems that hold correspondence, and least privilege for accounts. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Changes to this policy

We may update this policy to reflect changes in our processing or in the law. The date at the top of the page shows when it was last revised. Material changes will be highlighted on this page.

13. Contact

Privacy questions and requests: info@infinitypartners.gr.

Back to infinitypartners.gr