Privacy Policy

Last updated: 3 October 2026

This policy explains what personal data we handle when you use this website, why, and what you can ask us to do about it. It is deliberately short, because this site collects very little.

1. Who is responsible for your data

The data controller is:

Name

Odysseas Michanetzis — INFINET (sole proprietorship)

Registered address

Thesi Plagia, 19014, Kapandriti, Attiki, Greece

ΓΕΜΗ (General Commercial Registry)

2118001000

VAT number (ΑΦΜ)

032966102

Email

info@infinet.gr

Telephone

+30 2295 306595

We have not appointed a Data Protection Officer, as we are not required to under Article 37 of the GDPR.

2. What this policy covers

This policy covers the infinet.gr website.

ItemAtlas3D, our product at infinet.gr/itematlas3d/, is covered by its own privacy policy, which also applies to the ItemAtlas3D applications. If you are looking for information about data held inside the app — your rooms, items or account — that is the policy you need, not this one.

3. What we collect, and why

Messages you send us

If you use the contact form, we receive the name, email address, company name (optional) and message you enter. We use these only to read and reply to your enquiry.

The lawful basis is Article 6(1)(b) of the GDPR — taking steps at your request before entering into a contract — or, where your message is not about engaging us, our legitimate interest under Article 6(1)(f) in responding to people who contact us.

Providing this data is voluntary, but we cannot reply to an enquiry without an email address.

Server logs

Like any web server, the server that hosts this site keeps a technical record of each request it receives: your IP address, the date and time, the page or file requested, the response status, and the browser and referring page your request reports. These logs are produced and held by our host, top.host, on infrastructure in Greece.

We use them only to keep the site running, to diagnose faults, and to investigate abuse or attacks. They are not used to analyse visitor behaviour, build profiles, or produce visitor statistics, and they are not combined with any other information. The lawful basis is our legitimate interest under Article 6(1)(f) in the security and reliability of the site.

Our host also records aggregate usage figures for the hosting account — total disk space used, and total bytes transferred each month. These are totals kept for capacity and billing. They say nothing about individual visitors and are not turned into visitor reports.

The server starts a new log each day and keeps only one previous copy, so these records are normally deleted within about 48 hours.

Content delivery network

This site loads Bootstrap, icon fonts and the contact form library from the jsDelivr content delivery network. As with any resource loaded from another server, your IP address and browser details are visible to that network when the page loads. We do not receive or store this information ourselves. The lawful basis is our legitimate interest under Article 6(1)(f) in delivering the site reliably.

Information stored in your browser

We store two values in your browser's local storage: your chosen language and your light or dark theme preference. These exist only so the site remembers your choice, they contain no personal data, and they are never sent to us or to anyone else.

4. Cookies

This website sets no cookies. We use no analytics, no advertising or tracking technology, and no social media embeds. This is why you are not asked to accept a cookie banner.

The language and theme preferences described above are stored using local storage rather than cookies. Because they are strictly necessary to provide a function you have asked for, they do not require consent. You can clear them at any time through your browser's settings.

5. Who else handles your data

We do not sell personal data and we do not share it for marketing. We use the following service providers, who process data on our instructions:

• EmailJS Pte. Ltd. (Singapore) — transmits contact form submissions to our mailbox. Their servers are in the United States.
• Microsoft — hosts the mailbox that receives your enquiry (Microsoft 365).
• top.host (Greece) — hosts this website.
• jsDelivr — delivers the shared code libraries the page uses, as described above.

We may also disclose data where we are legally required to do so, for example in response to a lawful request from a public authority.

6. Transfers outside the European Economic Area

Contact form submissions pass through EmailJS, whose servers are located in the United States. This transfer is covered by the European Commission's Standard Contractual Clauses, which form part of our data processing agreement with them.

Website hosting is provided in Greece, so the site itself involves no transfer outside the EEA.

7. How long we keep it

We keep enquiries for as long as is necessary to deal with them and for a reasonable follow-up period afterwards, and we review them periodically. Where an enquiry leads to us working together, the correspondence is kept for as long as tax and accounting law requires us to retain business records.

Separately, EmailJS retains a record of form submissions on its own systems for up to 30 days, under its own retention schedule rather than ours.

8. Your rights

Under the GDPR you have the right to:

• ask what personal data we hold about you, and get a copy of it;
• have inaccurate data corrected;
• ask us to delete your data;
• ask us to restrict how we use it;
• object to processing based on our legitimate interests;
• receive the data you gave us in a portable format.

To exercise any of these, email info@infinet.gr. We will respond within one month. There is no charge, and you do not need to give a reason for a deletion request.

If you are not satisfied with how we have handled your data, you can complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifisias 1-3, 11523 Athens, www.dpa.gr.

9. Security

This site is served over HTTPS, and the mailbox receiving enquiries is protected by access controls provided by Microsoft 365. No method of transmission over the internet is completely secure, so please do not send sensitive personal information — health data, identification documents or payment details — through the contact form.

10. Changes to this policy

If we change how we handle personal data, we will update this page and change the date at the top. Material changes will be described here rather than made silently.

11. Language

This policy is published in Greek and English. The Greek version is the governing text; the English is a translation provided for convenience. In the event of any discrepancy, the Greek version prevails.