Clear use. Limited purpose.

Information we receive

We receive the identity, email address, country, inquiry message and selected response methods that you submit. Depending on the inquiry, this may also include a surname, business name, contact-person name, optional sector, and a mobile number when you select Phone call, SMS or WhatsApp. Cloudflare also processes limited network and verification data needed to protect the form.

Why we use it

We use the information only to review and respond to your request, send a transactional receipt confirmation and protect the form from abuse. Depending on the inquiry, the legal basis is taking steps at your request before a possible contract under Article 6(1)(b) GDPR, or our legitimate interests under Article 6(1)(f) GDPR in responding to business enquiries and protecting the service. It is not used for marketing.

The required Privacy Notice acknowledgement confirms that you have read this notice. It is not consent to marketing or the legal basis for processing the inquiry.

What you need to provide

Fields marked with an asterisk are required so that we can identify, review and respond to the inquiry. Without them, the form cannot be sent. Sector of activity and phone-based contact methods are optional. A mobile number is required only if you choose Phone call, SMS or WhatsApp.

Where it goes

The website uses Cloudflare for hosting, security verification, rate limiting and transactional email delivery. The operational inbox is provided through Google Workspace. No website CRM or inquiry database is used.

Cloudflare and Google operate internationally, so information may be processed outside the European Economic Area. Any such transfer must be covered by an applicable adequacy decision or appropriate safeguards, such as the European Commission's Standard Contractual Clauses. GCS+ verifies the terms and safeguards that apply to these services before using the inquiry form in production.

Retention

Inquiries that do not become client engagements are scheduled for deletion from the operational mailbox 12 months after the last meaningful communication. If an inquiry becomes a client engagement, the applicable contract and legal retention schedule takes over. Limited provider security and delivery records follow the providers' documented retention periods.

Your choices and rights

You may contact info@gcsplusgroup.com to request access, correction, deletion or restriction. You may object where processing relies on legitimate interests, and data portability may apply where processing is automated and based on pre-contractual steps. These rights are subject to the conditions and exceptions in applicable law. We normally respond within one month after receiving a valid request.

If you believe your information has been handled unlawfully, you may raise a complaint with the Hellenic Data Protection Authority.

Contact methods

Email is used for the receipt confirmation. If you select Phone call, SMS or WhatsApp, GCS+ may use the mobile number you provide to respond to this inquiry through those selected methods.

Security decisions

Cloudflare security checks and rate limits may automatically block or delay a submission that appears abusive. GCS+ does not use inquiry data for profiling or for solely automated decisions that produce legal or similarly significant effects.