Last drafted: 1 November 2026
1. Who is responsible?
The data controller responsible for this website is Jeraki Bay IKE, Greece. For privacy enquiries and requests, please Email us ↗. See the legal notice for full business details.
2. What information do we process?
Website access: When you visit the website, our hosting and infrastructure providers may process technical information such as IP address, request timestamps, browser information and security-related metadata to deliver and protect the site. The hosting provider is Cloudflare, subject to the actual deployment and account configuration.
Enquiries: The on-page enquiry form currently prepares an email draft locally on your device. It does not itself submit enquiries to a Jeraki Bay server or database. If you send the drafted email, the company will receive the name, email address, enquiry topic, message and the normal metadata associated with email transmission.
External photography: Some photographs are loaded directly from Pexels or Wikimedia servers. Their operators may receive technical information about page requests, such as IP address and browser details. We intend to host verified, licensed originals locally before public launch to minimise third-party requests.
3. Why do we process information?
To respond to requests and explore prospective projects or transactions (GDPR Art. 6(1)(b), where steps are requested before a contract, and Art. 6(1)(f), where legitimate business correspondence applies), and to deliver and safeguard the website (Art. 6(1)(f), subject to the relevant balancing assessment). If a legal retention obligation applies, Art. 6(1)(c) may also be relevant.
4. Providers and international data transfers
Hosting and related security services may be provided by Cloudflare. External photographic files currently come from Pexels and Wikimedia; linked third-party websites are independent services. Email processing also depends on the service providers used by the sender and recipient. Any relevant international transfers and service-provider arrangements are subject to the applicable legal safeguards.
5. Retention
Website technical logs are retained according to the actual hosting configuration and operational need. Enquiries, if sent by email, are retained for the time necessary to answer and manage the enquiry, subject to documented deletion and legal retention requirements.
6. Cookies and tracking
The current supplied site does not intentionally implement advertising pixels, analytics scripts or a marketing-cookie banner. This does not replace a scan of the actual deployed website: hosting configurations and third-party media providers can change. Non-essential trackers, if introduced, must remain inactive until a valid choice is made, with an equally accessible reject option and a way to revisit the settings.
7. Your rights
Under GDPR, subject to applicable conditions, you may request access, correction, deletion, restriction, portability or object to processing. You may also lodge a complaint with the Hellenic Data Protection Authority. To exercise your rights, Email us ↗.
8. Changes to this notice
We will update this notice when the site operator, contact method, hosting, service providers, forms or tracking technology changes. The date above will then be updated.