Privacy and cookie policy.
What data we collect, why, and what your rights are.
Last updated: October 2026
1. Data controller
The controller of your personal data is Christoforos Aivazidis ("BigDrop"), VAT No. EL128948361, Sindos, Thessaloniki, Greece. Email: [email protected], phone: +30 2310 220 500.
2. What data we collect
- Contact form: full name, company, email, phone, topic of interest, budget range and your message. On submission we also record your IP address and browser details, to prevent abuse.
- Email or phone contact: the details you give us.
- Server logs: IP address, date and time, requested page and browser, for security and the proper operation of the website.
3. Purposes and legal basis
- Replying to your request and preparing a proposal: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).
- Website security and abuse prevention: our legitimate interest (Article 6(1)(f) GDPR).
4. Who has access to the data
We do not sell your data or use it for advertising. It is processed on our behalf only by the providers needed to run the website:
- Hetzner Online GmbH: website hosting in data centres within the European Union.
- Cloudflare, Inc.: content delivery network and protection from attacks.
- Mailgun (Sinch): delivery of emails generated by the website, such as the notification for each contact form submission.
- Zoho: mailbox where we receive and reply to your messages.
Where any of these providers processes data outside the European Economic Area, the transfer relies on the safeguards provided by the GDPR, such as the EU-US Data Privacy Framework or standard contractual clauses.
5. How long we keep data
Contact form messages are deleted automatically 24 months after submission. If we start working together, related records are kept for as long as tax and other laws require. Server logs are kept for a limited period and then deleted.
6. Cookies
This website does not use analytics, advertising or tracking cookies, nor tools such as Google Analytics. Fonts are hosted on our own server, so your browsing is not disclosed to third parties.
If suspicious traffic is detected, Cloudflare may set temporary security cookies (for example __cf_bm or cf_clearance). These are strictly necessary to protect the website and are not used to track you.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, write to [email protected]. We will reply within one month at the latest.
If you believe the processing breaches the law, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
8. Changes
We may update this policy. The date of the latest update is shown at the top of the page.