Privacy Policy

1. Who is responsible for your data

MinijackStudio is the trading name used by the sole proprietorship identified below. That sole proprietorship acts as the data controller for personal data processed through this website and related communications.

• [LEGAL NAME OF SOLE PROPRIETOR / REGISTERED SOLE PROPRIETORSHIP NAME]
• Trading name: MinijackStudio
• Registered business address: [BUSINESS ADDRESS]
• Tax Identification Number: [TAX ID] — Tax Office: [TAX OFFICE]
• GEMI registration number, if applicable: [GEMI NUMBER]
• Email: hello@minijackstudio.eu

2. Scope of this policy

This policy explains how personal data is processed when you visit the MinijackStudio website, contact us by email, request information or discuss a potential project. A separate contract, proposal or project notice may provide additional information for client work.

3. Personal data we may collect

The categories of data depend on how you interact with us. Please do not send sensitive personal data unless it is genuinely necessary and specifically requested.

• Contact and identity data, such as your name, role, organization, email address and telephone number when voluntarily provided.
• Communication and project data, including your messages, requirements, files, budget information and correspondence.
• Technical and security data generated when the website is accessed, such as IP address, browser or device information, date and time, requested URL and server or security logs.
• Analytics data, only if Google Analytics is activated and you have first given valid consent through the cookie settings.
• Administrative and transaction data created if a commercial relationship begins, such as proposals, contracts, invoices and payment records.

4. Purposes and legal bases

We process personal data only when a legal basis under the GDPR applies.

• To answer enquiries, prepare proposals and take steps before entering into a contract: performance of a contract or pre-contractual measures.
• To deliver agreed services, manage projects, communicate and provide support: performance of a contract.
• To issue and retain accounting or tax records and comply with lawful requests: compliance with legal obligations.
• To protect the website, prevent abuse, keep essential logs and establish or defend legal claims: our legitimate interests, balanced against your rights.
• To measure website usage through Google Analytics: your consent. Analytics will not be activated for you before consent and consent may be withdrawn at any time.

5. Cookies and Google Analytics

At the date of this policy, the website does not intentionally use advertising or analytics cookies. It may use strictly necessary technologies required for security, network delivery or functionality; these do not require consent where the legal exemption applies.

Google Analytics is planned but will only be enabled together with an appropriate consent mechanism. Non-essential analytics cookies will remain disabled unless you actively accept them. Refusing or withdrawing consent will not prevent access to the website. When Analytics is activated, this policy and the cookie settings will be updated with the cookies used, their duration, provider and available controls.

6. Recipients and service providers

Personal data may be accessed only where necessary by providers supporting website hosting, content delivery, security, professional email, IT support, accounting or legal compliance. Google or another analytics provider will receive analytics data only after the relevant consent mechanism is activated and consent is given.

We do not sell or rent personal data. Providers acting as processors are expected to process data under appropriate instructions, confidentiality and data-protection terms.

7. International transfers

Some technology providers may process data outside the European Economic Area. Where this occurs, we will rely on a lawful transfer mechanism, such as an adequacy decision or approved Standard Contractual Clauses, together with supplementary safeguards where required.

8. Retention

Enquiries that do not lead to a project are generally retained for up to 24 months so that we can follow up and maintain an accurate communication history, unless a shorter or longer period is justified. Client, contractual, accounting and tax records are retained for the periods required by law and for the establishment, exercise or defence of legal claims.

Technical logs are retained only for as long as reasonably necessary for security and operational purposes. If Analytics is activated, its retention period will be documented in the updated cookie information.

9. Your rights

Subject to the conditions of the GDPR, you may request access, rectification, erasure, restriction, data portability or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing.

Requests may be sent to hello@minijackstudio.eu. We may need to verify your identity before acting. You also have the right to lodge a complaint with the Hellenic Data Protection Authority at dpa.gr.

10. Security, children and changes

We apply reasonable technical and organizational measures appropriate to the nature of the processing. No internet transmission or storage system can be guaranteed to be completely secure.

The website and services are not directed to children. A minor should not provide personal data without the involvement of a parent or legal guardian.

We may update this policy when the website, services, providers or legal requirements change. The latest version and its revision date will remain available on this page.