THPAUL / Privacy
Last updated: 13 November 2026
Privacy policy.
What data we collect, why, and how you can control it.
This English version is a translation provided for convenience. If it differs from the Greek version, the Greek version prevails.
Who we are
THPAUL is a creative and marketing studio in Athens that works exclusively with businesses (B2B). THPAUL is the data controller for the personal data collected through thpaul.com. For any matter concerning your data, write to us at marketing@thpaul.com.
What data we collect
- From the forms (contact, quote request, “Ask us”, landing pages): your name, email and, if you fill them in, phone number, company, the service you are interested in and your message. The page you wrote from is sent along with it.
- The source of your visit: if you arrived from an ad or a campaign, the URL parameters (e.g. utm_source, gclid, fbclid) are sent along with the form, so that we know which campaign brought you. We keep them in your browser for the rest of your visit only if you have given consent to analytics or marketing.
- Technical data: as with any server, the hosting provider logs the IP address, the time and the page requested, for operational and security purposes. To protect against spam, we keep a per-IP request counter in hashed form for 15 minutes, without the IP address itself being stored.
- Cookies and similar technologies: these are described in detail in the Cookie policy.
We do not create user accounts and we do not ask for sensitive data, such as health information or beliefs.
Why we use it
| Purpose | Legal basis (GDPR) |
|---|---|
| To respond to your request and send you a proposal | Steps prior to entering into a contract, Article 6(1)(b) |
| To carry out a collaboration: quotes, contracts, invoicing | Contract and legal obligation, Article 6(1)(b) and (c) |
| To protect the site and the forms from abuse and spam | Legitimate interest, Article 6(1)(f) |
| Traffic statistics and ad measurement | Only with your consent, Article 6(1)(a) |
We do not send you newsletters or promotional emails without your explicit consent, and we do not use your data for purposes other than these.
How your message reaches us
When you submit a form, the website's server forwards it by email to marketing@thpaul.com. The website does not store messages in a database.
Who we share it with
- Service providers we use: Hostinger, which hosts the website, and our email provider. They process the data only on our behalf.
- External partners, such as photographers or graphic designers, only when needed for a project and only the contact details that are necessary.
- Google and Meta, only if you have given consent to analytics or marketing.
- Public authorities, when required by law.
We do not sell, rent or exchange personal data.
Transfers outside the European Union
Google and Meta may also process data in the USA. Both participate in the EU-US Data Privacy Framework and apply the European Commission's standard contractual clauses.
How long we keep it
- Messages from the forms: for as long as needed to reply to you and complete the conversation. If no collaboration follows, we delete them within a reasonable time, and immediately if you ask us to.
- Client details: for as long as the collaboration lasts and for as long as tax law requires for invoices and contracts.
- Spam counter: 15 minutes.
- Cookies: as stated in the Cookie policy.
Security
The website works only over an encrypted connection (HTTPS), the forms are protected against spam and access to messages is limited to our team. If a breach occurs that puts your data at risk, we will notify the Hellenic Data Protection Authority and, where required, you, as the law provides.
Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- access your data and receive a copy of it,
- rectification of inaccurate or incomplete data,
- erasure (the “right to be forgotten”), unless the law requires us to keep the data,
- restriction of processing,
- object to processing based on legitimate interest,
- portability of the data you have provided to us,
- withdraw your consent at any time. For cookies, simply click .
To exercise your rights, write to us at marketing@thpaul.com. We reply within one month at the latest. If you believe that your rights are being infringed, you can lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
Changes
When the policy changes, we update the date at the top of the page. For substantial changes we will also inform you with a notice on the site.