We collect little. We share nothing. Your data stays yours.

The controller

Praxis Ab Machina is a sole-proprietorship AI automation studio founded and operated by Ioannis Karygiannis, based in Athens, Greece. For GDPR purposes, Ioannis Karygiannis is the data controller.

Contact: [email protected] · Athens, Greece · EU

Data we actually collect

We do not collect names, emails, or any personally identifiable information unless you send us a message directly. The only automatic data collection on this website is Google Analytics.

We do not use cookies beyond the Google Analytics measurement cookie (_ga, _ga_*). We do not run advertising pixels, tracking scripts, or third-party chat widgets.

The purpose

• Analytics - to understand which pages are useful and how visitors find us, so we can improve the site.
• Contact messages - to respond to enquiries and evaluate project fit. We do not add you to any mailing list.
• Server logs - infrastructure security and debugging only. Auto-purged after 7 days.

Why we're allowed to

Under GDPR Article 6, the legal bases we rely on are:

• Legitimate interests (Art. 6(1)(f)) - for Google Analytics. We have a legitimate interest in understanding website traffic. This interest does not override your right to opt out (see section 08).
• Consent (Art. 6(1)(a)) - for any optional cookies or tracking we may add in the future. We will ask explicitly before setting them.
• Contract performance (Art. 6(1)(b)) - for processing contact enquiries to assess and fulfil service requests.

Who touches your data

We do not sell, rent, or trade your data. We use the following sub-processors:

• Google LLC - Google Analytics 4. Data may be processed in the US under Google's Standard Contractual Clauses. Google Analytics IP anonymisation is enabled. Google Privacy Policy ↗
• Railway Inc. - website hosting. Our service runs on Railway's EU-region infrastructure. Railway Privacy Policy ↗
• Google Workspace - email received at [email protected] is processed by Google. A Data Processing Addendum (DPA) is in place.

No other third parties receive your data.

How long we keep it

• Google Analytics - data retention is set to 14 months inside GA4, after which it is automatically deleted.
• Contact messages - we retain email correspondence for up to 3 years for business continuity. You may request deletion at any time.
• Server logs - automatically deleted after 7 days.

What you can ask us to do

As an EU/EEA resident, you have the following rights under GDPR. To exercise any of them, email [email protected]. We will respond within 30 days.

• Access - request a copy of the personal data we hold about you.
• Rectification - ask us to correct inaccurate data.
• Erasure ("right to be forgotten") - request deletion of your personal data where there is no overriding legal reason to retain it.
• Restriction - ask us to limit how we use your data while a dispute is resolved.
• Portability - receive your data in a structured, machine-readable format.
• Objection - object to processing based on legitimate interests, including analytics.
• Lodge a complaint - you may contact the Hellenic Data Protection Authority (HDPA) at dpa.gr ↗.

How to stop analytics

You can prevent Google Analytics from collecting data about your visit by any of the following methods:

• Install the Google Analytics Opt-out Browser Add-on ↗ (available for all major browsers).
• Enable "Do Not Track" in your browser settings - we honour this signal.
• Use a browser extension such as uBlock Origin that blocks the Google Analytics script (gtag/js).

None of these methods affect the functionality of this website in any way.

Reach the controller

For any privacy-related query, data subject request, or DPA enquiry:

• Email - [email protected]
• Subject line - include "GDPR" or "Privacy" for faster routing
• Location - Athens, Greece · European Union

If you are a business partner or processor requiring a Data Processing Agreement (DPA), please email us with your DPA template or request ours. We sign DPAs for all sub-processors that handle personal data on our behalf.

When this changes

We may update this policy as our tools or practices change. Material changes will be reflected in the "Updated" date at the top of this page. We will not retroactively apply new practices to data collected under previous terms.