Orya One

Privacy policy

Last updated: 23 October 2026

This policy explains what personal data Orya One collects through this website and by email, why we collect it, and what rights you have under the General Data Protection Regulation (GDPR).

Who is responsible

The controller of your personal data is Dimitris Kampouridis, sole proprietor trading as Orya One, [To be completed: full postal address], Greece. VAT number EL153066915. Email: contact@oryaone.com.

We have not appointed a Data Protection Officer, as our business is not required to. For any question about your data, write to contact@oryaone.com.

What data we collect

  • When you visit the website: our hosting provider automatically processes the technical data needed to deliver the pages and keep them secure, namely your IP address, the date and time, the page requested, your browser type and the referring page. We do not use this data to identify you.
  • When you email us: your name, your email address and anything you choose to include in your message.
  • When you become a client: contact and billing details, and any data you give us to carry out the project, as set out in the project agreement.

We do not use analytics, advertising networks or social media trackers, and we do not sell personal data.

Why we use it and on what legal basis

  • To deliver the website and protect it against abuse (server logs): our legitimate interest, Article 6(1)(f) GDPR.
  • To answer your enquiry and prepare a quote: steps taken at your request before entering into a contract, Article 6(1)(b) GDPR.
  • To carry out and invoice a project: performance of a contract, Article 6(1)(b) GDPR.
  • To keep accounting and tax records: legal obligation, Article 6(1)(c) GDPR.

Who receives your data

We share personal data only with providers that help us run the business, under data processing agreements: our website host ([To be completed: hosting provider]), our email provider ([To be completed: email provider]) and our accountant, for invoicing. We disclose data to public authorities only when the law requires it.

Transfers outside the EEA

Where a provider processes data outside the European Economic Area, the transfer is covered by a European Commission adequacy decision, such as the EU–US Data Privacy Framework, or by the Commission's Standard Contractual Clauses.

How long we keep it

  • Server logs: for a short period set by our hosting provider, after which they are deleted.
  • Enquiries and correspondence: 12 months after our last contact, if no project follows.
  • Client details and invoices: for the duration of the project, and afterwards for as long as Greek tax and accounting law requires.

Your rights

You have the right to access, correct and erase your personal data, to restrict its processing, to receive it in a portable format, and to object to processing, in particular processing based on our legitimate interest (Articles 15 to 21 GDPR). To exercise these rights, write to contact@oryaone.com. We will reply within one month.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Cookies and fonts

This website does not use cookies or similar technologies to track you. See our cookie policy for details. Fonts are served from our own server, so your browser does not contact Google or any other font service.

Automated decisions

We do not make decisions about you based solely on automated processing, including profiling.

Changes

We will update this page when our practices change. The date of the latest revision is shown at the top.