myPA
EL EN
Get started
Services ARIS Blog About Contact Get started Client login

Privacy policy

Last updated: September 2026

This Privacy Policy explains how myPA – Personal Assistant Services (“we”, “us”, “the company”) collects and processes personal data through the website mypa.gr (including the /beta version), in line with the EU General Data Protection Regulation (GDPR) and applicable Greek law.

1. Data controller

myPA – Personal Assistant Services
Ethnikis Antistaseos 131, 172 36 Agios Dimitrios, Greece
Email: info@mypa.gr · Tel: +30 211 100 3888

For privacy requests, contact us using the details above or the website contact form.

2. What we do

myPA provides personal-assistance and business-support services for freelancers and SMEs, including:

  • administrative / back-office support,
  • phone answering and cloud telephony,
  • client communication and day-to-day coordination,
  • social media and digital presence,
  • websites and online stores,
  • ARIS booking systems,
  • operational support for growing businesses.

This website is used for information, contact, partnership requests and job applications.

3. Data we collect

We collect data you submit and limited technical data created when you use the site:

3.1 Contact form

  • Name, email, phone (optional), department, message.

3.2 Partnership signup wizard

  • Profession / industry, service needs, team size, selected plan.
  • Full name, business name, email, mobile, company landline (optional), VAT/AFM (optional).
  • How you found us, notes (optional).
  • Form language and IP address (security / anti-abuse).

3.3 Job applications

  • Name, email, phone, cover message, role of interest.
  • CV file (PDF or Word), stored in a protected area and not publicly reachable by direct URL.

3.4 Client login

The “Client login” link opens an external myPA accounts portal. Client login credentials are not collected or stored by this website CMS. That portal has its own access rules.

3.5 Cookies and technical data

  • Essential: session cookie for forms, security (CSRF) and flash messages.
  • Consent preference: stored in your browser (localStorage) so we remember your cookie choice.
  • Analytics (only if you allow it): we may use Google Analytics / Google Tag Manager. Usage statistics (pages viewed, device, approximate location) are then processed under Google’s terms and your consent.

4. Purposes and legal bases

  • Responding to contact or partnership requests: pre-contractual steps or legitimate interest in handling your enquiry (GDPR Art. 6(1)(b) or (f)).
  • Recruitment: pre-contractual steps / legitimate interest in hiring (Art. 6(1)(b) or (f)).
  • Site security and abuse prevention: legitimate interest (Art. 6(1)(f)).
  • Analytics cookies: consent where required (Art. 6(1)(a)).
  • Legal obligations: where the law requires it (Art. 6(1)(c)).

We do not use your data for automated decision-making that produces legal effects.

5. Storage and sharing

Data is hosted in the EU (or with appropriate safeguards where applicable). Processors acting on our instructions may include:

  • website hosting provider,
  • email / SMTP provider for notifications and confirmations,
  • analytics providers (e.g. Google), only if you consented to non-essential cookies.

We do not sell personal data. We share data only when needed to provide the service, with processors under our instructions, or when required by law.

6. Retention

  • Contact messages: up to 24 months after the last exchange, unless a contract or legal duty requires longer.
  • Partnership requests: up to 24 months if no collaboration starts; if it does, according to the contract and accounting/tax rules.
  • Job applications / CVs: up to 12 months after submission or role closure, unless you ask for earlier deletion or consent to longer retention for future roles.
  • Security / rate-limit logs: short periods (usually days to a few weeks).

7. Security

We apply technical and organisational measures such as admin access control, hashed CMS passwords, CSRF protection, submission rate limits, private CV storage and least-privilege access. No system is perfectly secure; if an incident occurs we will act as required by law.

8. Your rights

Subject to GDPR conditions, you may request:

  • access,
  • rectification,
  • erasure,
  • restriction,
  • portability (where applicable),
  • objection to processing based on legitimate interest,
  • withdrawal of consent for analytics cookies, without affecting prior lawful processing.

Contact: info@mypa.gr or the contact form. You may also lodge a complaint with the Greek Data Protection Authority (www.dpa.gr).

9. Children

This site and its forms are intended for adult professionals. We do not knowingly collect data from children under 16.

10. Changes

We may update this page when our services or the law change. The date at the top shows the latest version.

Questions: info@mypa.gr · +30 211 100 3888.