Privacy Policy

1. Controller

The controller under Art. 4(7) GDPR is Panagiotis Angelopoulos E.E., trading as Angel Software. VAT number EL801712680.

Email: takis@angel.software. Phone: +30 694 307 1437. See also our legal notice.

We have not appointed a data protection officer. Write to the email address above for any privacy question.

2. Hosting

This website is hosted by Vercel Inc. (USA). When you open a page, the server processes technical data such as your IP address, the requested URL, the time and your browser type, and keeps it in server logs. We do this to deliver the site securely and reliably (Art. 6(1)(f) GDPR, legitimate interest).

Transfers to the USA rely on the EU-US Data Privacy Framework and standard contractual clauses.

3. Contact form

If you use the contact form, we process your name, email address and message to answer you (Art. 6(1)(b) GDPR for steps before a contract, otherwise Art. 6(1)(f)). The message is sent through EmailJS, which delivers it to our mailbox as a processor.

We delete enquiries when they are no longer needed to answer you, unless the law requires us to keep them (for example if a contract follows).

4. Booking a call

The "Book a call" buttons open our booking page at angel.software/book. If you book, you give your name, email address, a short note and the time slot you choose, and your browser sends your time zone. We use this to arrange the call (Art. 6(1)(b) GDPR). The request goes to a Google Apps Script web app (Google Ireland Limited / Google LLC) that creates a Google Calendar event and sends you a calendar invite with a Google Meet link.

The list of free time slots is loaded from a file hosted on GitHub Pages (GitHub, Inc.), which may log technical data such as your IP address. The booking page keeps a record of times you already requested in your browser (local storage key "bk.taken") so it does not offer them again.

The link carries the parameters utm_source, utm_medium, utm_campaign and utm_content so we can see which button you used. They contain no personal data.

5. Analytics (Google Analytics 4), only with your consent

We use Google Analytics 4 from Google Ireland Limited to understand which pages help visitors. It is switched off until you click "Accept analytics" in the banner. If you decline, Google Analytics is never loaded and nothing is sent.

Legal basis: your consent (Art. 6(1)(a) GDPR; Art. 5(3) ePrivacy Directive, in Greece Art. 4(5) of Law 3471/2006). You can withdraw it at any time with "Cookie settings" in the footer.

• What is measured: page views, clicks on our calls to action (for example "Book a call"), whether the contact form was sent (never its content), whether a booking request was sent (never its content), approximate location, device and browser type, and where you came from (referrer or UTM parameters).
• Cookies set after consent: _ga and _ga_<ID>, which last up to two years.
• IP addresses are not logged or stored in Google Analytics 4. Data is processed by Google Ireland Limited and may be transferred to the USA under the EU-US Data Privacy Framework and standard contractual clauses.
• We keep analytics data for no longer than 14 months.
• On our side we store your choice in your browser (local storage key "as_consent"). After consent we also keep your first visit source in session storage ("as_ft") for the duration of your visit.

6. Fonts

Fonts are served from this website. No data is sent to Google Fonts or any other font service.

7. Links to other sites

Our pages link to LinkedIn and X. These are plain links with no plugins or tracking pixels, so nothing is sent to those services until you click. Their own privacy policies apply after that.

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 22 GDPR), and you can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). We do not use automated decision-making or profiling.

You can lodge a complaint with the Hellenic Data Protection Authority (HDPA, Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifissias 1-3, 115 23 Athens, Greece, www.dpa.gr, or with the supervisory authority of your EU country of residence.

9. Changes to this policy

We update this policy when what we do changes. The date at the top shows the latest version.