Privacy policy

Who is responsible

The data controller is [FULL LEGAL NAME], trading as Anefelo, [STREET AND NUMBER], [POSTCODE] [CITY], Greece. VAT number EL[AFM]. Email [EMAIL].

What we collect and why

• Booking and payment: your name, email, billing address, any VAT number and what you bought. Stripe processes your card; we never see the card number. Needed to perform the contract and to keep tax records (GDPR Art. 6(1)(b) and (c)).
• Participant details: the Google account, background, capstone idea and other answers you give after booking. Used to set up your access and adapt the course (Art. 6(1)(b)).
• Enquiries and partner-rate requests: what you send in the forms. Used to reply and, for partner rates, to check eligibility (Art. 6(1)(b) and (f)).
• Course participation: your name and anything you say or show in sessions, which may appear in recordings shared with the cohort, and your messages in the cohort channel (Art. 6(1)(b)).
• Website: the hosting provider logs IP addresses and requests to keep the site secure (Art. 6(1)(f)).

We don't sell your data, and we don't send marketing emails unless you've asked for them.

Cookies

This site uses Google Analytics to count visits and see which pages are read. It sets Google Analytics cookies (_ga and _ga_*) and sends your truncated IP address and browser details to Google. You can block it with a browser setting or an ad blocker. Stripe's checkout page, which opens on Stripe's own domain, uses cookies needed for payment and fraud prevention.

Who we share it with

We use these service providers, each under a data-processing agreement:

• Stripe (payments, Ireland and USA)
• Formspree (form submissions, USA)
• Vercel (website hosting, USA)
• Zoom (live sessions, USA)
• Google (Analytics, Colab, Earth Engine and shared files, USA)
• GitHub (notebook repository, USA)
• [INVOICING PROVIDER] (invoices sent to the Greek tax authority's myDATA platform)
• [EMAIL PROVIDER] (email)

Transfers to the USA rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. Invoice data is sent to the Greek tax authority (AADE) as the law requires.

How long we keep it

• Invoices and payment records: as long as Greek tax law requires, generally 5 years from the end of the tax year.
• Participant details and course messages: 24 months after the course ends.
• Session recordings: 12 months after the last session.
• Enquiries that don't lead to a booking: 12 months.

Your rights

You can ask for access to, correction or deletion of your data, ask us to restrict or stop using it, or ask for a copy to take elsewhere. Email [EMAIL]. You can also complain to the Hellenic Data Protection Authority (dpa.gr) or the authority in your country.