Privacy Policy & Cookies

1. Data controller

The website educationproject.gr (“Education Project”, “we”) is an online tutoring service that respects and protects your personal data. Data controller:

• Education Project — Online tutoring (Greece & Cyprus)
• Email: info@educationproject.gr
• Phone / WhatsApp: +30 697 7355 378

For any matter regarding your data, contact us at the email above.

2. What data we collect

• Data you give us: when you fill in the contact form or request a quote — full name, email, phone, the service or class you’re interested in and your message.
• Chat with the assistant (chatbot): the messages you send to the online assistant, so it can reply to you.
• Communication: when you write to us by email or message (phone/WhatsApp).
• Technical data: basic, anonymous traffic information (e.g. which pages were viewed) via our own internal measurement — without third-party advertising cookies.

We do not ask for and do not need “sensitive” data. Please do not send us any through the form or the chat.

3. Why we use them (purpose & legal basis)

• To respond to your request or quote — basis: your consent and the preparatory steps before a collaboration.
• To provide the educational services — basis: performance of the contract between us.
• To improve the website — basis: our legitimate interest in a better service.
• To comply with the law (e.g. tax records) — basis: legal obligation.

4. Cookies & local storage

We use only necessary / functional items (e.g. local storage in the browser for the chat to work properly). We do not use third-party advertising or tracking cookies (such as Google Analytics or Meta Pixel). Traffic measurement is done internally and anonymously. You can delete local storage and cookies at any time from your browser settings.

5. Who we share data with

We never sell your data. We share it only with trusted providers who help us operate, as “data processors”:

• Hetzner — hosting of the server and database (Germany, within the EU).
• Google Workspace — our corporate email (info@educationproject.gr).
• Google (Gemini API) — processing the chatbot messages to generate a reply.

We may also disclose data where required by law or a competent authority.

6. International transfers

Our server and database are located within the EU (Germany). Some providers (e.g. Google) may also process data outside the EU; in those cases, appropriate legal safeguards apply (Standard Contractual Clauses or adequacy decisions of the European Commission).

7. How long we keep them

We keep form and communication data for as long as needed to handle your request and our collaboration, and then delete it. You can request deletion at any time. Data required by law (e.g. records) is kept for the prescribed period.

8. Security

We use an encrypted connection (HTTPS), our own server with controlled access and a password-protected admin panel. No method is completely secure, but we take reasonable technical and organisational measures to protect you.

9. Minors

Many of our services concern school students. For minors under 15, contact details are provided and consent is given by the parent or guardian. If you are a parent and believe your child gave us data without your consent, write to us and we will delete it.

10. Your rights

Under the General Data Protection Regulation (GDPR) you have the right of access, rectification, erasure (“right to be forgotten”), restriction, portability and objection, as well as the right to withdraw your consent at any time. To exercise any right, write to us at info@educationproject.gr — we reply within one month at the latest.

11. Complaint to the Authority

If you believe we have not respected your rights, you can lodge a complaint with the Hellenic Data Protection Authority: www.dpa.gr, 1-3 Kifisias Ave., 115 23 Athens, tel. +30 210 6475600.

12. Changes to this policy

We may update this policy from time to time. The current version is published on this page, with the update date at the top.