1. Data controller
The data controller is Fourni Korseon Municipality, Fournoi, PC 83400, Greece. Contact email: info@divefournoi.gr.
2. Data collected
Depending on the form you use, you may submit your name, email address, phone number, country, message subject and content, comments, ratings, diving level or preferred period. Hosting security logs and the final infrastructure providers will be documented after the production audit.
Optional files attached to the feedback form are used temporarily for email delivery and the current implementation deletes them immediately afterwards.
3. Purposes and legal basis
Data is used to respond to enquiries, manage comments and evaluations, provide requested campaign updates and protect the website from abuse. The final legal basis for each purpose — such as consent, performance of a request or legitimate interests — must be approved by the data controller or its legal adviser.
4. Recipients and transfers
Access should be limited to authorised administrators and strictly necessary hosting and email providers. The final list of processors, processing countries and any safeguards for international transfers will be completed after the production services have been selected.
5. Retention period
The current technical configuration automatically deletes private submissions after 24 months. This period remains subject to final operational and legal approval. Data may be deleted earlier when it is no longer needed or when a valid request is accepted.
6. Your rights
Subject to the conditions of the GDPR, you may request information and access, rectification, erasure, restriction, portability or object to processing. Where processing is based on consent, you may withdraw it without affecting the lawfulness of processing carried out beforehand.
7. Security and automated decisions
The forms use server-side validation, nonces, a honeypot and rate limiting. No automated decision-making or profiling that produces legal or similarly significant effects has been implemented.
8. Contact and complaints
To exercise your rights, contact info@divefournoi.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority.