Privacy Policy

Who we are

The International School of Volos is a school project currently in the planning phase. The data controller is Henrik Thomé, acting as a natural person pending the formation of a Greek legal entity (IKE).

Contact: [email protected]
Postal address available on request.

What we collect and why

When you register your interest or sign in, we collect:

• Email address — to send you a sign-in link and school updates. Providing your email is required for sign-in (contractual necessity).
• Name (if you provide it) — to personalise communication.

Our hosting provider Cloudflare collects standard CDN request metrics (e.g. page views, country-level location). These are aggregate statistics, not personal analytics tracking.

Legal basis

• Consent — when you sign up, you consent to receiving school updates. You can withdraw this consent at any time.
• Legitimate interest — responding to enquiries and keeping interested families informed about school progress.

Who has access to your data

We use the following services to operate the website. Your data may be shared with them as necessary:

• Resend (US) — email delivery
• Cloudflare (US/EU) — website hosting and content delivery
• Render (US) — API server and database

We do not sell or share your data with anyone else.

International data transfers

Some of our service providers are based in the United States. Your data may therefore be processed outside the EU/EEA. All three providers offer Standard Contractual Clauses (SCCs) as the legal safeguard for these transfers.

How long we keep your data

We retain your data until you delete your account, or for up to two years of inactivity, whichever comes first.

Your rights

Under the GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data — you can do this directly from your account page, which removes all your data from our systems
• Restrict processing of your data
• Object to processing where we rely on legitimate interest
• Export your data (data portability)
• Withdraw consent at any time
• Lodge a complaint with the Greek Data Protection Authority (HDPA) at dpa.gr

To exercise any of these rights, contact us at [email protected].

Cookies and local storage

This website does not use tracking cookies. We use your browser's local storage to keep you signed in between visits. This is a technical necessity and does not track you across other websites.

Children's data

As a school, we expect some users to be parents or guardians of minors. We do not knowingly collect data from children under 16 without parental consent. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page will always reflect the most recent version.