Last updated: 27 May 2026
This Privacy Policy explains how A49 Art Space (“we”, “the website”) collects, uses and protects the personal data of visitors to a49.gr, in accordance with the EU General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.
1. Data Controller
- Entity: NIVO — trading as “A49 Art Space”
- Tax ID (ΑΦΜ): 801482543
- Registered seat: 1 Valaoritou St, Athens, Greece
- Venue / branch: 49 Anagnostara St, 24133 Kalamata, Messinia, Greece
- Phone: +30 27214 03697
- Email: info@a49.gr
2. What data we collect
a) Contact form. When you submit the contact form we collect your name, email address and the content of your message, together with your IP address and a timestamp (for security and abuse-prevention).
b) Browsing data / server logs. Our server automatically records technical data (IP address, browser type, pages visited, date/time) to operate, secure and troubleshoot the website.
c) Cookies & analytics. See the “Cookies” section below.
We do not collect special categories of (sensitive) data. The website does not currently process online sales or payments.
3. Purposes & legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Contact form | Responding to your enquiry | Consent (Art. 6(1)(a)) — given via the form checkbox |
| Server logs | Security, operation, troubleshooting | Legitimate interest (Art. 6(1)(f)) |
| Analytics cookies (Google Analytics) | Audience measurement & improvement | Consent (Art. 6(1)(a)) — via the cookie banner |
| Necessary cookies | Core website functionality | Legitimate interest / necessity |
4. Cookies
The website uses cookies. On your first visit a consent banner lets you accept or reject non-essential categories; you can change your preferences at any time.
- Necessary cookies — required for operation (e.g. cookie-consent, security, cache). No consent required.
- Statistics / Analytics cookies — Google Analytics 4 (anonymous audience measurement). Enabled only after your consent.
- Third-party cookies from embeds — the Contact page embeds a Google Maps map; when it loads, Google may set cookies and receive your IP address.
5. Recipients & processors
We do not sell or rent your data. We share it only with providers that support us technically, acting as processors:
- Hosting: Hetzner Online GmbH — servers within the EU (Germany).
- Google (Google Ireland/LLC): Google Maps (map embed), Google Analytics 4 (statistics), Google Workspace (the info@a49.gr mailbox), Google Search Console.
6. International transfers
Some providers (e.g. Google) may process data outside the EEA. Such transfers are covered by appropriate safeguards (EU Standard Contractual Clauses / the EU–US Data Privacy Framework).
7. Retention
- Form messages: kept for as long as needed to handle your enquiry and up to 24 months thereafter, unless a longer legal retention applies.
- Server logs: typically up to 12 months.
- Analytics: per Google Analytics retention settings.
8. Your rights
You have the right to access, rectify, erase (“right to be forgotten”), restrict, object to and port your data, and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). To exercise these rights, contact info@a49.gr.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) — 1-3 Kifisias Ave, 11523 Athens, www.dpa.gr.
9. Security
We apply reasonable technical and organisational measures (HTTPS/TLS encryption, access controls, web application firewall, regular backups) to protect your data.
10. Changes to this Policy
We may update this Policy. The current version is published on this page with an updated date.
11. Contact
For any matter regarding your personal data: info@a49.gr · +30 27214 03697 · 49 Anagnostara St, 24133 Kalamata.