PRIVACY POLICY
Last updated: 7 August 2026
1. Who we are (Data Controller)
The Wise Greek Owl Project ("we", "us", or "our") is committed to protecting your privacy and handling your personal data lawfully, fairly and transparently in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), Greek Law 4624/2019, and other applicable data protection laws.
The data controller responsible for your personal data is:
Chrysafenia Pardalidou, trading as The Wise Greek Owl Project
Anatolikis Thrakis 133, Alexandroupolis, 68131, Greece
Email: info@wisegreekowl.com
This Privacy Policy explains what personal data we collect, how and why we use it, who we share it with, how long we keep it, and the rights you have over your data. It applies to the Website and all products and services we offer.
2. The personal data we collect
We collect and process the following categories of personal data:
Information you provide directly, for example when you subscribe to our newsletter, register for a course, book a lesson, request our proofreading or editing services, or contact us: your name, email address, and — where relevant to a purchase — your billing address, phone number, and the content of your messages. Payment card details are collected and processed directly by our payment providers (see Section 5); we do not receive or store full card numbers.
Information collected automatically when you visit the Website: your browser type, device and operating system, IP address, approximate location, referring pages, and how you interact with our pages. This is collected through cookies and similar technologies (see our Cookie Policy) and only with your consent where required.
You may browse the public areas of the Website without providing personal data. You can always decline to provide personal data, but this may prevent you from using certain features such as purchasing a course or subscribing to our newsletter.
3. Why we use your data and our legal bases
Under the GDPR we must have a lawful basis for processing your personal data. We rely on the following:
To provide and manage your courses, lessons, and services, respond to your enquiries, and deliver the products you order — on the basis of performance of a contract with you (or steps taken at your request before entering a contract).
To send you our newsletter and marketing emails about our courses, offers, and cultural content — on the basis of your consent, which you can withdraw at any time. Where permitted by law, we may send you information about services similar to those you have already purchased, on the basis of our legitimate interest in retaining customers; you can opt out at any time.
To operate, secure, and improve the Website, understand how it is used, and develop our offerings — on the basis of our legitimate interests in running and improving our business, and, for non-essential cookies, on the basis of your consent.
To comply with legal obligations, such as tax, accounting, and consumer-protection requirements — on the basis of compliance with a legal obligation.
4. How we protect your data
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, loss, or destruction. These include restricted access, use of reputable service providers, and secure, encrypted payment processing. No method of transmission or storage is completely secure, but we work to protect your data and to keep our measures under review.
5. Sharing your data
We do not sell, rent, or trade your personal data. We share it only as follows:
With trusted service providers who process data on our behalf to help us run the business — for example our website and course-hosting platform (Systeme.io), email and newsletter platforms, analytics providers, and payment processors (Stripe and PayPal). These providers act on our instructions under written agreements and may only use your data to provide their services to us.
With legal or regulatory authorities, courts, or advisors where we are required to do so by law, or where necessary to establish, exercise, or defend legal claims, or to protect our rights, property, or safety.
We do not share your personal data with advertisers for their own marketing purposes.
6. International data transfers
We are based in Greece and primarily process data within the European Economic Area (EEA). Some of our service providers may process data outside the EEA (for example in the United States). Where this happens, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or an equivalent approved transfer mechanism, so that your data receives a level of protection consistent with EU law.
7. How long we keep your data
We keep your personal data only for as long as necessary for the purposes described in this policy:
Customer and transaction records are retained for as long as needed to provide the service and thereafter for the period required by Greek tax and accounting law (generally up to ten years). Newsletter and marketing data is kept until you unsubscribe or withdraw consent, after which we remove or anonymise it. Enquiry and correspondence data is kept for as long as needed to handle your request and a reasonable period afterwards. When data is no longer needed, we securely delete or anonymise it.
8. Your rights
Under the GDPR you have the right to:
Access the personal data we hold about you and receive a copy of it.
Rectification of inaccurate or incomplete data.
Erasure ("right to be forgotten") of your data in certain circumstances.
Restriction of processing in certain circumstances.
Data portability — to receive your data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
Object to processing based on our legitimate interests, and to object at any time to processing for direct marketing.
Withdraw consent at any time, where we rely on your consent. This does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, contact us at info@wisegreekowl.com. We will respond within one month. There is normally no charge, and we may need to verify your identity first.
You also have the right to lodge a complaint with a supervisory authority. In Greece this is the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifissias 1-3, 115 23 Athens, complaints@dpa.gr, www.dpa.gr. We would, however, appreciate the chance to address your concerns first.
9. Cookies
Our Website uses cookies and similar technologies. For details of what we use and how to manage your preferences, please see our separate Cookie Policy.
10. Third-party websites
Our Website may contain links to other websites we do not control. This Privacy Policy does not apply to those sites. We are not responsible for their content or privacy practices, and we encourage you to read the privacy policy of any website you visit.
11. Children
Our Website and services are intended for adults and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where changes are significant, take reasonable steps to notify you. We encourage you to review this page periodically.
13. Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact:
The Wise Greek Owl Project
Email: info@wisegreekowl.com
Website: www.wisegreekowl.com