Privacy & Cookie Policy

Last updated: 26 October 2026

1. Introduction

This Privacy & Cookie Policy explains how Helena Matheopoulos (“I”, “me” or “my”, where appropriate) processes personal data when you visit this website, submit an enquiry, request participation in an event or use its features.

This website presents information about Helena Matheopoulos, her professional background, books, publications, media appearances, speaking activities and events. It is operated from Greece and is accessible to visitors worldwide.

Personal data is processed in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), and applicable Greek legislation.

2. Data Controller

The data controller responsible for personal data processed through this website is:

Name: Helena Matheopoulos
Email: [email protected]

For questions about this Policy or the processing of your personal data, you may contact me using the email address above.

3. Personal Data Collected

The information collected depends on how you interact with this website.

3.1 Information submitted through forms

When you submit a contact form, professional enquiry or event participation request, I may collect:

First name
Last name
Email address
Telephone number, where requested
The contents of your message or enquiry
Information relevant to an event participation request, where applicable

This information is used to understand and respond to your enquiry, communicate with you and manage relevant professional or event-related requests.

Please do not include sensitive personal information in your message unless it is necessary and specifically requested.

3.2 Technical information

When you visit the website, certain technical information may be processed by the website, its hosting provider or its security infrastructure. This may include your IP address, browser type, device information, requested pages, timestamps and server logs.

Such information may be processed to deliver the website, maintain security, diagnose technical problems and prevent misuse.

3.3 Analytics information

Where you have provided the required consent, the website may use Google Analytics through Google Tag Manager to understand how visitors use the website.

Depending on the configuration of the service, analytics information may include pages viewed, interactions, referral sources, browser and device information, approximate location and identifiers associated with cookies or similar technologies.

Analytics technologies requiring consent are not activated before the relevant consent is obtained.

3.4 Third-party features

Certain website features may be provided by third parties, including Google Maps.

When third-party content is loaded or used, the relevant provider may receive technical information such as your IP address, browser information and details of the request. Depending on the implementation, the provider may also use cookies or similar technologies.

Further information about these services is provided in the Cookies and Third-Party Services sections below.

4. Purposes and Legal Bases for Processing

Personal data is processed only where an applicable legal basis permits it.

4.1 Responding to enquiries

Information submitted through contact forms is used to respond to questions, professional enquiries, requests for information and communications relating to my work.

Legal basis: Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract. In other cases, Article 6(1)(f) GDPR may apply, based on the legitimate interest in responding to relevant professional communications, provided that this interest is not overridden by your rights and freedoms.

4.2 Managing event participation requests

Information submitted through event-related forms is used to assess and manage requests, communicate relevant details and administer participation.

Legal basis: Article 6(1)(b) GDPR where processing is necessary to take steps at your request or perform an arrangement with you, or Article 6(1)(f) GDPR where appropriate and after considering your rights and interests.

4.3 Operating and securing the website

Technical information and server logs may be processed to maintain website functionality, investigate errors, protect against unauthorised access and prevent abuse.

Legal basis: Article 6(1)(f) GDPR, where applicable, based on the legitimate interest in maintaining and securing the website, subject to the balancing of that interest against your rights and freedoms.

4.4 Website analytics

Where you consent to analytics cookies or similar technologies, analytics information is used to understand website usage and improve content, functionality and performance.

Legal basis: Article 6(1)(a) GDPR, together with consent required under applicable electronic communications and cookie rules.

You may withdraw your consent at any time through the website’s cookie settings.

4.5 Legal obligations

Personal data may be processed where necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

Legal basis: Article 6(1)(c) GDPR for applicable legal obligations or Article 6(1)(f) GDPR where appropriate.

5. Required Information and Policy Acknowledgement

Certain form fields may be marked as required. If you do not provide the information needed to process your request, it may not be possible to respond to or manage your enquiry.

Where a form requires you to tick a box confirming that you have read this Privacy & Cookie Policy, the checkbox records your acknowledgement that the Policy has been made available to you.

This acknowledgement does not, by itself, constitute consent to every form of personal data processing described in this Policy. Where consent is the appropriate legal basis, it will be requested separately.

In particular, acceptance of this Policy is not a substitute for consent to non-essential analytics cookies or other technologies for which consent is required.

6. Recipients of Personal Data

Personal data may be accessed by authorised persons and service providers where necessary for the purposes described in this Policy.

These may include:

Website hosting and technical maintenance providers
Email and communication service providers
Website security and infrastructure providers
Google Analytics and Google Tag Manager, where analytics are enabled following the required consent
Google Maps, when the relevant map feature is loaded or used
Professional advisers or public authorities where disclosure is required or permitted by law

Where a service provider processes personal data on my behalf, appropriate arrangements must be in place as required by applicable data protection law.

I do not sell personal data.

7. International Data Transfers

Because this website is accessible worldwide and may use third-party services, personal data may be processed outside Greece or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, an applicable lawful transfer mechanism will be used where required under Chapter V GDPR. Depending on the circumstances, this may include an adequacy decision adopted by the European Commission, appropriate safeguards such as standard contractual clauses, or another lawful mechanism.

For further information about applicable safeguards, you may contact me using the details provided above, subject to applicable legal restrictions.

8. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

The applicable retention period depends on the type of information and the circumstances of the processing.

Enquiries and correspondence: Retained for the time needed to respond to and manage the enquiry and for a reasonable period afterwards where necessary for follow-up or the establishment, exercise or defence of legal claims.
Event participation requests: Retained for the time needed to assess and administer the request, manage the relevant event and complete necessary follow-up.
Technical and security logs: Retained for the period necessary to maintain security, investigate incidents and meet applicable operational or legal requirements.
Analytics information: Retained in accordance with the configured settings of the relevant analytics service and your consent preferences.
Cookie preferences: Retained for the period necessary to remember and respect your choices, as determined by the consent-management configuration.

When personal data is no longer necessary, it will be securely deleted or anonymised where appropriate.

9. Your Rights Under the GDPR

Subject to the conditions and limitations established by applicable law, you may have the right to:

Access your personal data and obtain a copy.
Rectification of inaccurate or incomplete personal data.
Erasure of your personal data where the legal requirements for erasure are met.
Restriction of processing in certain circumstances.
Object to processing based on legitimate interests on grounds relating to your particular situation.
Data portability, where the applicable legal conditions are met.
Withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, contact me at [email protected]. You may be asked to provide information necessary to verify your identity before a request is handled.

Requests will be handled within the time limits prescribed by the GDPR, normally within one month of receipt. This period may be extended by up to two additional months where permitted by law, taking into account the complexity and number of requests.

If you are in Greece, you may lodge a complaint with the Hellenic Data Protection Authority (HDPA): https://www.dpa.gr/. If you are in another EEA country, you may also contact the competent supervisory authority in your country, where applicable.

10. Cookies and Similar Technologies

Cookies are small text files stored on your device. Websites may also use similar technologies to remember preferences, enable functionality or measure usage.

This website may use the following categories of cookies and similar technologies.

10.1 Strictly necessary cookies

Strictly necessary cookies and similar technologies support essential website functions, security or services that you have specifically requested.

Depending on the website configuration, these may include technologies used to maintain essential functionality or remember your cookie consent choices.

Such technologies do not require consent where they meet the applicable legal exemption. They cannot be disabled through the website’s consent controls if doing so would prevent essential functions from working. You may still be able to block them through your browser settings, although this may affect website functionality.

10.2 Analytics cookies

With your consent, Google Analytics may be used to measure website traffic and understand how visitors interact with the website.

Google Tag Manager is used to manage and deploy website tags. It is not, by itself, an analytics service; the tags it loads determine which information is processed.

Analytics tags and associated non-essential storage must remain inactive until the required consent has been obtained. If you reject analytics cookies, analytics technologies requiring consent should not be activated.

You may change or withdraw your consent at any time through the website’s Cookie Settings control.

10.3 Google Maps and third-party content

Some pages may display maps provided by Google Maps.

Depending on how a map is embedded, Google may receive technical information, including your IP address and browser information, when the map is loaded or used. Google may also use cookies or similar technologies in accordance with its own policies.

Where loading the map involves cookies or similar technologies requiring consent, the relevant map or third-party functionality must remain blocked until the required consent has been obtained. A placeholder may be displayed until the map is enabled.

Google Maps is not automatically classified as strictly necessary simply because a map appears on a page. Its treatment depends on the implementation, the purpose of the feature and applicable legal requirements.

For further information, consult Google’s Privacy Policy: https://policies.google.com/privacy.

10.4 Managing cookie preferences

When you first visit the website, a cookie notice may allow you to accept or reject non-essential cookies and manage available preferences.

You may change or withdraw your consent at any time through the website’s Cookie Settings control, where available.

Following withdrawal, the website should stop activating the relevant consent-based technologies and, where technically appropriate, remove or disable associated cookies. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

You may also manage cookies through your browser settings. Blocking all cookies may affect some website functions.

11. Third-Party Privacy Information

Third-party services operate under their own terms and privacy policies. I do not control their independent data-processing practices.

Relevant services may include:

Google Privacy Policy: https://policies.google.com/privacy
Google Analytics Help Centre: https://support.google.com/analytics/
Google technologies and location information: https://policies.google.com/technologies/location

You are encouraged to review the relevant provider policies when using third-party features.

12. Data Security

Reasonable technical and organisational measures are used to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction.

No method of electronic transmission or storage can be guaranteed to be completely secure. Appropriate measures are taken to protect personal data, but absolute security cannot be guaranteed.

13. Children’s Privacy

This website is intended for a general audience and is not specifically directed at children.

If you believe that a child has provided personal data through the website in circumstances where the processing is not appropriate, please contact me so that the matter can be reviewed.