This Privacy Policy describes how personal data is collected, used, and protected on the Orpheus Hymns website (the “Site”), in accordance with Regulation (EU) 2016/679 (GDPR) and Greek law 4624/2019.
1. Data Controller
The Data Controller for the processing of personal data through this Site is:
- [Συμπληρώστε από Ρυθμίσεις →] (Site administrator)
- Email: info@orpheushymns.com
2. Purposes of Processing and Legal Basis
We process your personal data for the following purposes, on the following legal bases:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Replying to messages submitted through the contact form | Article 6(1)(b) — performance of a request by the data subject (Art. 6(1)(b)) |
| Delivery of the Sonochromatic PDF upon request | Article 6(1)(b) — performance of a request by the data subject (Art. 6(1)(b)) |
| Newsletter subscription via MailerLite | Article 6(1)(a) — explicit consent of the data subject |
| Site security, abuse prevention, and server logs | Article 6(1)(f) — legitimate interest in the secure operation of the Site |
3. Data Collected
Depending on how you interact with the Site, we may collect:
- Form data: name, email address, subject, and the content of the message you send;
- Technical data: IP address and user-agent string, recorded in Cloudflare and server access logs;
- Language preference: EL/EN selection, stored in the
pll_languagecookie.
We do not collect special-category data within the meaning of Article 9 GDPR.
4. Cookies and Local Storage
The Site uses a minimal number of cookies and browser storage items, listed below in full:
| Name | Type | Purpose | Duration | Provider |
|---|---|---|---|---|
pll_language | Strictly necessary cookie | Stores your EL/EN language preference | 30 days | Polylang |
orpheus-cookie-ok / orpheus-cookie-rejected | Local Storage | Records your actual consent decision regarding the cookie notice | No expiry — until the browser storage is cleared | Site itself |
We do not use Google Analytics, advertising trackers, or any other third-party tracking technology.
5. Recipients of the Data
Your personal data may be processed by the following recipients, acting as data processors on our behalf:
- MailerLite UAB (Lithuania) — newsletter sending, within the European Economic Area (EEA);
- Cloudflare, Inc. — CDN and DNS services, with data in transit only;
- Hosting provider (CloudPanel infrastructure, located within the EEA).
No personal data is transferred outside the European Economic Area.
6. Retention Period
- Contact form messages: retained for up to 24 months from the date of the last communication;
- MailerLite newsletter subscribers: retained until you unsubscribe;
- Server and Cloudflare access logs: retained for 30 days.
7. Your Rights as a Data Subject
Under Articles 15–22 of the GDPR, you have the right to:
- access the personal data we hold about you;
- request the rectification of inaccurate data;
- request the erasure of your data (“right to be forgotten”);
- request the restriction of processing;
- exercise the right to data portability;
- object to the processing of your data;
- withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of the above rights, please contact us at info@orpheushymns.com.
We aim to respond within one month per Article 12(3) GDPR, extendable by two months for complex requests.
You also have the right to lodge a complaint with the competent supervisory authority, the Hellenic Data Protection Authority:
- Address: 1–3 Kifissias Avenue, 11523 Athens, Greece
- Telephone: +30 210 6475600
- Website: www.dpa.gr
- Email: contact@dpa.gr
8. Automated Decision-Making
No automated decision-making or profiling is performed through this Site, within the meaning of Article 22 of the GDPR.
9. Updates to this Policy
We reserve the right to update this Privacy Policy. Any material changes will be announced on the homepage of the Site.
Last updated: 2 June 2026.