How this site handles your information

Who is responsible

Nikolaos Karamousalidis, Thessaloniki, Greece, acts as the data controller for this site. You can reach him through the contact form on the home page for any question about this policy or to exercise the rights listed below.

What is collected, and when

The site's interactive features use the following information.

• Contact form — your first name, last name, email address, message, and the time you submitted it. These are used only to receive and answer your enquiry.
• Abuse prevention — form and assistant requests use temporary counters keyed by your IP address or IPv6 network prefix. Contact requests also use a hash of your email address. These help limit automated requests.
• AI assistant — your question and up to three recent completed exchanges are sent through OpenRouter to the selected model provider, together with relevant portfolio and publication excerpts, to generate a response. When semantic search is configured, your question and bounded recent conversation excerpts are also sent to Qdrant to find relevant passages. Avoid entering confidential information.
• Analytics — if you accept analytics, aggregate page views are recorded. These cannot identify you.
• Browser storage — your theme choice and your cookie decision are saved in your own browser and never sent to a server.

Why it is collected

Contact details are processed to respond to an enquiry you started. Rate limiting relies on a legitimate interest in keeping the site available and free of spam. Analytics and the AI assistant run on the basis of your consent, which you can withdraw at any time.

Who processes data on my behalf

These providers only act on instructions, and only for the purposes above. Some may process data outside the European Economic Area under the safeguards their terms provide.

• Vercel — hosting and, if you accept it, privacy-friendly web analytics.
• Resend — delivery of contact-form emails, including the copy sent to your own address.
• Upstash — temporary rate-limit counters, contact submissions, and email-delivery tracking. The assistant's public reference material is included with the website build.
• OpenRouter and the selected model provider — processing assistant questions and recent conversation context.
• Qdrant, when configured — storing public portfolio and publication passages and generating embeddings for semantic and keyword search. Search requests can contain recent conversation excerpts. Free hosted embedding models may process data in the United States.

How long it is kept

Contact submissions and delivery records in Upstash expire after seven days. Rate-limit counters expire within two days with the current configuration. Emails in inboxes may be kept longer to handle enquiries and follow-ups. The site keeps assistant messages in browser memory until a reload and does not save them in its database. Qdrant stores publication and portfolio indexes until they are removed. Qdrant and AI providers apply their own data-handling and retention terms to requests.

Your rights

Under the GDPR you can ask for a copy of your data, ask for it to be corrected or deleted, object to or restrict how it is used, and ask for it in a portable form. Use the contact form and the request will be answered without undue delay. If you believe your data has been mishandled you can also complain to the Hellenic Data Protection Authority.

Children

This site is aimed at a professional audience and is not directed at children under 16.

Changes

If this policy changes, the date at the top of this page changes with it. Material changes will be reflected in the consent banner so you can make a fresh choice.