Privacy Policy

• Organizers / visitors who browse categories, event types, and professional listings (usually without creating an account).
• Professionals who register, verify an email address, wait for review, and — if approved — manage a business profile that may be shown publicly.

If you contact a Professional using a phone number, email, or website shown on a Listing, that Professional is an independent controller of the data you send them. Their privacy practices are not ours.

Depending on how you use the Service, we may process:

• Account data (Professionals): email address, password (stored by our authentication provider, not in readable form in our catalog), website, optional business name and phone, application status, and timestamps.
• Profile / Listing data (Professionals): display name, descriptions, service type, event types, service areas, starting price, languages, availability, Instagram, additional phone, and similar fields you submit. Some of this is intended to be public.
• Technical data: IP address, device/browser type, approximate location derived from IP, pages viewed, and similar logs needed to run and secure the Website.
• Communications: messages you send us (for example complaints or support).
• We do not currently require Organizers to create an account. We do not intentionally collect special-category data (health, religion, etc.). Please do not submit it.

Under the GDPR we rely on one or more of the following bases:

• Contract (Art. 6(1)(b)): to create and administer a Professional account, verify email, review an application, and display a Listing you asked us to publish.
• Legitimate interests (Art. 6(1)(f)): to operate, secure, and improve a public event-planning directory; prevent fraud and abuse; understand aggregate use of the Website; defend legal claims. We balance these interests against your rights.
• Legal obligation (Art. 6(1)(c)): to keep records or respond to authorities where the law requires it.
• Consent (Art. 6(1)(a)): where we ask for it (for example optional marketing emails, if we introduce them). You may withdraw consent at any time without affecting prior lawful processing.

If we publish a Listing, the business information you provide for that purpose (name, descriptions, areas, prices, hours, and contact channels you choose to show) may be visible to anyone on the internet, including search engines and AI crawlers that we allow in robots.txt. Do not include private personal data that you do not want public (for example a home address or a private mobile number). You can ask us to update or remove a Listing as described below.

• Infrastructure processors: we use Google Firebase (Authentication and Firestore) and website hosting providers to store accounts and catalog data and to run the Service. They process data on our instructions.
• Administrators: a limited number of people who review Professional applications and manage the catalog.
• The public: Listing fields that are intended to be published.
• Authorities, professional advisers, or a buyer of the Service if we are required or have a legitimate interest to share, in line with the law.

We do not sell your personal data.

Our processors (in particular Google) may process data in the United States or other countries outside the EEA. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework, as provided by the processor.

• Professional account and application records: for as long as the account is open, and afterwards for a limited period needed for security, dispute handling, and legal obligations (typically up to 3 years, longer if a claim is pending).
• Public Listing content: while the Listing is active, and a reasonable period in backups or search-engine caches after removal.
• Server logs: for a short period unless needed to investigate security incidents.
• Support emails: for as long as needed to handle the request and related legal risks.

Subject to GDPR conditions, you may request access, rectification, erasure, restriction, objection (including to processing based on legitimate interests), and portability. You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) or another EU supervisory authority of your residence. To exercise rights, contact the contact details published on the Website. We may need to verify your identity.

Professionals can update much of their profile themselves after approval. Pending or rejected applicants can update application details on the Website as allowed by the product.

We use strictly necessary storage to operate Professional sign-in (for example Firebase Authentication session data in the browser). We do not currently use advertising cookies. If we later add analytics or marketing cookies that are not strictly necessary, we will ask for consent where required and update this policy.

We use reasonable technical and organisational measures (including authentication, access rules in our database, and HTTPS). No online service is completely secure. You must keep your password confidential.

The Service is not directed at children under 18. We do not knowingly create Professional accounts for minors. If you believe we have collected data from a child, contact us and we will delete it where required.

We may update this Privacy Policy. The “Last updated” date will change. Material changes will be indicated on this page and, where required, we will notify Professional account holders.

Privacy requests: the contact details published on the Website. Supervisory authority in Greece: Hellenic Data Protection Authority, Kifisias 1-3, 115 23 Athens, www.dpa.gr.