Privacy and cookies
Τελευταία ενημέρωση: 2026-10-12
This is a summary in English. The authoritative version is the Greek one at Πολιτική απορρήτου και cookies, and it prevails in case of any difference.
Who we are
The data controller is Νικόλαος Μπρόικος (Ατομική επιχείρηση, trading as Jobfit), VAT number 137573372, Greece. Contact: [email protected].
What we process and why
- Contact form details, to answer your enquiry, by e-mail and, if you gave a Greek mobile number, by an SMS with the link to your page. Legal basis: steps prior to entering a contract, Article 6(1)(b) GDPR.
- For a CV we send you a personal link to a page where, if you wish, you tell us who you are and about your work experience, or upload your CV. This page is not a user account: you create no username or password and commit to no purchase. It opens with your e-mail or mobile number and works for a limited time.
- The information and files you submit for a commissioned service, to produce it. Legal basis: performance of a contract, Article 6(1)(b).
- Any special category data you volunteer in your own documents, only to write your deliverable. Legal basis: your explicit consent, Article 9(2)(a).
- Invoicing data, to meet Greek tax law. Legal basis: legal obligation, Article 6(1)(c).
- Server logs, for security. Legal basis: legitimate interests, Article 6(1)(f).
- Analytics and advertising cookies, only if you agree. Legal basis: consent, Article 6(1)(a).
Who receives it
Our hosting and e-mail providers, Viva.com for payments, the Greek tax authority through myDATA for invoices, DeepSeek in China, which receives only your surname, when you typed it without accents, to write the greeting correctly; China has no EU adequacy decision, the transfer rests on Article 49(1)(b) GDPR as necessary to answer your request, and DeepSeek may use it to improve its models, easysms.gr (Tern Information Systems, Heraklion, Greece), which sends the SMS with the link to your page, and, only with your consent, Google Ireland for Google Analytics 4 and Meta Platforms Ireland for the Meta Pixel and its Conversions API, which, when you submit the form, receives your e-mail, phone and name in hashed form. Those last two may transfer data to the United States under the EU-US Data Privacy Framework adequacy decision of 10 July 2023, with standard contractual clauses as a fallback. Files you send us for a commissioned service are not transferred outside the EEA.
How long we keep it
Enquiries that did not become an order, 12 months. Client files, 12 months from delivery unless you ask for earlier deletion. Invoices, for as long as Greek tax law requires and at least five years. Server logs, up to 6 months. Your cookie choice, 12 months.
Cookies
Nothing is stored on your device until you answer the consent dialog. If you accept statistics, Google Analytics sets _ga and _ga_<id> for two years. If you accept marketing, the Meta Pixel sets _fbp and, if you arrived from an ad, _fbc, for three months. Our own jfc_consent cookie records your choice for 12 months. You can change or withdraw your choice at any time from the "Ρυθμίσεις cookies" control in the footer of every page.
Your rights
You have the rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, under Articles 15 to 22 GDPR. Write to [email protected] and we will respond within one month. You may also lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifissias Avenue, 115 23 Athens, dpa.gr.