Last updated: 15 May 2026

1. Who we are

This Privacy Policy describes how we collect, use, and protect your personal data when you visit the website growhub.gr (the “Website”).

Data Controller:

• Name: Charalampos Partalas (sole proprietorship, trading as “GrowHub”)
• Greek Tax Number (ΑΦΜ): 117572882
• Tax Office: Z’ Thessaloniki
• Registered address: Petrou Syndika 60B, 54248, Thessaloniki, Greece
• Contact email for data protection matters: info@growhub.gr

2. What data we collect and why

a) Contact form data

When you submit the contact form on the Website, we collect:

• First name
• Last name
• Email address
• Phone number
• The content of your message

Purpose: To respond to your inquiry, provide information about our services, and potentially enter into a business relationship.

Legal basis: Article 6(1)(b) GDPR (steps taken at the request of the data subject prior to entering into a contract) and, where no engagement follows, Article 6(1)(f) GDPR (our legitimate interest in responding to business inquiries).

b) Browsing and analytics data (Google Analytics 4)

The Website uses Google Analytics 4, provided by Google Ireland Limited, to collect anonymous usage statistics (e.g. pages visited, time spent, device type, pseudonymised IP address, general geographic region).

Purpose: To improve the Website and understand visitor behaviour.

Legal basis: Article 6(1)(a) GDPR (consent given via the cookie banner). You may withdraw your consent at any time via the Website’s cookie settings.

3. Cookies

The Website uses strictly necessary cookies (which do not require consent) and Google Analytics 4 analytics cookies (which require your explicit consent). Further details are provided in our Cookies Policy and in the consent banner shown on your first visit.

4. With whom we share your data

We do not sell or rent personal data. We share data only with the following categories of recipients, to the extent necessary:

• Hosting provider: Papaki (located in the EU), for hosting the Website
• Email provider: Google Workspace (Google Ireland Limited), for managing our business correspondence
• Analytics provider: Google Ireland Limited, for Google Analytics 4
• Professional advisors: Accountants and legal advisors, where required for compliance with legal obligations
• Public authorities: Where required by law

5. International data transfers

Google may process data on servers located outside the EEA, including in the United States. These transfers are covered by:

• The EU-US Data Privacy Framework, under which Google is certified
• The European Commission’s Standard Contractual Clauses (SCCs)

6. Retention periods

• Contact form data from prospects who did not engage: 2 years from the last point of contact
• Active client data: For the duration of the business relationship plus 5 years after termination, for compliance with Greek tax legislation (Law 4308/2014, Greek Accounting Standards)
• Google Analytics 4 data: 14 months (default retention period)

7. Your rights

Under the GDPR (Regulation EU 2016/679) and Greek Law 4624/2019, you have the following rights:

• Access to your data (Article 15)
• Rectification of inaccurate data (Article 16)
• Erasure (“right to be forgotten”, Article 17)
• Restriction of processing (Article 18)
• Data portability (Article 20)
• Objection to processing (Article 21)
• Withdrawal of consent at any time, without affecting the lawfulness of processing carried out beforehand
• Lodging a complaint with the Hellenic Data Protection Authority (www.dpa.gr, 1-3 Kifissias Avenue, 11523 Athens, Greece, tel. +30 210 6475600)

To exercise any of these rights, please contact us at info@growhub.gr. We will respond within 30 days.

8. Data security

We implement appropriate technical and organisational measures to protect your data (SSL encryption, access controls, vetted partners). However, no method of transmission or storage over the internet is 100% secure.

9. Automated decision-making

We do not engage in automated decision-making or profiling that produces legal effects concerning you.

10. Children

The Website is not intended for individuals under 16 years of age, and we do not knowingly collect data from minors.

11. Changes to this Policy

We reserve the right to amend this Policy. The date of the most recent update is shown at the top of the document.