1. Who We Are

Box & Desk is a coworking and storage facility located in Mykonos, Greece. Our website address is: https://boxandesk.com

For any privacy-related questions, you can contact us at:
📧 info@boxandesk.com
📞 +30 699 656 8095
📍 Argirena 846 00, Mykonos, Greece

2. What Data We Collect

We collect personal data only when you:

Submit a quote request form (name, email, phone number, message)
Contact us directly via email or phone
Browse our website (analytics data — see section 5)

We do not collect sensitive personal data (health, financial, etc.).

3. How We Use Your Data

The data you provide is used exclusively to:

Respond to your inquiry or quote request
Follow up regarding our services
Send you relevant information you have requested

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (EU) 2016/679, we process your data based on:

Consent — when you voluntarily submit a form
Legitimate interest — when responding to direct inquiries
Contractual necessity — when processing a booking or agreement

5. Cookies & Analytics

Our website may use cookies to improve your browsing experience. These include:

Essential cookies — required for the site to function
Analytics cookies — anonymous data to understand site usage (e.g. Google Analytics)

You can disable cookies at any time through your browser settings.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purpose it was collected for, or as required by Greek and EU law. Inquiry data is typically retained for up to 2 years.

7. Your Rights

Under GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data (“right to be forgotten”)
Object to processing
Data portability — receive your data in a structured format
Withdraw consent at any time

To exercise any of these rights, contact us at: info@boxandesk.com

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): www.dpa.gr

8. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. Our website uses SSL encryption (HTTPS).

9. Third-Party Services

Our website may use the following third-party services which have their own privacy policies:

Google Fonts — typography delivery
Google Analytics — anonymous usage statistics
Ninja Forms — contact/quote form processing

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the date of last update shown at the top.