GDPR

Privacy Policy

Last updated: October 2026

This Privacy Policy describes how XRdesignEd collects, uses and protects personal data when you visit our website, contact us, or use the available communication and meeting scheduling features.

XRdesignEd is committed to protecting privacy and personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek legislation.

1. Data Controller

The Data Controller is:

XRdesignEd

Email: m.ananiadou@xrdesigned.com
Telephone: +30 6977222140
Website: xrdesigned.com

For any questions concerning the processing of your personal data, you may contact us using the email address above.

2. Personal Data We Collect

Depending on how you use the website, we may process the following personal data:

Through the contact form:

• first and last name,

• email address,

• the content of your message.

When scheduling a meeting:

When you choose to schedule a meeting through the relevant link, you may be asked to provide information necessary to arrange the meeting. This service is provided through Microsoft Bookings and is also subject to Microsoft's applicable terms and data protection policies.

Technical data:

The website may process limited technical data necessary for its security and proper operation.

We do not request special categories of personal data, such as health data, through the website.

3. Purposes and Legal Basis for Processing

We process personal data only where there is a legitimate purpose and an appropriate legal basis.

Personal data may be used for:

• responding to enquiries or contact requests,

• providing information about XRdesignEd's services,

• scheduling meetings,

• taking pre-contractual steps at the request of a prospective client or partner,

• complying with contractual or legal obligations,

• maintaining the security and proper operation of the website.

Depending on the circumstances, processing is based on Article 6(1) of the GDPR, in particular on pre-contractual or contractual measures, legitimate interests, legal obligations, or consent where required.

4. Data Minimisation

XRdesignEd applies the principle of data minimisation and aims to collect only the personal data necessary for the relevant purpose.

In educational activities conducted through partner VR platforms, we also seek to minimise the identifying information relating to learners.

5. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected and in accordance with any applicable legal obligations.

Information received through the contact form may be retained for up to two (2) years following the last meaningful communication, unless there is an active business relationship, contractual relationship, legal obligation or another lawful reason requiring a different retention period.

After the applicable retention period has expired, the data is securely deleted or appropriately anonymised.

6. Service Providers and Recipients of Data

We do not sell or trade personal data.

For the operation of our website and services, we may use external service providers that process data only to the extent necessary to provide the relevant services.

These may include:

• website hosting and technical service providers,

• Microsoft, when a visitor uses Microsoft Bookings to schedule a meeting,

• other technical service providers necessary for the security or operation of the website.

Partner educational and VR platforms are used within the context of specific educational or professional projects. The processing of personal data in connection with such projects is assessed according to the particular service, the role of each party involved and the data actually processed.

7. International Data Transfers

Certain technical service providers may process data outside the European Economic Area.

Where such transfers take place, the mechanisms and appropriate safeguards required by applicable data protection legislation are used where necessary.

8. Cookies and Similar Technologies

The website may use strictly necessary cookies required for its proper and secure operation.

Any non-essential cookies or similar technologies, such as analytics cookies or other optional tracking technologies, are activated only after the visitor has provided the required consent through the website's cookie management mechanism.

Visitors may accept or reject optional cookies and, where available, select individual categories according to their preferences.

Consent may be withdrawn or changed at any time through the available cookie settings.

Further information is provided in the website's Cookie Policy.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, destruction or disclosure.

The website uses a secure HTTPS connection.

Access to professional files and accounts is restricted to authorised persons, and appropriate security measures are applied according to the nature of the data.

10. Your Rights

Under the GDPR and subject to the conditions provided by applicable law, you may have the right to:

• access your personal data,

• correct inaccurate personal data,

• request erasure of your personal data,

• restrict the processing of your personal data,

• object to processing,

• data portability,

• withdraw your consent where processing is based on consent.

To exercise your rights, you may contact us at:

m.ananiadou@xrdesigned.com

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).

11. Changes to this Privacy Policy

This Privacy Policy may be updated when our services, the technologies we use or applicable legal requirements change.

The date of the latest update is displayed at the beginning of this Privacy Policy.

12. Contact

For any questions regarding this Privacy Policy or the processing of your personal data:

XRdesignEd
Email: m.ananiadou@xrdesigned.com
Telephone: +30 6977222140
Website: xrdesigned.com