Privacy Policy

Protecting your personal data is a matter of respect towards you. This page explains in plain words what data luram.gr collects, why it collects it, how long it keeps it and what your rights are, in accordance with the EU General Data Protection Regulation (GDPR) and Greek law. It was written to be easy for anyone to read, with its legal details complete.

This is an English translation of the Greek privacy policy; both versions describe the same practices.

Data controller

The controller of your data is Luram AI Agency, based in Thessaloniki. For any matter relating to your personal data you can get in touch at [email protected]. Every message is read by a person and answered personally.

What data is collected and why

Contact form. When you fill in the contact form, we collect your email address or your phone number (whichever of the two you give, or both) and your message. They are used solely to reply to your request and for any communication between us that may follow. The message passes through the servers of Cloudflare (the company that hosts the site) and is delivered via Telegram, so that it can be read and answered quickly. A copy of the message is kept in a Cloudflare database located within the European Union, so that every message is safe even if its delivery is delayed. Along with the message, the time it was sent and the country it was sent from are recorded.

Protecting the form from spam. When you open the contact form, Cloudflare Turnstile loads, which tells people apart from automated programs. For this purpose Cloudflare processes technical details of the connection, such as your IP address and the type of browser you use, solely to protect the site. The result of the check is kept together with the copy of the message.

Booking an appointment. When you book an introductory appointment through the site, your name, email address and the date and time you choose are entered into Google Calendar. This is how the video call or meeting takes place and how you receive a confirmation and a reminder for your appointment.

Traffic statistics. The site uses Google Analytics 4 for traffic statistics. It loads on every visit and records how many visitors came, which pages they viewed and which source they arrived from. The data is used only in aggregate and helps make the site more useful. Further down, in the “Cookies and Analytics” section, you will find how you can opt out.

Your data is used solely for the purposes above. The only recipients are the technical providers required to run the services above: Google (Google Analytics and Google Calendar), Cloudflare (hosting the site, forwarding and storing contact form messages, protecting the form from spam) and Telegram (delivering contact form messages). These providers follow their own data protection terms and may also process data outside the European Union. Any other use, such as making data available to third parties for advertising purposes, is excluded.

Legal basis for processing

Processing rests on two legal bases:

• Consent (Article 6(1)(a) GDPR): when you fill in the contact form or book an appointment. You can withdraw your consent at any time, with a simple message to [email protected], with effect for the future.
• Legitimate interest (Article 6(1)(f) GDPR): responding to your requests, the smooth and secure operation of the site and improving the services through the traffic statistics of Google Analytics 4.

Retention period

Contact messages and appointment details are kept for as long as our communication or collaboration lasts and for up to 24 months after the last contact, so that there is continuity if you get back in touch. The copy of the form in the database is deleted automatically 24 months after it was sent. Google Analytics 4 statistics are kept for up to 14 months. When these periods end, the data is deleted.

Your rights

Under the GDPR you have the following rights, all free of charge:

• Access: to find out which of your data is held and to receive a copy.
• Rectification: to have any inaccurate or incomplete detail corrected.
• Erasure: to have your data deleted (the “right to be forgotten”).
• Objection and restriction: to object to a processing activity or to ask for it to be restricted.
• Portability: to receive your data in a machine-readable format, to move it elsewhere.

To exercise any of these, an email to [email protected] is all it takes. You will receive a reply as soon as possible and in any case within one month, as the regulation requires. If you believe your rights are being infringed, you also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA), at dpa.gr.

Cookies and Analytics

The site uses the strictly necessary cookies for its operation, as well as the statistics cookies of Google Analytics 4. Google Analytics 4 loads for every visitor without a separate cookie consent window. Its statistics are used only in aggregate.

You keep full control: you can adjust or delete cookies from your browser settings at any time, and the site stays fully functional. To opt out of Google Analytics, you can turn on your browser’s tracking protection or install Google’s official opt-out add-on (Google Analytics Opt-out Browser Add-on), at tools.google.com/dlpage/gaoptout.

Contact about privacy

For any question about your data or about this policy, write to [email protected]. I reply myself, in plain language, as soon as possible. If any part of this page seems unclear to you, your question will help make it clearer for everyone.

This policy is updated whenever something changes in the way the site works. The version in force is always on this page.

Last updated: 17 September 2026.