Privacy policy.

Who we are

The controller of the personal data described here, in the words of the EU General Data Protection Regulation (GDPR), is Poetics, Thessaloniki, Greece.

What we collect, and why

• Contact forms. When you send a message or submit your work, we receive what you type: your name, email address and message, and your organization (venue form), or your studio and the details of the work, including a viewing link (submission form). We use it only to reply to you and, for a submission, to watch and consider the work. Our legal basis is our legitimate interest in answering the people who write to us and, when you ask about a booking, taking the steps you request before a contract (GDPR Article 6(1)(f) and (b)).
• Booking a call. "Book a call" takes you to Google Calendar's booking page. Google collects the details you enter there and passes your name, email address and chosen time to us, so we can hold the call. Google's privacy policy applies to that page.
• Email. When you write to hello@poeticsvr.com , we receive your message and address and use them to reply.
• Analytics. The site uses Google Analytics to see how it is used: the pages opened, the site that sent you, your device and browser, and roughly where you are (the city or country). Google Analytics does not log or store IP addresses, and we have turned off its advertising features. We use the figures only to see which pages are useful.
• Analytics cookies. Google Analytics sets two cookies (_ga and _ga_9H8WK4W641, kept for up to two years) that recognize your browser when you return. Our legal basis is our legitimate interest in knowing how the site is used (GDPR Article 6(1)(f)). You can turn analytics off at any time with "Turn off" in the notice at the foot of the page, or with "Cookie settings" at the foot of every page: the cookies are deleted and nothing more is sent.
• Visiting the site. Like every website, ours receives the technical data a browser sends with each request, such as your IP address, browser type and the page you asked for. Our hosting provider uses it to deliver the pages and to keep the site secure. Our legal basis is our legitimate interest in running a secure website.

What we do not do

The site shows no advertising, and its only third-party script is Google Analytics, described above. Its fonts and video are served from the site itself, so opening a page does not contact Google Fonts, YouTube or similar services. We do not sell your data, and we do not use it to make automated decisions about you.

What the site stores in your browser

Three small items, none of them a cookie: your choice of light or dark theme, kept until you clear your browser's data; your answer to the analytics notice, kept until you clear your browser's data; and, for the length of your visit, a note that the home page's opening animation has already played. None is sent to us or to anyone else.

Unless you turn analytics off, Google Analytics also sets the two cookies described above.

Who else handles your data

These companies process personal data for us, on our instructions:

• Vercel Inc. (United States) hosts the website and handles the technical data of each visit.
• Formspree, Inc. (United States) receives the contact forms, stores the messages and emails them to us.
• Our email provider holds the messages we send and receive.
• Google provides the booking page and the calendar in which calls are held.
• Google Ireland Limited provides Google Analytics.

Transfers outside Europe

Vercel and Formspree are based in the United States, and Google may process analytics data there, so your data may be processed in the United States. Vercel and Google are certified under the EU-U.S. Data Privacy Framework. Where a transfer is not covered by that framework, we rely on the European Commission's standard contractual clauses. You can ask us for a copy of the safeguards that apply.

How long we keep it

• Messages and enquiries. Up to two years after our last contact with you. If an enquiry leads to a booking, we keep what Greek law requires for business and tax records.
• Work submissions. Up to two years after we reply, so we can return to a work for a later program. Ask us and we delete it sooner.
• Analytics. Google keeps the data of each visit for at most 14 months, then deletes it; only the totals in our reports remain.
• Technical data of visits. Kept by our hosting provider for a short period for security, then deleted.

Your rights

Under the GDPR you can ask us to show you the personal data we hold about you, correct it, delete it, limit how we use it, or give it to you in a format you can take elsewhere. You can object at any time to any use based on our legitimate interest. Write to hello@poeticsvr.com and we reply within one month.

If you appear in a photograph or film on this site and would like it removed, write to the same address.

You can also complain to the Hellenic Data Protection Authority (www.dpa.gr), or to the data protection authority where you live.

Children

This site is meant for organizations and adults. If you are under 15, the age of digital consent in Greece, please ask a parent or guardian to write to us instead of using the forms.

Changes to this policy

If this policy changes, we update this page and the date at the top.