Privacy Policy

Last updated: May 2026

This Privacy Policy explains how XRdesignEd ("we," "us," or "our") collects, uses, and protects your personal data when you visit our website at [xrdesigned.com](https://www.xrdesigned.com) or contact us through our contact form. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) (EU) 2016/679.

1. Who We Are

Data Controller:

XRdesignEd

Email: m.ananiadou@xrdesigned.com

Tel: +306977222140

Website: xrdesigned.com

If you have any questions about how we handle your personal data, please contact us at the email address above.

2. What Data We Collect

When you submit our contact form, we collect the following personal data:

- First name and last name

- Email address

- Your message

We do not collect any sensitive personal data (e.g. health data, financial data) through our website.

3. Why We Collect Your Data (Legal Basis)

We collect and process your personal data for the following purposes:

Purpose Legal Basis

Responding to your enquiry or message Legitimate interest (Art. 6(1)(f) GDPR)

Communicating with you about our VR services Legitimate interest Pre-contractual steps (Art. 6(1)(b) GDPR)

|Compliance with legal obligations Legal obligation (Art. 6(1)(c) GDPR)

We will never use your data for purposes incompatible with the ones stated above.

4. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected:

Contact form submissions: retained for up to 2 years from the date of your last communication with us, unless a longer retention period is required by law or by an ongoing business relationship.

After this period, your data is securely deleted or anonymized.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data to third parties.

We may share your data with the following trusted partners solely to the extent necessary to provide our services:

- Edstutia Campus - our learning platform partner

- Campus-XR - our immersive environment partner

- Hostinger - our website hosting provider (data processed within the EU/EEA)

All third parties we work with are required to handle your data in compliance with applicable data protection law.

6. International Transfers

Our website is hosted within the European Union. We do not knowingly transfer your personal data outside the EU/EEA unless appropriate safeguards are in place (e.g. Standard Contractual Clauses).

7. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

- Right of access - you can request a copy of the personal data we hold about you

- Right to rectification - you can ask us to correct inaccurate or incomplete data

- Right to erasure ("right to be forgotten") - you can ask us to delete your personal data

- Right to restrict processing - you can ask us to limit how we use your data

- Right to data portability - you can request your data in a structured, machine-readable format

- Right to object - you can object to processing based on legitimate interests

- Right to withdraw consent - where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at: m.ananiadou@xrdesigned.com

We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA):

- Website: [www.dpa.gr](https://www.dpa.gr)

- Tel: +30 210 6475600

8. Cookies

Our website may use cookies and similar tracking technologies to improve your browsing experience and analyse site traffic.

Types of cookies we may use:

- Strictly necessary cookies - required for the website to function (no consent needed)

- Analytics cookies - help us understand how visitors interact with our site (requires your consent)

You can control cookies through your browser settings at any time. Disabling cookies may affect some features of the website.

By continuing to use our website, you consent to our use of cookies in accordance with this policy.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. Our website is hosted on a secure platform with HTTPS encryption.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will always reflect the most recent version.

We encourage you to review this page periodically.

11. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

XRdesignEd

📧 m.ananiadou@xrdesigned.com

📞 +306977222140

🌐 xrdesigned.com

GDPR