Last updated: 27/8/2025
1. Who we are
Level-Up Academy
(
Registration number
148825803000
) provides Digital Ops Automation, Digital Upskilling, and startup support services.
Controller:
Level-Up Academy
Email for privacy matters:
info@levelupacademy.gr
Scope:
This
policy
applies
to
www.levelupacademy.gr
and
any
electronic
communication
channel
controlled
by
Level-Up
Academy
.
It
does
not cover third-party websites or services linked from our site.
2. What information we process
We process only what is
necessary
for specific purposes:
•
Contact data:
name, email, phone, and the content of your message or request.
•
Technical/operational
data:
IP
address,
device
or
browser
identifier,
date
and
time,
URLs
and
referrers,
and
server
logs
for
security
and continuity of service.
•
Cookies and similar technologies:
o
Necessary, required for site functionality and to remember consent settings.
o
Optional, subject to consent:
▪
Maps
(Google Maps) for embedded map loading.
▪
Analytics (e.g. Google Analytics) for aggregate usage analysis.
•
Billing and contract data:
Basic contact and billing details, project description, and invoices, only when a contract is concluded.
•
Special
categories
of
data
(sensitive).
We
do
not
request
or
seek
them.
If
you
voluntarily
submit
such
data
in
free-text
fields,
we
will
delete them when no longer necessary.
3. Sources of data
•
Directly from you (
e.g. through the contact form, email, or phone
).
•
Automatically from your device or browser (
technical logs and cookies
).
•
Third-party sources only if required for contracting or invoicing (
e.g. VAT verification from public registers
) and always lawfully.
4. Why we process data - Purposes and legal bases
4.1 Handling inquiries and pre-contract communication
•
Purpose: respond to questions or requests and prepare offers.
•
Legal basis: performance of a contract or steps prior to entering into a contract [GDPR 6(1)(b)].
4.2 Service delivery and invoicing
•
Purpose: perform agreed services, invoicing, and customer support.
•
Legal bases: performance of a contract [6(1)(b)] and legal or tax obligations [6(1)(c)].
4.3 System security and abuse prevention
•
Purpose: operational and technical security and prevention of malicious activity.
•
Legal basis: legitimate interests [6(1)(f)]. We apply proportionality with minimal logging and restricted access.
4.4 Maps(Google Maps) and third-party embeds
•
Purpose: display location map.
•
Legal basis: consent [6(1)(a)] via the cookie mechanism. Without consent the map will not load.
4.5 Traffic analytics (e.g. Google Analytics)
- currently not available
•
Purpose: understand aggregate usage and improve content.
•
Legal basis: consent [6(1)(a)]. Without consent analytics are not activated. We use settings that minimize identification risk.
4.6 Informational follow-ups
•
Purpose: follow-up responses about information you requested.
•
Legal
bases:
performance
of
a
contract
or
legitimate
interests
within
an
existing
relationship.
Promotional
communications
require
consent where electronic communications law so requires.
5. Who has access
•
Hosting and IT infrastructure providers, including backup and security.
•
Providers of collaboration and communication tools, for example email or helpdesk.
•
Google (
only if you consent to Maps or Analytics
).
•
Accounting and legal services where needed for tax or legal compliance.
•
We sign data processing agreements with all processors in line with GDPR Article 28.
We do not sell your data
.
6. International transfers
If
transfers
outside
the
EU
or
EEA
occur,
for
example
to
Google
LLC,
we
rely
on
appropriate
safeguards
such
as
adequacy
decisions,
Standard
Contractual Clauses, and additional measures where required. We strive to work with providers that offer an equivalent level of protection.
7. Retention periods
•
Web
server
logs:
kept
by
our
hosting
provider
for
operational
and
security
purposes
and
typically
not
longer
than
90
days.
Where
available, we enable automated deletion or retention limits.
•
Security
events,
for
example
WAF
or
CDN:
kept
by
the
relevant
provider
for
a
short
period
according
to
its
policy.
We
do
not
further
process beyond monitoring events.
•
Cookie consent settings: stored locally in your browser for up to 12 months.
•
If analytics are enabled: analytics retention is set to 14 months.
8. Cookies and consent mechanism
We
use
a
consent
management
platform.
Only
necessary
cookies
are
enabled
by
default.
Details
on
categories,
providers,
and
durations
are
available in the site’s
Cookie Policy
.
9. Information security
We
implement
appropriate
technical
and
organizational
measures,
for
example
role-based
access,
software
updates,
event
logging,
secure
connections
(HTTPS),
and
backup
and
recovery.
No
measure
is
absolutely
infallible,
however
we
make
every
reasonable
effort
to
protect
your
data.
10. Your rights
Subject
to
legal
limits,
you
have
the
rights
of
access,
rectification,
erasure,
restriction,
objection,
portability,
and
withdrawal
of
consent
where consent is the legal basis
.
To
exercise
your
rights,
contact
us
at
info@levelupacademy.gr
.
We
will
respond
within
one
month.
For
complex
cases
this
period
may
be
extended by up to two additional months with prior notice [GDPR 12(3)].
Complaint:
You
may
lodge
a
complaint
with
the
Hellenic
Data
Protection
Authority
(
www.dpa.gr
).
However,
we
encourage
you
to
contact
us first so we can seek an amicable resolution.
11. Automated decision-making
We
do
not
make
decisions
producing
legal
effects
based
solely
on
automated
processing,
and
we
do
not
conduct
profiling
with
significant
impact.
12. Minors
Our
website
and
services
target
an
adult
professional
audience.
We
do
not
knowingly
collect
data
from
minors.
If
you
become
aware
that
a
minor has provided data to us, please inform us at
info@levelupacademy.gr
so we can act promptly.
13. Third-party links and embeds
Our
website
may
include
links
or
embeds
from
third
parties
(
e.g.
Google
Maps
).
We
do
not
control
their
policies
or
practices.
We
recommend
reading the privacy policies of third-party services before interacting with them.
14. Changes to this policy
We
may
update
this
policy
for
operational,
legal,
or
regulatory
reasons.
The
current
version
will
be
published
on
this
website
with
the
date
of
last update. For material changes we will provide additional notice.
15. Contact
For questions or requests about data protection, email us at
info@levelupacademy.gr
.
Powered by Level-Up Academy - All rights reserved
Privacy Policy
Last updated: 27/8/2025
1. Who we are
Level-Up
Academy
(
Registration
number
148825803000
)
provides
Digital
Ops
Automation,
Digital Upskilling, and startup support services.
Controller:
Level-Up Academy
Email
for
privacy
matters:
info@levelupacademy.gr
Scope:
This
policy
applies
to
www.levelupacademy.gr
and
any
electronic
communication
channel
controlled
by
Level-Up
Academy
.
It
does
not
cover
third-party
websites
or services linked from our site.
2. What information we process
We
process
only
what
is
necessary
for
specific
purposes:
•
Contact
data:
name,
email,
phone,
and
the
content of your message or request.
•
Technical/operational
data:
IP
address,
device
or
browser
identifier,
date
and
time,
URLs
and
referrers,
and
server
logs
for
security and continuity of service.
•
Cookies and similar technologies:
o
Necessary,
required
for
site
functionality
and to remember consent settings.
o
Optional, subject to consent:
▪
Maps
(Google
Maps)
for
embedded
map loading.
▪
Analytics
(e.g.
Google
Analytics)
for
aggregate usage analysis.
•
Billing
and
contract
data:
Basic
contact
and
billing
details,
project
description,
and
invoices, only when a contract is concluded.
•
Special
categories
of
data
(sensitive).
We
do
not
request
or
seek
them.
If
you
voluntarily
submit
such
data
in
free-text
fields,
we
will
delete
them
when
no
longer
necessary.
3. Sources of data
•
Directly
from
you
(
e.g.
through
the
contact
form, email, or phone
).
•
Automatically
from
your
device
or
browser
(
technical logs and cookies
).
•
Third-party
sources
only
if
required
for
contracting
or
invoicing
(
e.g.
VAT
verification
from public registers
) and always lawfully.
4. Why we process data - Purposes and
legal bases
4.1
Handling
inquiries
and
pre-contract
communication
•
Purpose:
respond
to
questions
or
requests
and prepare offers.
•
Legal
basis:
performance
of
a
contract
or
steps
prior
to
entering
into
a
contract
[GDPR 6(1)(b)].
4.2 Service delivery and invoicing
•
Purpose:
perform
agreed
services,
invoicing, and customer support.
•
Legal
bases:
performance
of
a
contract
[6(1)(b)]
and
legal
or
tax
obligations
[6(1)(c)].
4.3 System security and abuse prevention
•
Purpose:
operational
and
technical
security
and
prevention
of
malicious
activity.
•
Legal
basis:
legitimate
interests
[6(1)(f)].
We
apply
proportionality
with
minimal
logging and restricted access.
4.4
Maps(Google
Maps)
and
third-party
embeds
•
Purpose: display location map.
•
Legal
basis:
consent
[6(1)(a)]
via
the
cookie
mechanism.
Without
consent
the
map will not load.
4.5
Traffic
analytics
(e.g.
Google
Analytics)
-
currently not available
•
Purpose:
understand
aggregate
usage
and
improve content.
•
Legal
basis:
consent
[6(1)(a)].
Without
consent
analytics
are
not
activated.
We
use
settings
that
minimize
identification
risk.
4.6 Informational follow-ups
•
Purpose:
follow-up
responses
about
information you requested.
•
Legal
bases:
performance
of
a
contract
or
legitimate
interests
within
an
existing
relationship.
Promotional
communications
require
consent
where
electronic
communications law so requires.
5. Who has access
•
Hosting
and
IT
infrastructure
providers,
including backup and security.
•
Providers
of
collaboration
and
communication
tools, for example email or helpdesk.
•
Google
(
only
if
you
consent
to
Maps
or
Analytics
).
•
Accounting
and
legal
services
where
needed
for tax or legal compliance.
•
We
sign
data
processing
agreements
with
all
processors
in
line
with
GDPR
Article
28.
We
do
not sell your data
.
6. International transfers
If
transfers
outside
the
EU
or
EEA
occur,
for
example
to
Google
LLC,
we
rely
on
appropriate
safeguards
such
as
adequacy
decisions,
Standard
Contractual
Clauses,
and
additional
measures
where
required.
We
strive
to
work
with
providers
that offer an equivalent level of protection.
7. Retention periods
•
Web
server
logs:
kept
by
our
hosting
provider
for
operational
and
security
purposes
and
typically
not
longer
than
90
days.
Where
available,
we
enable
automated
deletion
or
retention limits.
•
Security
events,
for
example
WAF
or
CDN:
kept
by
the
relevant
provider
for
a
short
period
according
to
its
policy.
We
do
not
further process beyond monitoring events.
•
Cookie
consent
settings:
stored
locally
in
your
browser for up to 12 months.
•
If
analytics
are
enabled:
analytics
retention
is
set to 14 months.
8. Cookies and consent mechanism
We
use
a
consent
management
platform.
Only
necessary
cookies
are
enabled
by
default.
Details
on
categories,
providers,
and
durations
are
available in the site’s
Cookie Policy
.
9. Information security
We
implement
appropriate
technical
and
organizational
measures,
for
example
role-based
access,
software
updates,
event
logging,
secure
connections
(HTTPS),
and
backup
and
recovery.
No
measure
is
absolutely
infallible,
however
we
make
every reasonable effort to protect your data.
10. Your rights
Subject
to
legal
limits,
you
have
the
rights
of
access,
rectification,
erasure,
restriction,
objection,
portability,
and
withdrawal
of
consent
where consent is the legal basis
.
To
exercise
your
rights,
contact
us
at
info@levelupacademy.gr
.
We
will
respond
within
one
month.
For
complex
cases
this
period
may
be
extended
by
up
to
two
additional
months
with
prior notice [GDPR 12(3)].
Complaint:
You
may
lodge
a
complaint
with
the
Hellenic
Data
Protection
Authority
(
www.dpa.gr
).
However,
we
encourage
you
to
contact
us
first
so
we
can
seek
an
amicable
resolution.
11. Automated decision-making
We
do
not
make
decisions
producing
legal
effects
based
solely
on
automated
processing,
and
we
do
not conduct profiling with significant impact.
12. Minors
Our
website
and
services
target
an
adult
professional
audience.
We
do
not
knowingly
collect
data
from
minors.
If
you
become
aware
that
a
minor
has
provided
data
to
us,
please
inform
us
at
info@levelupacademy.gr
so we can act promptly.
13. Third-party links and embeds
Our
website
may
include
links
or
embeds
from
third
parties
(
e.g.
Google
Maps
).
We
do
not
control
their
policies
or
practices.
We
recommend
reading
the
privacy
policies
of
third-party
services
before
interacting with them.
14. Changes to this policy
We
may
update
this
policy
for
operational,
legal,
or
regulatory
reasons.
The
current
version
will
be
published
on
this
website
with
the
date
of
last
update.
For
material
changes
we
will
provide
additional notice.
15. Contact
For
questions
or
requests
about
data
protection,
email us at
info@levelupacademy.gr
.
Powered by Level-Up Academy - All rights reserved
Privacy Policy
