Privacy Policy

The controller of your personal data — the party that decides why and how it is processed — is:

We are not required to appoint a Data Protection Officer under Article 37, and have not done so. Every request reaches us directly at the address above.

This policy applies to iwishchicevents.com and to enquiries made through it. Our use of cookies and similar technologies is set out separately and in full in our Cookie Policy.

It does not cover third-party sites we link to — our Instagram, Pinterest and Facebook pages are governed by Meta’s and Pinterest’s own policies once you leave this site.

When you make an enquiry

Our contact form asks for the following. Only your name and email address are needed to reply; everything else helps us answer usefully, and you are free to leave it out.

• Your full name
• Your email address
• The type of event you are planning
• The date you have in mind
• The location or venue
• The expected number of guests
• Your estimated investment range
• Anything you choose to tell us in the message field

Please do not include information about health, religious belief or other special categories under Article 9 in the message field. If details of that kind become genuinely relevant to planning your event, we will ask for them separately and explain how they will be handled.

When you press send, we also process the moment the page was loaded and the IP address the request came from. They serve one purpose — telling an automated submission apart from a real one. They live only in the server’s working memory, they are never attached to your enquiry, and we keep no record of them beyond the ordinary server logs described below.

When you simply visit

Our host records standard server information — IP address, browser type, the page requested and the time — as an ordinary part of delivering the site and keeping it secure. We also count page views in aggregate, and, if you have agreed to it, measure how our films play. Neither builds a profile of you and neither is combined with anything you send us. The full detail is in the Cookie Policy.

Every use of personal data needs a lawful basis under Article 6. Ours are:

We do not sell, rent or trade personal data, and we do not share it for anyone else’s marketing. A small number of service providers process data on our behalf, under contract, and only on our instructions:

We will also disclose data where the law requires it, or to establish or defend a legal claim.

Some of the providers above are established in the United States, so personal data may be transferred outside the European Economic Area. Those transfers rely on the safeguards in Chapter V of the GDPR — the European Commission’s standard contractual clauses and, where the provider is certified, the EU–US Data Privacy Framework. A copy of the safeguards relied on is available on request.

• Enquiries that do not proceed — up to two years from our last exchange, so we can pick up a conversation where it left off, then deleted.
• Delivery records at our email provider — thirty days, after which they are deleted automatically.
• Enquiries that fail to send — if delivery of your message fails, its contents are written to our server logs so that it is not simply lost, and are held there for the same short period as the rest of those logs.
• Client records — for the duration of our engagement and for as long afterwards as a claim could be brought.
• Accounting records — for the period Greek tax law requires.
• Your cookie choices — six months, held on your device only.
• Server logs — a short period set by our host, for security and diagnostics.

Under Articles 15 to 22 of the GDPR and Greek Law 4624/2019 you have the right to:

• Access — ask what we hold about you and receive a copy.
• Rectification — have anything inaccurate or incomplete corrected.
• Erasure — ask us to delete what we hold, where no legal obligation requires us to keep it.
• Restriction — ask us to pause processing while a dispute about it is resolved.
• Portability — receive the data you gave us in a structured, machine-readable form.
• Objection — object to anything we do on the basis of legitimate interest, including our aggregate statistics.
• Withdrawal of consent — withdraw consent at any time, as easily as it was given, without affecting what was lawful beforehand.

Write to contact@iwishchicevents.com and we will respond within one month, as Article 12(3) requires. Exercising these rights is free; we may ask you to confirm your identity first, so that we do not hand your data to someone else.

You may lodge a complaint with the supervisory authority at any time, and you do not have to raise it with us first — though we would rather you did, so we can put it right.

We do not profile you, and no decision producing legal or similarly significant effects is taken about you by automated means. Every reply you receive from us is written by a person.

There is one automated step, and we would rather name it than leave it implied: submissions to our contact form that carry the signatures of an automated tool are filtered out before they reach us. The test looks only at how the form was submitted — never at who you are or at what you wrote. If you have written to us and heard nothing, that filter is the likeliest explanation; email or telephone us at the details above and you will reach a person.

The site is served over encrypted connections throughout. Access to enquiries and to the content system is limited to those who need it and protected by individual accounts. No system is perfect, but we take the measures appropriate to the sensitivity of what we hold, as Article 32 requires.

This site is intended for adults planning events. We do not knowingly collect data from children. If you believe a child has sent us personal data, write to us and we will delete it.

We update this page when what we do changes. The date at the top always reflects the current version, and material changes to how we use your data will be brought to your attention rather than left to be discovered.