Privacy Policy

Last updated: 7 May 2026

Metakybos ("Metakybos", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard personal data when you visit metakybos.com or otherwise interact with us, and what rights you have under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Greek Law 4624/2019.

1. Data Controller

The data controller responsible for your personal data is:

Metakybos 16 Voulis Street, 105 63 Athens, Greece Email: admin@metakybos.com Phone: +30 210 322 0660

For any question, request, or complaint relating to your personal data, please contact us at admin@metakybos.com.

2. What Personal Data We Collect

We collect personal data in the following ways:

Data you provide directly. When you contact us through the website's contact form, subscribe to our newsletter, or send us an email, we collect the information you choose to share — typically your name, email address, telephone number, and the content of your message.

Data collected automatically. When you browse the website, our hosting provider and analytics tools may collect technical data such as your IP address, browser type and version, device type, operating system, referring URL, pages viewed, time spent on pages, and approximate location derived from your IP. This data is collected through cookies and similar technologies (see Section 7).

Data from third parties. If you interact with us through social media or follow a link from a third-party platform, we may receive limited data from those platforms in accordance with their own privacy policies and your settings on them.

We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

3. How We Use Your Personal Data and Legal Basis

We process personal data only where we have a lawful basis to do so under Article 6 GDPR:

PurposeLegal basis

Responding to your enquiries and providing information about our servicesArticle 6(1)(b) GDPR — steps taken at your request prior to entering a contract; or Article 6(1)(f) — our legitimate interest in responding to communications

Sending newsletters and marketing communications you have subscribed toArticle 6(1)(a) GDPR — your consent, which you may withdraw at any time

Operating, securing, and improving the websiteArticle 6(1)(f) GDPR — our legitimate interest in maintaining a functional and secure website

Analysing website traffic and usage patternsArticle 6(1)(a) GDPR — your consent given through the cookie banner

Complying with legal obligations (tax, accounting, regulatory requests)Article 6(1)(c) GDPR — compliance with a legal obligation

Establishing, exercising, or defending legal claimsArticle 6(1)(f) GDPR — our legitimate interest in legal protection

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

4. How We Share Your Personal Data

We do not sell your personal data. We share it only with:

Service providers (data processors). We use trusted third parties to operate the website and our business — for example, our website host (Wix.com Ltd.), email service providers, analytics providers, and IT support. These providers process personal data only on our instructions and under written agreements that comply with Article 28 GDPR.

Public authorities. Where required by law, court order, or a binding request from a competent authority, we may disclose personal data to tax authorities, regulators, law enforcement, or courts.

Professional advisers. We may share personal data with our lawyers, accountants, auditors, and insurers where necessary for them to provide their services to us.

We do not share personal data with third parties for their own marketing purposes.

5. International Transfers

Some of our service providers (notably Wix.com Ltd., headquartered in Israel, and certain analytics or email providers in the United States) may process personal data outside the European Economic Area ("EEA"). When transfers outside the EEA take place, we rely on appropriate safeguards under Chapter V GDPR, including:

transfers to countries recognised by the European Commission as providing an adequate level of protection (Israel benefits from such an adequacy decision);
Standard Contractual Clauses approved by the European Commission, supplemented where appropriate by additional technical and organisational measures.

You may request a copy of the safeguards applicable to a specific transfer by contacting us at admin@metakybos.com.

6. How Long We Keep Your Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected:

Contact-form enquiries: kept for up to 24 months after our last interaction, then deleted or anonymised, unless a longer period is needed to deal with an open matter.
Newsletter subscribers: kept for as long as you remain subscribed; deleted within a reasonable period after you unsubscribe.
Website analytics data: kept in identifiable form for up to 14 months and then aggregated.
Data processed for legal compliance (e.g. accounting records): kept for the period required by Greek and EU law, typically 5 to 10 years.
Data processed for legal claims: kept for the duration of the applicable limitation period.

After these periods, personal data is securely deleted or anonymised.

7. Cookies and Similar Technologies

The website uses cookies and similar technologies. Cookies are small text files placed on your device when you visit a website. We use:

Strictly necessary cookies — required for the website to function and which do not require your consent.
Analytics cookies — help us understand how visitors use the website. These are set only with your consent.
Functional cookies — remember your preferences (for example, language).
Third-party cookies — set by services we embed, such as Wix infrastructure cookies.

You can manage your cookie preferences through the cookie banner shown on your first visit, and at any time through your browser settings. Disabling certain cookies may affect website functionality.

8. Your Rights

Under GDPR and Greek Law 4624/2019, you have the following rights in relation to your personal data:

Right of access (Article 15) — to obtain confirmation of whether we process data about you, and a copy of that data.
Right to rectification (Article 16) — to have inaccurate or incomplete data corrected.
Right to erasure (Article 17) — to have your data deleted in certain circumstances ("right to be forgotten").
Right to restriction of processing (Article 18) — to limit how we use your data in certain circumstances.
Right to data portability (Article 20) — to receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to object (Article 21) — to object to processing based on our legitimate interests, including direct marketing.
Right to withdraw consent (Article 7) — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right not to be subject to automated decision-making (Article 22) — we do not carry out such decision-making, but you have this right by law.

To exercise any of these rights, please email us at admin@metakybos.com. We will respond within one month, as required by Article 12(3) GDPR. We may need to verify your identity before responding.

If you believe our processing of your personal data infringes the law, you have the right to lodge a complaint with a supervisory authority. The competent authority in Greece is the Hellenic Data Protection Authority:

Hellenic Data Protection Authority (HDPA) 1-3 Kifisias Avenue, 115 23 Athens, Greece Telephone: +30 210 6475600 Website: https://www.dpa.gr Email: complaints@dpa.gr

You may also contact the supervisory authority in your country of residence.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, and destruction, in accordance with Article 32 GDPR. These measures include access controls, encryption in transit, secure hosting, and regular review of our security practices. No method of transmission over the internet is fully secure, however, and we cannot guarantee absolute security.

In the event of a personal-data breach likely to result in a risk to your rights and freedoms, we will notify the Hellenic Data Protection Authority within 72 hours where required and will inform affected individuals without undue delay.

10. Third-Party Links

The website may contain links to third-party websites and services. This Privacy Policy does not apply to those sites. We encourage you to read their privacy policies before providing them with any personal data.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, services, or applicable law. The revised version takes effect on the date shown at the top of this page. For material changes, we will provide more prominent notice (for example, by email or a notice on the website). We encourage you to review this page periodically.

12. Contact

For any question about this Privacy Policy or how we process your personal data, please contact us: