At the company “The Iris Collective”, we understand the importance of protecting our customers’ personal data and strive to be transparent regarding the manner in which we collect, use, disclose, transfer, and store your personal information. This Privacy Policy explains our practices regarding the information collected on the website https://theiriscollective.eu/. This Privacy Policy applies regardless of whether you access the website via a computer, mobile phone, tablet, television, household appliance, or other smart device.
Below is specific supplementary privacy policy information regarding the practices and services of the website https://theiriscollective.eu/.
It is important to read this Privacy Policy, as well as the Terms of Use and Conditions of the website https://theiriscollective.eu/ carefully, as they provide information regarding your personal data each time you use this website.
The administrators of the website https://theiriscollective.eu/ may collect and process personal data of visitors and users within the scope of the operation, the provided services, and the available functionalities of the website. The management, processing, and protection of visitors/users personal data are subject to the terms of this section, as well as to the relevant provisions of the EU General Data Protection Regulation (GDPR 2016/679), the applicable Greek legislation (Law 4624/2019 (incorporating all amendments), Law 2472/1997, as well as Law 3471/2006 concerning electronic communications), and the decisions of the Hellenic Data Protection Authority concerning the protection of individuals, the protection of personal data, and privacy in the electronic communications sector, as well as European law.
1) Collection and Purpose of Processing Personal Data
The website https://theiriscollective.eu/ does not record personal data of its users and visitors unnecessarily. The purpose of such recording is detailed below.
The personal data of users and visitors of the website https://theiriscollective.eu/ are collected and processed for specific purposes, such as providing updates regarding the company’s services, news, and offers through printed and electronic means. We generally use this information to compile statistical data, analyze trends, and optimize the operation of our services. Concurrently, this information helps us identify and resolve potential issues, as well as continuously upgrade the quality, efficiency, and overall experience offered by our services.
During a visit and navigation on the Website, the visitor is under no obligation to provide personal information. However, technical data may be collected, such as the IP address, date and time of access, device type, operating system, browser type, pages visited by the user, technical connection data, server log files, as well as approximate geographical data derived from the IP address. This data is used for the smooth and secure operation of the Website and, where the required consent has been granted, for the collection and analysis of statistical data.
The visitor has the option to contact “The Iris Collective” via the Website’s contact form. To submit an inquiry, the visitor’s full name, email address, and the content of the message are collected. This information is used exclusively to communicate with the visitor and to service the respective request. The data is retained for as long as necessary to complete the communication and is subsequently deleted, unless further retention is required or permitted by law, or is necessary for the establishment, exercise, or defense of legal claims. The contact form is protected by appropriate security measures to prevent automated, unsolicited, or malicious submissions.
2) Traffic Statistics and External Links
The Website may collect, subject to the visitor’s consent, statistical data regarding traffic and usage patterns in order to improve its operation and the services provided.
The Website may also contain links to external websites or social networks. The mere presence of a link does not imply any transfer of data to the respective external service prior to its selection by the visitor. Upon navigating to an external website, the processing of personal data is governed by the respective privacy policy and terms of use of the third-party provider, for which “The Iris Collective” bears no liability.
3) Third-Party Service Providers
Third-party service providers are utilized for the provision, operation, security, and technical support of the website. Specifically, Netstudio provides hosting, development, technical management, maintenance, security, and backup services for the website. Google, through Google Workspace/Gmail services, provides corporate email hosting and receives messages sent via the contact form, while Google Analytics is used to gather statistical data on website traffic and usage. Google reCAPTCHA is used to protect the contact form from spam or automated submissions. Cloudflare is used for DNS, security, protection, and content delivery optimization services. Finally, CookieYes is used for the display and operation of the cookie consent mechanism, recording visitor preferences, and managing the activation of non-essential cookies.
Netstudio, acting as an external technical service provider, has access to the Website’s WordPress administration environment, files, database, hosting infrastructure, and backups, solely to the extent necessary for technical support, maintenance, troubleshooting, and security purposes. Netstudio does not have access to The Iris Collective’s corporate email account and does not manage messages received through the Website’s contact form.
4) Data Transfers Outside the EU/EEA
Within the scope of using services and tools from third-party providers, such as Google and Cloudflare, certain personal or technical data may be transferred to, stored in, or accessed from countries outside the European Union (EU) or the European Economic Area (EEA), where the said providers or their affiliated entities maintain infrastructure or provide data processing services.
In such cases, “The Iris Collective” takes appropriate measures to ensure the protection of personal data and the lawful execution of such transfers in compliance with the GDPR. Specifically, transfers may be based on adequacy decisions of the European Commission, the EU-US Data Privacy Framework (where applicable), or the use of Standard Contractual Clauses (SCCs) and other appropriate safeguards and security measures, where required.
The Iris Collective makes every reasonable effort to ensure that cooperating providers offer an adequate level of protection for personal data and implement appropriate technical and organizational security measures to protect it from unauthorized access, loss, alteration, or unlawful processing.
5) Data Management and Access
The Iris Collective is the Data Controller responsible for the Website and for determining the purposes and means of processing personal data.
Access to personal data collected through the contact form is restricted exclusively to authorized personnel of “The Iris Collective”, to the extent necessary for reviewing and managing communication requests.
Access to and processing of personal data is carried out solely for the purposes described in this Privacy Policy, and appropriate technical and organizational measures are implemented to protect it from unauthorized access, loss, alteration, or destruction.
6) Backups
Netstudio maintains backups of the website, which are performed on a daily, weekly, and monthly basis, with the monthly backup occurring on the first day of each month. Backups may include the website files and database. As messages submitted through the Website’s contact form are not stored in the WordPress database, they are not included in the Website’s backups.
7) Protection of Minors’ Personal Data
Our Website is not directed at children under the age of 18. If you are under the prescribed age limit, please do not use the Website and do not provide us with any personal data.
8) Information and Contact Regarding Personal Data Protection
In any event, the user may contact the company to request additional information regarding the General Data Protection Regulation.
9) Transfer and Disclosure of Personal Data
The administrators undertake not to sell or rent the personal data of users or visitors of https://theiriscollective.eu/ to any third party. The administrators may transfer personal data of visitors of the website https://theiriscollective.eu/ to third legal and/or natural persons only if explicit consent has been granted for such transfer. In this case, https://theiriscollective.eu/ may use this information to send press releases, other announcements, and informative material related to the services provided by “The Iris Collective” to the visitors of the website https://theiriscollective.eu/ via physical or electronic mail.
In compliance with the relevant provisions of the law, the disclosure of such personal data to the competent judicial, police, and administrative authorities is mandatory upon their lawful request (GDPR 2016/680).
10) Acceptance of the Privacy Policy and Terms of Use
All visitors of the website https://theiriscollective.eu/ accept that upon each visit/use of this website, they shall comply with and be bound by the Terms and Conditions of Use, as described in the relevant text. In the event of disagreement with one or more terms, all visitors must refrain from any visit and use of the website and notify us of any objections they may have.
If you have specific questions, please contact us at the email address: [email protected].
