Privacy and cookie policy
1. Data controller
The controller of the personal data collected through the website zoukouridis.com (the “website”) is Ilias Zoukouridis. For any matter concerning the protection of your data, you may get in touch through the Contact page.
2. Categories of data
The website collects the following categories of data:
- Contact data: full name, email address and message content, when a visitor uses the contact form or submits a comment on an article.
- Reader feedback data: the answer “Yes” or “No” to the question “Do you like the blog?”, the article on which the answer was given, the language of the article and, if the visitor so wishes, a short comment. No name or email address is collected.
- Traffic data: aggregated and anonymous browsing statistics (pages viewed, country of origin, type of device and browser) through the Cloudflare Web Analytics service, without the use of cookies or identifiers, as well as more detailed traffic data through the Google Analytics service, strictly subject to consent.
- Technical data: IP address and server log files, kept by the hosting provider for operational and security purposes.
3. Purposes and legal basis of processing
- Replying to messages and publishing comments are based on the visitor’s own request and on the controller’s legitimate interest in communicating with readers (Article 6(1)(b) and (f) of the General Data Protection Regulation, GDPR).
- Recording readers’ feedback is based on the controller’s legitimate interest in improving the content (Article 6(1)(f) GDPR).
- Anonymous measurement of overall traffic without cookies (through Cloudflare Web Analytics) is based on the controller’s legitimate interest in assessing and improving the performance of the website (Article 6(1)(f) GDPR).
- Traffic measurement using cookies is based solely on the visitor’s consent (Article 6(1)(a) GDPR and Article 4(5) of Greek Law 3471/2006).
- Keeping technical data is based on the legitimate interest in the secure operation of the website (Article 6(1)(f) GDPR).
4. Recipients
The data are not sold, rented or disclosed to third parties for commercial purposes. The following processors are used for the operation of the website:
- Netlify, Inc.: hosting of the website and storage of form submissions.
- Cloudflare, Inc.: provision of an anonymous, cookie-free traffic analytics service (Cloudflare Web Analytics).
- Google Ireland Ltd / Google LLC: the Google Analytics statistics service.
5. Transfers outside the European Union
The above providers may process data outside the European Economic Area, in particular in the United States. Such transfers take place with the safeguards of Chapter V of the GDPR, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
6. Retention period
- Messages and comments: for as long as necessary to handle the communication and, in any case, no longer than two (2) years.
- Answers to the question “Do you like the blog?”: up to two (2) years.
- Traffic data: in accordance with the retention settings of the Google Analytics service.
7. Cookies
The website uses:
- Analytics cookies (Google Analytics, e.g. _ga), only where the visitor gives consent by selecting “Accept”. Without consent, they are not stored.
- Local storage in the browser (localStorage), solely to remember the visitor’s cookie choice and whether they have already answered the question “Do you like the blog?”. This storage is strictly necessary for the function requested by the visitor and is not transmitted.
Visitors may withdraw or change their consent at any time.
8. Rights of the data subject
Visitors have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw their consent, without affecting the lawfulness of processing based on consent before its withdrawal. These rights may be exercised through the Contact page, and requests are handled within one (1) month.
Visitors also have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Avenue, 115 23 Athens, Greece, www.dpa.gr).
9. Minors
The website is not directed at persons under the age of 15 and does not knowingly collect data from minors.
10. Changes
This policy may be updated from time to time. The current version is always available on this page.
Last updated: November 2026