Privacy Policy

Last updated: April 2025

1. Who We Are

This Privacy Policy applies to the website cinefil.com.gr, owned and operated by Cinefil Wedding Films, based in Volos, Magnesia, Greece.

Contact email: [email protected]

Our website is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and relevant Greek legislation.

2. What Data We Collect and Why

a) Contact / Quote Request Form

When you complete the contact or quote request form, we collect the information you provide (name, email, phone, wedding date, etc.). This data is used exclusively to respond to your request and send you a quote.

Legal basis: Consent (GDPR, Article 6 para. 1a) and/or legitimate interest (Article 6 para. 1f).

Retention period: Data is retained for up to 2 years from the form submission, unless a business relationship (contract) is established, in which case it is retained for as long as required by Greek tax law.

b) Comments

If you leave a comment on the website, we collect the data from the comment form (name, email, website), as well as your IP address and browser details for spam detection.

Legal basis: Legitimate interest (GDPR, Article 6 para. 1f).

Retention period: Indefinitely, so we can automatically recognize and approve your future comments.

c) Cookies

Our website uses cookies for the following purposes:

  • Functional cookies: Store visitor preferences (e.g., comment form details). Do not require consent.
  • Login cookies (for registered users): Keep you logged in for 2 days (or 2 weeks if you select “Remember Me”).
  • Analytics cookies (Matomo): See below.

3. Matomo Analytics

Our website uses Matomo, a traffic analysis tool entirely self-hosted on our own server. This means that your data is not sent to third-party companies and remains under our full control.

Matomo collects anonymous data such as: pages visited, visit duration, device type, and country of origin. The IP address is anonymized before storage.

Legal basis: Legitimate interest (GDPR, Article 6 para. 1f), as the data is anonymous and not transferred to third parties. You can opt out of tracking by selecting “Do Not Track” in your browser.

4. Embedded YouTube Videos

Some pages of the website contain embedded videos from YouTube (Google LLC). When these videos load, YouTube may store cookies on your device and collect data according to its own privacy policy, even if you do not interact with the video.

Where possible, we use YouTube’s privacy-enhanced mode (youtube-nocookie.com) to limit data collection.

For more information, see Google’s Privacy Policy.

Legal basis: Legitimate interest (GDPR, Article 6 para. 1f).

5. Embedded Content from Other Websites

Articles and pages on the website may include embedded content (images, videos, etc.) from third-party websites. This content behaves exactly as if you had visited the respective website directly and is subject to its own privacy policy.

6. With Whom We Share Your Data

We do not sell, rent, or transfer your personal data to third parties, with the exception of:

  • Hosting providers who process data on our behalf and are bound by a data processing agreement.
  • If you request a password reset, your IP will be included in the relevant email.
  • Cases where required by law.

7. Your Rights

According to the GDPR, you have the following rights regarding your personal data:

  • Right of access: To receive a copy of the data we hold about you.
  • Right to rectification: To request the correction of inaccurate data.
  • Right to erasure (“right to be forgotten”): To request the deletion of your data, provided there is no legal obligation to retain it.
  • Right to restriction of processing: To request restriction of processing under certain conditions.
  • Right to data portability: To receive your data in a structured, electronic format.
  • Right to object: To object to processing based on legitimate interest.
  • Withdrawal of consent: To withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise any right, please contact us at [email protected].

8. Right to Lodge a Complaint with the HDPA

You have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) if you believe that the processing of your data violates the GDPR.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. The website uses SSL/TLS encryption for all connections.

10. Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be published on this page with an updated date. We recommend that you periodically check this page.

11. Contact

For any questions or requests regarding the Privacy Policy or your personal data, you can contact us: