Privacy Policy

Prevention is cheaper than a breach

1. Introduction

CyberStack respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it and how we manage it, in accordance with the General Data Protection Regulation (GDPR — EU 2016/679) and applicable Greek legislation.

Data Controller: CyberStack, Athens, Greece | [email protected] | www.cyberstack.com

2. Data We Collect

Comments & Forms

When you fill in any form or leave a comment on our website, we collect:

• First name and last name

• Professional email address

• Phone number

• Company name / organisation you work for

• IP address and browser user agent string (for spam detection)

• An anonymised hash of your email address for the Gravatar service — Gravatar Privacy Policy: automattic.com/privacy

Media Files

If you upload images to our website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the website can download and extract any location data from images posted on the site.

Embedded Third-Party Content

Articles and pages on our site may include embedded content (e.g. videos, images, articles) from external websites. These sites operate independently and may collect data about you, use cookies, or monitor your interaction with that embedded content.

3. Newsletter — Consent via Form

By completing any form on our website, you agree to be added to CyberStack’s newsletter list. You will receive:

• Updates on our cybersecurity and cloud infrastructure services

• Industry news and developments

• Invitations to webinars, events and educational content

You may unsubscribe at any time via the ‘Unsubscribe’ link included in every email or by contacting us at [email protected].

4. Purpose & Legal Basis of Processing

• Handling enquiries & requests: performance of a contract (Article 6(1)(b) GDPR)

• Sending newsletter communications: your consent via form (Article 6(1)(a) GDPR)

• Spam detection & security: legitimate interest (Article 6(1)(f) GDPR)

5. Data Retention

Your personal data is retained for as long as necessary depending on the purpose of each communication:

• Contact form data: up to 3 years from last interaction

• Newsletter data: until you withdraw consent or request removal

• Security logs (IP, etc.): up to 12 months

6. Your Rights

Under the GDPR, you have the right to access, rectify, erase (‘right to be forgotten’), restrict processing, data portability and object to processing. You may also withdraw your consent at any time without retroactive effect.

To exercise your rights: [email protected] (response within 30 days).

To lodge a complaint: Hellenic Data Protection Authority (HDPA) — www.dpa.gr | +30 210 6475 600

7. Security & Third Parties

As a cybersecurity company, we apply TLS encryption, network microsegmentation, access control and regular security audits. We do not sell or rent your data. Third-party providers (e.g. Gravatar, email platform, cloud hosting) are carefully selected and contractually bound to an equivalent level of data protection.

8. Policy Updates

CyberStack reserves the right to update this Privacy Policy at any time. Any changes will be posted on our website with the date of the latest revision. For material changes, you will be notified via email or a prominent notice on the website.

Scroll to top