Last updated: 23 October 2026
At Box Events we respect your privacy. This policy explains what personal data we collect through box-events.gr, why we collect it, how long we keep it and what your rights are, in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and Greek Law 4624/2019.
1. Who we are
The data controller is the business «Νιαστής Α. Τζανής» (Tzanis Niastis), trading as «Box Events», Agiou Dimitriou 6, 19004 Spata, Greece, VAT No. 115320542, Tax Office: KEFODE Attikis.
For any question about your personal data you can contact us at contact@box-events.gr or by phone at +30 6977171600.
2. What data we collect
- Contact form: your name, phone number, email address, subject and the content of your message.
- Contact by email, phone or Viber: your contact details and any information you share with us about your event.
- Technical data: like any website, our server automatically logs your IP address, browser type and time of visit, for security and to keep the site running properly.
We do not ask for or need special categories of data (e.g. health data). Please do not include such data in your messages.
3. Why we use your data
- To reply to your enquiry and send you a quote (steps prior to entering into a contract – Art. 6(1)(b) GDPR).
- To organise your event, if we work together (performance of a contract – Art. 6(1)(b) GDPR).
- To meet our tax and accounting obligations (legal obligation – Art. 6(1)(c) GDPR).
- To keep the website secure and running smoothly (legitimate interest – Art. 6(1)(f) GDPR).
We do not sell your data and we do not send you marketing messages without your consent.
4. Who has access to your data
- The Box Events team.
- Our website and email hosting provider (Papaki), acting on our behalf.
- Event partners (e.g. venue, catering, technical crew), only if we work together and only as far as necessary.
- Public authorities, where required by law.
5. Third-party services on this website
- Google Maps: our Contact page shows a Google map. When it loads, Google may receive your IP address and use its own cookies.
- Google Fonts: the website fonts are loaded from Google servers, which receive your IP address.
- Instagram: the link to Instagram takes you to the Meta platform, which applies its own privacy policy.
These companies may process data outside the European Union, with the safeguards provided by the GDPR. More information in the Google Privacy Policy.
6. Cookies
This website uses only one essential cookie (pll_language) to remember the language you selected. We do not use analytics or advertising cookies. If we add such tools in the future, we will update this policy and ask for your consent.
7. How long we keep your data
- Enquiries and quotes that did not lead to a collaboration: up to 12 months from our last contact.
- Client data: for as long as we work together and afterwards for as long as required by tax law.
8. Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. To exercise any of these rights, email us at contact@box-events.gr. We will reply within one month at the latest.
If you believe your data is not properly protected, you can lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
9. Security
This website uses an encrypted connection (HTTPS) and access to your data is limited to those who need it.
10. Changes to this policy
We may update this policy from time to time. The date of the latest update is shown at the top of this page.