Privacy Policy

1. Who we are

Sunlight Productions is a creative video production company based in Athens, Greece. We operate the website at sunlightprod.gr ("the Site"). For any privacy-related questions, contact us at [email protected].

2. What data we collect

We collect only what is necessary:

• Contact form — name, email address, and the message you send us.
• Cookies — we use anonymous analytics cookies to understand how visitors use the Site (page views, traffic sources). No personal data is stored in these cookies.
• Server logs — standard web server logs (IP address, browser type, pages visited) retained for up to 30 days for security purposes.

We do not collect sensitive personal data, sell your data to third parties, or use advertising trackers.

3. How we use your data

• To respond to enquiries submitted via the contact form.
• To understand how visitors use the Site and improve it (analytics, only if you accepted cookies).
• To maintain the security and stability of the Site (server logs).

4. Legal basis (GDPR)

Under the General Data Protection Regulation (EU 2016/679), our legal bases are:

• Consent — for analytics cookies (you can withdraw at any time by clearing your browser cookies or clicking Decline in the cookie banner).
• Legitimate interest — for server logs kept for security.
• Contract / pre-contractual steps — for processing contact form submissions.

5. Cookies

When you visit the Site, a cookie banner appears. You can choose to Accept or Decline analytics cookies. Your choice is saved in your browser and will not be asked again.

To change your choice at any time, clear your browser cookies for sunlightprod.gr and reload the page — the banner will reappear.

6. Third-party services

The Site uses the following third-party services:

• Vimeo — video embeds. Vimeo may set its own cookies. See Vimeo's Privacy Policy.
• Google Maps — map embed on the Contact page. See Google's Privacy Policy.
• Instagram — we display our latest posts. No personal visitor data is sent to Instagram.

7. Data retention

• Contact form enquiries — retained for up to 2 years, then permanently deleted.
• Server logs — retained for 30 days.
• Analytics data — anonymous and aggregated; no individual records are kept.

8. Your rights

Under GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — at any time, for any consent-based processing.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).

9. Data security

The Site is served over HTTPS. We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or disclosure. No method of transmission over the internet is 100% secure, but we do our best.

10. Changes to this policy

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top. Continued use of the Site after changes means you accept the updated policy.

11. Contact

Sunlight Productions · Athens, Greece
[email protected]