Legal
Terms and privacy
Draft: the final text will be written by a lawyer. The Greek version is the one that applies.
Terms of use
This website belongs to Η Αγάπη Φωτίζει ΑΜΚΕ (tax no. [ΑΦΜ]). Donations are made through a secure payment provider, into the non-profit’s account. If you gave by mistake, write to us and we will refund it.
Stories, photos and videos are published with the written consent of the people in them, and are taken down or made anonymous whenever they ask (how).
Privacy
What we keep: what you write in the forms, and for donations your name (if you give it) and the email for the receipt. We never see your card details: the payment provider keeps them.
Why: to reply to you, to send you a receipt and, if you want, to tell you what happened.
For how long: forms that don’t lead anywhere are deleted after 6 months. Donation records are kept for as long as accounting law requires.
Where: on servers in the European Union, at Cloudflare, which hosts the site. Only the team reads the forms, behind a login. To keep spam out, the forms are checked by Cloudflare Turnstile, with no advertising cookies. We don’t sell or give data to anyone. The only exception is visit statistics, if you accept them (below).
Your rights: you can ask to see, correct or delete whatever we hold about you, at any time: info@herostory.gr. You can also complain to the Hellenic Data Protection Authority (dpa.gr).
Cookies
Cookies are small files your browser stores when you visit a website. We count similar technologies with them, such as your browser’s local storage. Hero Story uses two kinds:
Essential. They remember your cookie choice, and keep the amount you picked while you finish a donation. Without them the site doesn’t work properly, so we don’t ask for consent. They don’t tell us who you are.
Statistics, with Google Analytics. Only if you press “Accept”. We count how many people visit, where they come from (for example Instagram), which pages they read and how many get as far as donating, to know which stories reach people. We don’t use them for ads and don’t link them to your name. The provider is Google Ireland Ltd. Google may process data outside the European Union, under the EU-U.S. Data Privacy Framework. Cookies: _ga and _ga_*, which expire within 2 years.
Your choice: change it whenever you like from “Cookie settings” at the bottom of every page. If you choose “Essentials only”, the site works normally and we delete the statistics cookies. The legal basis for the statistics is your consent (article 4(5) of Greek law 3471/2006 and article 6(1)(a) of the GDPR).