Privacy Notice

Last updated: 4 October 2026

1. Who we are

Pageluma and Karajohn Group are trade names of KARAJOHN GROUP Ι.Κ.Ε. (Karajohn Group P.C., in formation), Κιλελέρ 11, 71414 Heraklion, Crete, Greece. We are the controller of the personal data described here. For any privacy question, write to pageluma@karajohnhosting.com.

2. What we collect and why

• Project requests (the form on our website): your name, email address, project type, budget range and the project details you write. We use them to answer you and to prepare your website preview. Legal basis: steps you ask for before a contract (Art. 6(1)(b) GDPR).
• Technical data sent with a request: your IP address and the time of the request, to recognise and block spam. Legal basis: our legitimate interest in keeping the form free of abuse (Art. 6(1)(f) GDPR).
• Server logs: when you visit any page, our servers record your IP address, the date and time, the page requested and your browser type. We use them to run the website securely. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

Please don't send us sensitive information (such as health data) through the form. If we build a website for you, the details of that work are covered by our agreement with you.

3. Cookies, analytics and fonts

This website sets no cookies and uses no analytics or advertising trackers. Our fonts are served from our own server, so visiting the site sends nothing to third parties such as Google.

4. How long we keep it

• Project requests that don't lead to a project: up to 12 months, then deleted.
• Requests that lead to a project: for as long as we work together, and invoices for as long as Greek tax law requires.
• Spam-protection records: 1 hour. They are stored only as a code (hash) of your IP address made with a secret key that changes every hour — afterwards they can no longer be linked to you — and deleted automatically.
• Server logs: up to 30 days on our proxy server (Germany) and up to 5 weeks on our hosting server (Greece).

5. Who receives your data

The website, the form and our mailbox run on our own servers. We use this service provider, bound by a data processing agreement:

• Hetzner Online GmbH (Germany) — the email server where requests are delivered, and the network proxy in front of this website.

Your data stays in the European Union. We do not sell it, we do not use it for automated decisions or profiling, and we disclose it to authorities only where the law requires it.

6. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on legitimate interests. Write to pageluma@karajohnhosting.com; we answer within one month. You can also complain to the Hellenic Data Protection Authority (www.dpa.gr) or the data protection authority where you live.

7. Changes

If we change how we handle your data, we update this notice and the date at the top. For personal data on websites we build for clients, see our Terms of Cooperation.