As of: October 2026
This site gives people on Thassos and in the region a voice against the planned CO₂ storage off Prinos. Because your statement expresses a political opinion, we handle your data with particular care. We never collect money through this site and never ask for passwords or bank details.
1. Controller
The controller under the General Data Protection Regulation (GDPR) is the party named in the Legal notice, where you will also find the contact details for all privacy requests.
2. When you submit your voice
Data: first name (only first name and initial are shown publicly), age, place, e-mail address, your recording (video, audio or photo with a sign), your display choice (with picture, audio only, anonymous) and your consent. If someone records for another person, also the helper’s name and e-mail.
Purpose: to show your voice on the public wall and to document the project.
Legal basis: your explicit consent (Art. 9(2)(a) and Art. 6(1)(a) GDPR). Participation is possible from the age of 16.
What becomes public: only after review and approval by our team: first name with initial, age, place and the recording, as you chose. Your e-mail address is never published. Please note that anything public on the internet can be seen, copied or shared by others.
E-mail confirmation: we send a confirmation e-mail so that nobody can submit a voice in your name. If a submission is rejected, we inform you by e-mail.
Photos: photos are re-created in your browser; location and camera data (e.g. GPS) are removed.
Storage period: for as long as the campaign runs, at the latest until 31 Dec 2028, or until you withdraw your consent. Submissions that are not approved are deleted completely (data and recording) within 30 days at the latest.
Withdrawal and deletion: you may withdraw your consent at any time without giving reasons. A short message to the contact address in the legal notice is enough; we will remove your voice promptly. This does not affect the lawfulness of publication before withdrawal.
3. Service providers
- Hosting and e-mail: Hostinger International Ltd., Cyprus. The site, the database and our e-mails run on their servers (server location: Europe (Germany, Frankfurt)).
- E-mail sending: Brevo SAS, Paris, France. We send e-mails related to your participation (e.g. confirmations and thank-you messages) via Brevo. For this, your e-mail address, your name and the content of the e-mail are transferred to Brevo; Brevo processes this data on our behalf on servers within the EU. We count how many e-mails were opened and how often links were clicked, without linking this to individual people. For this, the e-mails contain an invisible tracking pixel and links are redirected via Brevo. If your e-mail program does not load images automatically, opening is not counted.
- Video storage and playback: BunnyWay d.o.o. (bunny.net), Slovenia. Your video and audio recordings are stored and delivered there. When a video is played, your IP address is transmitted to bunny.net.
- Bot protection: on the recording page we use Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA) to check whether a submission comes from a human or from an automated program (bot). For this, your browser loads a script from Cloudflare and sends technical data to Cloudflare, in particular your IP address, browser and device information and details about behaviour on the page. Cloudflare tells us the result of the check. The service is only loaded on the recording page. More information: cloudflare.com/privacypolicy.
- Website security: Wordfence (Defiant, Inc., USA) protects the site against attacks. IP addresses and request data are checked and, where necessary, compared with lists of known attackers.
The legal basis for hosting, e-mail sending, bot protection and security is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Transfers to the USA are based on the safeguards provided in Art. 44 et seq. GDPR (EU-US Data Privacy Framework or EU standard contractual clauses).
4. Visitor statistics with Matomo (no cookies)
We use Matomo to understand how many people visit the site, which countries and regions they come from and how they found us (e.g. Facebook, WhatsApp, QR code). Matomo runs on our own server; no data is passed to third parties. We set no cookies, and your IP address is shortened before it is stored. The legal basis is our legitimate interest in anonymous audience measurement (Art. 6(1)(f) GDPR). If your browser sends “Do Not Track”, you are not recorded.
5. Server logs
For every page request the server stores technically necessary data (IP address, date and time, requested page, browser). They serve security and troubleshooting and are deleted automatically after a short time (Art. 6(1)(f) GDPR).
6. Share buttons
The WhatsApp, Facebook and Viber buttons are simple links. The respective service only opens when you tap them; no data is sent to these services beforehand.
7. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), as well as the right to withdraw consent at any time (Art. 7(3) GDPR). Please use the contact address in the legal notice.
You may also lodge a complaint with a supervisory authority; in Greece this is the Hellenic Data Protection Authority (Kifisias 1–3, 115 23 Athens, www.dpa.gr).
8. Review of submissions
Every submission is reviewed by our team before it becomes public. In particular, we reject insults, calls for violence, advertising and contributions that show or name other people without their consent.
