This page explains what personal data we collect when you visit quadrum-digital.com or contact us, why we collect it, where it goes and what rights you have. It applies to both the Greek and the English version of the site.
Who we are
The data controller is Quadrum Digital, based in Athens, Greece. For anything related to your data, email us at [email protected].
What data we collect
When you fill in the contact form
Your full name, work email, company website, the services you are interested in, your monthly budget, your industry and anything else you write in the message. We use it to reply to you and prepare the discovery call.
When you subscribe to the newsletter
Only your email address. We use it to send you the newsletter. You can unsubscribe at any time by replying to any of our emails or writing to us.
When you browse the site
Information about how you use the site (pages viewed, device, browser, approximate location, traffic source). This is collected through cookies, and only if you accept them. See the “Cookies” section below.
Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your request and preparing a proposal | Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) |
| Sending the newsletter | Consent (Art. 6(1)(a) GDPR) |
| Traffic analytics and ad measurement | Consent through the cookie banner (Art. 6(1)(a) GDPR) |
| Site security and spam protection | Legitimate interest (Art. 6(1)(f) GDPR) |
Cookies
The first time you visit, we ask which cookies you accept. Until you choose, no analytics or advertising tool that stores cookies is loaded. Google Analytics only sends anonymous, cookieless signals (Google Consent Mode). You can change your choice at any time from the “Cookies” link at the bottom of every page or here.
| Category | Tool | Cookies | Duration |
|---|---|---|---|
| Necessary | Quadrum (cookie choice) | qd_consent | 6 months |
| Necessary | Polylang (site language) | pll_language | 1 year |
| Necessary | Cloudflare (security, anti-spam) | __cf_bm, cf_clearance | 30 minutes to 1 year |
| Analytics | Google Analytics 4 | _ga, _ga_* | 2 years |
| Analytics | HubSpot | __hstc, hubspotutk, __hssc, __hssrc | Session to 6 months |
| Marketing | Google Ads | _gcl_au | 3 months |
| Marketing | Meta (Facebook, Instagram) | _fbp | 3 months |
| Marketing | li_sugr, bcookie, lidc, UserMatchHistory, AnalyticsSyncHistory | 1 day to 1 year |
Marketing cookies let us measure which ads bring in enquiries and show ads to people who have already visited the site. If you reject them, the site works normally.
Who we share data with
We do not sell data. We share it only with providers that serve us and process data on our behalf, or as independent controllers for their own tools:
- Our website hosting provider and Cloudflare (hosting, security, speed).
- Google (Analytics, Ads, Tag Manager).
- Meta Platforms (Meta Pixel).
- LinkedIn (Insight Tag).
- HubSpot (traffic analytics).
- Our email provider, for sending contact form messages and the newsletter.
Some of these providers (Google, Meta, LinkedIn) may transfer data outside the European Economic Area, mainly to the United States. These transfers rely on the EU-U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
How long we keep it
- Contact form: as long as needed to reply and, if we work together, for the duration of the engagement and as long as the law requires for accounting records. If we do not proceed, we delete it within 24 months.
- Newsletter: until you unsubscribe.
- Cookies: as listed in the table above. Google Analytics keeps traffic data for 14 months.
Your rights
Under the General Data Protection Regulation (GDPR) you have the right to request:
- access to your data and a copy of it,
- correction or deletion,
- restriction of processing, or to object to it,
- portability, meaning we give it to you in a machine-readable format,
- withdrawal of your consent at any time, without affecting the lawfulness of processing before the withdrawal.
Email us at [email protected] and we will reply within one month. If you believe we have not handled your data properly, you can lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
Changes to this policy
If we change anything material, we will update this page and the date at the top.