Privacy Policy
Terms and Conditions
These Terms and Conditions govern your access to and use of the website www.gnb-
architects.com (the “Website”), operated by gnb architects.
By accessing or using the Website, you agree to these Terms. If you do not agree, please do not use the Website.
Use of the Website
You may use the Website only for lawful purposes. You must not:
Attempt to gain unauthorised access to the Website, its servers, or related systems.
Introduce malware, scrape the Website disruptively, or interfere with its operation.
Use the Website in a way that infringes the rights of the Company or any third party.
Submit false, misleading, unlawful, or offensive information through contact or enquiry forms.
Intellectual property
All content on the Website, including architectural designs, images, drawings, photographs, text,
graphics, logos, and layout, is owned by or licensed to the Company and is protected by
intellectual-property laws.
You may view and download content solely for personal, non-commercial reference. You may not reproduce, publish, distribute, modify, or use any content for commercial purposes without prior written consent from the Company.
Project information and enquiries
Information displayed on the Website, including project descriptions, images, and technical details, is provided for general information only. It does not constitute professional architectural, engineering, planning, legal, or financial advice.
Submission of an enquiry through the Website does not create a client relationship or
contractual obligation. Any professional engagement will be governed by a separate written agreement.
External links
The Website may contain links to third-party websites. We do not control and are not
responsible for their content, privacy practices, or availability.
Limitation of liability
The Website is provided on an “as is” and “as available” basis. While we take reasonable care to
maintain accurate information, we do not warrant that the Website will be uninterrupted, error-
free, or free from harmful components.To the extent permitted by law, the Company is not liable for indirect, incidental, or consequential losses arising from use of the Website.
Governing law
These Terms are governed by Greek law. Any dispute arising from their use shall fall under the
jurisdiction of the competent courts of Athens, Greece, unless mandatory law provides otherwise.
Contact
gnb architects
Konitsis 12, Greece
Telephone: +302108065200
Email: info@gnb-architects.com
Responsible DPO: Afentakis Andreas +30 6947904439
Privacy Notice
gnb architects respects your privacy and processes your personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), and applicable Greek data-protection legislation.
This Privacy Notice explains what personal data we collect, why we process it, on what legal basis, with whom we may share it, how long we retain it, and what rights you have.
Data controller
The data controller is:
gnb architects
Konitsis 12, Greece
Telephone: +302108065200
Email: info@gnb-architects.com
Data Protection Officer (“DPO”):
Afentakis Andreas
+30 6947904439
Personal data we process
Depending on your relationship with us and the way you contact us, we may process the following categories of personal data:
Identification and contact data: name, email address, telephone number, postal address, company name, and job title.
Project and enquiry data: information included in your message, project requirements, property or site details, correspondence, and documents you provide.
Client and contract data: identification and contact details, project records, correspondence, drawings, specifications, invoices, payment information, and other material necessary for the provision of architectural services.
Recruitment data: CV, cover letter, portfolio, education, professional qualifications, work experience, references, and other information you choose to submit.
Marketing data: name, email address, and communication preferences, where you have subscribed to receive updates.
Website and technical data: IP address, device and browser information, pages visited, referring website, date and time of access, and cookie identifiers.
We process only personal data that are adequate, relevant, and limited to what is necessary for the purposes described below.
Purposes and legal bases
Processing purpose Categories of data Legal basis
Responding to enquiries and assessing potential projects
Identification, contact, and enquiry data
Steps prior to entering into a contract, Article 6(1)(b) GDPR; legitimate interests,
Article 6(1)(f) GDPR
Providing architectural and related professional services
Identification, contact,project, contract, andpayment data
Performance of a contract, Article 6(1)(b) GDPR
Compliance with tax, accounting, corporate, and legal obligations
Client, contract, invoicing, and payment data
Legal obligation, Article 6(1)(c) GDPR
Establishing, exercising, or defending legal claims
Correspondence, project, contract, and payment data
Legitimate interests, Article 6(1)(f) GDPR
Recruitment and evaluation of job applications
CV, portfolio, qualifications, experience, and contact data
Consent, Article 6(1)(a)
GDPR, and/or steps prior to entering into a contract,
Article 6(1)(b) GDPR
Sending newsletters, invitations, or updates about our work and services
Name, email address, and preferences
Consent, Article 6(1)(a) GDPR
Operating, securing, and improving the Website
Technical and usage data Legitimate interests, Article
6(1)(f) GDPR
Analytics, advertising, social-media features, and non-essential cookies
Technical, usage, and cookie data
Consent, Article 6(1)(a) GDPR
Where we rely on legitimate interests, those interests are the operation and security of our Website, the management of our business relationships, the prevention of fraud and misuse, and the establishment or defence of legal claims. We balance these interests against your rightsand expectations.
Provision of personal data
Providing identification and contact data is necessary for us to respond to an enquiry or enter
into a contract with you. If you do not provide the data required for these purposes, we may be unable to respond to your request or provide our services.
Providing data for marketing communications is voluntary. If you do not provide consent, you
can still use the Website and contact us, but you will not receive marketing communications.
Recipients of personal data
We may disclose personal data to the following categories of recipients, only where necessary:
IT hosting, email, cybersecurity, backup, and technical-support providers.
Website, analytics, advertising, and social-media service providers, where you have given the relevant consent.
Professional advisers, including lawyers, accountants, auditors, tax advisers, and insurers.
Banks, payment providers, and debt-collection professionals, where necessary for contractual or payment purposes.
Public authorities, courts, regulators, tax authorities, and law-enforcement bodies, where required by law or necessary to protect our legal rights.
Collaborating architects, engineers, consultants, contractors, or other project partners, only
where necessary for the relevant project and subject to confidentiality obligations.
Where third parties process personal data on our behalf, we enter into data-processing
agreements requiring them to process the data only on our documented instructions and to
apply appropriate security measures.
International transfers
We mainly process personal data within the European Economic Area (“EEA”). If we transfer
personal data to a country outside the EEA, we will do so only where an adequate level of
protection is ensured.
An adequacy decision adopted by the European Commission.
Standard Contractual Clauses approved by the European Commission.
Another lawful transfer mechanism under GDPR.
You may request further information about the safeguards applied to international transfers by contacting our DPO (see contacts section).
Retention of personal data
Data category Retention period
General enquiries that do not lead to an engagement
Up to [24 months] after the last contact
Client, project, contract, and invoicing records
For the duration of the engagement and thereafter for the period required by Greek tax, accounting, civil, and professional rules
Recruitment applications not leading to employment
Up to [6 months] after the end of the recruitment process, unless you consent to a longer period
Marketing contact data Until you withdraw consent or ask us to stop
sending marketing communications
Website technical and analytics data According to the applicable cookie lifetime,
or up to [13 months], whichever is shorter
Data required for legal claims For the applicable limitation period and, where relevant, the duration of related proceedings
After the applicable retention period, we securely delete or anonymise personal data.
Security of personal data
We apply appropriate technical and organisational measures to protect personal data against
accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures include access controls, confidentiality obligations for staff and processors,
secure storage and transmission practices where appropriate, backups, and periodic review of
our security arrangements.
In case of a personal-data breach likely to result in a risk to your rights and freedoms, we will
notify the Hellenic Data Protection Authority where required. Where the breach is likely to
result in a high risk to you, we will also inform you directly where required by GDPR.
Your rights
Right of access: to obtain confirmation whether we process your personal data and receive a
copy of them.
Right to rectification: to have inaccurate personal data corrected or incomplete personal
data completed.
Right to erasure: to request deletion of your personal data where GDPR permits.
Right to restriction of processing: to request that we restrict processing in certain
circumstances.
Right to object: to object to processing based on our legitimate interests and to object at
any time to direct marketing.
Right to data portability: to receive personal data you provided to us in a structured,
commonly used, and machine-readable format, and to have them transmitted to another
controller where technically feasible.
Right to withdraw consent: where processing is based on consent, you may withdraw it at
any time. Withdrawal does not affect the lawfulness of processing carried out before
withdrawal.
Rights relating to automated decision-making: we do not carry out automated decision-
making, including profiling, that produces legal effects concerning you or similarly
significantly affects you. If this changes, we will provide the information required by GDPR.
To exercise your rights, contact our DPO (see contact section). We may ask you to provide
information necessary to verify your identity.
We will respond without undue delay and, in any event, within one month of receipt of a valid
request. This period may be extended by two further months where necessary, taking into
account the complexity and number of requests. We will inform you of any extension and its
reasons.
Right to lodge a complaint
If you consider that the processing of your personal data infringes GDPR, you have the right to
lodge a complaint with the Hellenic Data Protection Authority:
Hellenic Data Protection Authority (HDPA)
Kifissias 1–3, 115 23 Athens, Greece
Website: www.dpa.gr
Telephone: +30 210 647 5600
Cookies and similar technologies
Our Website uses cookies and similar technologies. Strictly necessary cookies are used to enable
core Website functions and security. Non-essential cookies, including analytics, functionality, and marketing cookies, are used only after you have given consent through our cookie banner or preference centre.You may accept, reject, or withdraw consent for non-essential cookies at any time through the cookie settings available on the Website. For full details, please see our Cookies Policy.
Changes to this Privacy Notice
We may update this Privacy Notice to reflect changes in our processing activities, services, technologies, or legal requirements. The date of the latest revision appears at the top of this notice.
Contact us
gnb architects
Konitsis 12, Greece
Telephone: +302108065200
Email: info@gnb-architects.com
Responsible DPO: Afentakis Andreas +30 6947904439
Cookies Policy
What cookies are
Cookies are small text files placed on your device when you visit a website. They help websites
function, remember preferences, measure performance, and, where permitted, support advertising.
Cookies we use
Category Purpose Consent required
Strictly necessary Enable core Website functions, security, session management, and form submission
No
Preferences / functionality Remember choices such as language or display settings
Yes, unless strictly necessary
Statistics / performance Understand how visitors use the Website and improve its performance
Yes
Marketing / advertising Measure campaigns and deliver relevant advertising or social-media content
Yes
We do not place non-essential cookies, or similar tracking technologies, on your device before
you have given consent through the Website’s cookie banner or preference centre.
Third-party services
Where enabled, the Website may use third-party services such as Google Analytics, Google Ads,
Meta/Facebook Pixel, or embedded social-media content. These providers may receive
information about your interaction with the Website and may process it under their own privacy
policies.
Before enabling such services, we obtain your consent. You can change or withdraw your cookie
preferences at any time through the cookie settings link on the Website.
Managing cookies
You may accept, reject, or withdraw consent for non-essential cookies through the cookie
banner or preference centre. You may also block or delete cookies through your browser
settings. Blocking strictly necessary cookies may prevent parts of the Website from functioning
correctly.
Changes
We may update this Cookies Policy to reflect changes in our services, technologies, or legal
requirements. The date of the latest revision is shown at the top of this page.
Contact
gnb architects
Konitsis 12, Greece
Telephone: +302108065200
Email: info@gnb-architects.com
Responsible DPO: Afentakis Andreas +30 6947904439