Who we are
This Privacy Policy describes how Craft Blended Solutions (hereinafter referred to as “we,” “us,” or “our”) collects, uses, and protects the personal data of visitors to our website www.craftblended.com (the “Website”).
Data Controller
Craft Blended Solutions
Pallini, Greece
m.michalakakou@craftblended.com
+306947300627
Personal Data We Collect
We collect the following personal data from you when you voluntarily submit it through our Website:
Contact Data: This includes your name, email address, phone number (if provided), and any other information you choose to include when you request a meeting with us.
Account & E-Learning Data: When you register and purchase a course, we collect your username, password (encrypted), and track your course progress within our learning management system.
Billing & Financial Data: For purchasing digital products, we collect billing details such as your physical address, VAT number (if applicable for B2B transactions), and transaction history. Note: We do not store your credit card or payment details; these are securely captured and processed directly by our authorized payment provider (Stripe).
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Purposes of Processing
We process your personal data for the following specific business purposes:
To communicate with you regarding your meeting request and any follow-up necessary for our HR consultancy services.
To respond to your requests for meetings and to schedule such meetings.
To process your orders, grant you access to our e-learning platform, and deliver the digital content or courses you purchased.
To issue legal tax documents (receipts/invoices) and comply with our accounting obligations under Greek law.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
Legal Obligation: Processing your billing data is necessary to comply with Greek tax and accounting laws (e.g., transmitting data to the independent authority for public revenue).
Consent: When you voluntarily submit your contact information to request a meeting.
Performance of a Contract: Processing your account and billing data is strictly necessary to fulfill your order and provide you with access to our e-learning courses.
Data Recipients
We are committed to protecting your privacy. Your personal data is not sold to third parties. However, to operate our e-learning platform and process transactions, we share strictly necessary data with trusted third-party service providers acting on our behalf. These include our secure payment gateway (Stripe) for processing transactions and our cloud invoicing software for issuing tax documents.
Data Retention
We retain your data only for as long as necessary. Specifically:
- Inquiries: We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including responding to your meeting request and any related follow-up. Once these purposes have been fulfilled, your personal data will be securely deleted or anonymized.
- Tax & Billing Data: Invoices and transaction records are retained for the period strictly required by Greek tax legislation (typically up to 10 years).
- Student Accounts: E-learning account profiles will be retained for up to 36 months after your last active session, after which they will be securely deleted or anonymized to protect your privacy.
Your Rights
Under applicable data protection laws, you have certain rights regarding your personal data, including:
- The right to access: You have the right to request information about the personal data we hold about you.
- The right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
- The right to erasure (right to be forgotten): You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if there are no other legal grounds for the processing.
- The right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
- The right to object to processing: You have the right to object to the processing of your personal data in certain circumstances.
- The right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
- The right to withdraw consent: If the processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
- The right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a data protection authority if you believe that our processing of your personal data infringes applicable data protection laws. The relevant supervisory authority in Greece is the Hellenic Data Protection Authority (HDPA).
Security Measures
We take reasonable technical and organizational measures to protect your personal data against unauthorized access, use, disclosure, alteration, or destruction.
Links to Other Websites
Our Website may contain links to other websites. Please be aware that we are not responsible for the privacy practices of such other websites. We encourage you to read the privacy policies of every website you visit.
Updates to this Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at m.michalakakou@craftblended.com.