Privacy & Cookie Policy
Last updated: 17/10/2026
Protecting your personal data is both an obligation and a priority for us. This policy explains what data we collect when you use mdimopoulos.com, why, how long we keep it and what rights you have, under the EU General Data Protection Regulation 2016/679 (GDPR) and Greek law 4624/2019.
1. Data controller
M. Dimopoulos — Michael Dimopoulos, Heraklion, Crete, Greece.
Email: info@mdimopoulos.com
Phone: 6997754323
2. What we collect
- Contact form & quote questionnaire: name, email, phone (optional), company/industry, project details and anything else you write to us.
- Live chat: name, email, the conversation, and — for security and abuse prevention — your IP address, approximate location (city/country derived from the IP), device/browser type, time zone and the page you write from.
- AI assistant: runs entirely in your browser and does not send your questions anywhere. The conversation is kept temporarily in your browser (sessionStorage) and is deleted when you close the tab. Only if you send the quote questionnaire do its answers reach us.
- Newsletter: your email and language, only if you subscribe.
- Client portal (clients): account details, invoicing details (VAT number, company name, tax office, address, business activity), support requests, files and notification settings.
- Technical data: server logs (IP, date/time, page, browser), kept for security and the proper running of the site.
3. Purposes and legal basis
- Replying to enquiries, quotes and chats — steps prior to entering a contract (Art. 6(1)(b) GDPR).
- Providing our services and the client portal, issuing invoices — performance of a contract and legal obligation (Art. 6(1)(b) and (c)).
- Site security and abuse prevention — legitimate interest (Art. 6(1)(f)).
- Newsletter, statistics and marketing cookies — your consent (Art. 6(1)(a)), which you can withdraw at any time.
4. How long we keep it
- Enquiries, quotes and chats: up to 24 months after the last contact, unless we start working together.
- Client and invoicing data: for the duration of our collaboration and then as long as tax law requires.
- Newsletter: until you unsubscribe.
- Server logs: for a limited period, as long as security requires.
5. Who we share it with
We never sell or rent data. Data is processed on our behalf, with appropriate safeguards, only by:
- the site’s hosting and email provider,
- IP geolocation services (ipwho.is / ipapi.co), only for the approximate location in live chat,
- your browser’s push services (e.g. Google, Apple, Mozilla), if you enable push notifications in the client portal,
- the EU VIES system / Greek tax authority (AADE), when you ask us to fill in details from a VAT number,
- Google (Google Analytics), only if you accept statistics cookies.
6. Cookies and local storage
We use necessary cookies to run the site and, only with your consent, statistics and marketing cookies. You can change your choice at any time from the “Cookie settings” link at the bottom of every page.
| Name | Category | Purpose | Duration |
|---|---|---|---|
| md_consent | Necessary | Remembers your cookie choices | 180 days |
| wordpress_logged_in_*, wordpress_sec_* | Necessary | Client portal login | Session / 14 days |
| pll_language | Necessary | Remembers the site language | 1 year |
| md-chat-token, md-chat-mode (localStorage) | Necessary | Continues your live chat conversation | Until deleted |
| md-ai-*, md-v (sessionStorage) | Necessary | AI assistant conversation and loading effect | Until the tab is closed |
| _ga, _ga_* | Statistics | Anonymous traffic statistics (Google Analytics), only with consent | Up to 2 years |
7. Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw your consent at any time. To exercise any right, email us at info@mdimopoulos.com — we will reply within one month.
If you believe the processing breaches the law, you can lodge a complaint with the Hellenic Data Protection Authority.
8. Security
The site runs exclusively over an encrypted connection (HTTPS), passwords are stored hashed, and access to data is limited to the people who need it to serve you.
9. Changes
We may update this policy when our services or the law change. The date at the top of the page shows the latest update.