Privacy policy
This policy explains what personal data we collect when you use enahub.gr, why we collect it and what rights you have. "We" means ena Development Consultants, the company that runs the #enahub venue in Xanthi.
Who is responsible for your data
The data controller is ena Σύμβουλοι Ανάπτυξης Ο.Ε. (ena Development Consultants, general partnership; VAT number 998758272, Xanthi Tax Office), registered at 2nd km Xanthi–Kavala road, 67100 Xanthi, Greece.
- Email: [email protected]
- Phone: +30 25410 83370
What we collect
When you send a booking request, the form asks for:
- your name, email address and phone number (required)
- the space you are interested in (required)
- your company, preferred date, number of guests, any extra services (buffet, badges, registration, secretarial or technical support) and your message (optional)
We also record when the request arrived and which language version of the site you used. Please don't put sensitive information, such as health details, in the message field. We don't need it.
To block spam, the server keeps your IP address and a count of your requests in memory for 10 minutes. It doesn't write them to a file. Our hosting provider may keep its own server logs, which include IP addresses.
If you accept analytics cookies, Google Analytics records how you use the site: pages viewed, device and browser type, and approximate location based on your IP address. Without your consent it doesn't load at all. See our Cookie policy.
Why we use it and on what legal basis
| Purpose | Legal basis (GDPR Art. 6(1)) |
|---|---|
| Replying to your request, sending a quote and arranging the event | Steps you asked us to take before entering into a contract (point b) |
| Keeping booking records and invoices once an event is confirmed | Legal obligation under Greek tax and accounting law (point c) |
| Protecting the form from spam and abuse | Our legitimate interest in keeping the site secure (point f) |
| Visitor statistics with Google Analytics | Your consent (point a), which you can withdraw at any time |
We don't make automated decisions about you or build profiles.
Who receives your data
Booking requests are read by the ena team at [email protected]. We don't sell personal data. We use the providers below:
- Website hosting, where booking requests are stored.
- Email delivery, which forwards each request to our inbox.
- Google Ireland Limited for Google Analytics, only with your consent (Google privacy policy)
- Stripe Payments Europe, Limited (Ireland) for paying deposits by card; only Stripe sees your card details (Stripe privacy policy)
The home page embeds a Google map. When it loads, Google receives your IP address and may set its own cookies. Google processes that data as a separate controller under its own policy.
We may also disclose data to public authorities when the law requires it.
Transfers outside the EU
Google may process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission recognised as adequate in July 2023, and also relies on the EU Standard Contractual Clauses.
How long we keep it
- Booking requests that don't lead to an event: deleted once we no longer need them to stay in touch with you.
- Booking records and invoices for events that went ahead: as long as Greek tax law requires.
- Spam-protection counters: 10 minutes, in memory only.
- Your cookie choice: 12 months.
- Google Analytics data: up to 14 months, depending on the Google Analytics retention settings.
Your rights
Under the GDPR and Greek Law 4624/2019 you can:
- ask for access to your data and a copy of it (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data erased (Art. 17)
- ask us to restrict processing (Art. 18)
- receive your data in a machine-readable format (portability, Art. 20)
- object to processing based on our legitimate interest (Art. 21)
- withdraw consent at any time, without affecting processing that took place before (Art. 7(3))
To use any of these rights, email [email protected]. We reply within one month (GDPR Art. 12(3)). If a request is complex, or there are many, we can extend that by two months and will tell you why. We may first ask you to confirm your identity.
Complaints
If you think we have mishandled your data, you can write to us first so we can fix it. You also have the right to complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), 1-3 Kifisias Avenue, 115 23 Athens, www.dpa.gr, or to the supervisory authority in the EU country where you live or work.
Children
The site and our services are meant for adults and businesses. We don't knowingly collect data from children under 15, the age of digital consent in Greece (Article 21 of Law 4624/2019). If you believe a child has sent us a request, contact us and we will delete it.
Changes to this policy
When the way we handle data changes, we update this page and the date at the top.