Privacy Policy

Last updated: 31 August 2026

1. Who processes your data

The controller is Filippos Perdikaris, a natural person, based in Athens, Greece.

Contact: filippos@behindtheshift.gr

This policy covers behindtheshift.gr and newsletter.behindtheshift.gr.

2. What data is collected and why

Contact form

Name, email, phone if you provide it, and the content of your message.

Used only to reply to you and to continue that conversation.

Legal basis: steps taken at your request prior to entering into a contract, Art. 6(1)(b) GDPR, and legitimate interest in responding to enquiries, Art. 6(1)(f).

Booking a call

Name, email, your answer to the selection question, and the appointment time.

Legal basis: steps taken at your request prior to entering into a contract, Art. 6(1)(b).

Newsletter subscription

Email, date and source of subscription, and a record of opens and clicks on the emails you receive.

Legal basis: your consent, Art. 6(1)(a), given when you submit your email through the subscription form. You can withdraw it at any time using the unsubscribe link in every email.

Site analytics

Device identifier, IP address, pages visited, session duration, referral source, device type and approximate city-level location.

Collected only if you accept analytics cookies in the notice shown on the site. If you choose "No thanks", no analytics service is loaded.

Legal basis: your consent, Art. 6(1)(a).

Server logs

The hosting provider automatically records IP address, access time and page requested, for security and operation of the site.

Legal basis: legitimate interest in system security, Art. 6(1)(f).

3. Cookies

The site uses two categories.

Essential: your choice in the cookie notice is stored locally in your browser so you are not asked again. This is not a cookie but local storage, and it lasts 365 days.

Analytics: set by Google Analytics, and only after you accept. Duration up to 2 years.

You can change your choice at any time from the "Cookie settings" link in the footer. Clearing cookies in your browser settings removes the analytics cookies, but not your stored choice.

4. Who receives the data

Data is not sold and is not passed to third parties for their own purposes.

The following providers are used. They process data solely on my instructions under Art. 28 GDPR contracts:

Data may be disclosed to a public authority where there is a legal obligation to do so.

5. Transfers outside the European Economic Area

Formspree, Calendly and beehiiv are based in the United States. Google may process data outside the EEA.

These transfers are made under the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework, where applicable.

6. How long data is kept

After these periods, data is deleted.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, objection and portability. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.

To exercise any right, email filippos@behindtheshift.gr. You will receive a reply within 30 days.

No decisions about you are made solely on the basis of automated processing.

8. Complaints

If you believe your data is being processed unlawfully, you may lodge a complaint with the Hellenic Data Protection Authority.

1-3 Kifissias Ave, 115 23 Athens, Greece
+30 210 6475600
contact@dpa.gr
eservices.dpa.gr

You are welcome to contact me first and I will try to resolve the matter.

9. Changes

This policy is updated when the services or practices described here change. The date of the last update is shown at the top.