Privacy Policy
Last updated: 2026-08-02 · Version: legal-content/v1
This Privacy Policy explains how Nora and Ilias (demo, two private individuals, not a company) (trading as “Nora & Ilias”, “we”, “us”), registered at DEMO-NOT-A-REAL-ADDRESS (a private couple publishes no home address; write to hello@450labs.net), collects, uses and protects your personal data when you visit https://nora-and-ilias.dev.450labs.net, in accordance with the EU General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.
1. Data Controller
The controller of your data is Nora and Ilias (demo, two private individuals, not a company). For any matter relating to your personal data you can contact Nora and Ilias (demo, two private individuals, not a company), reachable at hello@450labs.net or email hello@450labs.net.
2. What data we collect
- Information you give us: your email address and any details you submit through forms (e.g. newsletter signup, contact form, order/booking).
- Technical data: IP address, browser type, pages visited — strictly to the extent necessary to operate and secure the site.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Sending the newsletter / answering enquiries | Consent — Art. 6(1)(a) |
| Fulfilling an order / booking / contract | Performance of a contract — Art. 6(1)(b) |
| Security & correct operation of the site | Legitimate interest — Art. 6(1)(f) |
| Audience statistics | Consent — Art. 6(1)(a) |
4. Recipients & processors
We do not sell your data. We share it only with third-party providers acting as processors on our behalf, under a data-processing agreement (DPA): 450labs (hosting and the RSVP inbox that holds the replies). Where a provider is located outside the EEA, the transfer is covered by Standard Contractual Clauses (SCCs).
5. Retention
We keep your data only for as long as needed for the purposes above or as required by law. Newsletter signup data is kept until you unsubscribe.
6. Your rights (GDPR)
As a data subject you have the following rights, which you can exercise free of charge at hello@450labs.net:
- Access to your data (Art. 15).
- Rectification of inaccurate data (Art. 16).
- Erasure (“right to be forgotten”, Art. 17).
- Restriction of processing (Art. 18).
- Portability of your data (Art. 20).
- Objection to processing (Art. 21).
- Withdrawal of consent at any time, without affecting the lawfulness of prior processing.
You also have the right to lodge a complaint with the competent supervisory authority: the Hellenic Data Protection Authority (HDPA), 1-3 Kifissias Ave., 115 23 Athens, www.dpa.gr.
7. Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.
8. Changes to this Policy
We may update this Policy. The version in force carries the date and version number at the top of the page.
9. Your RSVP
The couple (Nora & Ilias) are the controller of the guest list. The site and the RSVP inbox are run on their instructions by the processors named above, who use your reply for nothing else and never pass it on to anyone the couple has not asked them to.
When you reply through the form we receive your name, your email address, whether you are coming, how many of you are coming, your meal choice, anything you write in the dietary notes, and the names of anyone you bring with you. You can also leave a message for the couple. Only the name, the email address and the yes-or-no are needed; the rest is yours to leave blank.
Dietary notes can say something about your health or your religion. That is why the field is optional and free-text: write only what the kitchen needs to know. What you write goes to the couple and to whoever is cooking, and nowhere else.
The guest list is kept until the wedding is over and the arrangements with the venue are settled, then deleted. To see, correct or delete your reply, write to hello@450labs.net.