Privacy Policy

Last updated: 9 November 2026

This page explains in plain language what personal data we collect, why, how long we keep it and what rights you have under the EU General Data Protection Regulation 2016/679 ("GDPR") and Greek Law 4624/2019.

1. Who is responsible for your data

The data controller is the sole proprietorship MALIARAS THEOLOGOS, trading as "Forge Web Development" ("Forge", "we").

Legal name: MALIARAS THEOLOGOS (ΜΑΛΙΑΡΑΣ ΘΕΟΛΟΓΟΣ), sole proprietorship
Trading name: Forge Web Development
Tax ID (ΑΦΜ): 184120969
Tax office: ΚΕΦΟΔΕ Αττικής (Attica)
Business register (ΓΕΜΗ): 197331203000
Registered address: Aristotelous 11-13, 104 32 Athens, Greece
Mailing address only. We don't receive visitors in person.
Email: support@forgeweb.gr
Phone: +30 690 695 4902

For anything about your data, email us at support@forgeweb.gr.

2. What data we collect

When you contact us (form, email, phone, WhatsApp or Viber): your name, email, phone, company name and whatever you tell us about your project. The website form doesn't store anything in a database. It opens your own email app, and the message reaches us as a normal email.
When we work together: billing details (company name, tax ID, tax office, address), contact details, the material you give us for the project, and payment details (for example the sender name and amount of a transfer). We never see or store card details.
When you visit the website: our hosting provider automatically logs technical data (IP address, browser type, time and page visited) for security and to keep the site running. We don't use analytics tools, advertising cookies or tracking pixels.

3. Why we use it and on what legal basis

Purpose	Legal basis (GDPR)
Replying to enquiries and sending quotes	Steps taken at your request before entering a contract (Art. 6(1)(b)), and our legitimate interest in replying to people who contact us (Art. 6(1)(f))
Delivering the project and support	Performance of a contract (Art. 6(1)(b))
Invoicing, accounting and tax obligations	Legal obligation (Art. 6(1)(c))
Website security and preventing abuse	Legitimate interest (Art. 6(1)(f))
Defending legal claims	Legitimate interest (Art. 6(1)(f))

We don't send marketing newsletters, we don't sell data, and we don't make automated decisions or build profiles about you.

4. Who else can access it

Only the following process your data, and only as far as needed for their purpose:

Hostinger (Hostinger International Ltd., Cyprus): website hosting and server logs.
Google (Google Ireland Limited): the email service we use to send and receive messages.
Papaki: when we register a domain for a client, the registrant's details go to the registrar and the relevant registry, as registration requires.
WhatsApp or Viber: only if you choose to message us there. Their own privacy terms apply.
Banks and IRIS: to process payments.
Our accountant: for bookkeeping and tax obligations.
Public authorities (for example the Greek tax authority AADE), only when the law requires it.

5. Transfers outside the European Union

Your data is normally stored within the EU. Some providers, such as Google, may also process it outside the EU (for example in the USA). In that case the transfer relies on the safeguards provided by the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

6. How long we keep it

Messages and enquiries that didn't lead to a project: up to 2 years after our last contact.
Client and project records: for the duration of our work together, then as long as Greek tax law requires or as needed to defend legal claims.
Server logs: as set by our hosting provider, usually a few weeks.

7. Your rights

You can ask for access to your data, correction, deletion, restriction of processing and portability, and you can object to processing based on legitimate interest. Email us at support@forgeweb.gr and we'll reply within one month at the latest. We may ask you to confirm your identity. Some data, such as invoices, we must keep for as long as the law requires.

If you believe your rights have been breached, you can complain to the Hellenic Data Protection Authority (1-3 Kifisias Ave, 115 23 Athens, www.dpa.gr). We'd appreciate the chance to sort it out with you first.

8. Security

We take reasonable technical and organisational measures to protect your data, such as an encrypted (HTTPS) connection on the website and restricted access to our accounts and files.

9. Children

Our services are for businesses and adults. We don't knowingly collect data from children under 15.

10. Changes to this policy

If anything changes, we'll update this page and the date at the top. For cookies, see our Cookie Policy.