PRIVACY POLICY

Last updated: 25 September 2026

1. Data Controller

This website, www.xcon.gr, is operated by:

GEORGIOS IO. CHOUSOS MELETITIKI E.E.
Trading name: XCON XOUSOS CONSTRUCTIONS
86 Marinou Antipa Str., 14121 Neo Irakleio, Attica, Greece
G.E.MI. No.: 122451601000
Mobile: +30 697 373 0546
Email: info@xcon.gr

GEORGIOS IO. CHOUSOS MELETITIKI E.E. is the data controller for the personal data processed through this website.

2. Personal Data We Collect

When you contact us through the website contact form, we may collect:

your name;
your email address;
your telephone number, if provided;
the subject of your enquiry; and
the content of your message.

We may also process limited technical information necessary for the operation, security and administration of the website, such as:

IP address;
browser and device information;
technical logs;
cookie and consent preferences; and
information generated by security and anti-abuse technologies.

We do not intentionally collect special categories of personal data through the website. Please avoid including sensitive personal information in the contact form unless it is necessary for your enquiry.

3. Purposes and Legal Bases for Processing

We process personal data only where there is an appropriate legal basis under applicable data protection law.

Personal data submitted through the contact form may be processed in order to:

respond to your enquiry;
communicate with you;
provide information about our professional services;
take steps at your request before entering into a professional or contractual relationship;
manage an existing professional or contractual relationship, where applicable;
operate, maintain and secure the website; and
comply with applicable legal obligations.

Depending on the circumstances, processing may be based on:

steps taken at your request prior to entering into a contract;
performance of a contract;
our legitimate interests in responding to professional enquiries, operating our business and protecting the website;
compliance with legal obligations; or
your consent, where consent is specifically required.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

4. Contact Form

The website includes a contact form through which you may voluntarily submit information to us.

Fields marked as required must be completed in order for us to receive and respond to the enquiry. Other fields, such as telephone number where indicated, may be optional.

Information submitted through the contact form is used solely for handling your enquiry and related professional communication unless another lawful basis applies.

Personal data submitted through the contact form is not used for marketing communications without a separate appropriate legal basis or consent where required.

5. Cookies and Consent Management

This website uses cookies and similar technologies.

We use Usercentrics for Wix to manage cookie consent. When you first visit the website, you can accept, reject or selectively enable non-essential technologies.

Only technologies classified as essential are intended to operate without prior consent where they are necessary for the operation or security of the website. Non-essential technologies are activated according to the choices you make through the cookie consent interface. Wix states that its Usercentrics integration blocks non-essential cookies and scripts until the visitor provides the relevant consent.

You may change or withdraw your cookie preferences at any time through the privacy control available on the website.

Further information is available in our Cookie Policy.

6. Third-Party Services

The website is built and hosted using Wix and uses Usercentrics for consent management.

The Contact page includes Google Maps. Google Maps is loaded only according to the visitor's relevant consent choices. When activated, Google may process technical information such as IP address, browser information and device information.

Certain project pages contain embedded video content provided by Vimeo. Due to the way the embedded player operates on this website, Vimeo content is loaded only after the visitor has enabled the relevant Advertising technologies in the cookie settings.

Cloudflare security technologies may be used to protect the website and its forms against automated abuse, malicious traffic and other security threats.

Wix may also process information necessary for hosting, website administration, content management, security and other platform functions.

Third-party providers may process information according to their own privacy policies and applicable data protection obligations.

7. Google Analytics and Advertising Tracking

At present, we do not intentionally use Google Analytics or Google advertising tags for visitor tracking or advertising measurement on this website.

If analytics or advertising tracking technologies are introduced in the future, the relevant privacy information and cookie consent configuration will be updated accordingly.

8. Recipients of Personal Data

Personal data may be accessible only where necessary to:

authorised persons acting on behalf of the company;
Wix, as the website platform and hosting/service provider;
Usercentrics, for consent management;
relevant technology or service providers necessary for website functionality or security; and
professional advisers, public authorities or other recipients where disclosure is required by law or necessary for the establishment, exercise or defence of legal claims.

We do not sell personal data.

9. International Data Transfers

Some service providers used by the website may process data outside Greece or the European Economic Area.

Where such transfers take place, they are subject to the safeguards and transfer mechanisms required under applicable data protection law and used by the relevant service provider.

10. Data Retention

Personal data submitted through the contact form in connection with a general enquiry that does not result in a professional engagement is normally retained for no longer than 12 months from the last relevant communication, unless there is a legitimate reason requiring earlier deletion or longer retention.

Where an enquiry develops into a professional, contractual or client relationship, relevant personal data may be transferred to our business records and retained for the period required by applicable legal, tax, contractual or professional obligations, or where necessary for the establishment, exercise or defence of legal claims.

Spam, irrelevant or unsolicited communications may be deleted earlier.

Personal data submitted through the contact form is not used for marketing purposes without a separate appropriate legal basis.

Consent records and technical information relating to privacy choices are retained only for the period necessary to document and manage those choices and to comply with applicable legal requirements.

The GDPR principle of storage limitation requires personal data not to be kept longer than necessary for the purposes for which it is processed.

11. Your Data Protection Rights

Subject to the conditions and limitations provided by applicable law, you may have the right to:

request information about how your personal data is processed;
obtain access to your personal data;
request correction of inaccurate or incomplete data;
request deletion of your personal data;
request restriction of processing;
object to certain processing;
receive certain personal data in a portable format where applicable; and
withdraw consent where processing is based on consent.

These rights are recognised under the GDPR, although their applicability depends on the circumstances and legal basis of the processing.

To exercise your rights, contact:

info@xcon.gr

We may need to verify your identity before processing a request.

Wix provides tools that allow the site owner to obtain a copy of visitor data or submit a request for permanent deletion. Wix also notes that data collected through third-party apps, custom code or other external services may need to be handled separately by the site owner.

12. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

For Greece, the competent authority is the:

Hellenic Data Protection Authority
1–3 Kifissias Avenue
115 23 Athens, Greece
Website: www.dpa.gr

The Hellenic Data Protection Authority accepts complaints concerning alleged violations of data protection law and the exercise of GDPR rights.

13. Data Security

We take appropriate organisational and technical measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

The website also uses platform and security technologies provided by Wix and other service providers for purposes such as security, anti-abuse protection and website integrity.

No internet transmission or storage system can, however, be guaranteed to be completely secure.

14. Automated Decision-Making

We do not intentionally use personal data collected through this website for automated decision-making or profiling that produces legal or similarly significant effects concerning visitors.

15. Changes to this Privacy Policy

We may update this Privacy Policy where necessary, including where:

website functionality changes;
third-party services are added or removed;
our processing activities change; or
legal or regulatory requirements change.

The date shown at the top indicates when this Privacy Policy was last updated.

16. Contact

For any questions concerning this Privacy Policy or the processing of personal data through this website, please contact: