Privacy policy
How we handle your personal data
Last updated: 30 September 2026
1. Who we are
Travel in Art is a non-profit social cooperative enterprise based in Ermoupoli, Syros, Greece. We are the controller of the personal data collected through this website, www.travel-in-art.com (the “site”).
For any question about your data, or to use your rights, write to info@travel-in-art.com or call +30 698 5950952.
2. What we collect, why, and on what basis
We only collect what you choose to send us, plus a few technical details needed to show the site. Here is each case.
Contact form
Data: your name, email address, subject and message.
Why: to read your message and reply.
Legal basis: your consent, given by ticking the privacy box on the form (Article 6(1)(a) GDPR). You can withdraw it at any time.
Kept for: up to 24 months after our last exchange.
Applications (“Submit your CV”)
Data: your name, email address, message and the CV file you attach (PDF, JPG or PNG, up to 5 MB).
Why: to consider your application and get back to you.
Legal basis: your consent, given by ticking the privacy box on the form (Article 6(1)(a) GDPR), and the steps needed, at your request, before an agreement is made (Article 6(1)(b)).
Your file: it is uploaded only when you press send with the privacy box ticked. It is stored in a private folder on Google Drive, open only to the people who handle applications.
Kept for: up to 12 months after the selection ends, unless you ask us to keep it longer or to delete it sooner.
When you visit the site
Data: your IP address, browser and device type, the pages you open and the time of your visit.
Why: to deliver the site, keep it secure and see, in aggregate, which pages are read. Visit statistics come from the analytics built into our hosting platform, Framer. They use no cookies and we do not use them to follow you across other sites or for advertising.
Legal basis: our legitimate interest in running a working and secure website (Article 6(1)(f) GDPR).
Fonts and code: our typefaces (Fraunces and Onest) are loaded from Google Fonts, and some animation code from the content delivery network esm.sh. When a page opens, your browser therefore sends your IP address to these services.
Kept for: we do not store this data ourselves. Our providers keep it according to their own policies.
We do not ask for sensitive data (for example about health, religion, political opinions or ethnic origin). Please leave it out of your messages and CV. If it is included, we use it only to handle your request and delete it when we no longer need it.
3. Who receives your data
Only the people at Travel in Art who need it for their work. We also use a few service providers, who act on our instructions:
Framer (Framer B.V., the Netherlands): hosts the site, receives form messages and provides visit statistics.
Google (Google LLC): Google Drive, where application files are stored, and Google Fonts.
Email and IT providers who help us run our mailbox and our website.
Public authorities, only when the law requires it or to defend a legal claim.
We do not sell your data and we do not use it for advertising or profiling.
4. Transfers outside the EU
Some of these providers, for example Google, may process data outside the European Economic Area, including in the United States. When this happens it relies on an EU adequacy decision, such as the EU–US Data Privacy Framework, or on the standard contractual clauses approved by the European Commission. You can ask us for details at info@travel-in-art.com.
5. How long we keep your data
See the “Kept for” line in each case above. When the period ends, we delete the data or make it anonymous. We keep it longer only where the law requires it or to deal with a legal claim.
6. Your rights
You have the right to:
see your data and receive a copy of it,
have incorrect data corrected,
have your data erased,
restrict or object to how we use it,
receive the data you gave us in a portable format,
withdraw your consent at any time, without affecting what we did before you withdrew it.
To use any of these rights, write to info@travel-in-art.com. We reply within one month and may ask you to confirm your identity.
You can also complain to the Hellenic Data Protection Authority (www.dpa.gr) or to the data protection authority of the country where you live or work.
7. Do you have to give us your data?
No. But without the fields marked as required we cannot answer your message or consider your application. We take no automated decisions and do no profiling about you.
8. Children
The site is not aimed at children and we do not knowingly collect their data through the forms. If you are a minor, please ask a parent or guardian to write to us.
9. Security
The site uses an encrypted connection (HTTPS). Files sent with the application form are stored in a private folder with access limited to the people who need it. We review these measures from time to time. No system is completely secure, so please avoid sending anything sensitive.
10. Cookies and other sites
The site does not use cookies to track you. Details are in our Cookie policy.
The site links to other services, such as Instagram, Facebook, WhatsApp, YouTube and PayPal. They have their own privacy policies and we are not responsible for them. These links open in a new tab, and nothing is sent to those services until you use them.
11. Changes to this policy
We may update this policy, for example if we add a service or change how we work. The date at the top shows the latest version.