How we protect your personal data

The data controller for your personal data is GROW Agency, headquartered at Kolokotroni 64A, Agios Dimitrios 17343, Attica, Greece. For any matter regarding the processing of your data you may contact us at hello@growagency.online or +30 210 9713 335.

We only collect data that you provide yourself or that is generated automatically from your browsing on our site:

• Contact details: name, company name, email, phone — when you submit a contact or quote form.
• Request information: details about the event or exhibition booth you're interested in (event type, date, attendees, budget).
• Technical data: IP address, browser type, operating system, time of visit, pages visited.
• Analytics and marketing data: only if you have accepted the relevant cookies (see Cookies Policy).

We process your data for specific and lawful purposes:

• Responding to contact requests and quotes — legal basis: performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR).
• Sending newsletter updates — legal basis: your explicit consent (Article 6(1)(a) GDPR). You may withdraw it at any time.
• Improving the website through analytics — legal basis: consent via the cookie banner.
• Compliance with legal obligations (e.g. tax) — legal basis: legal obligation (Article 6(1)(c) GDPR).
• Our legitimate interest in securing the website and preventing fraud (Article 6(1)(f) GDPR).

Customer contact data is retained for the duration of the engagement plus 5 years after termination, to cover tax and accounting obligations. Non-customer data (quote requests that did not result in an engagement) is deleted after 24 months. Newsletter subscriber data is retained until consent is withdrawn.

We do not sell personal data to third parties. We share data only with processors who provide us with technical services under strict data-protection agreements:

• Cloudflare (hosting, CDN, email forwarding) — data may be stored on servers inside or outside the EU under Standard Contractual Clauses.
• ActiveCampaign (newsletter platform) — transfer to the USA on the basis of SCCs.
• Google (Google Analytics 4) — only if you give cookie consent, with IP anonymization enabled.
• Meta Platforms (Meta Pixel) — only if you give cookie consent.

Under the GDPR, you have the following rights:

• Access to your data (Article 15)
• Rectification of inaccurate data (Article 16)
• Erasure ("right to be forgotten", Article 17)
• Restriction of processing (Article 18)
• Data portability to another controller (Article 20)
• Objection to processing (Article 21)
• Withdrawal of your consent at any time

To exercise any of the above rights, email us at hello@growagency.online. We respond within 30 days. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

We apply technical and organisational measures to protect your data: HTTPS/TLS encryption on all forms, restricted access to authorised personnel only, regular security updates and backups. In the event of a data breach, we notify the Data Protection Authority within 72 hours in accordance with Article 33 of the GDPR.

We reserve the right to modify this Policy. The last update date appears at the top. Material changes will be communicated via the website or by email to registered users.