Privacy & Cookie Policy

This page says exactly what the site collects, why, for how long and who else sees it. It is written to be read, not to exist.

Last updated: 3 October 2026

01In short

This site does not track you. There is no Google Analytics or any other analytics tool, no advertising networks, no social buttons loading third-party code, no profiling and no automated decision-making about you.

Until you do something, the site sets no cookie at all. Data reaches us in two cases only: if you fill in the contact form, or if you switch on live chat.

Even the webfonts are hosted by us - no request goes to Google's servers, so your IP address is never disclosed to them.

02Who is responsible

The controller for data collected through this site is LinkProduction, present in Athens and Nafpaktos.

For any data protection matter - a question, a request or a complaint - write to linkproductiongr@gmail.com or call +30 261 550 2655.

No Data Protection Officer has been appointed, and none is required: under Article 37(1), a DPO is mandatory for public authorities, for controllers whose core activities involve large-scale systematic monitoring, or for large-scale processing of special categories of data. None of those applies here. Your requests are handled directly by the company, at the contact details above.

03What we collect

In three places and nowhere else:

1. The contact form

We receive what you wrote: your name, email address, company or organisation (optional), type of event or venue (optional) and the text of your message. The form provider additionally records the IP address of the submission and a timestamp, as a measure against automated spam.

Please do not send special-category data through the form (health data, political or religious beliefs, and so on). We do not need it to answer a production enquiry.

2. Live chat

It loads only if you explicitly accept it. If you do, the chat provider receives your IP address, technical browsing details and the content of what you type, and sets its own cookies. If you do not accept it, its code never loads.

3. Server logs

The hosting provider keeps standard logs for every request: IP address, date and time, page address, response code and user-agent. These exist for server security and operation, are not tied to a name, and are not used for traffic analysis.

04Why - purposes and legal bases

Every processing operation has a specific purpose and a specific legal basis under Article 6:

What we doWhyLegal basis
Answer your message and prepare a production proposalIt is what you asked forArticle 6(1)(b) - steps prior to entering a contract, at your request
Load live chatSo you can talk to us in real timeArticle 6(1)(a) - consent, withdrawable at any time
Keep server logsSecurity, fault diagnosis, protection from abuseArticle 6(1)(f) - legitimate interests
Keep records of engagementsTax and accounting obligationsArticle 6(1)(c) - compliance with a legal obligation

Where the basis is consent, you can withdraw it at any time with no consequence and without explaining why. Withdrawal does not affect the lawfulness of processing carried out before it.

Where the basis is legitimate interests, you have the right to object - see Your rights.

05Cookies and local storage

Without your consent, this site sets no cookie at all. Not even your own choice is stored in a cookie.

How we remember your choice

Your decision is kept in your browser's local storage (localStorage), under the key lp-consent. It holds the categories you accepted or rejected, a version number and the timestamp of the decision. It is never transmitted - not to us, not to anyone - and it does not travel with every request the way a cookie does. It stays until you clear it, either from the button below or by clearing the site's data in your browser. If the categories change, the version number changes and consent is requested again.

Consent per category

Consent is asked for per category, not all at once. You can accept some and reject others. Categories with no active service attached are not shown in the banner at all - you are not asked to permit something that does not exist.

CategoryWhat it coversStatus
Strictly necessaryThe page itself working, and recording your choiceAlways on - sets no cookie
FunctionalLive chatOnly with your consent
StatisticsTraffic measurementNo such service is used
MarketingAdvertising targetingNo such service is used

Webfonts

The site's fonts are hosted on our own server. No request is made to Google's servers, so your IP address is not disclosed to them and no consent is needed in order to read the page.

06Third parties

These are the only third parties involved:

ProviderRoleWhat it seesWhen
FormspreeProcessorWhat you filled in, the submission IP and a timestampOnly when you press send
TidioProcessorIP, technical browsing details, chat content; sets its own cookiesOnly if you accept live chat
Hosting providerProcessorServer logs: IP, time, page, user-agentOn every request, as on any website

We do not sell, rent or trade your data with anyone. Beyond the above, data is disclosed only where required by law or by a decision of a competent authority.

07Transfers outside the EEA

Some of the providers above may process data outside the European Economic Area. Where they do, the transfer relies on the European Commission's Standard Contractual Clauses (implementing decision 2021/914), or on an adequacy decision where one exists.

You can request a copy of the relevant safeguards at the contact details in section 2.

08How long we keep it

Nothing is kept "forever". By category:

DataRetentionThen
Form message that did not lead to an engagementUp to 12 months from the last contactDeleted
Form message that led to an engagementFor the duration of the engagement and then 5 years, the period Greek tax law requires for the related recordsDeleted
Live chat historyPer the chat provider's terms; also deleted on your requestDeleted
Server logsPer the hosting provider's policy, typically up to 12 monthsDeleted or anonymised
Your cookie choice (localStorage)Until you clear itCeases to exist

If you ask us to delete sooner, we delete - except for anything we are legally obliged to keep, and in that case we tell you what it is and why.

09Security

The site is served exclusively over HTTPS, so your communication with it is encrypted. We do not request or process payment details through this site; there are no user accounts and no passwords are stored.

We ask for the minimum data needed to answer a production enquiry, and access to what we receive is limited to those who need to see it in order to handle it.

10Photographs

The photographs on this site come from our own productions. They are published to document the work - the venue, the camera positions, the equipment.

As a matter of policy, we do not publish photographs in which a face is identifiable, nor the names of clients. Images showing an audience at a distance or from behind are published only where no individual is identifiable.

If you nonetheless believe you are identifiable in an image, write to linkproductiongr@gmail.com and we will remove it - with no need to justify the request.

11Your rights

Under the General Data Protection Regulation (EU 2016/679) you have the following rights:

  • Access (Article 15) - to learn whether we hold data about you, what it is, and to receive a copy.
  • Rectification (Article 16) - to have inaccurate data corrected or incomplete data completed.
  • Erasure (Article 17) - to have it deleted, where there is no lawful ground for us to keep it.
  • Restriction (Article 18) - to freeze processing while a dispute is resolved.
  • Portability (Article 20) - to receive it in a structured, commonly used, machine-readable format.
  • Objection (Article 21) - to processing based on legitimate interests.
  • Withdrawal of consent (Article 7(3)) - at any time, as easily as you gave it.

How to exercise them

Email us at linkproductiongr@gmail.com. No particular wording is needed; it is enough that we understand what you are asking. We respond without undue delay and in any case within one month of receiving the request (Article 12(3)). If the request is complex, that period may be extended by a further two months - and if so we will tell you within the first month, explaining why.

Exercising your rights is free of charge. We may ask for details to verify your identity - not to make the process harder, but so we do not hand your data to someone else.

12Complaining to the authority

If you believe the processing of your data infringes the Regulation, you have the right to lodge a complaint with the supervisory authority (Article 77). In Greece that is the Hellenic Data Protection Authority:

We would appreciate it if you came to us first - it is usually faster - but that is not a precondition for complaining.

13Minors, automated decisions, external links

Minors

This site addresses professionals and organisations. It is not directed at children and we do not knowingly collect data from anyone under 16. If we become aware that we have, we delete it.

Automated decision-making

We do not take decisions about you based solely on automated processing, and we do not carry out profiling (Article 22). Every enquiry is read by a person.

Links to other sites

Where there is a link to a third-party site, this policy stops there. That site's practices are governed by its own privacy policy.

14Changes to this policy

If something material changes - a new provider, a new category of data, a different retention period - we update this page and change the date at the top. We do not retroactively change the legal basis for data already collected.

Last updated: 3 October 2026. Material changes are marked with a new date here.