Athens Unfolded is a travel-content brand operated by Kostas Georgakopoulos, trading as KG BUILDS, a sole proprietorship established in Greece, with its business address at Kasou 4, Piraeus, Greece. For the purposes of applicable data protection law, Kostas Georgakopoulos is the data controller for the personal data described in this Privacy Policy.

If you have any questions about this Privacy Policy or how your personal data is handled, you can contact us at hello@athensunfolded.com.

When you use our website or request our free guide, we may collect the following personal data:

• your first name;
• your email address;
• your marketing consent preference, where you choose to receive Athens tips, updates and selected offers;
• information relating to your subscription or interaction with our emails; and
• certain technical information generated when you use the website, such as your IP address, browser/device information, date and time, and the page or form through which you subscribed.

We collect only the information that is necessary for the purposes described in this Privacy Policy.

We use your personal data for the following purposes:

• to send you the free guide and other service-related communications you request;
• to manage your contact and subscription preferences;
• where you have given marketing consent, to send you Athens tips, useful updates and selected offers;
• to maintain the security and proper operation of our website and forms, and to prevent misuse;
• to understand basic website, form and email performance, where such processing is permitted; and
• to comply with applicable legal obligations and protect our legal rights.

The legal bases we rely on depend on the purpose of the processing. These may include taking steps at your request or providing the service you requested, your consent for marketing communications, our legitimate interests in operating and securing our services, and compliance with legal obligations.

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

If you choose to receive Athens tips, useful updates and selected offers, we will use your email address to send you marketing communications from Athens Unfolded.

Giving marketing consent is optional. You can request the free guide without agreeing to receive marketing emails.

You can withdraw your consent at any time by using the unsubscribe link included in our marketing emails or by contacting us at hello@athensunfolded.com.

If you unsubscribe, we will stop sending you marketing communications. We may retain a limited record of your opt-out preference where necessary to ensure that your request continues to be respected.

We use trusted third-party service providers to help us operate Athens Unfolded and deliver our services.

These may include:

• Systeme.io (ITACWT Limited), which we use to host our sales funnel, collect form submissions, manage contacts and email campaigns, and deliver digital content;
• infrastructure and hosting providers used by Systeme.io to operate its services;
• payment service providers, where you purchase a product from us; and
• professional advisers or public authorities where disclosure is required by law.

These providers may process personal data only to the extent necessary to provide their services or fulfil applicable legal obligations.

Systeme.io states that its servers are hosted on Amazon Web Services infrastructure in Ireland and that data stored through its services remains within the European Union.

We do not sell or rent your personal data.

Systeme.io states that the data stored through its services is hosted on Amazon Web Services infrastructure in Ireland and is not transferred outside the European Union.

Some other service providers we may use, including payment, technical or professional service providers, may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we take appropriate steps to ensure that the transfer complies with applicable data protection law. Depending on the circumstances, these safeguards may include an adequacy decision adopted by the European Commission, Standard Contractual Clauses, or another lawful transfer mechanism.

We keep personal data only for as long as necessary for the purposes for which it was collected, including to provide our services, manage your preferences, comply with legal obligations and protect our legitimate interests.

If you have consented to receive marketing communications, we may retain your contact details for that purpose until you withdraw your consent or the information is no longer necessary, subject to periodic review.

If you unsubscribe, we may retain a limited record of your email address and opt-out preference so that we can continue to respect your request.

Where you purchase a product or service from us, certain transaction, accounting or tax-related records may be retained for the period required by applicable law.

Under the GDPR, you may have the following rights in relation to your personal data, depending on the circumstances:

• the right to access the personal data we hold about you;
• the right to request correction of inaccurate or incomplete personal data;
• the right to request deletion of your personal data in certain circumstances;
• the right to request restriction of processing;
• the right to receive certain personal data in a portable format and, where applicable, have it transmitted to another controller;
• the right to object to certain processing, including direct marketing; and
• where processing is based on your consent, the right to withdraw that consent at any time.

To exercise any of these rights, contact us at hello@athensunfolded.com. We may ask for information necessary to verify your identity before responding to your request.

We will respond to valid requests without undue delay and, in principle, within one month, as required by applicable data protection law.

You also have the right to lodge a complaint with a data protection supervisory authority. If you are in Greece, the competent supervisory authority is the Hellenic Data Protection Authority (HDPA).

Our website may use cookies and similar technologies that are necessary for the website and its features to function properly.

We may also use analytics, functionality or marketing technologies where these have been enabled. Where required by law, non-essential cookies and similar technologies will only be used after you have given your consent.

You can accept, reject or manage non-essential cookies through the cookie consent controls available on our website. You may change or withdraw your consent at any time.

You can also configure your browser to block or delete cookies. However, blocking certain strictly necessary cookies may affect the operation of some website features.

The specific cookies and technologies used may change as our website and services evolve.

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, secure connections, account security measures and the use of service providers that implement appropriate security safeguards.

However, no method of transmission or storage on the internet can be guaranteed to be completely secure. If we become aware of a personal data breach that requires notification under applicable law, we will take the appropriate steps.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or the way we process personal data.

When we make changes, we will update the “Last updated” date at the top of this page. Where required by law, we will provide additional notice or request renewed consent.

We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle your personal data.