Petalouda protects personal data and explains what we collect, why we use it, how long it is kept and how you can exercise your rights.
Controller and contact details
The controller for this website is Petalouda (Η Πεταλούδα), based in Artemida, Greece. For privacy questions, contact [email protected], call +30 22940 81402 or +30 698 307 3885, or write to 1 Xenofontos Street and 0 Kosti Palama Street, 190 16 Artemida, Attica, Greece.
Information we collect
When you use the contact form, we may ask for your first name, last name, subject, child's age, child's gender, a request for an appointment, phone number, email address and preferred contact time. The appointment request is optional. Please do not submit health information or other sensitive data that is not necessary for your enquiry.
Why we use it and our lawful basis
We use these details to read and answer your enquiry, contact you and, where requested, arrange a conversation or appointment. For a form submission, we rely on your consent, given by selecting the required acceptance of the Privacy Policy. If you do not give consent, we cannot process the enquiry through the form. You may withdraw consent by contacting us; withdrawal does not affect processing carried out before it was withdrawn.
Who may receive it
The message is sent to the school's authorised recipients through the configured email/SMTP service. The application does not store contact submissions in a database. Hosting, email and technical-service providers may process technical data only as needed to provide their services and under their applicable agreements and policies.
Retention and security
The application does not retain the submission. The email may remain in the school's mailbox and the email provider's systems only for as long as needed to handle the enquiry and under the school's approved retention policy. We use measures such as encrypted transport, CSRF protection, rate limiting and restricted administrator access.
Transfers outside the European Economic Area
Some technical or external providers may process data outside the European Economic Area. Any transfer is made only where permitted by the GDPR, using an adequacy decision or appropriate safeguards where required. You can request further information at [email protected].
Map, consent storage and analytics
The Google Maps map is rendered immediately on the Contact page. Google may receive technical data when the embedded frame loads. For more information, see Google's Privacy Policy. The map loads independently from this site's analytics.
Your analytics choice is stored locally in your browser. If you accept analytics cookies, Google Analytics 4 loads only after your consent and may use analytics cookies. Names, email addresses, telephone numbers, child details and other identifying form data are not sent in analytics events.
Automated decision-making
We do not use form data for automated decision-making or profiling.
Your rights
Depending on the lawful basis and circumstances, you may request information, access, rectification, erasure, restriction of processing or data portability, or object to processing. Send a request to [email protected]. We will respond without undue delay and normally within one month, after verifying your identity where necessary.
You may also complain to the Hellenic Data Protection Authority.
Children's images and content
Images of children are published only after they have been reviewed and approved under the school's safeguarding process. Do not send photographs or child information through the form unless it is necessary for the enquiry.
Changes and last-updated date
This policy may be updated when the services or legal requirements change. Last updated: 7 August 2026.
Last reviewed