Last updated: 6/9/2026

Alpha Omega Research & Consulting (ΑωRC), an NGO headquartered at Kamvisi 7, Zografou, Athens, Greece ("ΑωRC", "we", "us"), is committed to protecting your privacy. This Privacy Policy explains what personal data we collect through alpha-omega-rc.org, how we use it, and your rights under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Greek Law 4624/2019.

If you have any questions about this Policy or how we handle your data, please contact us.


1. Who is the Data Controller

ΑωRC is the data controller for personal data processed through this website, except where stated otherwise (e.g. donations processed by Stripe, or newsletter distribution via Brevo — see below).

  • Name: Alpha Omega Research & Consulting

  • Address: Kamvisi 7, Zografou, Athens, Greece

  • Contact: alpha.omega.rnc@gmail.com / alpha-omega-rc.org/contact-us


2. What Personal Data We Collect and Why

a. Website Analytics (dynamic content)

We use the built-in statistics tool provided through our blogging platform ("Blogger"), which relies on cookies from Google to generate traffic statistics for the dynamic sections of our website. This tells us things like page views, approximate country of visitors, browser and device type, and search engine keywords used to find the site. In the process, your IP address and user agent are disclosed to Google, along with performance and security metrics, so that Google can help ensure quality of service, generate usage statistics, and detect and address abuse.

We do not run a separate Google Analytics tracking script, and we never sell this data to any third party. However, because this involves Google reading data from your device, it still requires your prior consent under EU cookie rules — it is only activated after you check the box and click "Save" in the cookie banner, and is not loaded before that.

  • Legal basis: Consent (Art. 6(1)(a) GDPR)

  • Data shared with: Google LLC — see how Google uses cookies and Google's Privacy Policy

  • International transfer: Data may be transferred to the United States under Google's Standard Contractual Clauses.

  • Your choice: You may decline this and continue using the website normally — analytics cookies are optional, not required for the site to function.

b. Hosting & Content Delivery

Our website is hosted on Vercel and served/protected through Cloudflare (CDN, DNS, and security). These providers process limited technical data (e.g. IP address, request logs) as necessary to deliver and secure the website. Some Cloudflare cookies are strictly necessary for security (e.g. bot mitigation, load balancing) and are not subject to consent.

  • Legal basis: Legitimate interest in operating a secure, functioning website (Art. 6(1)(f) GDPR)

  • Processors: Vercel Inc., Cloudflare Inc. (both may process data outside the EEA, under Standard Contractual Clauses)

c. Donations (Stripe)

On our /donate page, the donation form is an embedded iframe hosted directly by Stripe (donate.stripe.com). ΑωRC does not collect, see, or store your payment card details or billing information — these are submitted directly to Stripe.

  • Stripe acts as an independent data controller for the payment data you provide in that form. Stripe's own Privacy Policy governs how they handle your payment information.

  • ΑωRC may separately receive confirmation that a donation was made (e.g. amount, date, donor name/email if you choose to share it with us), which we use only to acknowledge your donation and for our financial/accounting records.

  • Legal basis: Performance of a transaction you initiate (Art. 6(1)(b) GDPR) and legal obligation (accounting records).

d. Newsletter

If you subscribe to our newsletter, a separate policy applies: Privacy Policy of the ΑωRC Newsletter. This is shown and linked directly next to the subscribe form, so you can read it before signing up.


3. Cookies

Category

Purpose

Provider

Consent required?

Strictly necessary

Site security, load balancing, bot protection

Cloudflare

No

Analytics

Understand usage of dynamic content (page views, country, browser, search keywords)

Google (via Blogger statistics)

Yes (opt-in)

Payment

Fraud prevention within the embedded donation form

Stripe (only on /donate)

Disclosed; loads only if you use the form

You can withdraw or change your cookie consent at any time via the "Cookie Settings" link in the website footer. Rejecting analytics cookies does not affect your ability to use the website.


4. Legal Bases for Processing

We only process personal data where we have a valid legal basis: consent (analytics), legitimate interest (site security/operation), contract performance (donations), and legal obligation (accounting records for donations, where applicable).


5. Data Retention

  • Analytics data: retained per Google Analytics' default retention settings.

  • Donation records: retained as required by Greek accounting/tax law (typically several years).

  • Newsletter data: see Privacy Policy of the ΑωRC Newsletter.


6. International Data Transfers

Some of our providers (Google, Vercel, Cloudflare, Stripe, Brevo) are based in, or transfer data to, the United States. Where this occurs, we rely on the providers' Standard Contractual Clauses or equivalent safeguards recognized under GDPR Chapter V.


7. Sharing Your Data

We do not sell your personal data. We share it only with the processors named above, each acting under their own terms/DPA, and only to the extent necessary to operate the website, process donations, or send the newsletter, unless clearly stated otherwise.


8. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate data

  • Request erasure of your data ("right to be forgotten")

  • Restrict or object to certain processing

  • Data portability

  • Withdraw consent at any time (without affecting past lawful processing)

  • Lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), www.dpa.gr

To exercise any of these rights, contact us.


9. Security

We take reasonable technical and organizational measures (e.g. HTTPS, Cloudflare protection) to safeguard your data against unauthorized access, loss, or misuse.


10. Children's Privacy

Our website is not directed at children under 16, and we do not knowingly collect personal data from them.


11. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via the website or, for newsletter subscribers, by email.


12. Contact Us

For any questions about this Policy or your data, please contact us.