ORDER
ΕΛENAll designsWeddingChristeningWedding & ChristeningPartyPricesHow it worksBlog & tipsFAQContact ORDER

Privacy policy

LAST UPDATED · 19 OCTOBER 2026

This is an English translation of our privacy policy in Greek. In case of any discrepancy between the two versions, the Greek version prevails.

This policy explains which personal data we process in two situations: when you order an Event Website on day2remember.gr, and when, as a Guest, you open an Event Website and reply to the invitation. The General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Greek Law 4624/2019 apply.

01Controller

A. Alatsatianos - A. Panagiotou O.E. (Α. ΑΛΑΤΣΑΤΙΑΝΟΣ - Α. ΠΑΝΑΓΙΩΤΟΥ Ο.Ε.), trading as Day2Remember. VAT/Tax ID 802609083, General Commercial Registry (G.E.MI.) no. 179494803000. For any privacy matter: hello@day2remember.gr.

As regards Guests’ replies: we process them in order to provide the service to the Customer, that is, the host of the event. The Customer decides whom to invite and what to publish. The Customer is responsible for whatever they themselves do with the replies they receive.

02What data we process

2.1 Customers

  • Contact details: full name, email, phone number.
  • Details of the event: names (for example of the couple, the child, the parents, the koumbaroi (wedding sponsors) or the godparents), dates, times, venues, texts, and choices of design, fonts, RSVP answers and music.
  • Photos you choose to send us. They may also show other people, including minors.
  • IBAN, account holder’s name and bank, only if you choose to have them shown on your page.
  • Order details: order code, Package, Extras, amount, payment status and time, the time of your statement of consent to the start of work, and the Stripe transaction ID. Card details are processed directly by Stripe. We do not see them.
  • Our correspondence, for example corrections and requests, and messages sent through the contact form.

2.2 Guests

  • What you enter in the RSVP form: name, answer, number of adults and children, optional message.
  • Technical data of each visit, such as IP address, browser type and time. These are processed by our hosting provider to operate and protect the page. We do not use them for statistics or advertising.

Please do not include sensitive data in your RSVP message. If you mention something of this kind, for example a dietary requirement, we send it only to the host and only for that purpose.

03Purposes and legal bases

  • Creating, previewing, publishing and supporting the Event Website: performance of the contract and steps taken at your request before entering into it (Article 6(1)(b) GDPR).
  • Payment, invoicing and tax obligations: performance of the contract and legal obligation (Article 6(1)(b) and (c)).
  • Publishing photos and IBAN: at your own choice, within the framework of the contract. For the people shown, the Customer confirms that they have their consent, or the parents’ consent for minors (Terms of use, section 9).
  • Recording RSVP replies and sending them to the host: the legitimate interest of the host in organising their event, and our own in providing the feature they requested (Article 6(1)(f)). Guests reply voluntarily.
  • Answering messages sent through the contact form: steps prior to entering into a contract, or legitimate interest (Article 6(1)(b) and (f)).
  • Visitor statistics for day2remember.gr (Google Analytics): only with your consent (Article 6(1)(a) GDPR and Article 4(5) of Greek Law 3471/2006). You can withdraw it at any time through the “Cookies” link at the bottom of every page.
  • Security, prevention of abuse and defence of legal claims: legitimate interest (Article 6(1)(f)).

We do not sell data. We do not use it for advertising. We do not create profiles for advertising purposes. We do not make automated decisions. We send newsletters only with your consent.

04Providers we use

Data is seen only by those who need it for the service. We work with the following providers:

  • Cloudflare, Inc. (USA): hosting of day2remember.gr and of the Event Websites, running the application, the database of orders and RSVP replies (Cloudflare D1), protection against attacks, and forwarding of the emails you send to @day2remember.gr addresses.
  • Brevo (Sendinblue SAS, France): sending the service emails, such as order and payment confirmations and notifications of new RSVP replies. If Brevo is unavailable, the email is sent instead through Resend (USA).
  • Stripe (Stripe Payments Europe, Limited, Ireland, and affiliated companies): payments and payment receipts. For fraud prevention and its regulatory obligations, Stripe acts as an independent controller, under its own privacy policy.
  • Google (Google Ireland Limited): Gmail, where our correspondence with you arrives. Google Analytics, only on day2remember.gr and only if you accept it. Also, only if the host chooses a song from YouTube, the YouTube player (section 9).
  • Our accountant, for issuing tax documents and for our tax obligations.

Data processing agreements (Article 28 GDPR) are in place with the providers that process data on our behalf. Data may also be disclosed to public authorities where the law requires it.

Whatever the Customer publishes on the Event Website, such as names, photos or IBAN, can be seen by anyone with the link. The page does not appear in search engines (noindex), but it is not password-protected. RSVP replies are not shown on the page. Only we and the host can see them.

05Transfers outside the EEA

Cloudflare, Resend and, for certain functions, Google and Stripe also process data outside the European Economic Area, mainly in the USA. These transfers take place with the safeguards of Articles 44 et seq. GDPR:

  • the adequacy decision for the EU–US Data Privacy Framework, where the provider is certified;
  • the Standard Contractual Clauses of the European Commission.

For more information, write to us at hello@day2remember.gr.

06How long we keep data

  • Event Website and RSVP replies: for as long as the Event Website is online, that is, until the event and, after it, 5 days with Silver, 10 days with Gold or one year with Atelier. On expiry the Event Website closes. Replies are deleted automatically within the following 24 hours. Database backups delete themselves within 30 days.
  • Emails with RSVP replies: those sent to the host are then in the host’s own mailbox, which we do not control. The email providers keep sending logs for a limited time, in accordance with their terms.
  • Unpaid orders: deleted automatically 30 days after submission.
  • Atelier orders (by quote): kept while we discuss the quote. The event details are deleted automatically one year after the event, as with paid orders.
  • Paid orders: the event details in the order, such as names, texts and IBAN, are deleted automatically one year after the event. For tax law purposes we keep only the full name, email, Package, amount, dates and tax documents. We keep them for as long as the law requires, as a rule 5 years from the end of the financial year, or longer if the law so provides.
  • Photos and correspondence: deleted together with the Event Website, except for whatever is needed for invoicing or for the defence of legal claims.
  • Technical logs: for a short period, in line with the hosting provider’s settings. To protect our forms from abuse, we keep a cryptographic fingerprint (hash) of the IP address of each submission, not the address itself, for up to 24 hours.

You may ask for the Event Website and the replies to be deleted earlier.

07Your rights

You have the right:

  • of access to your data and to receive a copy;
  • to rectification of inaccurate data;
  • to erasure;
  • to restriction of processing;
  • to portability of the data you gave us;
  • to object to processing based on legitimate interest;
  • to withdraw consent, where processing is based on it. Withdrawal does not affect processing carried out before it.

Write to us at hello@day2remember.gr. We reply within one month. This period may be extended as provided by the GDPR. We may ask you for information confirming that the request is yours.

If you are a Guest and wish to correct or delete your reply, write to us or to the host. If the request concerns a photo published by the host, we will pass it on to the host and, if necessary, remove the photo.

08Complaints to the supervisory authority

If you believe that the processing breaches the law, you may lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifisias Avenue, 115 23 Athens, www.dpa.gr, or with the competent authority of your own country.

09Cookies and similar technologies

Event Websites (for example maria-giorgos.day2remember.gr) do not use statistics, advertising or tracking cookies (Cloudflare’s aggregate statistics, described below, work without cookies). Only what is strictly necessary is used, which does not require consent (Article 4(5) of Greek Law 3471/2006):

  • Cloudflare security cookies, for protection against bots and attacks;
  • temporary storage in the browser (sessionStorage), so that the envelope opening is shown only once and your music choice is remembered. It is cleared when you close the tab.

On day2remember.gr, only if you press “ACCEPT”, we use Google Analytics 4 from Google Ireland Limited to measure visits, pages and traffic sources. Google Analytics stores the cookies _ga and _ga_V2FKHESK12, for up to 2 years, and processes your IP address, browser, device and the pages you view. Google may also process data in the USA, on the basis of the EU–US Data Privacy Framework. We do not use advertising features. If you press “DECLINE” or make no choice, Google Analytics does not load at all. We keep your choice in your browser (localStorage) for 6 months, and you can change it at any time through the “Cookies” link at the bottom of the page.

On all pages, including the Event Websites, we use Cloudflare Web Analytics from Cloudflare, Inc. to measure, in aggregate, how many visits each page receives and how fast it loads. It stores no cookies or other information on your device, uses no identifiers to recognise you from one visit to the next and creates no profiles. The legal basis is our legitimate interest in knowing whether the pages work properly (Article 6(1)(f) GDPR).

In the order form, what you enter is kept temporarily in your browser (sessionStorage), so that it is not lost if you go back, open the terms or return from the payment page: all the fields of the form, including names, email, phone number and IBAN, the step of the form and which sections are open. This data applies only to that tab, does not reach us before you press send, and is cleared when the order is completed or when you close the tab.

Fonts are loaded from our own servers. No page requests them from Google.

If the host has chosen a song from YouTube, the page, as soon as it opens, loads the YouTube player code from youtube.com and the player itself in privacy-enhanced mode (youtube-nocookie.com). Google then receives your IP address and technical details of your browser, in accordance with its own policy. Songs from our own library play from our own servers.

Links to Google Maps open the maps only if you click them. The payment page belongs to Stripe, which uses its own cookies for payment security and fraud prevention.

10Security

The connection is always encrypted (HTTPS). Access to data is restricted, and deletion takes place automatically after expiry. Provider keys are stored encrypted. No method is completely secure. Please remember that anyone with the link can see the Event Website.

11Minors

Only adults may place an order. Photos or details of minors, for example at a christening or a party, are published only at the choice and under the responsibility of those exercising parental responsibility.

12Changes

We may update this policy. The date at the top shows the latest change. For significant changes, we inform by email the Customers who have an active Event Website.

13Contact

A. Alatsatianos - A. Panagiotou O.E. (Α. ΑΛΑΤΣΑΤΙΑΝΟΣ - Α. ΠΑΝΑΓΙΩΤΟΥ Ο.Ε.), trading as Day2Remember. Email: hello@day2remember.gr.