Skip to main content

Privacy Policy

Last updated: 7 September 2026

MadeByMotion is a freelance web design and marketing practice based in Athens, Greece. This notice explains what personal data is processed through this website, why, and what rights you have under the General Data Protection Regulation (GDPR). For any privacy question you can write to madebymotion@hotmail.com.

Who is responsible

  • MadeByMotion, Athens, Greece, acts as the data controller for the processing described here.
  • Contact for privacy matters: madebymotion@hotmail.com.

What data is processed

  • Contact form: your name, your email address and the message you write. Nothing else is requested — no phone number, address or budget field.
  • Technical and security data: your IP address, browser/user-agent information and request details are processed in standard server and security logs by the hosting platform.
  • Optional analytics: if you accept optional analytics in the cookie banner, the hosting platform (Lovable) collects basic, aggregated visit statistics about pages viewed. These are off unless you accept them.
  • Your language choice and your cookie choice are stored in your browser's local storage. They stay on your device and are not sent to me.

Why it is processed and on what legal basis

  • To read and reply to your enquiry: Article 6(1)(b) GDPR (steps at your request before a possible contract) and/or Article 6(1)(f) GDPR (legitimate interest in answering enquiries). The confirmation checkbox on the form makes this use clear to you.
  • To keep the website available, stable and secure, including spam protection on the contact form: Article 6(1)(f) GDPR (legitimate interest in security and reliability).
  • Optional analytics: Article 6(1)(a) GDPR (your consent), which you can withdraw at any time through “Cookie settings” in the footer.
  • To meet legal obligations, for example accounting and tax records for paid work: Article 6(1)(c) GDPR.
  • Your data is not used for marketing emails or newsletters, and you are not added to any mailing list.

Who receives the data

  • Web3Forms: the contact form is delivered through the Web3Forms service, which acts as a processor for form submissions.
  • Lovable: the website hosting and infrastructure provider, which also provides the optional analytics.
  • Email provider: the enquiry reaches me by email, so the email provider processes the message in transit and in my inbox.
  • No personal data is sold, and it is not shared with advertising networks.

International transfers

  • Some of the service providers above may process data outside the European Economic Area, or use infrastructure that does so.
  • Where that happens, such transfers are intended to rely on the transfer mechanisms permitted by Chapter V GDPR, such as adequacy decisions or Standard Contractual Clauses put in place by the provider.
  • I have not independently verified or audited each provider's safeguards, so no guarantee beyond the providers' own published commitments is given here. If you would like more detail before contacting me, please email first.

How long data is kept

  • General enquiries that do not lead to a project: kept for a maximum of 12 months after our last contact, then deleted.
  • Client and accounting records for paid work: kept only for as long as required by Greek tax and accounting law.
  • Server and security logs: kept for the short period applied by the hosting provider for security and reliability purposes.
  • Consent records for optional analytics are stored in your browser and can be cleared by you at any time.

Your rights

  • You have the right to access your data, to correct it, to erase it, to restrict or object to processing, and to data portability where it applies.
  • Where processing is based on consent, you can withdraw consent at any time; this does not affect processing carried out before withdrawal.
  • Where processing is based on legitimate interest, you can object at any time.
  • To exercise any right, email madebymotion@hotmail.com. I will reply within the time limits set by the GDPR.

Complaints

  • If you believe your data has been handled incorrectly, you can lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) at dpa.gr.
  • You can also contact me first at madebymotion@hotmail.com — most issues can be resolved quickly.

Children

  • This website is aimed at businesses and is not directed at children. Please do not send personal data through the form if you are not legally able to enter into an agreement.

Changes

  • This notice may be updated when the tools, services or processing described here change. The date at the top shows the current version.
← Back to home