Who is responsible
Dimitrios Grammenidis, operating as Emporavo in Heraklion, Crete, Greece, is the controller for the processing described here. Postal address: Thiseos 6, Heraklion, Crete, 71409, Greece.
Email contact: hello@emporavo.com.
Information and sources
If you contact Emporavo, I use your name, business contact details, message and correspondence to understand your request, reply and discuss possible work. Providing these details is voluntary, but I need enough information to answer.
For business research, I use company websites, official registers, public procurement notices, business directories and published buying or partnership requests. Records may include a person’s name, professional role, published business contact details and relevant correspondence, together with the source and observation date. Clients and prospective business partners may also provide relevant information.
Visiting this website involves technical processing such as your IP address, requested page and request time. The application’s access logging is disabled. Hosting providers may still process request, diagnostic and security information.
Purposes and legal bases
Processing needed to provide a service to an individual, or take steps at their request before a contract, relies on Article 6(1)(b) GDPR. Correspondence with people representing organisations, business research and preparation of relevant reports rely on legitimate interests under Article 6(1)(f): assessing business opportunities, checking company information and responding to requests.
Operating and protecting the website, maintaining evidence of agreed work and honouring contact objections also rely on legitimate interests. Processing required by applicable legal obligations relies on Article 6(1)(c).
Business contact follows a relevant published invitation or permission to contact. A generally published email address alone is insufficient permission. Contact stops following an objection.
Recipients and providers
Relevant business information may be shared with the client requesting research or with an intended business counterparty as part of an agreed introduction. Contact details are shared only where needed for that purpose.
Railway hosts this website in its Amsterdam region in the Netherlands. Microsoft 365 provides the business email service. Cloudflare provides domain registration and authoritative DNS. The current DNS configuration sends website requests directly to Railway. These providers and their authorised service providers process information needed to deliver, support and protect their services.
Provider support, security and service operations may involve processing outside the European Economic Area. The linked provider terms describe international processing and transfer safeguards. You can request information about the arrangements relevant to your data using the contact details above.
How long information is kept
Enquiry correspondence is kept while the enquiry or resulting work remains active. After closure, information is retained where needed to document the request, agreed terms, introductions, payments or a legal claim. The relevant obligation or claim period determines how long those records are needed.
Research records preserve company facts, sources and observation dates. Personal details are retained where they remain relevant to current research, an active relationship or evidence of completed work. Details that are no longer needed for those purposes are removed or anonymised. Company research can be preserved while unnecessary personal details are removed.
A minimal suppression record is kept to honour an objection across contact addresses and prevent renewed unwanted contact. It is used only to prevent further contact.
The theme preference stays in your browser until you change it or clear the site’s stored data. Provider diagnostic and security records follow the retention rules applicable to the relevant service and its security or legal requirements.
Cookies and local storage
This website has no installed analytics, advertising trackers or cookies. If you change the colour theme, the site stores that preference in your browser’s local storage under emporavo-theme. The theme preference is used only to display the site and can be removed by clearing this site’s browser data.
External source links and the LinkedIn link lead to other websites with their own privacy notices. Clicking an email link opens your chosen mail application.
Your rights
Depending on the processing, you may request access, correction, erasure, restriction or portability of your personal data. You may object to processing based on legitimate interests. An objection to direct marketing is acted on immediately.
Where processing relies on consent, you may withdraw it at any time without affecting processing already carried out lawfully. You may ask which sources were used for information about you and which recipients received it. Requests are normally answered within one month.
You may contact me by email or at the postal address above. You also have the right to complain to the Hellenic Data Protection Authority or your relevant supervisory authority.
Automated decisions
I review enquiries and research findings. Emporavo does not make decisions about individuals with legal or similarly significant effects solely through automated processing.