GDPR
Privacy Policy
Last updated: March 2026
1. Introduction
ARISTON (“we”, “us”) is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information in accordance with the EU General Data Protection Regulation (GDPR).
2. What Data We Collect
- Account details: name, email, age
- Assessment data: responses to assessment questions
- Payment data: processed by Stripe — we do not store card details
- Technical data: IP address, browser type, session cookies
3. How We Use Your Data
- Providing the assessment service
- Generating career reports
- Processing payments
- Sending confirmations and reports by email
- Improving the platform (anonymized data)
4. Legal Basis for Processing
- Contract performance: providing the service
- Legal obligation: tax compliance
- Legitimate interest: service improvement
- Consent: marketing communications (optional)
5. Data Sharing
We do not sell your personal data. We only share data with:
- Stripe (payment processing)
- Resend (email delivery)
- EU-based cloud infrastructure
6. Data Retention
- Account data: until account deletion
- Assessment reports: 2 years
- Payment data: 7 years (legal obligation)
- Log files: 90 days
7. Your Rights (GDPR)
You have the right to:
- Access your data
- Correct inaccurate data
- Erasure (“right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing
To exercise your rights: privacy@ariston.gr
9. Security
We use TLS/SSL encryption, data encryption at rest, regular security audits, and limited staff access to data.
10. Contact
Data Protection Officer: privacy@ariston.gr
Data Protection Authority: www.dpa.gr (HDPA)
Back to Home
Last updated: March 2026