PrivacyPolicy 

1. Introduction

At DnoTech, we respect your privacy and are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Greek law. This privacy policy explains how we collect, use, and safeguard your information when you visit our website or use our services.

2. Data Controller

The data controller responsible for your personal data is:

• Full Legal Name: DNO Technologies (DNO Tech) G.P.
• Legal Type: General Partnership (Ομόρρυθμη Εταιρεία)
• Tax Number (ΑΦΜ): 802849970
• GEMI Number: 183928301000
• Registered Address: Petrou Kalliga 38, Athens, Attiki, Greece, PS 11474
• Contact Email: [email protected]

3. Information We Collect

We may collect several types of information, including:

• Personal Information: Your email address when you submit the contact form. The form also captures the origin page (e.g., which page or modal triggered the form) as non-identifiable metadata.
• Technical Data: IP address, browser type and version, device information, and operating system — processed automatically by our infrastructure provider when you visit our website.

Cookies: This website does not itself set cookies. However, Cloudflare — our CDN and security provider — may set technical cookies (such as __cf_bm and cf_clearance) in your browser for bot management and security challenge purposes. These are infrastructure-level cookies set by Cloudflare's edge network, not by this site's application code.

4. How We Use Your Information and Lawful Basis

We use your information for the following purposes, each with its corresponding lawful basis under GDPR Art. 6:

• Responding to contact enquiries — processing your email address to reply to your message. Lawful basis: Contract (Art. 6(1)(b)) / Legitimate interest (Art. 6(1)(f)).
• Website operation and security — processing technical data (IP address, browser type) to serve the website and detect technical issues. Lawful basis: Legitimate interest (Art. 6(1)(f)).
• Legal compliance — retaining records where required by law. Lawful basis: Legal obligation (Art. 6(1)(c)).
• Service improvements — analysing aggregate website usage via Cloudflare's server-side Dashboard Analytics. This is processed entirely server-side by Cloudflare's network; no client-side scripts, cookies, or tracking pixels are involved. Lawful basis: Legitimate interest (Art. 6(1)(f)).

5. Data Retention

We will retain your personal data only for as long as necessary for the purposes set out in this privacy policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Contact enquiry data is retained for up to 2 years unless a longer retention period is required by law.

6. Data Security and Breach Notification

We implement appropriate technical and organisational security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Hellenic Data Protection Authority (HDPA) within 72 hours of becoming aware of the breach, as required by GDPR Art. 33. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

7. Third-Party Services and Data Processors

We engage the following third-party services that may process your personal data on our behalf:

• Cloudflare, Inc. — CDN, DDoS protection, and infrastructure provider. All website traffic is routed through Cloudflare's network, which processes visitor IP addresses and request metadata for performance and security purposes. Cloudflare acts as a data processor under a Data Processing Addendum (DPA). See Cloudflare's Privacy Policy.
• Cloudflare Web Analytics (server-side) — Cloudflare's Dashboard Analytics is used to understand aggregate website usage. This operates entirely at the server/network level; no client-side scripts, cookies, or tracking pixels are loaded in your browser as a result. Only network-level data (aggregated request metadata) is processed. See Cloudflare's Privacy Policy.
• Resend (Resend, Inc.) — transactional email delivery service used to send and receive contact form submissions. When you submit the contact form, your email address and message are transmitted to Resend for delivery. Resend acts as a data processor. See Resend's Privacy Policy.

These third parties have access to your personal information only to perform services on our behalf and are contractually obligated not to disclose or use it for any other purpose.

8. International Transfers

Cloudflare and Resend are US-based companies. Data transfers to these processors are covered by Standard Contractual Clauses (SCCs) or other approved transfer mechanisms under GDPR Chapter V.

9. Your Data Protection Rights

Under GDPR, you have the following rights in relation to your personal data:

• The right to access a copy of your personal data (subject access request)
• The right to rectify inaccurate personal data
• The right to erasure ("right to be forgotten") in certain circumstances
• The right to restrict processing of your personal data
• The right to object to processing based on legitimate interests
• The right to request transfer of your personal data (data portability)
• The right to withdraw consent at any time (where processing is based on consent)
• The right to lodge a complaint with the supervisory authority — for Greece-based residents, this is the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

To exercise any of the above rights, please contact us at [email protected].

10. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted data through our contact form, please contact us and we will delete it promptly.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this page. Material changes will be communicated with reasonable notice where possible.