Last updated: 18 February 2026

1. Introduction

This Privacy Policy explains how TALA CREATIVE AGENCY EE (“Company”, “we”, “us”, “our”) collects, uses, and protects personal data through https://talacreativeagency.gr.

Processing is carried out in accordance with:

• Regulation (EU) 2016/679 (GDPR)
• Greek Law 4624/2019
• Greek Law 3471/2006

2. Data Controller

TALA CREATIVE AGENCY EE
VENIZELOU ELEFTHERIOU ISMINIS 40
GLYFADA, P.C. 16675
Greece

VAT: 802982560
Tax Office: KEFODE OF ATTICA
GEMI: 186725103000

Tel: +30 698 5637369
Email: [email protected]

The Company is not legally required to appoint a Data Protection Officer.

3. Categories of Personal Data

Depending on your interaction with the Website, we may process:

3.1 Website and Technical Data

• IP address
• Browser and device information
• Access timestamps
• Pages visited
• Log data
  
  

3.2 Communication Data

• Full name
• Email address
• Phone number (if provided)
• Message content
• Attachments
  
  
  

3.3 Newsletter Data (if enabled)

• Email address
• Subscription preferences
  
  
  

3.4 Recruitment Data (if applicable)

• Contact details
• CV
• Supporting documents
  
  
  

3.5 Cookie and Analytics Data

• Cookie identifiers
• Usage statistics (subject to consent)

4. Purposes, Legal Basis and Retention

4.1 Website Operation and Security

Purpose: Technical operation and fraud prevention
Legal basis: Legitimate Interest (Art. 6(1)(f) GDPR)
Retention: Up to 12 months (up to 24 months for security incidents)

4.2 Communication Requests

Purpose: Responding to inquiries
Legal basis: Legitimate Interest or Pre-contractual steps (Art. 6(1)(b) GDPR)
Retention: Up to 24 months from last interaction

4.3 Newsletter

Purpose: Sending updates and marketing communications
Legal basis: Consent (Art. 6(1)(a) GDPR)
Retention: Until withdrawal of consent

Soft opt-in may apply to existing customers where permitted by Law 3471/2006.

4.4 Analytics

Purpose: Traffic and performance analysis
Legal basis: Consent via CMP
Retention: Up to 13 months

4.5 Recruitment

Purpose: Candidate evaluation
Legal basis: Pre-contractual measures
Retention: Up to 12 months

Data is deleted or anonymised after expiration of the retention period unless required by law.

5. Cookies

The Website uses a Consent Management Platform.
Non-essential cookies are placed only after explicit consent.

See our Cookies Policy for full details.

6. Recipients and Processors

Data may be processed by trusted providers such as:

• Hosting providers
• Email service providers
• Analytics providers (with consent)
• Technical support providers

All processors are bound by Article 28 GDPR agreements.

7. International Transfers

Where data is transferred outside the EEA, appropriate safeguards apply, including:

• EU-US Data Privacy Framework
• Standard Contractual Clauses

8. Security Measures

We implement appropriate technical and organisational measures, including:

• TLS encryption
• Access controls
• Data minimisation
• Secure hosting infrastructure
• Privacy by design and default

9. Your Rights

You have the right to:

• Access
• Rectification
• Erasure
• Restriction
• Objection
• Data portability
• Withdraw consent

Requests may be submitted to:
[email protected]

You may lodge a complaint with the Hellenic Data Protection Authority:
www.dpa.gr

10. Minors

The Website is not intended for children under 16.
We do not knowingly collect data from minors without parental consent.

11. Updates

This Policy may be updated periodically.
The latest version is always published on this page.