1. Controller
The data controller for Elasite (https://www.elasite.com) is Ioannis Athanasopoulos tou Georgiou, sole trader, registered in Greece, AFM 178684955.
Data requests: info@elasite.com
2. What we collect
- Account & contact: name, email, phone, login credentials (hashed via our auth provider).
- Business details: business name, address, industry, Google Places / listing data you select, photos and copy you provide, order preferences.
- Booking data (Booking package): appointment times, patient/client contact details you or your visitors submit for bookings and reminders.
- Payment data: payment status and references via Viva Payments. We do not store full card numbers.
- Technical data: IP address, device/browser info, security logs, and essential cookies (see §7).
3. Purposes & legal bases
- Service delivery (contract)
- Invoicing & accounting (legal obligation / legitimate interest)
- Support & transactional email/SMS (contract / legitimate interest)
- Security & fraud prevention (legitimate interest)
- Marketing emails only with consent or where otherwise permitted by law
4. Where data is processed
Data is processed by trusted infrastructure, payment, and communication providers needed to run the service. We prefer EU/EEA processing. Providers may process data in the EU/EEA or other countries with GDPR-appropriate safeguards (e.g. SCCs).
5. Retention
We keep account, order, and invoice data as needed to provide the service and meet legal accounting retention. After hosting cancellation we typically delete site backups within 30 days unless a longer period is required by law or an active dispute.
6. Cookies
We use essential cookies for authentication/session (Supabase), locale preference, and referral tracking where applicable. We do not currently use third-party analytics or marketing pixels. If that changes, we will update this policy and request consent where required.
7. Your GDPR rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where applicable. Email info@elasite.com. You may also complain to the Hellenic Data Protection Authority or your local supervisory authority (e.g. in Finland).