Privacy Policy.

1. Data controller

The data controller responsible for personal data submitted through this website is the sports club “Apollon Anatolikis Aktis”.

For any privacy enquiry or to exercise your data protection rights, please contact us:

• Email: apollon.anakth@gmail.com
• Phone: +30 694 298 4601 | +30 695 048 1677

2. Personal data we collect

Through our interest form, we collect only the information necessary to handle your initial enquiry:

• Guardian's full name
• Contact details (phone number and email address)
• Preferred training venue
• General information about the interested children (number of children, age and gender)

Note: At this stage, we do not request children's names, dates of birth, home addresses, medical information, attachments or payment details.

3. Purpose and legal basis for processing

We use this information solely to respond to your enquiry about the academies and arrange trial sessions or communication about possible registration.

The legal basis for processing is your consent under Article 6(1)(a) GDPR, provided before the form is submitted. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

4. Data recipients and third-party services

• Internal use: Submitted details are received only by authorised club representatives through the club's Gmail mailbox and are delivered to it through the club's email service.
• Protection from automated abuse: We use Cloudflare Turnstile to prevent spam and bot attacks. Turnstile processes technical connection, device and browser-environment signals to assess whether a submission is legitimate.

5. Transfers outside the EEA

Technology providers we use, such as Google and Cloudflare, may process data outside the European Economic Area (EEA). Where required, these transfers rely on the lawful transfer mechanisms and contractual safeguards applied by the providers, including Standard Contractual Clauses.

6. Data retention

The website has no submission database and does not store form details on a web server. Emails received in the club's mailbox are normally retained for up to six (6) months and then deleted, unless the child officially registers with the club or another legal obligation requires longer retention.

7. Your rights

Under the General Data Protection Regulation (GDPR), you may request:

• Access to your personal data and a copy of it
• Correction of inaccurate data or its deletion
• Restriction of processing or data portability
• Withdrawal of your consent at any time

To exercise your rights, email apollon.anakth@gmail.com. You may also lodge a complaint with the Hellenic Data Protection Authority.

8. Data security and marketing communications

The form uses SSL/TLS encrypted transport, origin validation, data validation, request-size limits, rate limiting and Cloudflare Turnstile.

Your data is not sold or disclosed for advertising purposes and is not used for unsolicited marketing communications.