Privacy Policy

Last updated: 12 October 2026

Aromatic Arts Hub respects the privacy of its website visitors and is committed to protecting their personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable data protection legislation.

1. Data Controller

The data controller responsible for the processing of personal data collected through the Aromatic Arts Hub website is Strantzali Zoi, operating as a sole proprietor, with a registered business address at 2, Thiras Street, PC 16451, in Athens.

Contact email: hello@aromaticsarthub.com 

2. Personal Data We Collect

Through this website, we may collect:

  • Name, email address, telephone number and message content submitted through the contact form.

  • Email address and any additional information provided when subscribing to the newsletter.

  • Technical information, such as IP address, browser details and data necessary for website security and functionality.

3. Purposes and Legal Bases for Processing

Personal data is processed for the following purposes:

Communication: To receive and respond to enquiries submitted through the contact form. Depending on the nature of the enquiry, processing is based on our legitimate interests in managing communications or on taking steps at the individual’s request prior to entering into a contract.

Newsletter: To send updates about Aromatic Arts Hub activities, events and news, based on the subscriber’s consent. Consent may be withdrawn at any time.

Security and functionality: To maintain the security and proper operation of the website, based on our legitimate interests where applicable.

4. Newsletter and MailerLite

We use MailerLite to manage newsletter subscriptions and send informational emails.

Subscribers may be asked to confirm their email address through a confirmation message (double opt-in).

Subscribers can unsubscribe at any time using the unsubscribe link included in newsletter emails.

Subscriber information is processed by MailerLite for the provision of its services, subject to applicable data protection terms.

5. Data Recipients

We do not sell personal data to third parties.

Personal data may be accessible to authorised service providers, including our website hosting provider, email service provider and MailerLite, solely for the purpose of providing their services.

Any transfers of personal data outside the European Economic Area are carried out in accordance with applicable data protection requirements.

6. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected.

Contact form information is retained for the time necessary to manage the relevant enquiry and to meet any applicable legal obligations or justified record-keeping needs.

Newsletter subscriber information is retained until consent is withdrawn or the subscriber is removed, subject to any limited retention necessary to demonstrate compliance.

Technical data is retained for periods appropriate to website security and operational requirements.

7. Cookies

The website may use strictly necessary cookies to ensure its proper operation and security.

Where non-essential cookies or similar technologies are used, they are activated only after obtaining the visitor’s consent where required.

The website uses the Polylang functional cookie pll_language, which stores the visitor’s selected language to maintain their language preference while browsing. This cookie is used exclusively to support the website’s multilingual functionality.

8. Your Rights

Under the GDPR, individuals have the following rights, where applicable:

  • Access to their personal data.

  • Rectification of inaccurate data.

  • Erasure of their personal data.

  • Restriction of or objection to processing.

  • Data portability.

  • Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, please contact [Contact email].

Individuals also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

9. Data Security

Appropriate technical and organisational measures are taken to protect personal data against unauthorised access, loss or unlawful processing.

10. Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes in website operations or applicable legal requirements.

The current version will always be available on this page.