How I handle your data
This is the privacy notice for the enquiry form on this site. It is written to satisfy Article 13 of the UK and EU GDPR, and to be readable in about three minutes.
Who is responsible
The controller is Aris Kondylis, 1045 rue Wellington. You can reach me at kondaris@icloud.com about anything on this page, including any of the rights listed below.
What I collect
Only what the form asks for, and a little technical detail that comes with any web request.
- Your name, work email address, company, role, and optionally your website.
- The process you described, how often it happens, how it is handled today, and optionally your team size, industry, and how you heard about me.
- The time you submitted, your browser's user-agent string, and a one-way hash of your IP address. The hash is used to rate limit the form. I do not store your IP itself.
Please do not put sensitive personal details in the free-text box (health, political views, and the other special categories in Article 9). The form does not ask for any, and it is not the place for them.
Why, and on what legal basis
- To answer your enquiry and to prepare a possible piece of work for you. Legal basis: Article 6(1)(b), steps taken at your request before entering a contract.
- To triage the enquiry, so that I can tell quickly which enquiries need a call and which do not. Legal basis: Article 6(1)(f), my legitimate interest in handling sales enquiries efficiently as a one-person business. You can object to this at any time, and I will handle your enquiry by hand instead.
- To stop spam and abuse of the form. Legal basis: Article 6(1)(f), my legitimate interest in keeping a public form usable.
I do not use your details for marketing, I do not add you to a mailing list, and I do not sell or share them with anyone beyond the providers named below.
Automated triage
Enquiries are triaged by an automated system using a third-party AI model, and a human reviews every enquiry. The model reads what you wrote about your process and suggests how urgent the enquiry looks. It never decides anything on its own, nothing is rejected automatically, and no decision with a legal or similarly significant effect is made this way. Your name and email address are not sent to the model.
Who else sees it
I use a small number of providers to run this. Each of them processes your data only on my instructions, under a data processing agreement. All are based in the United States, so your data is transferred outside the EEA.
- Anthropic PBC, the AI model that triages the enquiry. It receives what you wrote about your process, how often it happens, how it is handled today, your company, role, website, and how you heard about me. It never receives your name, your email address, your team size or your industry. Anthropic's Data Processing Addendum is incorporated into its commercial terms and governs the transfer. Anthropic states that API inputs are not used to train its models.
- Mango Technologies, Inc. (ClickUp), where the enquiry is filed so I can work on it. Transfers rely on the Standard Contractual Clauses in ClickUp's Data Processing Addendum. ClickUp hosts on Amazon Web Services; on my plan that means the United States.
- Resend, which sends the reply to you and the alert to me. Resend certifies under the EU-US Data Privacy Framework and its agreement also includes the Standard Contractual Clauses.
- Cloudflare, Inc., which hosts this page, stores the enquiry, and provides the Turnstile anti-bot check on the form. Transfers rely on the Standard Contractual Clauses in Cloudflare's Data Processing Addendum.
- Cal.com, and only if you open the booking link I send you. The link carries your name and email so you do not have to type them again. If you never open it, Cal.com receives nothing.
How long I keep it
Your enquiry is deleted from my database automatically 24 months after it arrives. The copy in my CRM is deleted at the same time, by hand. If we end up working together, the records of that work are kept separately and for as long as tax and accounting law requires.
Cookies
No analytics, no advertising, and no tracking cookies. The Turnstile check sets a cookie that is strictly necessary for detecting bots, which is why there is no cookie banner.
Your rights
You can ask me for a copy of what I hold about you, to correct it, to delete it, to restrict what I do with it, or to receive it in a portable form. You can object to the triage described above. Email me and I will deal with it within a month. If you are not satisfied, you can complain to your national data protection authority.