Privacy Policy

1. Introduction

This Privacy Policy outlines how Manolakeris Consultancy, operated by Marios Manolakeris ("I", "me", "my"), collects, uses, and protects personal data. As a sole proprietorship (eenmanszaak) based in the Netherlands, I am the Data Controller for the information collected via the website manolakeris.com and through the provision of my services. I am committed to handling your data in compliance with the General Data Protection Regulation (GDPR).

2. Personal Data I Collect

I adhere to the principle of data minimization, collecting only the data necessary for the purposes outlined below.

2.1. Website Visitors

When you visit my website, I automatically process certain technical data, which may include:

• Technical and Usage Data: Anonymized information such as your device type, browser, country of origin, and pages visited. This data is processed for security and analytical purposes and is not used to personally identify you. This website does not use tracking cookies.

2.2. Business Clients and Inquiries

When you contact me or engage my services, I collect data necessary to establish and maintain a professional relationship:

• Identity and Contact Data: Your full name, business name, email address, phone number, and KVK number.
• Project Data: In the course of providing services (e.g., HR Automation, API Integration, Intune Deployment), I may be granted access to your business systems. Any personal data within these systems (e.g., employee or customer data) is processed solely on your behalf and as strictly necessary for the performance of the contract. I act as a "Data Processor" for this data, and a separate Data Processing Agreement (DPA) may be required.
• Financial Data: Information required for invoicing and tax administration.

3. Legal Basis for Processing Data

I process your personal data based on the following legal grounds as defined by the GDPR:

• Performance of a Contract: Processing data from clients is necessary to fulfill my contractual obligations to deliver my consultancy services.
• Legitimate Interest: I have a legitimate interest in processing technical data to secure my website and in using contact information to respond to your business inquiries.
• Legal Obligation: I am required by Dutch law to retain certain financial and administrative data for a specified period (typically 7 years) for tax purposes.

4. How I Use and Share Your Data

Your data is used exclusively to provide services and manage my business operations. I do not sell your personal data.

I may share your data with the following categories of third-party service providers:

• Hosting and Infrastructure: My website is hosted on Cloudflare Pages, which processes technical data to deliver the site securely and efficiently.
• External Services: This website uses Google Fonts to display typography. These services may collect technical data as per their own privacy policies.

I will only share client project data with third parties upon your explicit instruction and as required for the execution of the project.

5. Data Security

I take the security of your data seriously and have implemented appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. This includes the use of secure communication channels and access controls for all client and project data.

6. Your Data Protection Rights

Under the GDPR, you have the following rights concerning your personal data:

• The right to access: You can request copies of your personal data.
• The right to rectification: You can request that I correct any information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure: You can request that I erase your personal data, under certain conditions.
• The right to restrict processing: You can request that I restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You can object to my processing of your personal data, under certain conditions.
• The right to data portability: You can request that I transfer the data I have collected to another organization, or directly to you, under certain conditions.

To exercise any of these rights, please contact me at the email address provided below.

7. Changes to This Policy

I may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will indicate the latest revision. I encourage you to review this policy periodically.

8. Contact Information & Governing Law

If you have any questions or concerns about this Privacy Policy or my data practices, please contact me at: privacy@manolakeris.com.

This Privacy Policy is governed by and construed in accordance with the laws of the Netherlands. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).