Privacy Policy

01Who we are

IRIDA AI Technologies (“IRIDA”, “we”, “us”) is the data controller responsible for the personal information processed through this website.

Our registered office is at Leoforos Spaton 45, 153 44 Gerakas, Attika, Greece. You can reach us at any time through our contact form, by phone at +30 210 6852605, or by post at this address.

02Information you choose to share with us

When you use this website, you may choose to share personal information with us in three ways:

• General enquiries — your name, email address, company (optional), area of interest and message, used to respond to your enquiry.
• Careers applications — your name, email address, phone number (optional), area of interest, message and CV, used exclusively to evaluate your application and contact you about potential opportunities. Your CV is stored securely, is accessible only to authorized IRIDA team members through protected, non-public links, and is never published or shared for any other purpose.
• Website assistant — the questions and messages you type into the chat assistant, used to answer you.

03Information processed automatically

To protect our forms from spam and abuse, we use Cloudflare Turnstile, which processes technical information such as your IP address and browser characteristics to distinguish human visitors from automated systems.

Our hosting infrastructure also processes standard technical logs (such as IP address, browser type and pages visited) that are necessary to operate and secure the website. We do not use advertising trackers and we do not build marketing profiles.

04Why we are allowed to process your data (legal bases)

• Responding to your requests — processing is necessary to handle your enquiry or application at your request (Article 6(1)(b) GDPR).
• Your consent — by submitting a careers application you consent to the processing of your information for recruitment purposes (Article 6(1)(a) GDPR). You may withdraw this consent at any time; withdrawal does not affect processing already carried out.
• Legitimate interests — keeping the website secure, preventing spam and abuse, and operating our services (Article 6(1)(f) GDPR).

05Who processes data on our behalf

We use a small number of service providers who process personal information on our behalf and under our instructions: our cloud hosting provider, our email delivery service (used to deliver enquiries and applications to our team), Cloudflare (spam protection), and an artificial-intelligence provider (for the website assistant). Each provider may process only what is necessary to deliver its service to us.

We never sell your personal information, and we do not share it with third parties for their own marketing.

06International transfers

Some of these service providers may process information outside the European Economic Area. Where this happens, transfers are protected by appropriate safeguards, such as European Commission standard contractual clauses.

07How long we keep your information

• Careers applications and CVs — automatically deleted 90 days after submission.
• General enquiries — kept for as long as necessary to handle your enquiry and any resulting business relationship.
• Website assistant conversations — kept only for as long as necessary to operate the service.
• Technical logs — retained for short periods for security and troubleshooting.

08Your rights

Under the General Data Protection Regulation, you have the right to:

• Request access to the personal information we hold about you.
• Request correction or deletion of your information.
• Request restriction of, or object to, certain processing.
• Request a copy of your information in a portable format.
• Withdraw your consent at any time, where processing is based on consent.
• Lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) if you believe your rights have been violated.

To exercise any of these rights, contact us through our contact form, by phone or by post. We respond without undue delay.

09How we protect your information

We protect personal information with encryption in transit (HTTPS), strict access controls, protected non-public storage for application documents, and anti-abuse measures on all public forms. Access to personal information is limited to authorized team members who need it for the purposes described above.

10Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the date of the latest revision shown above.