Privacy Policy

Last updated: 14 October 2026

1. Controller

Αρσενίου Χρήστος. Privacy contact: info@kanoniseto.gr, phone +306984786516.

2. If you are a business using kanoniseto

• What we keep: name, email, business details (name, phone, address), settings, subscription details. Card details are handled solely by Stripe; we never see them.
• Why: to provide the service (contract), for billing and invoicing (legal obligation), and to keep the service secure (legitimate interest).
• How long: while you have an account and up to 90 days after; accounting records as long as the law requires.

3. If you booked an appointment with a business

Your details (name, phone, email, notes, appointments) go to the business you chose, which is the controller; we process them on its behalf to make and manage the booking and to send confirmations and reminders. For requests about your data, contact the business or us.

4. Who else processes data (sub-processors)

• Google Cloud / Firebase (Google Ireland Ltd): hosting, database and sign-in — data in the EU (Belgium).
• Stripe (Stripe Payments Europe Ltd): subscription payments.
• Google Workspace / Gmail: sending emails. If a business connects its own email, messages are sent through its own provider.

Any transfers outside the EU are covered by the European Commission’s Standard Contractual Clauses.

5. Cookies

We only use one essential sign-in cookie (to keep you signed in and protect forms) and your chosen language. No advertising or tracking cookies.

6. Your rights

You have the right to access, correct, delete, restrict, port and object. Write to info@kanoniseto.gr. You can also complain to the Hellenic Data Protection Authority (www.dpa.gr).

7. Security

All traffic is encrypted (HTTPS). Passwords are handled by Firebase Authentication; businesses’ email passwords are stored encrypted.