Privacy Policy

Last updated: February 2026. This policy explains how NextDevStudio collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR) and Greek Law 4624/2019.

1. Data Controller

NextDevStudio (Giorgos Kapatsinas), based in Athens, Greece, is the data controller responsible for processing your personal data. Contact: info@nextdevstudio.gr.

2. What Data We Collect

When you use the contact form, we collect the information you provide: full name, email address, subject, and message content. We may also collect basic usage data through cookies (see our Cookie Policy for details).

3. Purpose & Legal Basis

We process your data based on legitimate interest (Art. 6(1)(f) GDPR) to respond to your inquiries and discuss potential projects. For any marketing communications, we rely on your explicit consent (Art. 6(1)(a) GDPR).

4. Who We Share Data With

We do not sell, rent, or trade your personal data. We may share data with: (a) email service providers to deliver communications, (b) hosting providers (Vercel) for website operation. All third-party providers are GDPR-compliant.

5. Data Retention

Contact form data is retained for up to 12 months after the last communication, or until project completion, whichever is later. You may request earlier deletion at any time.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including encrypted communications (HTTPS/TLS), secure hosting infrastructure, and limited access controls.

7. Your Rights Under GDPR

You have the right to: (a) access your personal data, (b) rectify inaccurate data, (c) request erasure ('right to be forgotten'), (d) restrict processing, (e) data portability, (f) object to processing, (g) withdraw consent at any time. To exercise any of these rights, email us at info@nextdevstudio.gr.

8. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.