Privacy notice

Data controller

The controller for personal data collected through this website is Michail Xenikakis, operating as a sole proprietor, with Greek tax ID 151291139. Business address: 91 Paraskevopoulou Street, Heraklion, Crete, 71305, Greece.

Scope and contact

This notice covers the Xenikakis Engineering website and its One Step Ahead construction section. For personal data enquiries, contact info@xenikakisengineering.gr, +30 2810 228667, or 91 Paraskevopoulou Street, Heraklion, Crete, 71305, Greece.

Information you submit

The form requires your name, email address and message. Your telephone number, project location and service selection are optional. An initial enquiry does not require identity numbers, tax details, sensitive data or other people’s personal information.

Purposes and legal bases

We use the information to reply and, when you request services, to take steps before a possible contract under GDPR Article 6(1)(b). Other correspondence and abuse prevention rely on our legitimate interests in business communication and security under Article 6(1)(f). Submitting the form does not subscribe you to marketing.

Message delivery and providers

The website is hosted through Sites on Cloudflare infrastructure. The form delivers your message through Resend to the office mailbox and its email provider. The form code does not store your name, contact details or message in the website database. Messages remain in the office email service for handling the enquiry.

Infrastructure also processes technical information, such as IP address, request time and browser details, for delivery and security. Application abuse controls retain keyed cryptographic identifiers and counters rather than raw IP addresses or emails. The application does not make automated decisions with legal effects or create advertising profiles.

Retention

Correspondence is retained as necessary to handle the enquiry, any resulting engagement, and related legal duties or claims. Continued retention is assessed against the purpose and progress of the correspondence. Office email is not represented as automatically deleted. Abuse counters operate in a 15-minute window; expired records are cleared on the next submission. Providers apply their own periods to technical logs and backups.

International infrastructure

Hosting and delivery services operate international infrastructure. Their provider information describes processing and transfers outside the European Economic Area and the protection mechanisms they use. You can request details about providers and applicable safeguards using the contact email.

Your rights

Subject to the applicable legal conditions, you can request access, correction, erasure, restriction or portability, or object to processing. Send your request to info@xenikakisengineering.gr. Proportionate identity verification may be necessary. You can complain to the Hellenic Data Protection Authority.

Storage choices

Optional storage for the Xi introduction is enabled only after your choice. You can change that choice through “Privacy settings” in the footer.