In short
We collect only what we need to reply to you.
We never sell or rent data to anyone.
You can ask for access, correction or deletion at any time.
Data is stored on servers inside the EU.
01Data controller
The controller of your personal data is Devebo, Xanthi, Greece. For any privacy matter, contact hello@devebo.com.
02What we collect
When you use the contact form: your name, business name, email, phone number and whatever you tell us about your project.
When you send the form, Cloudflare Turnstile checks that it is not a bot. To do so it processes your IP address and technical details of your browser, not what you type into the form.
When you browse: anonymous usage statistics, only if you accept them in the cookie settings, plus your language and display preferences.
If you accept marketing cookies: the Meta Pixel records the pages you visit, the buttons you click and whether you send the contact form, along with technical details such as your IP address and browser, and sends them to Meta.
03Why we use it
To reply to your enquiry and send a quote (pre‑contractual steps, GDPR Article 6(1)(b)).
To protect the contact form from spam and automated submissions (legitimate interest, GDPR Article 6(1)(f)).
To improve the website using anonymous statistics, only with your consent (GDPR Article 6(1)(a)).
To measure and target our ads on Facebook and Instagram, only with your consent (GDPR Article 6(1)(a)).
04How long we keep it
Enquiries that do not lead to an engagement are deleted after 12 months. Client records are kept for as long as tax law requires.
05Who we share it with
With partners that keep the website running (hosting, email, analytics), under a processing agreement and on servers inside the EU. We do not sell data.
With Cloudflare, Inc., for the Turnstile check on the contact form. Cloudflare processes this data on our behalf and also uses it itself to improve its bot detection, under its Turnstile terms (cloudflare.com/turnstile-privacy-policy). This may include transfers to the US under the EU-U.S. Data Privacy Framework.
With Meta Platforms Ireland Ltd., only if you accept marketing cookies. We and Meta are joint controllers for collecting and transmitting data through the Meta Pixel (GDPR Article 26, facebook.com/legal/controller_addendum). What Meta does with it afterwards is Meta's decision, under its privacy policy (facebook.com/privacy/policy), and may include transfers to the US under the EU-U.S. Data Privacy Framework.
06Your rights
You have the right to access, correct, delete, restrict and port your data, to object to processing, and to withdraw consent at any time.
If you believe your rights have been breached, you can contact the Hellenic Data Protection Authority (www.dpa.gr).
07Security
The website runs over HTTPS only, with regular updates and backups. Access to data is limited to the people who need it.
Questions?
For anything about this document, write to hello@devebo.com. We reply within two working days.
2nd km Xanthis - Lagous, Xanthi 671002541 200834