Effective 20 September 2026
Who is responsible
The website is operated by ΜΑΡΚΟΥ ΜΙΧΑΗΛ (MARKOU MICHAIL), trading as ORYNDEX, VAT number EL130649964, Kos Tax Office, at Zipari, Kos 85300, Greece. Contact: [email protected]. This business is the controller for its own communications and website operation. This notice covers visitors and prospective customers, not processing performed on behalf of clients under separate project arrangements.
Browsing and technical information
Hosting and security infrastructure processes technical information such as IP address, requested page, date and time and browser information to deliver and protect the website. We do not use this information for personalised advertising. Browser storage is explained in the Cookie policy.
Contacting us
When you email us or use the form, we receive your address and the information in your message. The form collects your name, email, optional company name, service interest and message. Submission is delivered through Resend to [email protected] and protected by Cloudflare Turnstile to prevent spam and automated abuse. Do not send passwords, payment-card details or sensitive personal information.
Purposes and legal grounds
We answer service enquiries and prepare a possible engagement under Article 6(1)(b) GDPR where you request steps towards a contract with you. General questions and communications with business representatives rely on our legitimate interests in customer service and business communication under Article 6(1)(f). Security and abuse prevention also rely on legitimate interests. Legally required records rely on Article 6(1)(c). You do not need to agree to advertising to contact us.
Analytics, advertising and AI
We use Google Tag Manager (container GTM-56L6ZH5N) to manage Google Analytics 4, Google Ads and Meta Pixel. Google Analytics is enabled only when you select Analytics; Google Ads and Meta Pixel functionality is enabled only when you select Marketing. Before consent, Google Consent Mode defaults analytics_storage, ad_storage, ad_user_data and ad_personalization to denied, and GTM is not loaded. The legal basis for these optional functions is consent under Article 6(1)(a) GDPR, which you may withdraw at any time through Cookie settings. Advertising our AI services does not mean your messages are sent to an AI model, and we do not make solely automated decisions with legal or similarly significant effects on you.
Access and recipients
Messages are reviewed by the people responsible for answering your enquiry. Technical information passes through Sites hosting and Cloudflare infrastructure. Resend processes the information needed to deliver form submissions to [email protected], and Cloudflare processes technical signals through Turnstile to prevent spam and bots. With the relevant consent, recipients of measurement and marketing data may include Google LLC and Meta Platforms Ireland Limited, according to the configuration of the corresponding tags. We do not sell personal information. Information may be disclosed to competent authorities where legally required.
International processing
Infrastructure and communication providers may operate in several countries, including outside the EEA. You may request information about recipients and safeguards relevant to your data. Where a transfer is required, it must rely on a lawful mechanism, such as an applicable adequacy decision or Standard Contractual Clauses with necessary supplementary measures. We do not claim that all data stays in the EU.
Retention
We retain correspondence as needed to answer and progress an enquiry or engagement. Retention decisions take account of open requests, active contracts, legal obligations and the need to establish or defend claims. Sending an enquiry is not permission for advertising communications. Contract and tax records follow applicable statutory periods. Technical logs depend on provider settings and security needs. You may request information about retention of your data or ask for erasure where applicable. Browser-storage periods are explained in the Cookie policy.
Your rights
Subject to GDPR conditions, you may request access, correction, erasure, restriction or portability and object to processing based on legitimate interests. Where consent is used, you may withdraw it without affecting earlier lawful processing. Contact [email protected]. We may ask only for information necessary to verify identity. We normally respond within one month; where an extension is permitted, we explain the reason within that first month.
Complaints and updates
You may complain to the Hellenic Data Protection Authority or the competent supervisory authority where you habitually live or work, or where the alleged infringement occurred. We update this notice when the website’s actual operation changes. Contact [email protected] with any questions.